
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
File: 323830333a316336303a3a2f33322d3438203d3e203532333033.roa (raw, json)
Hash identifier: 4BA87Puz4yVT1raOjrqA/7UzVeVQT3ijw1coriN/sMY=
Subject key identifier: 53:03:17:02:8F:73:C9:5F:D1:C9:AC:74:2A:77:C4:E9:FD:52:1E:AD
Certificate issuer: /CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7
Certificate serial: 61FDCA82CE3944B068CF0A76CDBC5229857E4616
Authority key identifier: 9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
Signing time: Tue 04 Feb 2025 20:01:26 +0000
ROA not before: Tue 04 Feb 2025 19:56:26 +0000
ROA not after: Tue 03 Feb 2026 20:01:26 +0000
asID: 52303
IP address blocks: 2803:1c60::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.crl
rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:fd:ca:82:ce:39:44:b0:68:cf:0a:76:cd:bc:52:29:85:7e:46:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7
Validity
Not Before: Feb 4 19:56:26 2025 GMT
Not After : Feb 3 20:01:26 2026 GMT
Subject: CN=530317028F73C95FD1C9AC742A77C4E9FD521EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:e1:6c:ba:0f:f0:a2:9e:4e:15:25:2d:48:
d0:6d:6b:91:fa:7e:68:1e:94:85:dc:9e:bd:1c:8f:
f8:37:c0:72:0d:dd:16:8b:72:2e:8c:bb:55:c3:ad:
90:46:24:e6:07:c1:47:31:d7:06:f7:f3:cd:a4:93:
88:f8:2a:4b:d4:6e:5e:54:95:a5:f6:6e:93:de:b0:
2b:75:cb:7b:a4:4f:b7:95:b5:ef:ab:e8:42:20:05:
04:66:14:7b:76:af:fd:a0:c0:c3:7a:52:8f:b0:7b:
d1:f7:7b:50:50:db:c1:44:64:99:55:2c:97:ff:93:
ad:fa:2d:13:fd:c4:d6:d8:f4:72:c1:9a:54:b6:36:
1e:ae:68:4d:87:dd:90:5f:9c:55:19:1e:dc:dc:9a:
16:e6:54:99:f9:10:fa:78:2f:6b:55:fc:a6:5d:7b:
d3:89:e4:10:7f:61:00:96:eb:93:1d:f6:c8:4b:03:
09:28:da:5f:d0:1e:ae:c8:6a:77:14:a1:f1:b9:4c:
a0:36:52:a8:6b:81:16:c4:80:b5:41:14:45:5e:e1:
1f:06:01:93:cb:af:d4:88:e6:3d:92:ba:bb:f7:35:
4a:f5:5b:fd:ae:18:06:65:cc:9d:f7:40:d0:fd:4d:
70:1e:6b:94:2c:df:47:98:55:5a:1e:b7:f7:e1:e2:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:17:02:8F:73:C9:5F:D1:C9:AC:74:2A:77:C4:E9:FD:52:1E:AD
X509v3 Authority Key Identifier:
keyid:9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/323830333a316336303a3a2f33322d3438203d3e203532333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1c60::/32
Signature Algorithm: sha256WithRSAEncryption
52:10:d7:db:20:d6:8e:6f:52:57:c6:7f:9e:39:f1:17:b1:86:
55:b4:5b:23:20:19:a1:56:b5:a6:13:c4:af:99:01:bf:08:14:
00:9c:2f:0e:c4:e3:1b:0a:80:31:6f:21:d0:6b:06:43:f2:e7:
a7:bd:73:94:c6:f3:53:47:fb:74:7e:75:58:c4:95:c3:31:55:
fb:9b:20:42:49:2d:13:c1:57:3a:29:2d:42:15:3c:25:57:23:
d5:ff:8a:9a:df:a6:33:54:04:d4:2b:ae:ac:4a:f8:ae:68:68:
bf:f6:36:cb:2d:b1:97:f7:22:07:b6:69:8c:c7:a1:a7:04:c4:
dd:48:67:b2:37:e6:3b:e5:5f:b0:2c:38:7e:6f:a7:2b:60:88:
eb:ab:98:28:6d:b0:98:e3:c0:c2:05:ca:53:b3:7f:60:c2:ef:
9b:e9:c8:66:78:5b:4e:36:ec:71:69:02:22:4b:a1:d7:84:11:
71:26:40:ad:b7:d0:05:b1:d5:ef:54:05:96:10:3e:e1:0d:5f:
3f:b5:9d:7b:af:03:93:b0:87:6e:49:82:aa:3d:0d:8e:4b:47:
01:93:76:b9:73:8f:f3:ac:40:10:97:b0:95:7c:e4:e4:01:64:
7f:11:31:d8:59:4a:f2:b6:a7:b7:e6:be:45:19:a0:d1:a1:0d:
e6:a1:f4:75
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYf3Kgs45RLBozwp2zbxSKYV+RhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0OEM3QzM3RUEzNDE2RjBFMjI2MzkwMUQ1NjgzODM1
RjRGRDVDNzAeFw0yNTAyMDQxOTU2MjZaFw0yNjAyMDMyMDAxMjZaMDMxMTAvBgNV
BAMTKDUzMDMxNzAyOEY3M0M5NUZEMUM5QUM3NDJBNzdDNEU5RkQ1MjFFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYeFsug/wop5OFSUtSNBta5H6
fmgelIXcnr0cj/g3wHIN3RaLci6Mu1XDrZBGJOYHwUcx1wb3882kk4j4KkvUbl5U
laX2bpPesCt1y3ukT7eVte+r6EIgBQRmFHt2r/2gwMN6Uo+we9H3e1BQ28FEZJlV
LJf/k636LRP9xNbY9HLBmlS2Nh6uaE2H3ZBfnFUZHtzcmhbmVJn5EPp4L2tV/KZd
e9OJ5BB/YQCW65Md9shLAwko2l/QHq7IancUofG5TKA2UqhrgRbEgLVBFEVe4R8G
AZPLr9SI5j2Surv3NUr1W/2uGAZlzJ33QND9TXAea5Qs30eYVVoet/fh4nORAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUUwMXAo9zyV/Ryax0KnfE6f1SHq0wHwYDVR0j
BBgwFoAUm0jHw36jQW8OImOQHVaDg19P1ccwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MkUzMTY3MEM3QjVBQTJCODBFQjQ4QkRBREU4REJDMzlG
ODIyN0ExRUFCM0JCMkNDNjM4QUEwQzI1MjlCOUI4LzAvOUI0OEM3QzM3RUEzNDE2
RjBFMjI2MzkwMUQ1NjgzODM1RjRGRDVDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QjQ4QzdDMzdFQTM0MTZGMEUy
MjYzOTAxRDU2ODM4MzVGNEZENUM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDJFMzE2NzBDN0I1QUEyQjgwRUI0OEJEQURFOERCQzM5RjgyMjdBMUVB
QjNCQjJDQzYzOEFBMEMyNTI5QjlCOC8wLzMyMzgzMDMzM2EzMTYzMzYzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAxxgMA0G
CSqGSIb3DQEBCwUAA4IBAQBSENfbINaOb1JXxn+eOfEXsYZVtFsjIBmhVrWmE8Sv
mQG/CBQAnC8OxOMbCoAxbyHQawZD8uenvXOUxvNTR/t0fnVYxJXDMVX7myBCSS0T
wVc6KS1CFTwlVyPV/4qa36YzVATUK66sSviuaGi/9jbLLbGX9yIHtmmMx6GnBMTd
SGeyN+Y75V+wLDh+b6crYIjrq5gobbCY48DCBcpTs39gwu+b6chmeFtONuxxaQIi
S6HXhBFxJkCtt9AFsdXvVAWWED7hDV8/tZ17rwOTsIduSYKqPQ2OS0cBk3a5c4/z
rEAQl7CVfOTkAWR/ETHYWUrytqe35r5FGaDRoQ3mofR1
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:53:22 2025 by rpki-client