
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203138383039.roa
File: 3230302e3131352e3132382e302f31392d3234203d3e203138383039.roa (raw, json)
Hash identifier: Y1o8OYemlG6Usnkq/ue4aOISoKTGlUPfAeUjEpexClE=
Subject key identifier: 86:48:70:A0:BE:69:F2:56:95:74:52:93:0D:80:63:7B:0C:9E:08:E8
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 097CBDD9044E8F6737E8B27B4AC5189401261EF9
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203138383039.roa
Signing time: Fri 24 Oct 2025 14:35:11 +0000
ROA not before: Fri 24 Oct 2025 14:30:11 +0000
ROA not after: Fri 23 Oct 2026 14:35:11 +0000
asID: 18809
IP address blocks: 200.115.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 01 Nov 2025 18:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7c:bd:d9:04:4e:8f:67:37:e8:b2:7b:4a:c5:18:94:01:26:1e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:11 2025 GMT
Not After : Oct 23 14:35:11 2026 GMT
Subject: CN=864870A0BE69F256957452930D80637B0C9E08E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:37:38:00:79:0d:3e:f0:9f:6e:8e:f8:c8:
8d:a9:41:ab:c4:a5:a4:ce:d8:75:10:55:67:d4:c7:
b5:c3:73:59:53:b8:ad:58:4e:ce:0f:52:a6:ea:0e:
dd:3e:bb:1c:2c:89:88:83:6f:9e:cf:7e:e9:03:0b:
d5:ec:b9:40:86:95:02:17:d9:52:0f:3d:11:8a:eb:
f7:6b:62:31:82:33:4e:fa:63:73:29:a8:ce:60:08:
ab:36:3c:c8:59:40:e3:a5:77:f0:0e:61:79:ab:6a:
74:9b:31:65:ed:4b:c0:07:a8:b4:b2:19:6d:bc:d9:
7d:b1:1d:95:20:2b:45:f8:6f:9b:0c:10:95:67:3c:
0d:ea:53:a9:e7:25:e3:af:d7:ea:9a:82:6d:45:60:
17:c1:b8:b6:48:c6:1c:ba:9e:ba:6d:12:81:c4:5e:
ef:13:fc:40:94:59:9f:5d:dd:62:be:e3:a3:f3:d1:
87:40:b9:da:19:a6:b3:09:f1:0a:86:da:b0:f0:ae:
ef:15:bb:89:ed:86:de:dd:a1:eb:4b:7a:25:bd:e1:
7c:22:cb:db:24:77:4c:de:08:22:b1:e5:e3:9d:ea:
75:5f:54:21:c4:50:53:65:dd:f4:b1:23:d4:a0:1b:
ed:da:cc:f4:09:4e:e7:59:ec:7c:1d:9c:c8:92:b4:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:48:70:A0:BE:69:F2:56:95:74:52:93:0D:80:63:7B:0C:9E:08:E8
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203138383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.128.0/19
Signature Algorithm: sha256WithRSAEncryption
85:eb:21:26:e9:b6:94:ec:db:01:44:b7:ad:d3:64:44:3f:b7:
98:cd:c9:d8:87:1e:42:04:de:e9:f8:8d:c5:66:5f:7f:58:a3:
9f:fe:8f:66:26:7b:88:30:4d:0f:01:c6:12:bd:82:6b:b8:8d:
6e:c3:61:47:8b:41:20:fe:bb:62:a9:e5:da:ac:4f:a3:4d:3e:
1d:ff:e9:53:91:ca:ca:19:e7:d9:c4:1e:4c:84:b0:56:8f:28:
b8:8a:18:1f:7a:40:9b:eb:8d:8f:ce:94:ec:b4:7f:1c:7c:dd:
54:2d:9f:3c:dd:cd:44:d8:a4:43:9b:6f:1a:81:3d:4d:67:e9:
21:24:ec:f4:15:d9:a3:d6:dc:20:d6:42:ed:cd:12:11:1b:89:
4c:cc:17:3b:d7:98:5c:d3:28:45:8d:ee:b7:2e:28:ca:f7:44:
1b:01:f5:ee:00:63:c0:85:e1:0a:e4:96:b6:81:98:a9:9d:d9:
65:05:86:4f:33:ae:da:0d:37:c0:b1:f0:15:c0:ab:00:0b:24:
3e:31:4c:68:18:de:e1:b4:5c:5c:7d:e9:4e:29:8d:35:95:07:
34:38:af:72:87:7f:0b:25:e1:e6:c6:5e:fb:b1:ed:65:6d:ea:
ed:e1:29:7d:ba:cb:a4:1d:58:9f:9f:dd:c6:bd:40:f6:46:b4:
49:ee:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:02:44 2025 by rpki-client