
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa
File: 3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa (raw, json)
Hash identifier: kHMqDlMBBXWEFp25AIgJGp7U79dq+W7m2XHuzWZ40aA=
Subject key identifier: E4:DB:0D:94:EE:66:B0:C5:FB:CF:E8:E8:6F:77:E4:04:56:34:2C:06
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 752149BCD527E87D4EB0A8BD73446F2A8265C794
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa
Signing time: Fri 24 Oct 2025 14:35:15 +0000
ROA not before: Fri 24 Oct 2025 14:30:15 +0000
ROA not after: Fri 23 Oct 2026 14:35:15 +0000
asID: 262198
IP address blocks: 201.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:21:49:bc:d5:27:e8:7d:4e:b0:a8:bd:73:44:6f:2a:82:65:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:15 2025 GMT
Not After : Oct 23 14:35:15 2026 GMT
Subject: CN=E4DB0D94EE66B0C5FBCFE8E86F77E40456342C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:4d:71:c7:5c:a6:48:0d:5b:bf:92:d5:fd:
f3:57:49:0a:fa:43:71:f4:23:11:b3:15:bb:30:72:
c8:07:ae:31:ea:2b:ab:9c:1b:1b:74:bc:fb:5d:ce:
74:9e:84:69:bd:88:ef:d8:9b:9f:06:d7:b9:a7:b3:
90:a9:4f:fa:a3:58:ae:43:d8:7e:9d:dc:df:e0:41:
5f:14:8f:83:fa:43:76:7d:c9:7b:ed:74:d3:94:80:
98:e6:98:9b:a7:51:9b:86:39:d8:72:12:06:4c:4b:
f7:69:7c:d3:05:66:56:01:fb:19:fc:4f:db:06:d9:
5f:f3:18:6d:92:5e:0e:58:bd:cb:a0:07:dc:fc:29:
5a:82:35:ba:7c:c5:1a:ab:42:4e:23:25:b8:f9:a4:
4b:dd:83:40:d5:22:1d:ca:af:b9:50:a2:95:95:6e:
e6:aa:48:4a:b8:2e:0d:96:03:cd:6d:6c:0f:61:31:
25:c9:57:8b:2b:74:52:aa:b7:93:a6:0a:87:a1:b8:
c9:be:3d:81:c3:58:a2:64:b5:26:fd:93:be:09:e8:
4f:3a:f5:5f:0d:09:58:3b:05:e2:64:9c:b9:6f:b1:
7f:2f:de:62:c8:0d:e0:da:78:9e:34:ca:b9:36:aa:
0f:5e:37:8d:29:a8:fa:cc:e0:a2:c3:e3:2e:e3:b2:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:0D:94:EE:66:B0:C5:FB:CF:E8:E8:6F:77:E4:04:56:34:2C:06
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231362e302f32342d3234203d3e20323632313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4a:e2:1f:e9:1f:aa:f8:e9:1a:57:60:51:51:cd:77:08:a7:
cf:2b:03:0c:82:69:6b:b2:a5:55:6c:d3:d7:de:e6:8d:8d:67:
21:2a:4f:37:25:c5:3c:51:1e:ca:c5:59:52:e1:f3:19:c2:93:
22:07:92:c2:f3:7d:bb:75:c6:f8:91:b3:89:5b:b7:48:6a:3c:
e0:d5:b8:71:5b:15:9f:ef:9a:32:bb:00:28:64:01:96:6b:d4:
03:a0:bd:e8:46:39:e6:1b:b6:b9:a5:e1:33:4f:7d:3b:aa:2b:
0c:04:f4:dc:ad:9e:e2:54:5a:7c:2e:0f:b2:70:fb:99:14:c6:
99:fa:86:e2:84:28:ec:ff:b6:f4:1b:2d:9a:ee:63:82:c3:bf:
eb:40:b3:1d:94:d4:60:74:1a:fa:d6:0f:ac:f2:63:77:ce:b3:
7d:84:01:d3:5c:45:5b:40:34:f5:a8:82:db:bd:40:f5:e6:ee:
8f:8b:b5:bd:77:b6:ec:c0:fb:88:80:f1:08:67:73:2f:a0:8a:
1f:32:8a:6b:5a:1a:3a:f4:b6:c6:22:db:7c:8b:c3:95:e5:6c:
0c:4f:f7:5a:c3:23:83:d9:d3:4c:66:5d:1f:94:19:4b:5b:6c:
aa:02:1c:b8:ff:ca:bb:60:f4:59:d9:1f:6f:bd:dd:a8:57:23:
bf:c9:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 17:01:26 2025 by rpki-client