
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36342e302f32342d3234203d3e203532343637.roa
File: 3133382e33362e36342e302f32342d3234203d3e203532343637.roa (raw, json)
Hash identifier: og73oar6DoSa0oVfOJz/fc3yl4c9cCa2fchh0wF0pAc=
Subject key identifier: 58:9D:A4:DB:12:06:88:2B:8B:07:9D:31:BF:2E:9C:8C:C8:D4:1B:8C
Certificate issuer: /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial: 4A5569D1F60BA77521C2677F4AC07DF29394618C
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36342e302f32342d3234203d3e203532343637.roa
Signing time: Tue 04 Feb 2025 18:05:47 +0000
ROA not before: Tue 04 Feb 2025 18:00:47 +0000
ROA not after: Tue 03 Feb 2026 18:05:47 +0000
asID: 52467
IP address blocks: 138.36.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:55:69:d1:f6:0b:a7:75:21:c2:67:7f:4a:c0:7d:f2:93:94:61:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Validity
Not Before: Feb 4 18:00:47 2025 GMT
Not After : Feb 3 18:05:47 2026 GMT
Subject: CN=589DA4DB1206882B8B079D31BF2E9C8CC8D41B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:aa:14:3e:c2:36:3e:04:c8:4b:fc:11:e9:
70:e1:78:5d:d2:aa:cf:2d:e4:bf:81:24:74:dc:c2:
e5:8c:a5:b9:93:c7:f5:60:87:2b:76:86:b3:69:19:
75:1b:7d:4c:f2:94:73:b2:45:bc:31:1e:ee:53:de:
47:9c:03:71:62:54:76:9e:79:90:1c:40:7d:7f:50:
f2:0e:08:6b:46:89:2c:aa:1a:5e:d3:12:91:81:8b:
bc:e7:75:a0:84:71:17:ea:38:ee:3a:2b:7b:8f:7a:
33:e2:61:a1:93:ac:02:0b:92:d1:72:da:5e:34:f0:
7d:03:ae:46:cd:b9:38:b3:2b:1a:0a:89:3c:f6:fe:
8b:43:71:4f:fb:f7:e2:f3:8f:35:09:b6:11:10:76:
af:7c:a5:17:16:e3:89:aa:7b:fc:1c:ca:9a:00:87:
9b:d3:0d:68:59:db:ad:b2:03:5a:37:cb:9f:8b:d7:
07:fd:3d:df:06:7e:80:07:92:dc:31:47:69:08:a6:
81:9a:86:6a:5a:0a:9e:b8:62:a1:29:49:79:31:d1:
7b:af:67:2d:4c:82:9c:b5:45:bc:33:e7:d1:6b:ae:
72:c6:81:3d:1f:bc:09:01:7d:5a:57:dc:a5:73:a9:
c6:81:e6:d2:a6:9f:8a:09:13:64:94:8a:c8:b9:61:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:A4:DB:12:06:88:2B:8B:07:9D:31:BF:2E:9C:8C:C8:D4:1B:8C
X509v3 Authority Key Identifier:
keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36342e302f32342d3234203d3e203532343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.64.0/24
Signature Algorithm: sha256WithRSAEncryption
16:59:a5:6e:e9:3c:29:98:11:d8:d5:e4:ae:21:a5:c8:af:28:
8e:67:cd:53:e2:b5:f9:49:a2:64:c9:d8:7f:1c:46:57:bb:21:
a0:42:33:12:20:5e:39:93:3c:e2:be:35:ef:5b:15:6c:1c:ff:
7c:9d:8e:51:aa:9e:c7:41:d3:40:df:40:2a:b3:d9:01:2b:f3:
f8:8f:0f:04:59:b3:5f:46:a8:7b:92:cf:b8:b7:6c:73:56:5d:
a8:52:de:34:11:03:6c:01:88:16:e9:1b:9e:f6:67:af:68:f2:
33:4f:51:67:8d:aa:75:3d:06:2f:ca:5c:10:98:85:73:4f:e0:
78:ef:fd:ee:c9:8e:ff:a0:d5:0e:a1:6a:d7:88:97:af:34:26:
d8:77:4c:73:cb:5b:68:30:01:c9:f4:31:cd:c6:cd:f9:55:01:
42:83:f7:45:f0:57:f4:42:fa:be:1d:35:40:eb:46:1c:4f:bc:
cb:2a:80:ea:a2:a8:84:98:cb:09:b0:17:22:9c:60:07:ec:ac:
53:ae:08:18:c0:1f:a8:e9:99:7f:ee:b3:2f:d9:69:d5:43:b4:
c9:aa:96:a1:60:29:7d:f1:c5:dd:89:b1:55:0a:77:8f:62:3d:
75:19:47:41:44:c2:09:a1:76:57:f9:82:da:52:cd:6d:ef:1f:
67:63:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:59:57 2025 by rpki-client