
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa
File: 323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier: gHfj8aiH379U0ebSASD+9ZQyHbFtPL56n++gZ4z54eM=
Subject key identifier: D7:44:32:05:7B:69:56:52:C1:D1:AD:82:75:CC:64:87:E7:2E:0D:3A
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 63D40EB0BC95754D3AA16318454A29FD2BC04137
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa
Signing time: Fri 03 Oct 2025 15:25:00 +0000
ROA not before: Fri 03 Oct 2025 15:20:00 +0000
ROA not after: Fri 02 Oct 2026 15:25:00 +0000
asID: 18678
IP address blocks: 2800:310:d06::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d4:0e:b0:bc:95:75:4d:3a:a1:63:18:45:4a:29:fd:2b:c0:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Oct 3 15:20:00 2025 GMT
Not After : Oct 2 15:25:00 2026 GMT
Subject: CN=D74432057B695652C1D1AD8275CC6487E72E0D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:6b:17:1f:ff:b4:3c:88:68:74:c5:88:40:
36:62:08:9a:8e:4c:1c:24:2b:0b:52:31:d5:f5:f0:
0f:5b:58:e9:ba:05:85:c4:59:da:e5:30:36:04:7f:
17:ff:c9:e2:49:b5:cf:dc:28:31:ce:c7:b9:59:9c:
6c:7f:c7:45:80:27:65:91:d7:84:0f:5f:62:6c:00:
46:13:11:ab:86:21:05:de:c9:e9:c8:48:33:ac:35:
b7:06:bb:db:ac:18:b3:a5:41:97:93:70:5f:ac:5a:
83:03:e4:51:a6:08:37:b1:33:c6:a7:97:a2:c6:7f:
68:34:c5:40:4c:12:da:45:b0:0a:85:7c:cb:d1:4b:
20:91:74:fc:53:bd:d2:dc:93:2f:88:69:97:fa:fc:
31:8f:17:f5:89:7c:e2:77:ef:cf:c5:f6:eb:b3:04:
85:88:f8:89:fb:28:1d:56:e8:b7:9e:e8:63:d3:f1:
3d:01:f4:08:61:ba:a0:a1:a0:59:fc:66:f5:ba:50:
b1:0e:b7:67:9a:4e:de:d6:78:89:39:53:ef:9e:79:
18:3d:b6:f4:a7:d2:32:01:b7:28:da:82:4b:ee:0a:
da:fb:4b:a2:69:a0:bf:4a:7c:12:ae:18:ed:4f:85:
6d:6a:dc:fc:43:a8:17:4d:1d:0e:65:08:77:ca:35:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:32:05:7B:69:56:52:C1:D1:AD:82:75:CC:64:87:E7:2E:0D:3A
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a6430363a3a2f34382d3438203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:310:d06::/48
Signature Algorithm: sha256WithRSAEncryption
53:f8:4a:95:59:31:81:0b:54:ac:5f:6b:26:87:43:84:c4:b9:
cc:f9:4f:50:34:34:53:29:fb:5b:fb:8c:c9:71:bc:97:ad:24:
20:ac:0e:d7:92:f5:12:74:60:69:31:73:75:de:ba:04:8b:2a:
5a:2a:f8:12:0b:0e:4d:71:75:40:c9:ee:91:44:aa:75:e2:5b:
1d:03:f9:4c:32:7e:b6:da:5e:88:de:40:c3:df:17:d0:27:b4:
93:b9:c3:67:70:c4:3b:88:b5:39:63:47:a1:0b:28:a3:d3:fa:
bf:65:70:f2:0c:38:a8:c1:28:0d:ba:2d:31:e6:79:61:23:af:
de:82:a9:e0:b9:47:c6:25:14:0c:5c:a2:cb:01:fa:52:d6:a8:
7e:a2:f0:82:eb:fd:7c:d3:47:e7:66:e4:89:7b:dd:a2:05:af:
30:a1:30:40:ac:91:dc:25:56:23:a9:37:40:25:bd:ec:a2:d9:
45:ec:84:e4:88:f3:e4:7e:29:4b:9b:78:10:65:8f:24:72:14:
2b:bc:dc:ca:32:1d:5b:d4:a3:9b:e1:6e:35:e1:8e:a4:0a:f1:
ab:04:5e:ce:fb:b3:b9:d0:08:47:d4:cb:03:8d:e2:7f:7f:9b:
2b:12:a1:ac:2c:c4:f5:c4:de:63:ca:79:ad:fd:8a:89:b5:68:
8f:11:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:32:23 2025 by rpki-client