
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
File: 323830333a396232303a3a2f33322d3634203d3e2033333536.roa (raw, json)
Hash identifier: JrgoBzScjh1e4ip/vNH0kvfaLmTrE+5sSeBOmUWfXqk=
Subject key identifier: C0:CC:8D:9B:B9:BD:E7:19:F7:FC:47:C4:32:A0:32:40:94:5E:68:A6
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 42F61F31C5B6EBB2174C1C9302EB409BBDDA1119
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
Signing time: Tue 04 Feb 2025 18:36:40 +0000
ROA not before: Tue 04 Feb 2025 18:31:40 +0000
ROA not after: Tue 03 Feb 2026 18:36:40 +0000
asID: 3356
IP address blocks: 2803:9b20::/32 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f6:1f:31:c5:b6:eb:b2:17:4c:1c:93:02:eb:40:9b:bd:da:11:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:40 2025 GMT
Not After : Feb 3 18:36:40 2026 GMT
Subject: CN=C0CC8D9BB9BDE719F7FC47C432A03240945E68A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:05:47:47:25:5b:fe:62:89:a8:67:88:1f:
f4:51:71:71:58:48:3a:43:b8:2f:78:40:75:d2:59:
10:f6:24:10:40:36:5f:c2:15:70:a7:f1:15:ac:85:
07:df:55:6f:ca:51:1c:e4:34:ce:64:15:1c:5d:00:
8c:29:f7:c1:30:cf:7b:30:20:91:d2:b7:69:74:87:
7c:15:40:a0:d9:a5:cb:3c:39:50:c5:94:b6:d3:58:
7e:8e:ff:a3:3a:15:56:ba:d9:13:46:4d:ac:ae:f5:
aa:ae:df:9d:8f:f0:67:46:0a:17:05:ad:2b:c7:f1:
4e:99:01:0f:8a:e6:8a:15:59:04:65:a7:0f:20:e2:
35:57:39:e4:de:b7:f0:61:34:46:c7:de:ba:78:4c:
10:3c:40:8d:99:ff:3a:6c:e8:09:d9:6a:58:22:d8:
82:59:a0:1f:d6:8d:4b:53:63:e0:8e:5e:b2:29:a5:
71:14:84:69:1b:f8:f8:c5:cf:27:bc:4e:2b:60:6e:
10:4e:20:de:c0:7a:9e:57:b0:47:6b:4d:f0:5e:17:
67:d6:a9:d7:a8:0a:1f:2e:12:84:e8:c6:7e:91:f5:
7a:0a:91:9f:d6:0c:98:c8:3f:a6:18:6f:6f:e9:ee:
87:25:93:5c:8d:4a:9f:8d:6a:49:d4:e7:f3:2f:6e:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:8D:9B:B9:BD:E7:19:F7:FC:47:C4:32:A0:32:40:94:5E:68:A6
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9b20::/32
Signature Algorithm: sha256WithRSAEncryption
22:ce:6f:b3:38:4a:12:14:fd:61:a7:b1:eb:25:f1:43:cc:07:
97:96:62:cf:4a:f6:a2:70:67:62:e8:d5:a6:58:3c:60:2d:15:
e7:f3:8b:50:fc:1f:98:b9:12:e8:ce:62:6f:96:80:72:40:e9:
be:73:ca:c2:f6:e6:39:33:78:c1:37:a5:0e:bb:c5:4f:a5:52:
81:26:3c:41:d4:87:4b:57:ec:61:ff:9c:03:c0:f6:1e:d8:0d:
31:57:15:ab:94:6e:f8:e3:1b:45:46:92:0b:35:9e:cf:b9:20:
c9:92:5d:80:5e:8a:ac:f2:d8:2c:eb:e1:0e:51:d2:33:52:1f:
43:83:47:46:46:0c:45:d1:45:84:2c:c4:38:47:08:c9:b3:4b:
ac:82:af:5a:a5:8c:3c:4b:61:0d:2a:d2:80:e2:98:0b:b1:ef:
d9:71:22:2a:91:15:ca:88:0d:bd:07:71:90:20:b0:23:fc:b9:
f6:01:62:ac:6c:eb:b0:29:25:c5:53:8c:02:f9:01:f0:da:cd:
d5:95:b7:c1:1f:e9:de:88:15:05:85:8d:d7:d9:4e:7a:61:85:
05:f4:7c:50:9b:0a:d1:24:eb:3a:fd:0f:7d:41:87:cd:45:0c:
70:ef:e0:4e:6f:da:d5:9f:3a:8f:4d:f3:7a:8b:0e:2c:03:d2:
6c:23:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:24 2025 by rpki-client