
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
File: 323830313a3163303a3a2f33392d3430203d3e203532343234.roa (raw, json)
Hash identifier: h8yYlpglVyq0EU1saiLkKXNWNFnE0KDlG9RvRKIZ5N8=
Subject key identifier: A8:75:6D:20:E2:6E:11:40:76:90:67:F7:17:51:AA:57:39:5C:B7:4F
Certificate issuer: /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial: 4E5E3E8BE00A52AFB118CE968AE24FE43982A70A
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
Signing time: Tue 04 Feb 2025 18:03:12 +0000
ROA not before: Tue 04 Feb 2025 17:58:12 +0000
ROA not after: Tue 03 Feb 2026 18:03:12 +0000
asID: 52424
IP address blocks: 2801:1c0::/39 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5e:3e:8b:e0:0a:52:af:b1:18:ce:96:8a:e2:4f:e4:39:82:a7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Validity
Not Before: Feb 4 17:58:12 2025 GMT
Not After : Feb 3 18:03:12 2026 GMT
Subject: CN=A8756D20E26E1140769067F71751AA57395CB74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:5f:2a:f1:59:42:4e:18:81:f4:0f:bd:94:
4a:e6:48:fd:f8:b8:f0:f7:0f:24:65:4a:27:a8:10:
13:35:17:41:56:e5:98:9e:64:ff:a9:46:9b:e2:25:
96:1c:27:85:c5:0f:4c:06:ee:d9:a3:73:7f:95:21:
d1:ab:69:d9:1b:8e:77:72:da:9f:27:eb:20:34:8c:
1a:86:52:b3:14:ff:90:fe:96:87:b9:bf:e3:7e:21:
ee:4f:7f:56:fa:98:33:0d:19:db:c5:67:66:e6:60:
10:0b:fe:52:66:ab:89:ae:47:22:4c:85:97:12:2e:
be:4f:0d:6a:c0:78:38:40:31:76:60:c8:b1:09:27:
ff:ce:50:fe:69:c6:19:ab:08:4b:5b:40:3b:d1:cf:
e5:65:cb:a2:34:8a:07:3b:b6:a3:52:f5:f4:c0:6a:
4f:74:92:07:cc:cb:50:5a:0a:7c:a0:71:9d:c5:85:
d5:40:f3:c5:53:7a:78:b0:a0:73:28:38:df:94:71:
12:4a:3f:7e:b9:55:03:0e:7b:e9:b4:b7:1b:76:b1:
f9:f4:f3:42:62:6b:c0:0a:c8:26:f7:3d:29:20:a2:
76:fa:fc:28:79:20:dc:4e:0d:8e:ee:f0:d7:78:96:
1e:fe:d2:a6:07:26:c0:40:cb:83:c8:3f:8c:b8:14:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:6D:20:E2:6E:11:40:76:90:67:F7:17:51:AA:57:39:5C:B7:4F
X509v3 Authority Key Identifier:
keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/323830313a3163303a3a2f33392d3430203d3e203532343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c0::/39
Signature Algorithm: sha256WithRSAEncryption
49:00:f8:18:7a:ee:6f:87:39:8a:80:9d:45:90:9c:3e:de:a7:
7c:a6:80:7b:1f:99:55:1b:54:66:42:73:f1:91:96:14:4a:fa:
a5:ce:9c:77:3b:3c:8d:ee:fb:8f:cd:f5:f4:7b:09:f1:2c:e8:
fb:94:79:49:90:c5:89:ab:f3:e0:5d:42:20:5d:9e:a9:75:77:
f7:22:74:b6:25:cb:a8:34:a1:24:8e:8a:67:4b:20:59:82:1c:
eb:75:be:ec:6f:a5:c2:3d:32:68:ad:a2:02:63:06:21:57:9e:
8f:b7:f7:61:90:61:f2:68:c6:ea:a8:a2:e7:82:a4:52:ee:a0:
11:1b:c9:ad:fa:06:0f:2a:25:5d:5f:d9:d1:14:69:cc:3a:3c:
a2:f8:34:28:5d:10:d8:a3:55:a4:4e:c0:9b:38:3e:4b:39:9e:
98:9e:2d:0f:0d:89:bc:c8:42:a5:75:33:70:68:69:ba:b8:95:
c0:97:17:8e:74:88:3f:91:84:3d:59:c1:9b:e2:e2:bd:9b:22:
38:3f:93:4a:f7:1b:64:1c:1e:4d:f4:b2:4f:d3:f8:e4:fa:da:
05:22:a2:41:70:27:68:2d:fe:3c:85:7e:c5:88:42:8d:65:4c:
21:7c:6d:81:90:c7:6e:3c:20:b9:a8:83:21:44:e7:fe:18:af:
9e:ba:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:54 2025 by rpki-client