
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
File: 323830363a3363663a3a2f33322d3634203d3e20323730313236.roa (raw, json)
Hash identifier: E5/epUa2QTAYln9qflIrpppLxCTmZZoppkK63bdKVlQ=
Subject key identifier: F2:2E:FA:10:75:23:03:E0:0B:A6:73:62:27:EA:29:D6:E0:4C:DE:58
Certificate issuer: /CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
Certificate serial: 37E1E79F5C216C0812BD10B6AD44F020A8CAC190
Authority key identifier: 24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
Signing time: Tue 04 Feb 2025 18:03:42 +0000
ROA not before: Tue 04 Feb 2025 17:58:42 +0000
ROA not after: Tue 03 Feb 2026 18:03:42 +0000
asID: 270126
IP address blocks: 2806:3cf::/32 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl
rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 20:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e1:e7:9f:5c:21:6c:08:12:bd:10:b6:ad:44:f0:20:a8:ca:c1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
Validity
Not Before: Feb 4 17:58:42 2025 GMT
Not After : Feb 3 18:03:42 2026 GMT
Subject: CN=F22EFA10752303E00BA6736227EA29D6E04CDE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:b0:fe:82:14:8d:a3:94:36:d2:9a:c1:75:
5e:33:4b:31:02:e2:5c:2a:3a:4f:12:a2:1a:f0:dc:
7a:75:93:61:9e:cc:dc:f1:05:0f:d3:d2:6b:48:5f:
ee:6a:0f:30:a3:de:d9:5d:17:c7:ad:94:13:33:45:
3c:57:73:32:02:e0:4f:e1:06:ca:85:2a:b2:d1:c7:
db:44:ee:74:72:72:3b:ac:d5:12:b2:ee:55:47:16:
90:26:7f:86:43:a6:0a:bf:e2:96:3e:62:42:7c:4b:
4d:59:ff:77:4a:70:be:d5:fd:89:88:c7:b7:ae:4c:
e7:3e:de:82:cf:e9:71:48:74:55:40:5a:cd:f7:82:
fc:64:26:61:20:5e:29:3a:1b:9d:c0:cf:12:7a:49:
00:95:af:84:62:e7:24:3c:94:81:fd:24:7b:d0:d0:
33:da:92:a6:72:e8:6c:34:30:64:6d:5c:79:d5:a1:
af:23:ce:3d:04:30:e8:45:20:99:9a:c8:86:ea:f8:
1d:19:09:ca:ac:f8:fc:55:12:a2:fd:d2:44:29:b2:
bf:e3:1a:86:04:3a:23:f7:d9:f1:18:be:0f:90:c5:
2c:0c:61:b0:fb:12:b7:cd:2d:38:1f:26:c5:fb:28:
7e:6e:2e:07:dc:13:b7:4c:0c:bd:37:13:45:a2:8c:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:FA:10:75:23:03:E0:0B:A6:73:62:27:EA:29:D6:E0:4C:DE:58
X509v3 Authority Key Identifier:
keyid:24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/323830363a3363663a3a2f33322d3634203d3e20323730313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3cf::/32
Signature Algorithm: sha256WithRSAEncryption
4d:53:f2:67:5b:94:57:ee:06:92:40:ea:1d:25:8b:01:11:42:
8f:fe:81:dd:d8:3a:4b:1d:71:af:55:b2:84:59:9c:28:95:61:
04:a0:f2:7f:79:f4:97:0e:3a:c7:22:aa:cf:0b:03:47:a7:da:
63:fe:e4:2c:f2:c7:ff:e5:d8:4f:84:63:fb:75:4d:13:ee:ad:
ff:7f:7b:f6:1c:4e:42:f0:b6:c2:f8:d7:11:1d:f9:8a:a2:52:
30:c1:0a:05:1e:62:d9:01:70:c5:75:fa:79:e1:cd:a9:9d:59:
6e:09:94:6f:09:9c:b5:7f:10:a5:72:a2:f9:f6:51:3d:f9:2c:
dc:30:11:e2:32:07:68:48:0f:70:fe:68:27:db:0a:9f:b2:f0:
ae:43:7e:55:01:0b:b1:46:0b:a9:ec:13:1b:7a:25:78:65:17:
7a:c2:6b:ea:a3:68:5b:e7:93:06:aa:e7:fa:51:ee:3b:70:24:
29:7b:60:a4:e7:a9:1d:d3:67:45:af:ce:01:d8:8a:4c:c9:82:
31:1d:79:92:d4:13:25:74:75:02:5a:ab:5e:49:25:5f:09:f4:
99:91:bb:aa:b8:53:c2:ce:d0:89:65:f6:05:6d:96:5a:ff:ce:
2c:7f:f1:ac:6a:97:49:3d:1e:8e:a5:da:4f:28:17:0a:97:9f:
5f:2b:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:10:02 2025 by rpki-client