
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa
File: 34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa (raw, json)
Hash identifier: urrLGvm4/CZSvAK6ODX8GdAi6nSG7VprqyvhPJHiTOA=
Subject key identifier: B3:D2:A3:D4:ED:11:CA:00:69:EB:D0:03:A0:4B:45:76:D9:A0:D9:A7
Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial: 40CD210CBC3BCF8DFB617E480AF6B428E4C9F572
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa
Signing time: Fri 24 Jan 2025 17:00:03 +0000
ROA not before: Fri 24 Jan 2025 16:55:03 +0000
ROA not after: Fri 23 Jan 2026 17:00:03 +0000
asID: 266832
IP address blocks: 45.238.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cd:21:0c:bc:3b:cf:8d:fb:61:7e:48:0a:f6:b4:28:e4:c9:f5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Validity
Not Before: Jan 24 16:55:03 2025 GMT
Not After : Jan 23 17:00:03 2026 GMT
Subject: CN=B3D2A3D4ED11CA0069EBD003A04B4576D9A0D9A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:91:d9:5a:e3:7d:49:4a:d2:bd:28:64:08:
6b:62:6f:67:30:af:b0:64:0b:4b:d1:49:aa:0a:3a:
7d:40:82:fc:ab:0e:e7:eb:1e:60:4a:ca:1e:6c:98:
c2:99:17:64:97:24:3a:f2:29:12:06:d9:3a:75:f7:
8f:c1:1a:ed:0c:98:85:5a:9f:0e:59:43:65:1a:99:
83:14:ff:ee:d9:12:54:b7:f0:74:5a:e4:4e:c7:9d:
3f:74:94:21:7c:07:2c:4e:75:2b:83:e4:ee:b2:54:
c8:96:44:b7:bd:05:35:b0:32:f1:08:ae:d9:50:59:
9f:9a:e3:50:03:73:7c:7d:b6:6f:f2:b3:c6:c3:03:
2b:c3:49:d5:18:7a:af:67:29:fc:20:87:4d:2e:a3:
4e:f2:1d:3a:10:2c:c8:4c:a3:4d:18:ad:27:51:f6:
bf:a8:a5:a2:09:d3:5a:5a:48:d8:78:55:8d:7d:0c:
90:71:e8:36:28:d2:9f:6c:f6:74:ae:8d:91:1b:f7:
ea:d1:c9:fc:4e:5e:fd:2f:81:28:39:c5:7d:85:f1:
5e:da:da:88:db:76:0d:f7:31:3f:2f:1e:7d:1e:01:
df:3f:b2:de:1b:ca:2f:66:bc:85:89:10:3c:12:9a:
79:4b:bf:ad:c2:0d:13:34:7e:86:cb:e9:47:3b:74:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:A3:D4:ED:11:CA:00:69:EB:D0:03:A0:4B:45:76:D9:A0:D9:A7
X509v3 Authority Key Identifier:
keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.144.0/22
Signature Algorithm: sha256WithRSAEncryption
35:67:01:50:4c:38:f2:82:21:e1:7c:a3:54:c0:cb:07:82:ef:
58:8f:45:16:2c:c3:ae:39:71:13:e8:f4:7b:74:4b:fc:57:98:
32:18:69:f0:ca:ea:5e:bc:8c:00:ce:e2:e6:87:e7:9f:26:b5:
3d:4d:3d:1c:67:a4:be:57:bb:a0:77:2a:f7:68:f8:3a:56:84:
91:7d:f3:1a:ea:bf:8a:64:ad:36:4f:89:e9:8e:9b:46:63:b9:
f2:03:3a:78:f7:3b:9f:fb:74:3a:ac:9a:10:c5:5d:0f:1c:7a:
fa:99:bb:9e:ef:71:07:11:0a:38:2f:67:b9:82:06:27:37:58:
65:75:0e:bd:28:cc:a0:3f:c1:ba:be:95:5b:da:6c:cd:0e:e2:
bc:60:27:fa:cf:a9:09:89:6b:a2:5c:86:84:a0:5a:f8:f3:4e:
8a:3e:22:cb:d6:04:b8:7f:da:08:e5:92:a9:b7:d7:86:ea:e4:
e8:3f:15:db:47:a9:65:38:ad:83:38:69:7f:3a:f1:4f:a3:7e:
b3:70:5b:da:5f:9d:4f:ef:33:b1:d9:49:cd:b1:e1:18:70:a9:
88:b3:2a:ec:5e:f2:2c:8a:39:29:b8:c1:5a:57:b0:3b:38:90:
f6:7a:a7:ac:40:64:2f:49:ca:fb:53:71:c7:41:35:53:02:d2:
ef:47:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:42:43 2025 by rpki-client