
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
File: 323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier: IP4GbEDmj4nHTaQDdhaDexFAeAOoZmaIWeyAe+cu1Sk=
Subject key identifier: 68:8D:37:5E:47:C7:5A:3B:EC:8A:1B:1F:F7:03:D0:D1:1D:EE:E9:21
Certificate issuer: /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial: 3CE2AAD20804DA91020D848C360681775E9796A1
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
Signing time: Tue 04 Feb 2025 18:30:08 +0000
ROA not before: Tue 04 Feb 2025 18:25:08 +0000
ROA not after: Tue 03 Feb 2026 18:30:08 +0000
asID: 273114
IP address blocks: 2803:790:4000::/36 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e2:aa:d2:08:04:da:91:02:0d:84:8c:36:06:81:77:5e:97:96:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Validity
Not Before: Feb 4 18:25:08 2025 GMT
Not After : Feb 3 18:30:08 2026 GMT
Subject: CN=688D375E47C75A3BEC8A1B1FF703D0D11DEEE921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:bf:e9:f2:f9:61:95:69:34:c9:25:c6:f2:
13:e1:db:81:10:15:d4:39:8d:14:63:99:a3:38:bf:
b6:23:3d:74:6a:d4:24:8e:09:27:3e:7b:b7:85:a3:
0a:cb:ab:3b:2b:7c:2f:e5:a4:ad:1f:7a:99:73:2c:
b8:e6:d1:c7:13:86:de:fa:1d:f1:c5:a3:da:03:d4:
da:40:bf:fa:43:f4:32:f5:5e:ea:bc:fe:48:ba:2f:
28:a9:68:ae:c5:a2:28:a2:fd:f7:05:b9:42:21:43:
c6:c6:53:22:74:08:3f:ac:99:87:30:a6:3a:51:22:
b9:48:e3:12:8b:0b:79:ef:0e:23:77:ea:3f:ea:99:
f0:bf:e5:bb:3e:b2:45:48:11:a9:b9:28:8d:6c:f2:
cc:1f:6e:f1:a1:8c:23:f0:5d:fe:d7:9d:2a:6e:76:
4f:21:e8:d5:cd:a0:df:01:ee:21:e1:5b:23:32:18:
ba:18:8b:68:23:db:ae:82:3c:10:39:d9:c0:a3:8d:
ef:06:e2:4b:9a:69:84:c4:5f:53:99:c8:6c:97:0a:
f6:c4:d1:21:21:75:16:27:8e:fd:22:a1:db:e8:18:
56:83:e7:a1:f3:22:8e:83:03:60:7a:be:ba:2b:63:
b9:21:60:b0:4a:2b:e0:a5:98:f7:95:d1:64:d7:74:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:37:5E:47:C7:5A:3B:EC:8A:1B:1F:F7:03:D0:D1:1D:EE:E9:21
X509v3 Authority Key Identifier:
keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:790:4000::/36
Signature Algorithm: sha256WithRSAEncryption
04:32:15:82:10:d0:93:f9:fe:2e:db:25:cd:e6:a3:bf:ec:c7:
4a:61:85:58:07:54:c1:3e:e5:15:ff:a7:cb:cf:df:6f:a2:5e:
09:de:6b:1f:04:09:0d:80:00:cb:28:0b:5b:29:1e:96:8d:38:
21:24:87:03:1e:1f:c6:61:86:0f:c2:ca:b0:3e:dc:20:c2:ec:
13:f3:fb:03:65:e6:22:09:4a:ae:42:8d:9f:6e:c3:78:8e:36:
49:61:9d:45:f7:10:fd:cd:d1:02:e9:63:64:c5:71:40:47:a9:
cc:59:26:d6:19:7e:fe:3a:48:48:fd:8b:69:f4:eb:33:51:4c:
71:cd:17:87:18:bb:aa:ad:0f:7e:a3:df:fb:d1:48:ed:7d:a2:
0b:4f:a1:ff:56:5a:f7:e0:02:66:8e:5a:7e:09:e8:24:9e:26:
ee:88:6c:9b:9e:f8:f5:d7:66:5c:2b:cd:81:fb:ee:78:88:39:
07:c0:a2:3b:e0:02:ef:ce:e5:5b:d3:65:ff:03:d7:4c:1d:3b:
92:a1:a5:db:f2:49:4f:94:08:49:bb:cf:12:d3:0b:03:c0:00:
a3:18:89:8e:ea:fc:d4:de:ec:50:17:53:7f:c5:86:62:b1:5f:
52:13:c8:57:24:37:88:77:dc:83:72:74:3b:e4:ed:83:5c:b9:
bd:ff:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:35:30 2025 by rpki-client