
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e382e302f32332d3234203d3e203131313732.roa
File: 3230312e3133392e382e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier: vvBQVp8SPghF3Ljh3D9JX1hQezmh27lWRSCTRFS/TJo=
Subject key identifier: 0C:57:3E:9F:46:B3:61:1C:B4:B4:E2:66:8C:5A:53:A8:4D:C7:D3:57
Certificate issuer: /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial: 5D64E2CBD6DEF5146FE48777F338F25FE60C9F82
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e382e302f32332d3234203d3e203131313732.roa
Signing time: Tue 03 Jun 2025 21:05:02 +0000
ROA not before: Tue 03 Jun 2025 21:00:02 +0000
ROA not after: Tue 02 Jun 2026 21:05:02 +0000
asID: 11172
IP address blocks: 201.139.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 23:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:64:e2:cb:d6:de:f5:14:6f:e4:87:77:f3:38:f2:5f:e6:0c:9f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Validity
Not Before: Jun 3 21:00:02 2025 GMT
Not After : Jun 2 21:05:02 2026 GMT
Subject: CN=0C573E9F46B3611CB4B4E2668C5A53A84DC7D357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:c0:c0:16:fc:cb:f2:f1:59:c1:e9:a1:4d:
87:65:85:1a:bd:83:46:f4:fa:af:95:a2:e1:75:3b:
48:ff:ff:83:a0:a4:9e:01:70:f1:20:71:d0:c3:05:
c6:35:9c:2c:b8:df:a8:4f:46:5a:a0:60:e3:7c:08:
16:a9:26:c5:aa:42:b4:7a:6f:69:a1:9c:6e:c1:d4:
85:99:bf:6e:c4:3e:b8:ec:ab:99:b4:a0:59:98:24:
4e:a3:59:fa:e0:bf:b8:da:80:1d:f5:7b:38:f3:d3:
f8:e1:1f:d4:c6:de:69:c8:a6:3c:b1:bf:4d:c6:7c:
15:24:76:84:2a:b6:03:51:79:c3:95:1a:fb:fb:27:
ec:67:5d:c5:6d:c8:b8:dd:5c:72:06:04:55:a0:94:
1e:05:ff:40:7e:3d:e8:6f:c1:0c:11:d8:94:76:e1:
21:f5:94:61:07:14:58:c4:05:cd:7a:57:6f:5b:46:
f4:eb:26:ba:09:36:e6:32:be:5b:83:3d:91:95:a3:
9b:2f:e6:91:fb:74:b8:f5:c2:04:04:74:b2:97:b3:
ad:2b:a8:76:c5:8a:f4:f4:a9:68:f2:9c:43:d7:76:
ca:ad:3a:f5:9a:15:b0:f1:e0:a8:e7:6b:b3:04:df:
be:46:e5:92:91:f7:da:9c:df:9a:f5:32:31:a8:19:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:3E:9F:46:B3:61:1C:B4:B4:E2:66:8C:5A:53:A8:4D:C7:D3:57
X509v3 Authority Key Identifier:
keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e382e302f32332d3234203d3e203131313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.139.8.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e0:a2:67:e5:2d:de:9f:8b:2b:7c:93:c9:ef:4b:91:67:58:
89:fb:f5:7e:7e:d2:1b:f5:b9:9f:33:b3:20:11:05:fe:8f:c0:
7e:1c:b9:d0:40:5a:c2:4d:11:33:b7:a5:49:60:47:56:58:60:
35:70:dc:da:8e:f9:e0:f0:27:2a:ae:ff:f5:9b:6f:55:03:35:
2b:ed:c7:ea:51:eb:d6:a4:7a:a9:1b:c6:9f:2e:c4:1a:3f:43:
60:bd:77:db:12:7c:79:64:87:fc:b9:f5:6e:d3:e0:5f:87:ca:
ff:d0:52:38:9b:38:d5:1d:3d:38:b4:4f:25:61:67:03:80:fc:
35:94:ff:5d:85:ca:54:82:63:e8:53:5f:3c:02:4c:ba:41:4c:
1f:64:c1:38:95:be:3e:85:21:f5:c5:b5:32:fd:e6:7e:99:fb:
0d:57:c4:04:85:7a:04:6b:5a:f5:80:58:28:f3:c9:49:36:c5:
ed:68:89:92:ac:2e:b4:90:02:de:9c:0a:e6:a6:d9:90:1f:c8:
c1:f3:4d:76:0d:e0:49:18:8d:c2:1d:47:40:a2:fd:19:2b:58:
6d:bf:67:82:fc:86:ec:9d:fb:86:64:bb:13:06:65:54:35:09:
96:0b:b6:f6:66:72:a2:2a:ce:50:b3:99:5f:4e:0b:64:3c:56:
16:b5:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:49:58 2025 by rpki-client