
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa
File: 3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa (raw, json)
Hash identifier: ztc8k/ziIjFf8tQ93Kdj0nDppbx3oNNMDxQ0jbcwUxs=
Subject key identifier: 8B:4E:CA:48:6D:2A:8B:6B:2C:D7:C6:44:7F:F0:4A:D0:C2:60:D8:78
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 723F675F248B40DD521F811DF7A71ED1D2EDB779
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa
Signing time: Fri 08 Aug 2025 01:20:00 +0000
ROA not before: Fri 08 Aug 2025 01:15:00 +0000
ROA not after: Fri 07 Aug 2026 01:20:00 +0000
asID: 271968
IP address blocks: 168.243.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3f:67:5f:24:8b:40:dd:52:1f:81:1d:f7:a7:1e:d1:d2:ed:b7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: Aug 8 01:15:00 2025 GMT
Not After : Aug 7 01:20:00 2026 GMT
Subject: CN=8B4ECA486D2A8B6B2CD7C6447FF04AD0C260D878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:34:86:ad:d2:d6:ae:c2:59:9b:74:d8:68:
82:9b:80:f9:b5:55:1a:60:89:ab:b3:aa:65:90:2d:
42:cb:86:cd:29:a0:fe:4e:db:ff:4d:a7:11:00:b2:
9d:5d:ab:d6:ad:8d:5c:be:43:8f:5a:c3:ad:56:f2:
67:59:04:92:b1:33:c9:2c:7a:ed:00:29:4b:8c:66:
a1:94:27:d8:7c:db:cb:4d:37:a1:a1:24:87:15:ac:
e7:be:c6:b1:04:85:31:92:ae:47:50:fd:c2:df:f0:
6f:b8:70:c3:68:27:d3:b7:17:88:c6:d9:0f:38:21:
c0:dd:49:5e:42:39:38:1b:7f:d1:c8:4f:31:b3:03:
8d:02:30:ed:23:1c:99:42:9e:89:ea:83:21:3a:53:
6a:23:ef:2b:05:33:02:93:83:ee:11:5b:c3:aa:f9:
c4:b6:a9:aa:59:c1:8c:04:3e:6b:07:f4:37:9e:ce:
29:6d:2c:e4:6d:61:9e:fa:ca:ce:26:25:e5:7b:b4:
b4:1c:7a:36:2c:d8:fb:ce:17:42:97:c4:8a:86:d8:
35:6d:13:f3:b9:0f:60:64:7b:e7:f4:22:dc:ca:11:
fa:29:97:13:54:04:1a:c7:eb:14:89:4b:e5:93:87:
35:37:e8:6f:eb:09:e5:4a:68:8e:65:8c:46:ec:72:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:CA:48:6D:2A:8B:6B:2C:D7:C6:44:7F:F0:4A:D0:C2:60:D8:78
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37382e302f32342d3234203d3e20323731393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3c:e8:8a:b5:32:44:b2:5d:5b:3d:6a:5a:5a:2f:bf:bc:4d:
52:95:6b:7e:38:90:a2:5a:59:1c:45:16:b9:03:4a:0f:90:ee:
2a:1e:2a:9d:20:b2:4d:e9:41:67:21:55:a0:48:f5:cc:f8:f2:
d4:69:2a:5b:e2:91:38:5b:66:0d:86:51:4c:48:08:8c:2e:ca:
5a:57:79:eb:3a:06:1c:0e:19:cc:27:83:50:56:20:0c:21:13:
7c:16:f0:3a:24:c1:55:d3:27:03:47:5a:b7:c0:42:4b:74:fd:
b8:90:81:24:03:bd:2e:06:32:b0:7b:70:5e:f6:5d:af:78:1c:
d8:01:b5:17:99:d1:f4:de:93:d5:3d:61:2c:62:a6:62:4e:62:
3a:f7:4d:be:ee:de:9d:f8:38:dc:67:ab:7f:5f:ec:69:bb:1a:
7c:f6:25:93:1b:57:c6:d9:0b:e7:22:57:6e:69:be:9b:96:a2:
b6:d2:ba:2a:97:7f:bc:8e:7b:21:f1:54:5e:fb:97:0b:b5:48:
da:87:86:65:0d:ab:ed:4b:cd:97:ca:a1:63:b7:9e:a7:8b:51:
c8:35:73:d1:aa:17:8d:c3:ec:b4:bb:fd:46:cd:22:cc:45:d2:
f1:ae:1a:be:de:4f:27:a8:5e:9c:3d:35:75:31:f5:7d:57:ad:
e7:8d:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:16:30 2025 by rpki-client