
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203231353939.roa
File: 3139302e352e3232342e302f31392d3234203d3e203231353939.roa (raw, json)
Hash identifier: YruNFyFuDrjeWQxVci831QbTEdYMuB/OvLZR8NsGXz4=
Subject key identifier: 91:89:D7:AA:83:96:5C:58:76:1C:50:6A:27:24:87:58:CD:25:E5:C2
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 7CFE55AE469E54E3CE8A7309C6460A6905888C8B
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203231353939.roa
Signing time: Fri 24 Oct 2025 14:35:10 +0000
ROA not before: Fri 24 Oct 2025 14:30:10 +0000
ROA not after: Fri 23 Oct 2026 14:35:10 +0000
asID: 21599
IP address blocks: 190.5.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fe:55:ae:46:9e:54:e3:ce:8a:73:09:c6:46:0a:69:05:88:8c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:10 2025 GMT
Not After : Oct 23 14:35:10 2026 GMT
Subject: CN=9189D7AA83965C58761C506A27248758CD25E5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:19:89:6d:35:48:4f:1a:86:28:55:ca:69:
b5:ff:60:71:2e:68:88:36:a0:98:c4:d9:95:6a:8e:
96:38:3e:a0:fb:d8:d8:5d:66:62:c1:5a:05:72:6a:
a6:17:50:2d:b7:71:bc:a8:29:2e:e9:06:3a:a6:39:
ea:bc:6b:b7:17:24:c0:92:96:f2:e8:f6:8f:04:41:
c7:15:23:5b:b1:33:f1:04:2b:38:97:4a:8c:6b:e4:
94:25:cb:dc:95:30:83:77:9e:ec:36:3f:5a:96:fe:
9c:7f:1f:87:0d:40:19:c1:e8:a3:34:f3:2e:88:93:
3c:d0:20:f0:78:d9:26:10:07:62:53:c9:d6:d4:6d:
fd:5a:1d:0c:24:78:87:1e:6e:d7:37:db:b2:53:43:
7f:49:17:32:c2:03:aa:c2:3b:c3:de:b7:19:2c:fa:
22:2d:f0:bf:c7:02:e8:66:4d:d2:c2:e2:42:ab:c6:
5a:8f:da:7f:90:83:e1:66:e0:0a:c2:88:32:4e:7b:
5e:8f:4e:74:8b:8a:98:bc:75:6b:db:a4:f8:af:29:
be:e2:a0:9e:da:44:7b:81:bf:d0:cf:ed:29:fa:7e:
10:e8:94:2e:2b:8b:9e:11:13:cb:88:bc:7f:f2:79:
c8:62:db:6b:ee:a7:a9:56:05:f3:92:cf:5f:b8:06:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:D7:AA:83:96:5C:58:76:1C:50:6A:27:24:87:58:CD:25:E5:C2
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3139302e352e3232342e302f31392d3234203d3e203231353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.224.0/19
Signature Algorithm: sha256WithRSAEncryption
50:c9:b4:33:cd:ac:0a:81:32:01:22:7d:04:ba:1f:10:4b:1b:
89:ea:6c:62:a6:97:1a:1c:90:fc:87:64:91:e9:53:bc:22:fd:
76:57:da:39:2d:a8:c6:e1:48:b1:64:d4:cd:26:21:ee:34:d6:
f8:aa:ef:f5:87:99:c7:fc:a4:c7:59:35:6c:8f:f0:64:08:fb:
d2:06:70:21:7f:d8:41:40:9e:0e:34:a5:39:c7:fd:52:71:06:
25:40:b0:94:10:1d:46:10:9f:fa:43:c1:44:e8:0e:c9:5a:85:
4a:17:18:a2:78:c0:fa:1f:1a:f1:76:4c:17:56:24:31:3f:77:
33:e0:3b:c5:4f:30:b7:2f:54:6e:ff:c9:84:64:9e:7f:85:6f:
ce:01:d7:9b:c1:36:4a:86:2e:bb:44:93:0d:5c:14:cc:10:65:
6a:57:3a:ca:3b:84:28:4c:b6:53:35:f9:3c:43:de:72:35:38:
bf:df:07:68:7f:ab:73:97:cc:63:91:fe:b3:b4:d1:4a:13:43:
00:0e:dd:24:a2:1c:52:fb:bd:c3:2e:5d:55:53:c4:43:0d:cb:
3a:7b:56:f6:94:b2:d1:eb:0d:29:ac:5d:f1:9b:53:3c:55:27:
7a:d0:fa:80:75:fe:df:45:27:ce:9d:43:53:6a:ba:c5:7a:89:
b4:e6:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:05:11 2025 by rpki-client