
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3230312e302f32342d3234203d3e203238303632.roa
File: 3230302e34362e3230312e302f32342d3234203d3e203238303632.roa (raw, json)
Hash identifier: xZ9IPc+nz3vRoKTlynldh2cEWjVAJOJ+6wx59VFK4+M=
Subject key identifier: 21:F2:70:8D:60:52:60:3A:DC:50:80:4C:41:C1:14:5D:BB:C1:26:46
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 38E932DF55DDC9E5CC4FD54A6E582D3BF24A9539
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3230312e302f32342d3234203d3e203238303632.roa
Signing time: Fri 24 Oct 2025 14:35:07 +0000
ROA not before: Fri 24 Oct 2025 14:30:07 +0000
ROA not after: Fri 23 Oct 2026 14:35:07 +0000
asID: 28062
IP address blocks: 200.46.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e9:32:df:55:dd:c9:e5:cc:4f:d5:4a:6e:58:2d:3b:f2:4a:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:07 2025 GMT
Not After : Oct 23 14:35:07 2026 GMT
Subject: CN=21F2708D6052603ADC50804C41C1145DBBC12646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:20:ab:71:b1:a5:04:c8:54:28:52:e4:68:
62:47:46:2f:1c:22:fc:5f:68:39:9d:37:d2:01:8c:
2c:f8:c5:83:62:f7:a6:9f:56:e0:d0:41:d3:68:5f:
1c:ea:8c:ea:99:b7:5e:a8:91:04:bd:a8:e2:9b:ae:
51:8f:0f:35:67:bc:3a:d6:0a:6a:8b:8f:f3:84:04:
f7:4f:df:04:8d:a7:d7:3e:bc:1d:b6:36:3f:6f:97:
0b:e2:3a:60:27:63:10:67:99:c5:29:d7:41:83:a1:
95:cb:3f:6b:ab:2f:43:77:bc:87:40:24:82:42:17:
66:99:5b:c6:8d:3a:fa:35:68:6d:1a:07:8d:e7:f8:
bc:a6:6d:82:12:c3:a0:b9:0f:66:f0:8a:1e:00:6e:
56:a6:58:58:d6:3f:3c:02:4d:2b:38:39:63:f3:3a:
1f:a8:60:68:1c:c7:18:70:51:64:2a:d3:86:03:a3:
8b:4c:72:36:13:ea:6f:47:0e:fe:06:ab:27:50:13:
8b:0e:3a:a9:2c:cb:ae:85:fd:09:10:84:8a:cd:dc:
d0:ce:b1:53:f0:28:e2:85:87:f3:13:60:46:e3:8e:
1a:03:35:59:69:20:af:c1:ff:84:78:b5:72:59:ba:
c2:b0:d6:3d:59:8f:55:6c:01:a7:e5:a5:df:9f:a6:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F2:70:8D:60:52:60:3A:DC:50:80:4C:41:C1:14:5D:BB:C1:26:46
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e34362e3230312e302f32342d3234203d3e203238303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.201.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d2:2f:3e:76:e6:9c:1e:a6:58:e0:7b:c0:ac:8f:c9:ec:0d:
80:1e:91:77:31:b7:58:e4:fa:c4:eb:28:23:9f:7f:64:74:b7:
80:c7:30:b0:fb:48:c9:03:14:80:44:90:d2:df:00:4d:99:ca:
7b:5f:44:00:7e:37:03:f4:d6:68:ef:fc:fc:ca:a6:50:08:f5:
5e:93:50:9b:ef:16:60:6b:49:74:a7:c3:a9:d0:a4:d2:22:4a:
78:13:b4:79:bb:45:1f:86:80:16:ff:c7:47:e5:23:de:77:e5:
77:49:9f:f4:d9:c4:ad:f9:e9:ff:1d:41:25:ed:52:0b:a9:c0:
b0:74:43:e5:43:48:7d:a5:e0:33:e9:71:b7:6d:5a:03:7f:cf:
ef:b4:8a:cb:2c:76:d2:c6:8a:b4:f1:4c:c9:90:d6:66:b5:3e:
2a:a9:0f:0e:92:d0:04:96:0d:1c:89:53:67:37:fe:fc:71:1a:
1c:49:93:88:ff:9d:e3:65:d7:67:eb:81:3b:82:fe:52:80:ef:
59:23:6b:a3:4d:e9:c9:5a:7a:01:7d:a9:b3:45:4d:9e:c5:94:
5f:17:12:2c:8a:24:ec:44:d1:f4:da:07:4d:cc:b8:95:58:6a:
32:fe:d1:5a:6f:9d:1a:98:68:76:23:ef:35:88:c6:4b:db:52:
b2:92:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:03:21 2025 by rpki-client