
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa
File: 3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa (raw, json)
Hash identifier: X0WJMjyRFOeAmM/FmKRNvxouADP44Odvr673Rpqyqrk=
Subject key identifier: D3:BB:9E:E7:94:FA:35:DF:82:3F:21:40:87:D8:2C:F2:96:BA:0B:96
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 4DECEFA79193D5337C8435C37C0913356412ED0F
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa
Signing time: Fri 24 Oct 2025 14:35:01 +0000
ROA not before: Fri 24 Oct 2025 14:30:01 +0000
ROA not after: Fri 23 Oct 2026 14:35:01 +0000
asID: 18809
IP address blocks: 186.188.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 01 Nov 2025 18:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ec:ef:a7:91:93:d5:33:7c:84:35:c3:7c:09:13:35:64:12:ed:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:01 2025 GMT
Not After : Oct 23 14:35:01 2026 GMT
Subject: CN=D3BB9EE794FA35DF823F214087D82CF296BA0B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:88:d4:d1:5b:3b:0c:af:06:3f:37:d3:10:
4c:e9:94:ac:85:82:f9:18:ba:57:38:b7:9a:5c:2d:
63:bb:9b:24:d8:58:4f:f2:5d:af:ce:63:e7:4a:5d:
a9:07:e1:f3:39:75:d9:40:d8:76:f7:7a:03:bc:40:
ed:c4:bc:34:76:97:67:78:fb:bf:60:23:ac:1e:88:
b1:e4:b4:42:04:1a:89:1c:20:75:10:f7:0c:bf:0f:
56:92:4b:38:d8:21:4d:8c:2d:cb:8f:b9:1f:f8:08:
7d:1d:1f:b2:45:b7:2b:50:5d:7a:5b:93:89:8b:b3:
e8:92:62:89:0d:05:0e:74:7d:91:cd:41:23:d1:55:
2e:00:6a:2a:4b:c2:fb:a8:ea:e9:7b:46:80:3e:e0:
60:1a:03:1e:b2:ce:1d:3d:f0:ad:5e:84:90:c1:5b:
cc:7b:26:47:75:5a:07:aa:f7:69:54:be:19:99:a1:
bc:14:5a:76:a0:9c:c1:bd:47:bd:39:cc:5e:97:3a:
11:72:59:3a:3a:17:d8:43:bd:01:c1:6e:0a:3d:88:
56:3c:10:f3:a0:e5:4e:ed:7d:87:9c:a0:5e:d7:45:
37:18:2c:dd:7f:e6:fe:40:ce:c0:8c:4d:93:90:5a:
5e:0e:bb:88:35:1a:c0:fb:4c:94:df:4b:ce:de:ce:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:9E:E7:94:FA:35:DF:82:3F:21:40:87:D8:2C:F2:96:BA:0B:96
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138362e3138382e3132382e302f31372d3234203d3e203138383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.188.128.0/17
Signature Algorithm: sha256WithRSAEncryption
20:50:26:c2:87:a8:00:19:9c:f5:3c:41:49:1d:83:10:a5:7d:
1d:48:27:e9:0a:78:ad:f6:14:f4:cb:45:3f:78:75:d3:c9:df:
a1:d0:ff:c0:2e:ba:7a:71:b6:59:c8:2d:3e:82:f8:b9:b1:9b:
23:f6:9e:a4:75:21:b9:af:18:20:e0:89:85:ae:00:c4:ee:a4:
82:bc:79:2b:84:82:c6:ff:8b:2b:a6:8b:d2:9a:7b:59:d3:40:
c1:d8:38:c5:57:cd:bc:ca:26:e4:c8:99:64:a6:4f:a0:e4:74:
b1:3d:c6:a7:fd:f5:3d:27:c6:ce:b3:59:09:15:04:ff:75:06:
e4:bf:d9:b4:6e:61:ad:ad:ad:b1:97:de:26:48:88:09:6b:de:
28:23:dc:d4:1b:81:97:a5:df:75:b6:43:9f:c4:35:84:eb:0a:
27:b4:ce:ff:9c:d9:66:f9:fd:2c:37:0a:34:e5:fd:a9:be:88:
17:bc:b7:a4:bc:df:ca:1f:c5:7a:36:f0:0e:7e:b6:39:67:09:
90:81:7a:ac:ab:d6:d5:d7:6c:cb:0c:c5:a8:d4:f2:9a:5c:5d:
aa:50:ba:fa:1e:7c:1d:db:89:57:0b:a9:0f:5c:19:2b:d4:46:
ad:ef:06:b7:fd:af:c5:cd:0f:f9:03:4e:41:d0:89:7f:b6:a8:
11:61:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:02:47 2025 by rpki-client