
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
File: 323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (raw, json)
Hash identifier: /b1eDm9Y7oRs94nAbEpcwT2yuvjJ7z2cgJyZkJI4aOM=
Subject key identifier: BA:FE:0D:E2:2B:D7:D6:45:7C:A7:02:4D:DD:7C:AD:DC:06:4E:DB:09
Certificate issuer: /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial: 71DB03510DA479E9197F447B88020643FA5565CD
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
Signing time: Tue 04 Feb 2025 18:30:47 +0000
ROA not before: Tue 04 Feb 2025 18:25:47 +0000
ROA not after: Tue 03 Feb 2026 18:30:47 +0000
asID: 264678
IP address blocks: 2803:dd40::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:db:03:51:0d:a4:79:e9:19:7f:44:7b:88:02:06:43:fa:55:65:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Validity
Not Before: Feb 4 18:25:47 2025 GMT
Not After : Feb 3 18:30:47 2026 GMT
Subject: CN=BAFE0DE22BD7D6457CA7024DDD7CADDC064EDB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:5b:11:49:40:41:d9:11:1f:13:c9:18:81:
0b:15:a1:a3:c4:34:ab:28:d0:fe:17:ca:d6:64:bc:
9f:18:f1:bc:8c:3d:47:81:ce:6c:c3:fb:89:f3:2c:
f3:15:13:0e:d9:5e:16:15:20:59:18:18:a1:5b:97:
20:01:26:b6:3b:be:77:fb:11:db:af:d3:40:0b:52:
4a:2d:7d:96:e8:ab:98:b3:e7:da:60:ab:66:d5:d7:
25:d9:cd:d9:55:ce:dc:06:8d:61:55:41:5c:fc:41:
2c:22:cb:e4:12:ab:b3:b1:27:5e:e9:bd:b4:51:67:
9c:93:a5:ab:91:cd:0c:69:f0:fe:ff:57:9a:4f:8f:
33:a4:79:87:14:fb:27:ed:9d:a7:dc:e3:ed:5e:55:
2c:95:9e:c1:cd:23:41:4b:8c:a2:29:9b:6d:5a:42:
27:09:22:aa:51:47:dd:4e:f0:3a:22:8e:a3:21:69:
3f:b1:f0:27:c8:dd:48:cd:92:e8:7e:d6:1c:a2:1e:
2b:62:35:79:23:80:16:89:7f:0a:e8:60:34:7d:e0:
c3:9c:58:14:cf:58:aa:d3:a4:a7:a3:d7:f0:34:e6:
58:5a:5c:68:c7:4c:ba:56:bc:7a:fa:85:f6:d6:13:
b1:7d:15:c0:e5:67:1a:bc:78:ab:1d:2d:82:cc:10:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:0D:E2:2B:D7:D6:45:7C:A7:02:4D:DD:7C:AD:DC:06:4E:DB:09
X509v3 Authority Key Identifier:
keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
45:a3:82:1b:cd:c0:d0:95:54:61:76:41:51:32:89:c8:35:7d:
d1:37:4a:6a:81:ec:69:cd:c3:c6:23:c7:1d:59:12:f0:6f:e0:
df:65:20:4f:50:99:49:45:e8:e7:af:30:f0:23:9d:56:d3:58:
47:42:5a:40:8a:e4:cf:31:0a:04:90:3f:48:b0:9b:13:fb:ce:
5e:90:94:f7:92:60:cc:b2:62:53:a3:d7:b6:55:64:0c:df:94:
0b:9b:d3:32:48:de:a0:15:26:ce:ec:a4:3d:c4:9f:cd:95:3a:
8f:00:d7:61:df:3c:0e:c5:6c:5e:f7:c1:ef:f4:5a:f1:0f:48:
1e:21:ec:5d:2e:37:5d:85:c4:3f:fe:69:67:1f:13:2e:84:2f:
59:d4:78:dd:2f:bd:35:94:4e:22:af:70:4c:40:85:10:d6:ac:
87:39:fb:33:dd:ed:b5:37:09:fe:bc:f0:4b:0c:24:68:51:be:
23:de:ea:81:c1:ed:ee:87:3a:38:fb:a9:e1:16:c7:43:e8:88:
36:a6:b7:98:c0:ea:d5:9c:7a:91:36:a0:aa:31:90:65:21:26:
ca:7b:dc:fa:62:6d:c3:8b:35:eb:17:d7:70:3c:26:4f:93:58:
67:9b:f6:08:9e:41:38:95:ab:52:2c:1a:9c:72:29:1c:ca:1f:
9b:28:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:19:12 2025 by rpki-client