
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e31322e302f32342d3234203d3e203238313132.roa
File: 3230302e34362e31322e302f32342d3234203d3e203238313132.roa (raw, json)
Hash identifier: 0YAcKlg8OhkCdvHUybDohHYOW7G5RO2SuQ5kDTaEkqc=
Subject key identifier: 86:BE:7B:BC:20:E1:8A:3A:47:7A:DE:0C:9F:60:29:77:FB:5D:94:AE
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 2BBD659098DC75C97131E1B6C0268D2D91E1FC73
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e31322e302f32342d3234203d3e203238313132.roa
Signing time: Fri 24 Oct 2025 14:35:09 +0000
ROA not before: Fri 24 Oct 2025 14:30:09 +0000
ROA not after: Fri 23 Oct 2026 14:35:09 +0000
asID: 28112
IP address blocks: 200.46.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bd:65:90:98:dc:75:c9:71:31:e1:b6:c0:26:8d:2d:91:e1:fc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:09 2025 GMT
Not After : Oct 23 14:35:09 2026 GMT
Subject: CN=86BE7BBC20E18A3A477ADE0C9F602977FB5D94AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:58:2f:d2:4b:5a:8c:bd:83:51:28:01:52:
d3:51:7e:22:44:94:b6:49:d1:4b:32:41:f6:8e:b4:
d5:7f:ff:2a:ef:d8:fd:42:a6:12:7d:e7:11:6f:54:
01:ac:1e:c4:1d:b3:97:f8:80:4e:01:6f:d6:75:c5:
22:94:d6:74:91:ed:6e:75:57:67:1a:d8:3b:52:14:
88:9f:5b:81:af:95:b8:1f:21:ae:04:34:84:ac:7a:
21:06:91:64:a6:6b:29:43:04:b5:97:69:de:2f:cc:
48:1d:5c:7b:20:12:b7:01:a6:8d:57:a1:0a:59:ce:
3b:86:28:a9:47:e5:c2:77:b0:0a:4c:fb:f7:0d:46:
bd:ae:ac:db:12:b7:b6:d7:da:99:3a:26:08:cc:9b:
7a:05:41:6a:0c:44:d0:bb:d0:a4:4a:f1:df:cc:a4:
af:36:a7:3f:53:92:18:d9:5f:6a:18:c7:49:06:e0:
61:65:27:fb:ed:d0:ca:5c:81:23:6e:91:28:5e:3e:
be:8b:7e:5a:9f:01:22:5f:4d:64:41:c0:65:83:33:
94:84:40:a5:fa:06:79:00:da:d9:4f:4a:22:55:c5:
61:54:94:4b:d3:cd:3d:d0:eb:d1:26:22:d2:f7:74:
f8:80:08:88:3d:53:e6:cb:3c:07:f3:19:41:84:e1:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:7B:BC:20:E1:8A:3A:47:7A:DE:0C:9F:60:29:77:FB:5D:94:AE
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e31322e302f32342d3234203d3e203238313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.12.0/24
Signature Algorithm: sha256WithRSAEncryption
55:08:d7:74:ba:86:c7:d6:35:72:6a:5e:0c:b7:11:11:b8:a6:
4b:8a:6b:57:ca:50:4f:97:ff:f0:22:cf:f6:34:bf:95:bb:a3:
9c:cc:05:ee:d5:f0:8e:9c:8f:86:f3:5c:08:7c:a2:2e:78:a9:
27:3d:6f:02:3a:18:c2:0d:bb:67:b6:00:d1:ca:fa:87:54:8a:
1e:fd:93:5c:22:a6:fe:72:c8:66:ee:e1:e5:e7:39:6d:c3:3e:
6d:58:78:b1:78:4b:81:59:26:4b:11:b4:ee:a5:d1:5a:32:26:
a2:97:60:0e:0e:56:51:2c:d1:de:5b:10:83:6e:1f:ab:25:88:
c9:e3:13:26:7b:51:05:22:80:ac:fa:3a:e0:b7:8e:43:d5:8e:
9a:bd:02:e9:5a:01:27:3c:88:80:e1:e6:c0:ae:c4:75:0d:50:
10:13:6c:9f:aa:0c:ac:6d:b8:58:38:20:05:1b:74:90:09:f6:
ac:ea:4c:0f:de:39:eb:9b:81:00:0b:94:ab:a6:6c:3a:e0:41:
4f:4c:be:70:a4:c6:b7:b3:19:22:3b:26:03:e0:8d:4b:30:cc:
4a:bb:13:e7:5c:b1:20:70:d3:87:bd:aa:61:6d:54:2c:18:59:
9b:20:04:d0:cd:77:ee:c4:ad:c0:4e:fe:41:30:83:68:9f:7c:
a4:49:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:05:05 2025 by rpki-client