
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
File: 34352e3139312e38382e302f32322d3234203d3e20323639383837.roa (raw, json)
Hash identifier: VDT/XY5NOZj/gSvmmK+cJE3i1st0eAmM04AIslpJwgQ=
Subject key identifier: CD:91:AF:2D:C0:7B:74:02:90:C6:1D:6E:9F:E0:B8:69:1C:4A:4D:14
Certificate issuer: /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Certificate serial: 16D9F74540A015E497C7503E27B2161F50388ABC
Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
Signing time: Tue 04 Feb 2025 20:04:03 +0000
ROA not before: Tue 04 Feb 2025 19:59:03 +0000
ROA not after: Tue 03 Feb 2026 20:04:03 +0000
asID: 269887
IP address blocks: 45.191.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:f7:45:40:a0:15:e4:97:c7:50:3e:27:b2:16:1f:50:38:8a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Validity
Not Before: Feb 4 19:59:03 2025 GMT
Not After : Feb 3 20:04:03 2026 GMT
Subject: CN=CD91AF2DC07B740290C61D6E9FE0B8691C4A4D14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:c0:e3:a3:43:a4:40:3f:55:c5:ed:f3:0f:
7f:e1:a1:31:07:73:8a:1d:cc:f4:59:78:65:e9:37:
cc:fc:38:68:ac:ed:69:ba:c1:82:78:19:c7:81:50:
6a:d2:40:3e:58:78:f3:b5:6d:58:18:f7:00:02:cc:
99:b0:af:91:d6:da:ef:1e:5b:aa:f0:62:6c:76:67:
38:a0:f3:e6:f3:8c:1d:59:95:4a:10:87:5a:e2:35:
33:08:5f:6c:a3:dd:aa:9c:bb:b1:77:ee:78:43:f1:
04:7e:f8:c4:1a:90:8d:9d:7c:8e:62:cb:bb:1b:ed:
63:b4:77:61:ad:57:97:d5:b3:57:de:c3:8f:c2:2a:
98:36:40:36:2e:2c:00:c4:1f:53:9b:50:4b:ee:b4:
a6:7d:87:ca:55:36:2d:cf:1b:e9:c4:a6:69:a9:bc:
90:e1:e8:7b:31:94:ba:02:e0:2e:27:14:e9:e2:ba:
cc:e8:67:07:3b:80:75:71:e0:c7:9f:d4:48:64:8d:
8b:31:f3:0d:9c:a5:a6:5c:d7:2d:fc:10:b0:c5:43:
91:90:33:9a:a9:12:49:fd:5c:9f:dc:10:db:73:c7:
6c:3e:4e:60:15:21:ca:6e:a2:09:11:f4:80:c8:74:
69:69:b1:a6:6f:e7:75:19:d0:0f:fa:a0:f4:e6:51:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:AF:2D:C0:7B:74:02:90:C6:1D:6E:9F:E0:B8:69:1C:4A:4D:14
X509v3 Authority Key Identifier:
keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.88.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f0:8d:03:64:d1:d2:6f:ed:c0:0b:d1:44:33:2e:40:45:90:
98:41:b1:6a:87:16:40:bf:d0:0e:ce:8b:c9:22:14:2d:9b:7e:
6e:ca:56:a0:1f:9f:bc:61:25:65:1f:b6:34:a6:06:2d:93:0d:
4c:5b:0e:95:9c:8e:02:90:9f:cd:d5:21:f7:15:dd:bc:bb:2d:
0d:51:d2:76:5a:ab:f5:d0:e8:75:fe:74:49:c7:a5:76:c7:2c:
3a:f6:3e:17:7d:a4:8a:19:0f:39:9d:6c:af:42:e2:5f:50:95:
22:73:61:3d:22:1c:95:e2:87:fe:98:b6:a0:2c:6b:e3:4e:7a:
f2:44:a2:05:d4:f5:84:10:40:34:f5:14:77:c0:fe:09:d5:10:
97:c2:d4:33:b1:1b:00:da:77:a4:73:0b:c9:22:36:c4:86:0a:
9a:71:fa:4c:a0:12:8c:a8:8d:50:a5:82:98:20:ed:0f:b4:ed:
fb:90:94:8b:59:e5:04:a3:40:f4:db:4d:02:97:e9:18:57:b3:
2a:9a:d2:10:91:9d:4e:3d:31:94:20:ab:29:a0:d2:cf:cc:d3:
17:a7:0b:2f:87:d0:b0:de:5f:5c:3c:7c:2e:73:1e:2b:0f:a8:
c6:e9:b4:10:2b:4c:7d:fe:75:68:aa:31:49:4e:91:4e:8f:24:
e4:0b:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:46 2025 by rpki-client