
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa
File: 3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa (raw, json)
Hash identifier: noC75e3blOQUH1F5J4NXwSdcSFvp+Pb4jXZisQdPep4=
Subject key identifier: D9:86:FA:21:30:58:B2:D0:F3:F3:89:8A:8D:1C:61:E5:22:BD:05:82
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 5E025BB2E9D28BF67DD4BF880EBDC4FD4270F8C1
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa
Signing time: Fri 24 Oct 2025 14:35:22 +0000
ROA not before: Fri 24 Oct 2025 14:30:22 +0000
ROA not after: Fri 23 Oct 2026 14:35:22 +0000
asID: 21599
IP address blocks: 200.115.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:02:5b:b2:e9:d2:8b:f6:7d:d4:bf:88:0e:bd:c4:fd:42:70:f8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:22 2025 GMT
Not After : Oct 23 14:35:22 2026 GMT
Subject: CN=D986FA213058B2D0F3F3898A8D1C61E522BD0582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:84:b2:68:9e:40:44:b5:0b:d8:b2:e8:37:
09:7f:b0:99:43:a4:8c:6c:bc:f0:a5:fd:66:47:60:
bb:f5:e0:b6:4d:88:a6:5e:86:55:3c:b6:d6:18:8c:
5b:89:ac:90:65:2f:61:64:81:0b:00:71:87:e8:69:
6c:c9:25:98:c9:52:4a:16:cc:38:51:e7:b3:6c:92:
36:2f:44:db:da:55:da:cf:f2:31:9e:d4:ff:d4:18:
53:bd:4a:05:fb:bf:33:8a:6d:6b:1f:26:95:2e:6f:
40:1a:85:a6:7c:af:9b:db:ae:94:de:43:da:03:3c:
30:1d:74:55:cf:cf:31:4b:c6:86:50:82:1b:63:04:
c1:20:37:b7:65:1c:85:d1:e3:27:82:c8:e0:16:8e:
3e:83:a7:b4:66:77:e8:9e:fa:2c:28:70:94:12:f0:
21:f5:c8:f0:c2:ce:2f:a3:4b:ae:80:3a:76:86:18:
1f:a0:8b:20:5c:c1:77:ae:16:1c:75:01:ae:4a:dc:
88:f0:45:4a:4e:41:c9:33:bc:44:9d:12:b9:de:fd:
16:c7:51:e6:dc:d1:ed:f2:d5:52:86:81:1f:0e:81:
9a:79:9d:3a:72:eb:b5:90:4b:55:ae:d0:a4:21:14:
a7:5a:4c:6c:58:1d:66:90:33:df:95:58:d2:03:b4:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:86:FA:21:30:58:B2:D0:F3:F3:89:8A:8D:1C:61:E5:22:BD:05:82
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e3131352e3132382e302f31392d3234203d3e203231353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:d6:ed:e6:c9:29:6d:f6:ce:47:fc:f2:6b:7d:f0:cb:c1:ab:
a7:a0:cd:da:71:2a:a5:30:f6:f3:d4:33:6f:87:15:2e:11:32:
58:38:15:b2:d0:e9:e6:5b:8b:61:13:4b:da:c7:f0:6f:82:aa:
cd:22:77:9a:15:3b:1a:b2:10:45:d0:3a:18:c5:dd:0c:5f:b7:
19:38:80:5b:47:dd:2c:d9:f5:63:b3:d1:d5:d5:19:58:a2:6b:
e3:f7:db:9a:ab:bb:d0:3d:d1:dd:b8:ad:91:10:8e:3e:8d:46:
97:77:61:f9:df:36:6d:8b:90:ed:f8:31:e0:99:82:0b:91:f8:
30:d3:84:f2:8d:16:7d:f2:e7:c5:f1:98:c9:a8:62:ac:a5:34:
8d:57:9f:56:44:05:b1:18:16:01:48:6b:22:98:f7:e9:49:63:
d5:f9:01:b1:c5:b5:45:d3:6b:60:1e:35:f4:d9:0b:52:71:af:
d5:1a:ba:38:d9:2e:16:62:23:2e:37:67:39:70:90:09:60:88:
20:52:1c:ed:74:b4:8f:82:bb:50:55:12:46:68:38:cf:f4:e7:
6d:37:31:5e:89:61:8f:99:ac:64:3a:41:05:f5:93:08:d1:49:
e3:16:1e:38:75:95:06:bf:ff:74:71:c0:16:1a:45:39:9f:1e:
df:5b:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:29 2025 by rpki-client