
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137342e302f32332d3234203d3e203238343335.roa
File: 34352e3137342e3137342e302f32332d3234203d3e203238343335.roa (raw, json)
Hash identifier: GCk7Y3zwnSpl1jg9vGpVlxGF/2jcUM5Qdh8VmhzlZFM=
Subject key identifier: 5B:03:18:3B:5D:B8:3B:8B:2F:BD:00:F0:2F:58:28:70:9B:3B:E2:8B
Certificate issuer: /CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Certificate serial: 1F72995766BE6A9961175B8BBDCBD3FC2A56FFCC
Authority key identifier: FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137342e302f32332d3234203d3e203238343335.roa
Signing time: Mon 03 Nov 2025 18:15:00 +0000
ROA not before: Mon 03 Nov 2025 18:10:00 +0000
ROA not after: Mon 02 Nov 2026 18:15:00 +0000
asID: 28435
IP address blocks: 45.174.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl
rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:72:99:57:66:be:6a:99:61:17:5b:8b:bd:cb:d3:fc:2a:56:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Validity
Not Before: Nov 3 18:10:00 2025 GMT
Not After : Nov 2 18:15:00 2026 GMT
Subject: CN=5B03183B5DB83B8B2FBD00F02F5828709B3BE28B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:fd:31:a5:68:98:30:90:b4:81:b3:7f:71:
cf:f2:85:2c:0b:62:83:4a:3a:86:c0:f4:9d:f8:a9:
85:84:94:55:d2:75:6c:94:2f:cc:29:d2:fd:55:e6:
09:f1:da:5d:40:ff:49:c3:d0:c2:67:50:b8:b6:a9:
e0:89:73:22:30:b4:ed:fa:b5:10:5b:50:0a:fa:c3:
89:0e:5c:2f:ad:37:b4:92:3b:3a:69:42:a2:76:a7:
ed:4b:d7:bb:c4:47:22:82:d8:c7:2c:8a:79:58:67:
38:d1:28:dd:06:09:2d:5e:44:d0:fd:93:7a:98:76:
2b:20:e7:9f:f1:f3:12:92:43:fc:f1:c8:b8:bd:fc:
bc:1f:03:9a:d3:cb:25:d3:c6:61:fd:14:5d:4f:47:
b0:f1:40:83:90:ea:16:ef:e5:1b:ed:3e:4d:61:c2:
eb:e5:b0:0e:cd:b2:9b:bc:bd:2c:2e:62:c7:c4:5d:
e7:ef:ce:a8:c2:92:e9:90:69:88:a8:26:de:86:46:
01:85:1f:7f:9d:4b:5b:f0:85:cd:e1:6a:03:b6:82:
29:42:4f:b4:33:2a:8a:9d:5a:ef:6b:51:8e:f6:53:
26:74:dd:91:8c:fc:2e:2c:12:a1:1d:0f:2c:df:f8:
7b:24:86:99:d8:e4:a1:bf:6b:3a:1a:e6:66:3b:09:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:03:18:3B:5D:B8:3B:8B:2F:BD:00:F0:2F:58:28:70:9B:3B:E2:8B
X509v3 Authority Key Identifier:
keyid:FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137342e302f32332d3234203d3e203238343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.174.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ee:21:bb:9c:46:a2:b6:41:73:dd:ee:b0:1b:c8:50:98:a6:
06:04:5c:bc:71:6a:a8:e6:83:04:03:fe:d6:b4:93:1f:fc:84:
02:33:31:f1:73:81:90:cf:68:e3:27:27:7b:d2:24:b0:e5:ee:
f4:18:fc:6b:b6:90:09:6e:9d:fd:30:97:13:12:ef:d7:6d:5b:
17:10:cd:f4:8b:3f:7a:c2:95:9a:9e:9b:0f:27:3b:6d:8a:d9:
fc:fa:7b:56:0f:b2:89:6d:79:7a:15:20:81:b3:e2:b6:90:46:
0d:e3:46:4e:81:a4:ff:c8:9c:c5:4c:44:e5:a3:e2:a7:aa:ec:
2f:86:44:b8:1a:3a:78:a7:4f:24:7e:cf:e6:e4:d3:b1:80:fb:
9c:b0:b6:68:d4:26:94:d3:bb:95:2c:f7:76:aa:d1:bf:66:b6:
76:ad:4e:68:38:af:db:77:b3:fe:27:8d:a4:5c:7a:56:a0:ea:
6f:f0:0e:5c:33:a5:1a:48:f4:6f:90:00:ad:64:0a:ab:1d:9a:
5a:6e:3e:c2:86:5e:81:b0:e0:e7:e7:a6:7b:28:66:30:a2:dc:
e8:6c:ce:d8:c3:50:17:12:2e:b7:d0:b3:3b:b8:75:4a:54:4c:
5a:d6:7f:e0:ac:7b:a0:d8:0a:7f:34:b8:6a:d5:97:72:a4:24:
cf:5b:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:15:43 2025 by rpki-client