
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa
File: 3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier: ScU8iHJymDQMFTAbYoVy3KeHUFSzBl9LjQP4jVSkv7w=
Subject key identifier: DC:EB:26:7E:7D:EC:64:51:DA:95:AA:1B:19:89:35:C6:C1:8E:44:98
Certificate issuer: /CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
Certificate serial: 444FEE6FE57EFBE9903CF127F5955B7E4129C327
Authority key identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa
Signing time: Tue 04 Feb 2025 18:25:32 +0000
ROA not before: Tue 04 Feb 2025 18:20:32 +0000
ROA not after: Tue 03 Feb 2026 18:25:32 +0000
asID: 265523
IP address blocks: 170.238.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl
rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4f:ee:6f:e5:7e:fb:e9:90:3c:f1:27:f5:95:5b:7e:41:29:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
Validity
Not Before: Feb 4 18:20:32 2025 GMT
Not After : Feb 3 18:25:32 2026 GMT
Subject: CN=DCEB267E7DEC6451DA95AA1B198935C6C18E4498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:d3:9f:b1:a3:4a:60:3a:f0:98:d4:59:f3:
90:f4:64:b6:ab:ce:ec:32:1c:29:4e:f7:38:6e:da:
47:fa:68:c6:f1:27:22:b6:12:1a:4e:d2:b1:34:71:
a7:77:f5:6f:bf:4d:b1:57:e9:ba:45:30:58:85:ec:
80:90:fe:c6:93:d3:07:02:8a:d6:e7:d8:f5:c6:64:
3d:e3:44:b8:6e:ed:16:ca:75:2b:7a:1b:ec:a8:5e:
19:1e:97:cf:cb:b8:95:93:5f:ed:48:62:88:ac:61:
79:5b:f3:e6:a0:a2:f1:05:25:22:05:9a:fa:6c:57:
e2:c4:c8:27:3d:57:0b:7d:f5:1b:92:42:21:e0:8b:
1b:ae:3d:bf:a2:f7:d5:45:f4:53:e0:ec:9f:c1:d3:
e3:7e:a9:10:7d:1b:0a:92:10:33:3f:00:70:0d:65:
db:37:d7:16:79:6d:b5:25:41:6e:a1:4d:56:b0:5c:
4f:b4:60:ed:1f:c4:6d:95:f4:55:51:27:eb:eb:66:
63:7d:be:c7:52:fa:6f:3c:c9:81:ff:5c:1f:6e:1c:
4f:e7:94:04:c7:99:5d:66:80:9f:3b:e4:9f:f7:43:
5f:06:45:9b:07:0f:14:56:87:79:72:fe:4e:af:64:
19:56:f4:da:07:f1:3c:5f:1f:21:59:14:8e:7f:db:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:26:7E:7D:EC:64:51:DA:95:AA:1B:19:89:35:C6:C1:8E:44:98
X509v3 Authority Key Identifier:
keyid:40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.252.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:f5:d9:53:59:a7:5f:32:c5:f7:e4:46:7e:50:32:76:46:56:
5a:ba:b7:45:e2:21:37:cd:7c:1a:da:30:a0:14:aa:41:64:b9:
4e:28:84:08:c3:b7:ef:58:bc:01:9e:b6:5f:4d:5b:82:37:9f:
a5:b2:38:cd:27:b5:41:0b:c4:9e:7f:70:21:eb:5a:d5:89:29:
c7:f5:6d:aa:bf:88:5d:6e:17:1d:87:ed:5d:25:89:1f:e4:f7:
42:39:d1:e2:fb:83:a7:2c:bb:8e:1f:bb:d3:80:bb:c4:2c:c7:
04:6a:b2:5f:4e:36:4c:29:41:5c:ed:09:a2:e3:d0:40:be:d6:
dd:46:92:39:b6:4d:a8:3e:6a:d6:95:34:97:d9:f0:2a:cc:34:
b2:ed:c7:80:70:40:16:17:08:fa:a4:fd:52:ce:c7:6b:c9:ee:
bf:89:f8:bf:b7:ad:40:c8:a8:51:9a:0a:66:7d:81:32:c4:9a:
41:ce:b6:04:c9:bf:ae:19:13:6b:54:83:80:02:24:10:38:af:
ff:85:96:18:df:4d:a7:18:e6:8d:63:98:08:69:20:89:a0:98:
d6:09:a7:c0:24:c4:e8:46:c9:3e:a9:ad:ba:bd:0b:94:57:22:
ed:09:a7:e9:0f:ac:7f:36:93:51:90:d8:26:06:f9:51:68:cc:
b3:f4:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:08:38 2025 by rpki-client