
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
File: 323830313a3161303a3a2f34322d3432203d3e203532343637.roa (raw, json)
Hash identifier: D2dplrfIHCZBRd8norq5qLM7G80doV5+9MIfwyjDwYQ=
Subject key identifier: CD:19:9B:07:D8:49:73:44:E3:05:E8:17:68:1D:49:02:DF:B8:A3:8E
Certificate issuer: /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial: 428E99CB90B391010D40E3A0DC37E8B7E4FBF5C0
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
Signing time: Tue 04 Feb 2025 18:05:46 +0000
ROA not before: Tue 04 Feb 2025 18:00:46 +0000
ROA not after: Tue 03 Feb 2026 18:05:46 +0000
asID: 52467
IP address blocks: 2801:1a0::/42 maxlen: 42
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8e:99:cb:90:b3:91:01:0d:40:e3:a0:dc:37:e8:b7:e4:fb:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Validity
Not Before: Feb 4 18:00:46 2025 GMT
Not After : Feb 3 18:05:46 2026 GMT
Subject: CN=CD199B07D8497344E305E817681D4902DFB8A38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:de:c5:ed:3b:39:30:6f:b8:81:37:84:f4:
6b:3d:97:d8:56:8a:fe:bd:e0:db:5b:c1:ce:5d:f1:
ef:db:c7:02:35:a8:8d:30:6e:e6:b5:44:0e:fd:db:
b8:2b:92:2c:22:3b:95:53:c9:ce:4c:c6:64:e0:9e:
46:5e:e1:19:39:c0:5f:d1:70:b0:41:16:58:36:02:
50:b0:8b:9e:01:96:0c:d5:3e:18:11:1e:f5:7a:e4:
2a:ab:9d:9e:6f:4e:34:a9:e7:f6:fe:aa:7c:f2:91:
8b:52:24:06:30:8b:63:c8:d6:aa:e8:7e:d8:83:35:
6e:e5:62:75:8f:12:74:db:a7:1c:97:96:1d:0e:45:
c9:4e:0d:02:3f:7f:e7:3a:4c:16:42:c3:1c:bd:7a:
1c:fd:26:05:f1:1f:f0:d8:11:d4:b2:21:40:85:26:
ca:c5:c8:b2:5b:75:48:b5:72:14:7a:73:8d:27:df:
47:66:f5:83:b7:15:22:29:bd:35:63:a5:05:bb:48:
a4:9d:c6:43:c8:f4:62:f2:3e:fb:19:58:b0:9f:97:
9c:b2:27:8b:98:1e:78:df:d6:39:f2:10:70:78:ea:
ee:86:bc:3a:6a:c2:90:45:68:46:d7:e6:ed:9f:b5:
4f:47:7f:ab:11:ce:43:62:9a:68:3d:b3:03:32:15:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:19:9B:07:D8:49:73:44:E3:05:E8:17:68:1D:49:02:DF:B8:A3:8E
X509v3 Authority Key Identifier:
keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/323830313a3161303a3a2f34322d3432203d3e203532343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a0::/42
Signature Algorithm: sha256WithRSAEncryption
97:43:45:0c:b2:42:53:f9:e5:07:8d:62:a3:ec:9e:ba:05:2f:
1e:e8:49:b5:2f:dc:89:67:a0:c1:a6:28:15:cb:fe:e9:ce:ae:
65:cb:1b:09:57:99:37:9b:d3:35:0e:e7:9b:1e:60:da:cf:5b:
64:0d:cd:d9:4e:8f:4c:d9:db:75:8d:39:57:2e:79:3f:a2:38:
7a:7a:00:5b:87:df:24:6d:b2:9a:13:de:ec:09:08:70:f7:83:
2f:d5:7e:40:21:03:fa:8d:df:dd:8b:c8:31:2f:bd:5a:87:8a:
e0:cf:dd:a4:0a:05:4d:3d:47:5a:01:c5:37:c8:44:fb:f4:e8:
f7:b8:ef:ff:c2:aa:bb:b6:b7:0c:0f:4a:7f:34:87:26:26:33:
3c:04:06:50:83:77:e0:a3:9a:94:75:cd:16:f5:9a:ad:7c:d7:
88:05:f0:bf:11:f8:9c:68:66:c7:24:b1:ed:e3:b5:01:b5:1e:
43:11:9b:26:c9:e5:f9:90:bd:6d:61:53:1c:2e:4a:55:c4:86:
0d:a5:1f:89:86:78:84:b5:89:fd:80:6b:65:66:ec:c8:ca:7c:
f7:10:88:75:72:32:19:6f:64:d7:d2:85:c7:a3:5c:e4:b0:89:
c2:b2:3a:fc:72:28:6d:0b:77:3e:2f:05:6d:6a:3d:f2:6d:38:
0e:0a:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:19 2025 by rpki-client