
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3332203d3e20323733303635.roa
File: 323830333a316265303a3a2f33322d3332203d3e20323733303635.roa (raw, json)
Hash identifier: EDnsk6Pe6w45gt7fELta4L5+EE/w3uMbDtLtTK8jGe8=
Subject key identifier: CF:CC:B9:04:8C:67:0E:8D:5D:9C:5C:7E:29:C4:62:33:CA:1E:8F:AC
Certificate issuer: /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial: 12DA02F3563ECF0ADCEF19BBFBC2371AB2618946
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3332203d3e20323733303635.roa
Signing time: Tue 28 Oct 2025 11:51:13 +0000
ROA not before: Tue 28 Oct 2025 11:46:13 +0000
ROA not after: Tue 27 Oct 2026 11:51:13 +0000
asID: 273065
IP address blocks: 2803:1be0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:da:02:f3:56:3e:cf:0a:dc:ef:19:bb:fb:c2:37:1a:b2:61:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Validity
Not Before: Oct 28 11:46:13 2025 GMT
Not After : Oct 27 11:51:13 2026 GMT
Subject: CN=CFCCB9048C670E8D5D9C5C7E29C46233CA1E8FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:c1:c8:02:3a:0e:f0:ed:ad:46:6d:b9:28:
4f:68:1e:7c:d7:77:fc:27:3f:56:d2:8c:66:0f:99:
f5:64:c3:1a:28:cf:91:11:2f:75:21:0a:49:d8:26:
6f:8a:87:bc:9d:8c:c0:38:35:0d:1b:a1:6b:f8:1e:
b0:be:79:34:88:26:b1:fe:5e:86:f4:e7:e2:c1:ed:
a4:48:2a:ef:0a:ea:bf:a6:ee:66:c4:8c:0c:f4:59:
0b:16:59:b4:bb:28:a2:14:22:d1:9a:26:7b:9a:2e:
19:70:b3:bc:ce:10:52:a0:e5:62:e3:59:63:fb:2d:
37:23:a9:e0:c4:19:7c:3e:8b:20:2b:b2:89:65:2b:
fe:81:b7:25:fe:c9:e4:fb:d8:6d:22:c3:93:96:d8:
62:08:91:e0:d8:d2:de:a3:55:98:54:e1:71:9e:a5:
71:10:4f:cc:a9:7d:a0:a7:c1:4a:d8:9c:40:e3:ad:
3f:16:c6:1f:60:17:68:65:1b:5e:a3:15:40:62:07:
b2:e4:6a:cb:54:bc:44:56:14:c0:6b:cf:65:98:8a:
21:ef:ae:8c:5a:2e:d9:26:1d:73:1b:70:61:1d:76:
1f:46:8e:2f:c5:ef:6e:54:29:91:ce:13:2f:a1:73:
6c:59:da:00:20:f8:13:9d:95:2a:5f:1c:a5:a0:a7:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:B9:04:8C:67:0E:8D:5D:9C:5C:7E:29:C4:62:33:CA:1E:8F:AC
X509v3 Authority Key Identifier:
keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3332203d3e20323733303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:49:0b:a0:96:f4:e8:37:c4:56:d3:61:a2:ef:b8:a5:4c:9a:
e4:0a:43:a4:07:ae:83:98:a4:b1:20:ec:d5:ee:74:6a:21:0c:
4e:9a:f1:07:30:18:7b:f9:77:e7:0c:67:42:92:8c:4c:66:b3:
69:4b:bf:d4:f6:6a:f2:1c:fa:45:e4:1d:36:f3:45:b8:59:ff:
3a:86:78:60:4c:11:04:5d:9c:80:a3:53:5f:cd:89:68:4a:5b:
f1:66:f1:46:5d:d0:3e:c7:60:96:c6:8d:ff:1b:e5:83:83:41:
ac:48:a5:f3:95:fa:65:d0:07:79:fa:df:1c:44:92:60:2a:11:
e1:9e:9f:66:8c:0f:a0:28:f8:a5:25:6b:b8:8b:e7:96:70:c2:
1b:79:31:ce:86:f1:e3:0f:d1:a8:d8:61:98:61:b9:06:53:c8:
22:26:26:aa:bd:61:08:71:bf:a1:59:65:83:fa:d9:15:e1:e1:
e1:54:fe:80:52:5f:8a:ad:f4:a4:36:28:db:71:56:6e:95:2d:
d3:fc:0c:c4:bf:c6:98:21:91:a4:cc:34:f3:73:c0:ce:23:63:
df:9c:0e:6f:0c:f4:0f:53:61:a6:a6:72:62:47:ed:be:30:bc:
92:33:2b:10:1d:78:29:c2:9a:38:a2:03:8b:a7:0f:e2:d7:f6:
db:17:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:05:50 2025 by rpki-client