
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
File: 3230302e302e36382e302f32332d3234203d3e203631343535.roa (raw, json)
Hash identifier: l99NaxWtAQEjzojqp2E0Ki0Svy2nS/JzhpTmnuh1K/g=
Subject key identifier: 25:29:C5:09:05:23:08:03:BD:9A:8C:05:C6:FE:7B:FB:DB:69:91:A9
Certificate issuer: /CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
Certificate serial: 3D0ECDECCECE6E83A6373B2E5F3AEE3716993D29
Authority key identifier: 1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
Signing time: Tue 04 Feb 2025 18:16:03 +0000
ROA not before: Tue 04 Feb 2025 18:11:03 +0000
ROA not after: Tue 03 Feb 2026 18:16:03 +0000
asID: 61455
IP address blocks: 200.0.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl
rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 23:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0e:cd:ec:ce:ce:6e:83:a6:37:3b:2e:5f:3a:ee:37:16:99:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
Validity
Not Before: Feb 4 18:11:03 2025 GMT
Not After : Feb 3 18:16:03 2026 GMT
Subject: CN=2529C50905230803BD9A8C05C6FE7BFBDB6991A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:43:e0:84:1e:92:ab:e0:c2:e7:58:87:d4:
5f:a1:ea:ff:4c:3f:65:e2:62:d8:ee:73:ba:2b:b5:
e1:c4:ac:2f:3c:52:17:b9:19:cc:43:7f:91:05:86:
f8:44:ba:13:b7:12:d6:bb:26:c8:73:d5:b0:fc:e1:
73:77:8b:38:c8:e7:91:59:a4:c7:8a:d3:03:7e:50:
d4:3b:6e:34:7b:b7:06:e0:97:2d:a0:48:11:11:c5:
c7:6d:16:35:14:fc:56:aa:f9:18:9f:51:d0:8f:74:
49:06:e6:d1:17:bc:da:7c:d2:84:83:22:fa:0c:eb:
8a:15:b1:8e:74:bd:d1:7b:35:02:77:61:5b:14:ee:
30:8f:d7:da:db:c5:bb:b0:29:50:e1:55:53:7f:ef:
aa:c2:64:77:33:90:52:88:83:06:b1:76:61:e9:0e:
6a:ea:de:f7:b4:aa:e7:79:46:f9:cf:60:b1:9f:ae:
3e:ea:db:36:9a:b9:8f:24:1e:85:b6:f0:b3:2f:84:
5f:ac:c2:51:2f:5c:16:06:64:f1:c2:21:a4:9e:a6:
9f:dd:e9:a1:c7:1b:5c:77:2c:73:e3:fb:d3:87:d8:
a7:d4:a8:11:6e:6c:b3:f6:8d:7a:37:3b:50:9c:57:
af:be:33:09:c6:ac:8e:86:fb:d7:a5:ca:77:c4:fa:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:C5:09:05:23:08:03:BD:9A:8C:05:C6:FE:7B:FB:DB:69:91:A9
X509v3 Authority Key Identifier:
keyid:1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.68.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:76:79:f4:a3:d3:de:f1:d3:9b:5f:6c:8e:58:80:63:ff:18:
c8:13:54:2a:20:9a:71:3c:82:a6:8b:b3:50:0c:71:09:7a:f1:
bb:27:3c:76:ef:72:8b:38:f2:d8:c4:90:f2:0e:1c:d2:e2:e5:
7b:d8:96:64:b6:93:8d:86:15:da:f0:3c:c6:c3:70:39:46:49:
09:86:9f:5e:00:f6:73:a0:da:42:58:87:5d:ba:20:96:4b:13:
2e:ea:75:57:da:aa:2c:79:cf:61:ec:c1:59:bd:7e:65:d7:13:
42:a2:e0:ad:04:9d:7d:7e:b2:83:c2:af:d2:ab:c0:ba:95:07:
98:39:1a:4e:c8:18:39:18:35:87:c4:bf:79:60:ca:b5:0c:23:
c2:bc:f6:02:14:a0:88:e7:08:7f:a1:93:8a:a6:4a:3a:37:8b:
c1:46:65:ed:61:1d:14:ba:bb:62:4b:a4:1e:ba:4d:6d:da:f9:
3c:41:ee:95:89:8c:ab:c4:9b:6e:f1:8c:f8:85:a9:bd:0e:aa:
5a:09:80:5e:b4:71:78:23:09:6a:bb:87:61:48:01:c3:3d:5d:
fa:c3:26:46:75:42:7c:be:2f:a3:54:9e:70:a8:b7:ac:bb:33:
22:34:2d:ec:13:8d:65:f6:63:ea:7f:d6:10:d1:29:63:d1:45:
4a:d0:b8:57
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUPQ7N7M7OboOmNzsuXzruNxaZPSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU5RTFBNjI1MDk2RkVFRENGRkVBMDVFRkM2MzMzNTRD
MkRGMDU0RjAeFw0yNTAyMDQxODExMDNaFw0yNjAyMDMxODE2MDNaMDMxMTAvBgNV
BAMTKDI1MjlDNTA5MDUyMzA4MDNCRDlBOEMwNUM2RkU3QkZCREI2OTkxQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgUPghB6Sq+DC51iH1F+h6v9M
P2XiYtjuc7orteHErC88Uhe5GcxDf5EFhvhEuhO3Eta7Jshz1bD84XN3izjI55FZ
pMeK0wN+UNQ7bjR7twbgly2gSBERxcdtFjUU/Faq+RifUdCPdEkG5tEXvNp80oSD
IvoM64oVsY50vdF7NQJ3YVsU7jCP19rbxbuwKVDhVVN/76rCZHczkFKIgwaxdmHp
Dmrq3ve0qud5RvnPYLGfrj7q2zaauY8kHoW28LMvhF+swlEvXBYGZPHCIaSepp/d
6aHHG1x3LHPj+9OH2KfUqBFubLP2jXo3O1CcV6++MwnGrI6G+9elynfE+ifjAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUJSnFCQUjCAO9mowFxv57+9tpkakwHwYDVR0j
BBgwFoAUHp4aYlCW/u3P/qBe/GMzVMLfBU8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjY1NEVCOEZBMEIyN0FFN0U1MUQ3RkY5RTRDQTUyRjU1
MDEwRjE0OThDQTdBNTJDNzQ4OTI5MENGOTYzNzQ2LzAvMUU5RTFBNjI1MDk2RkVF
RENGRkVBMDVFRkM2MzMzNTRDMkRGMDU0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRTlFMUE2MjUwOTZGRUVEQ0ZG
RUEwNUVGQzYzMzM1NEMyREYwNTRGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY2NTRFQjhGQTBCMjdBRTdFNTFEN0ZGOUU0Q0E1MkY1NTAxMEYxNDk4
Q0E3QTUyQzc0ODkyOTBDRjk2Mzc0Ni8wLzMyMzAzMDJlMzAyZTM2MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNjMxMzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByABEMA0GCSqG
SIb3DQEBCwUAA4IBAQDHdnn0o9Pe8dObX2yOWIBj/xjIE1QqIJpxPIKmi7NQDHEJ
evG7Jzx273KLOPLYxJDyDhzS4uV72JZktpONhhXa8DzGw3A5RkkJhp9eAPZzoNpC
WIdduiCWSxMu6nVX2qosec9h7MFZvX5l1xNCouCtBJ19frKDwq/Sq8C6lQeYORpO
yBg5GDWHxL95YMq1DCPCvPYCFKCI5wh/oZOKpko6N4vBRmXtYR0UurtiS6Qeuk1t
2vk8Qe6ViYyrxJtu8Yz4ham9DqpaCYBetHF4Iwlqu4dhSAHDPV36wyZGdUJ8vi+j
VJ5wqLesuzMiNC3sE41l9mPqf9YQ0Slj0UVK0LhX
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:13 2025 by rpki-client