
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa
File: 3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa (raw, json)
Hash identifier: D8Ph2cVYLdLQxRqpD+hyo+Hf7l4LWNoDzxsHA2aKPsg=
Subject key identifier: E8:17:05:98:2F:63:D9:02:A1:C5:2D:65:E6:49:8C:87:EA:76:FA:74
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 6294632CE4AC7F061E3E1278543D72C1883804A6
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa
Signing time: Wed 07 May 2025 02:15:00 +0000
ROA not before: Wed 07 May 2025 02:10:00 +0000
ROA not after: Wed 06 May 2026 02:15:00 +0000
asID: 274053
IP address blocks: 168.243.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:94:63:2c:e4:ac:7f:06:1e:3e:12:78:54:3d:72:c1:88:38:04:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: May 7 02:10:00 2025 GMT
Not After : May 6 02:15:00 2026 GMT
Subject: CN=E81705982F63D902A1C52D65E6498C87EA76FA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:e8:31:00:9e:d3:59:8a:46:76:db:45:48:
7a:6c:00:35:51:b1:2b:cf:e2:89:42:c2:1e:99:a3:
9c:b7:d9:69:3d:d6:3c:c0:5b:1e:ee:f4:6a:86:cb:
7e:1a:8f:1b:74:e8:8a:38:23:6b:7a:65:1c:8b:a4:
23:43:0a:68:03:62:c4:72:ce:07:f9:0c:2a:ed:0c:
c3:2e:e2:0e:8b:80:12:7c:0e:d1:a6:e6:fb:9f:b4:
f6:03:64:9e:9b:dc:71:3c:28:92:df:25:c1:67:cd:
81:20:3b:33:86:b6:e0:e3:6b:5e:10:c5:b2:e5:35:
4e:4b:89:e4:3d:fa:98:d7:bc:b5:55:24:63:02:09:
38:af:7e:f7:ea:8e:e6:59:f4:74:b5:cb:f5:e1:27:
f6:00:e7:02:a6:ec:42:d6:d0:07:11:69:94:45:b1:
30:72:70:8d:16:02:1e:c9:e5:51:3f:9f:93:76:a2:
dd:cb:d9:f4:5c:a9:1e:18:0f:40:a1:17:a0:57:c9:
f0:1a:1c:82:4a:a8:82:8e:b3:30:1b:2a:4c:6c:95:
47:83:25:fa:23:0b:14:db:7f:2c:1b:f2:c0:ae:5d:
39:54:19:08:f5:b0:2b:09:d1:ad:cf:f1:f5:fe:65:
87:ca:13:82:b6:b6:bb:da:70:bc:df:8e:a1:60:c2:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:05:98:2F:63:D9:02:A1:C5:2D:65:E6:49:8C:87:EA:76:FA:74
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6f:4a:ac:db:05:99:1b:9f:88:84:19:d7:d3:46:ae:d1:29:
5d:fb:39:a2:c6:99:a0:d0:bb:81:2e:16:3f:3c:db:89:b7:79:
71:39:73:28:e9:43:1c:7b:87:0c:8a:7d:90:a4:c7:98:e0:c5:
de:19:74:e0:36:34:4e:a5:8f:9f:e5:06:6a:dd:b9:6f:c9:8d:
01:f1:9f:a7:90:89:4d:a7:1e:f2:4d:62:03:bd:14:1a:53:9d:
3b:d8:1b:cb:59:9c:bb:e1:cc:b8:71:ad:ce:ea:94:c0:6b:cc:
05:5d:f2:07:dc:e7:cb:b6:f6:13:81:e3:cc:1c:68:a4:4f:9c:
35:ab:5b:bc:c6:1a:24:c2:06:ae:98:08:5d:4f:35:bb:d4:b7:
92:7c:f6:ab:55:40:9f:49:c5:be:b4:df:be:fa:72:78:e2:0e:
ca:2f:d9:80:56:5e:3e:04:50:e7:3a:3c:49:bb:d8:f2:3c:a1:
ae:07:41:fe:10:70:6f:0c:6f:fc:d2:42:c7:50:77:93:c7:f2:
10:62:64:37:e5:90:01:92:98:37:c2:1e:10:c2:ac:9d:f0:ee:
1f:cc:47:18:33:7d:c9:23:1a:3b:86:36:b4:c4:a8:56:71:5e:
d2:f3:01:82:5e:4d:72:63:39:3b:d9:73:8b:4f:7f:b8:14:60:
83:97:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:31 2025 by rpki-client