
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
File: 34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier: 41SOVAodcLKyryMiH1QxQTtYKkrqbxoQgUAQXwth9BY=
Subject key identifier: 57:73:0F:9A:4C:E6:24:6F:B3:73:4F:A4:97:9A:3A:BA:09:74:48:33
Certificate issuer: /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial: 4C13CD03BF77571C54051252D09AF227516BFBD6
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
Signing time: Tue 04 Feb 2025 18:39:32 +0000
ROA not before: Tue 04 Feb 2025 18:34:32 +0000
ROA not after: Tue 03 Feb 2026 18:39:32 +0000
asID: 269858
IP address blocks: 45.189.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:13:cd:03:bf:77:57:1c:54:05:12:52:d0:9a:f2:27:51:6b:fb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Validity
Not Before: Feb 4 18:34:32 2025 GMT
Not After : Feb 3 18:39:32 2026 GMT
Subject: CN=57730F9A4CE6246FB3734FA4979A3ABA09744833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:d6:f0:88:ba:43:06:19:cf:96:e8:ca:2e:
29:af:9e:8d:0a:8a:19:7b:93:3a:83:af:a1:78:be:
e9:ed:8f:63:a8:68:2e:2a:aa:34:22:c9:ae:2e:0e:
15:5a:e1:5f:84:36:2a:dd:69:f0:39:18:4b:80:26:
0d:70:c2:e8:55:fd:5c:4b:a3:14:dc:e9:7e:fc:99:
7b:2f:81:3a:07:55:96:fa:97:eb:2c:9c:e5:7a:5c:
bd:d4:87:46:ac:6b:13:f9:4e:e2:65:7b:4f:58:b0:
96:23:94:6e:99:9c:4f:8e:c0:46:7a:de:06:2b:0d:
e5:25:ff:ad:e2:80:53:0d:89:6e:e9:3b:a3:23:b9:
e7:0f:72:1a:ee:41:40:f5:cf:c6:b4:ca:b2:e4:59:
c3:1b:e6:9c:21:fd:a5:43:5a:f0:97:93:14:cf:d9:
e1:03:b6:5c:47:d3:5c:88:af:94:71:67:ff:02:82:
02:93:fa:0c:2b:53:bb:84:82:a7:56:63:98:74:a9:
4c:46:03:60:76:24:16:0a:5d:7d:8b:18:51:b3:48:
8b:81:4d:f0:97:ec:af:17:3d:e0:d6:51:36:09:50:
73:83:a2:39:95:54:b8:61:b3:b4:4f:08:87:d6:27:
e1:57:58:3a:eb:c9:34:b9:4e:97:b6:dc:55:26:76:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:0F:9A:4C:E6:24:6F:B3:73:4F:A4:97:9A:3A:BA:09:74:48:33
X509v3 Authority Key Identifier:
keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.198.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d1:52:d4:01:46:b4:ed:c7:ed:7d:2d:25:b4:06:06:f9:32:
77:59:b4:49:1b:61:63:bd:ff:95:5d:6b:40:8b:7a:4b:c2:89:
43:2e:06:f7:f7:73:5a:47:c5:c9:0e:bc:c5:8b:a9:db:48:b8:
03:bc:16:08:d0:0c:c1:2d:1a:f5:bc:00:6d:2a:2f:83:45:a1:
c1:e0:c8:e8:30:3d:9d:f4:7c:fe:25:ed:64:6a:f1:88:14:ba:
b8:74:75:d5:cb:b6:c2:42:5e:c1:d6:d4:fe:e7:f4:9f:be:ae:
6c:80:5a:55:bb:39:e3:8e:7b:88:ac:2a:c0:bf:01:6b:6b:40:
01:70:93:0f:6e:98:c0:37:3b:6b:26:a7:3f:5b:b3:40:07:52:
6b:3c:f4:55:b3:37:92:5b:a4:14:d0:c1:41:c4:5e:ee:6f:98:
b6:ff:d2:af:6c:ed:68:02:da:af:17:46:a2:ac:6e:6a:12:4f:
f8:dd:4c:4a:a8:75:a8:0a:ef:7b:71:41:2f:2e:89:1a:e2:d7:
a3:1d:84:cf:57:44:5e:da:bb:a2:35:90:86:b8:98:41:ad:c1:
cc:75:1f:e7:50:03:bb:90:81:55:30:f2:d7:9d:77:92:ff:2d:
e4:6e:aa:8b:c1:d3:5c:ea:01:af:4e:cb:44:94:03:b6:5c:11:
c9:85:bc:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTBPNA793VxxUBRJS0JryJ1Fr+9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE5N0I3RDlEQkQyNzBBNTYwNjRCNTYwRTMyQzQ2QTVF
MkJEODU3RDAeFw0yNTAyMDQxODM0MzJaFw0yNjAyMDMxODM5MzJaMDMxMTAvBgNV
BAMTKDU3NzMwRjlBNENFNjI0NkZCMzczNEZBNDk3OUEzQUJBMDk3NDQ4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyftbwiLpDBhnPlujKLimvno0K
ihl7kzqDr6F4vuntj2OoaC4qqjQiya4uDhVa4V+ENirdafA5GEuAJg1wwuhV/VxL
oxTc6X78mXsvgToHVZb6l+ssnOV6XL3Uh0asaxP5TuJle09YsJYjlG6ZnE+OwEZ6
3gYrDeUl/63igFMNiW7pO6MjuecPchruQUD1z8a0yrLkWcMb5pwh/aVDWvCXkxTP
2eEDtlxH01yIr5RxZ/8CggKT+gwrU7uEgqdWY5h0qUxGA2B2JBYKXX2LGFGzSIuB
TfCX7K8XPeDWUTYJUHODojmVVLhhs7RPCIfWJ+FXWDrryTS5Tpe23FUmdjMJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUV3MPmkzmJG+zc0+kl5o6ugl0SDMwHwYDVR0j
BBgwFoAUCpe32dvScKVgZLVg4yxGpeK9hX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjg0ODBGMTg1NTA2NzNDQTc0MDQyQTk2MUQ3RjU3MEUz
RTM5NTZBQzhFQjRBRjJCRUIxODgyRjM3NkM5OUUzLzAvMEE5N0I3RDlEQkQyNzBB
NTYwNjRCNTYwRTMyQzQ2QTVFMkJEODU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTk3QjdEOURCRDI3MEE1NjA2
NEI1NjBFMzJDNDZBNUUyQkQ4NTdELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI4NDgwRjE4NTUwNjczQ0E3NDA0MkE5NjFEN0Y1NzBFM0UzOTU2QUM4
RUI0QUYyQkVCMTg4MkYzNzZDOTlFMy8wLzM0MzUyZTMxMzgzOTJlMzEzOTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3G
MA0GCSqGSIb3DQEBCwUAA4IBAQBk0VLUAUa07cftfS0ltAYG+TJ3WbRJG2Fjvf+V
XWtAi3pLwolDLgb393NaR8XJDrzFi6nbSLgDvBYI0AzBLRr1vABtKi+DRaHB4Mjo
MD2d9Hz+Je1kavGIFLq4dHXVy7bCQl7B1tT+5/Sfvq5sgFpVuznjjnuIrCrAvwFr
a0ABcJMPbpjANztrJqc/W7NAB1JrPPRVszeSW6QU0MFBxF7ub5i2/9KvbO1oAtqv
F0airG5qEk/43UxKqHWoCu97cUEvLoka4tejHYTPV0Re2ruiNZCGuJhBrcHMdR/n
UAO7kIFVMPLXnXeS/y3kbqqLwdNc6gGvTstElAO2XBHJhbye
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:06:45 2025 by rpki-client