
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
File: 3137302e38322e302e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier: dTQM4w8XXyA/lFw/sG22dD2nZolOt+ZucUQCj38hrd0=
Subject key identifier: 81:47:6B:66:09:5A:D3:A8:F5:FE:62:15:B8:B6:2C:24:A8:F2:D4:DD
Certificate issuer: /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial: 21FD8695C00E19E30CDA81CAB611A897574C17DC
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
Signing time: Tue 04 Feb 2025 18:40:14 +0000
ROA not before: Tue 04 Feb 2025 18:35:14 +0000
ROA not after: Tue 03 Feb 2026 18:40:14 +0000
asID: 263829
IP address blocks: 170.82.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fd:86:95:c0:0e:19:e3:0c:da:81:ca:b6:11:a8:97:57:4c:17:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
Validity
Not Before: Feb 4 18:35:14 2025 GMT
Not After : Feb 3 18:40:14 2026 GMT
Subject: CN=81476B66095AD3A8F5FE6215B8B62C24A8F2D4DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:ce:55:a5:a4:39:a5:16:8c:fe:1e:18:4e:
6a:de:de:33:24:b2:14:a3:ce:82:1f:7c:21:32:47:
7f:f7:41:d0:2e:5c:f7:22:59:87:0b:52:03:57:4f:
f4:40:01:c2:f6:48:42:93:40:f8:b2:3f:5d:05:83:
64:ee:de:cc:06:eb:04:58:bb:20:b7:07:59:c9:04:
bf:11:f6:4a:5f:0a:64:24:73:57:cf:4e:f5:48:a1:
6d:cd:dd:f2:7e:e1:07:6c:b8:b3:cb:c3:2f:87:bc:
16:6f:28:d7:0a:f4:63:8e:9b:a7:1b:19:2e:e7:61:
5f:79:97:7b:06:12:6a:b6:48:fe:3b:03:8f:c1:9d:
5e:a9:65:ea:5a:11:ce:8c:4d:2d:25:89:79:a3:b6:
60:10:ad:de:dd:2a:1a:f9:ed:2e:55:6b:b8:de:6d:
f7:55:85:79:15:93:d3:4a:83:2c:a8:df:ef:36:d2:
7e:a3:08:08:da:9a:da:b4:80:96:cb:cd:86:4c:03:
e8:da:18:24:d3:47:09:f0:bb:e8:4b:f9:66:cc:a0:
fd:09:64:d3:29:97:99:67:dc:b6:da:a4:ae:56:b7:
78:75:fb:a9:13:62:9e:0e:2d:87:58:78:8a:42:af:
dd:74:22:b5:64:e6:08:4e:2c:4b:b7:02:bf:1b:6a:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:6B:66:09:5A:D3:A8:F5:FE:62:15:B8:B6:2C:24:A8:F2:D4:DD
X509v3 Authority Key Identifier:
keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:ab:5a:38:26:a1:d9:27:28:12:13:e3:cf:d8:13:07:ea:90:
3d:f9:3f:e5:4c:70:68:46:1c:51:bd:22:25:f5:a5:78:3b:d4:
ac:b8:23:a8:7e:91:1a:8d:1b:a3:a0:a7:3b:12:66:f5:33:b9:
86:38:1f:09:b8:ae:ed:e4:ea:7e:0b:23:23:a7:68:fb:1c:6e:
10:26:0e:30:ca:5b:6b:ce:14:48:24:c6:ea:e3:6f:25:1f:79:
5a:2e:39:53:ed:e7:09:14:cc:fd:a4:1c:b7:b8:ad:40:b2:00:
f2:c8:35:27:61:bd:60:4b:53:70:d5:67:5f:87:79:39:71:19:
71:1e:62:c3:f4:86:9d:fe:22:5f:40:01:03:14:73:5b:9f:6a:
e6:94:7e:86:80:a9:f7:ca:f3:31:6f:21:af:92:5a:2d:92:c2:
c6:f7:62:c4:5c:a1:fb:f2:a3:06:94:61:4b:dc:48:f0:e8:62:
b4:0e:a6:ad:c7:0e:8b:be:d6:35:c7:1d:40:6f:f9:81:39:de:
12:8b:8d:3e:16:57:6d:fc:ad:24:e2:6c:19:b9:96:c3:47:09:
4d:ed:a1:23:b1:3f:0a:7d:58:62:6b:e0:49:f9:c1:aa:9a:1f:
c0:49:e4:e3:a1:d8:70:1c:ee:5a:d4:56:21:a7:60:51:40:5c:
aa:45:0b:06
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIf2GlcAOGeMM2oHKthGol1dMF9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzRjUzM0M4MzU0NTQ5QzU2NzRCNDMxMTNEQTIwN0JE
N0VGMUEzMTAeFw0yNTAyMDQxODM1MTRaFw0yNjAyMDMxODQwMTRaMDMxMTAvBgNV
BAMTKDgxNDc2QjY2MDk1QUQzQThGNUZFNjIxNUI4QjYyQzI0QThGMkQ0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Rs5VpaQ5pRaM/h4YTmre3jMk
shSjzoIffCEyR3/3QdAuXPciWYcLUgNXT/RAAcL2SEKTQPiyP10Fg2Tu3swG6wRY
uyC3B1nJBL8R9kpfCmQkc1fPTvVIoW3N3fJ+4QdsuLPLwy+HvBZvKNcK9GOOm6cb
GS7nYV95l3sGEmq2SP47A4/BnV6pZepaEc6MTS0liXmjtmAQrd7dKhr57S5Va7je
bfdVhXkVk9NKgyyo3+820n6jCAjamtq0gJbLzYZMA+jaGCTTRwnwu+hL+WbMoP0J
ZNMpl5ln3LbapK5Wt3h1+6kTYp4OLYdYeIpCr910IrVk5ghOLEu3Ar8batk3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUgUdrZgla06j1/mIVuLYsJKjy1N0wHwYDVR0j
BBgwFoAUUz9TPINUVJxWdLQxE9oge9fvGjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQzYwQzlEQTBCMDcyRkFBQjE5QkM1MUM1REUzM0E4RTcx
MzgzNTIwMDA5OTQ3OTQ1NjRFMzI4RDk1OUNGMTdELzAvNTMzRjUzM0M4MzU0NTQ5
QzU2NzRCNDMxMTNEQTIwN0JEN0VGMUEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzNGNTMzQzgzNTQ1NDlDNTY3
NEI0MzExM0RBMjA3QkQ3RUYxQTMxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkM2MEM5REEwQjA3MkZBQUIxOUJDNTFDNURFMzNBOEU3MTM4MzUyMDAw
OTk0Nzk0NTY0RTMyOEQ5NTlDRjE3RC8wLzMxMzczMDJlMzgzMjJlMzAyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzODMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqUgAwDQYJ
KoZIhvcNAQELBQADggEBAB+rWjgmodknKBIT48/YEwfqkD35P+VMcGhGHFG9IiX1
pXg71Ky4I6h+kRqNG6OgpzsSZvUzuYY4Hwm4ru3k6n4LIyOnaPscbhAmDjDKW2vO
FEgkxurjbyUfeVouOVPt5wkUzP2kHLe4rUCyAPLINSdhvWBLU3DVZ1+HeTlxGXEe
YsP0hp3+Il9AAQMUc1ufauaUfoaAqffK8zFvIa+SWi2Swsb3YsRcofvyowaUYUvc
SPDoYrQOpq3HDou+1jXHHUBv+YE53hKLjT4WV238rSTibBm5lsNHCU3toSOxPwp9
WGJr4En5waqaH8BJ5OOh2HAc7lrUViGnYFFAXKpFCwY=
-----END CERTIFICATE-----
Generated at Sun Nov 2 10:01:18 2025 by rpki-client