
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/323830333a343332303a3a2f33322d3332203d3e20323636373334.roa
File: 323830333a343332303a3a2f33322d3332203d3e20323636373334.roa (raw, json)
Hash identifier: l0oX26DHaxqdRQ5ANoKHfcri464rbrV3JLxKIIdiXuQ=
Subject key identifier: D5:21:7B:46:18:61:3A:0B:64:A8:0D:45:2A:9C:75:3E:63:57:BE:BC
Certificate issuer: /CN=17635987A6691105242D437D62AE03F09EC477A5
Certificate serial: 661E6FA8FD798DDE413ADA60C25A8BF71F977AE2
Authority key identifier: 17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/323830333a343332303a3a2f33322d3332203d3e20323636373334.roa
Signing time: Tue 04 Feb 2025 18:52:21 +0000
ROA not before: Tue 04 Feb 2025 18:47:21 +0000
ROA not after: Tue 03 Feb 2026 18:52:21 +0000
asID: 266734
IP address blocks: 2803:4320::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl
rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 27 Oct 2025 11:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1e:6f:a8:fd:79:8d:de:41:3a:da:60:c2:5a:8b:f7:1f:97:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17635987A6691105242D437D62AE03F09EC477A5
Validity
Not Before: Feb 4 18:47:21 2025 GMT
Not After : Feb 3 18:52:21 2026 GMT
Subject: CN=D5217B4618613A0B64A80D452A9C753E6357BEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:e2:e8:04:71:3e:a3:09:10:0e:e1:eb:05:
a1:e3:d0:59:18:39:a3:77:07:2b:72:27:a9:a3:f6:
59:c8:12:4c:20:d4:e9:e0:7f:19:5f:a7:30:f9:c9:
c1:21:7e:20:01:eb:fe:e9:a3:1a:b1:b9:13:88:1b:
96:1a:9c:c3:e6:92:a8:f7:1b:1e:c8:fd:41:95:86:
8f:bf:d6:af:2b:90:39:b4:f1:7c:bd:32:98:ae:22:
69:85:56:f3:78:3e:84:f7:03:34:6d:4d:4c:b8:92:
ef:c9:6e:22:92:d4:1d:4d:03:5d:c2:7f:cf:9e:3c:
7f:59:a8:4f:ff:42:41:d0:f7:15:5d:e7:89:44:0e:
c6:ae:76:0a:19:79:84:0f:14:19:8a:e1:12:f2:f7:
5a:78:9b:e5:20:11:85:fb:78:7a:d1:61:6f:e6:21:
8d:ad:fd:8a:d3:80:4e:2f:41:c7:6a:76:0f:c7:65:
df:99:64:83:c4:3e:09:6b:53:5c:8c:ff:2b:43:68:
27:a3:b7:41:ab:77:89:db:60:0f:f4:76:13:2f:c0:
7d:0b:1f:f3:b2:ad:74:8d:44:b5:ea:b6:80:93:6a:
b1:ad:ee:58:15:eb:37:5a:42:f5:a7:65:33:99:a5:
a0:0b:5b:23:ec:13:61:c7:cc:eb:43:e2:08:0d:4c:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:7B:46:18:61:3A:0B:64:A8:0D:45:2A:9C:75:3E:63:57:BE:BC
X509v3 Authority Key Identifier:
keyid:17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/323830333a343332303a3a2f33322d3332203d3e20323636373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4320::/32
Signature Algorithm: sha256WithRSAEncryption
0a:f7:ea:23:99:74:fb:78:84:29:d9:c8:0e:41:ef:4c:06:9c:
49:6d:ba:f0:03:a6:9a:ae:6b:3d:4d:30:21:f1:26:e9:1c:61:
e4:5c:4a:da:3f:d4:b6:0c:57:a9:ce:b5:f2:cc:d9:9d:d8:f4:
1c:de:9e:80:f8:57:f6:45:32:3a:b1:49:2d:c3:b0:80:a9:50:
2a:6b:38:7b:4e:b2:d2:ad:65:77:61:f3:0a:5d:d1:e5:b0:ab:
04:1c:54:8c:fb:3f:1b:6a:30:af:5b:2a:78:98:e9:c8:66:87:
1a:e2:e0:c4:d5:5c:73:0d:d4:a6:dc:00:8a:f0:aa:92:34:5a:
f0:db:4e:88:3d:1f:8c:ca:d0:61:e9:71:84:86:99:a4:e8:99:
64:c9:2f:e5:06:b2:e6:4a:0f:ae:e8:80:a1:34:a8:b3:f2:9f:
d3:5f:34:f5:11:4a:49:b5:a8:77:c5:f1:91:24:6b:7d:7b:d1:
af:00:e0:20:50:6a:65:a0:30:ca:43:9d:33:b5:b0:3c:cd:f1:
a5:70:04:fa:c2:77:03:4d:e1:8e:e1:a3:61:36:4e:14:f2:5b:
b4:62:8f:8e:24:d7:77:17:54:30:4c:78:ca:64:7c:65:af:77:
d5:f2:bf:1e:a1:c0:d1:1b:22:85:f0:61:40:d9:f0:fe:87:94:
af:ef:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:23:15 2025 by rpki-client