
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3234203d3e203336343534.roa
File: 3139302e382e3137362e302f32322d3234203d3e203336343534.roa (raw, json)
Hash identifier: dt9vy/6Dk0cotHocklt24/PtvbvoPUWM/O1eCtF+zH4=
Subject key identifier: 38:40:43:54:E8:93:59:9A:F7:1C:0B:DA:B8:4A:DA:C8:70:36:75:49
Certificate issuer: /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial: 360B6019911F7D2B4FE57E06EA67239A44E99CEB
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3234203d3e203336343534.roa
Signing time: Tue 04 Nov 2025 17:35:00 +0000
ROA not before: Tue 04 Nov 2025 17:30:00 +0000
ROA not after: Tue 03 Nov 2026 17:35:00 +0000
asID: 36454
IP address blocks: 190.8.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0b:60:19:91:1f:7d:2b:4f:e5:7e:06:ea:67:23:9a:44:e9:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Validity
Not Before: Nov 4 17:30:00 2025 GMT
Not After : Nov 3 17:35:00 2026 GMT
Subject: CN=38404354E893599AF71C0BDAB84ADAC870367549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:44:9b:52:0c:c9:c9:fc:00:af:1a:17:a6:
d3:42:2f:e4:8e:ec:ab:d4:96:02:cb:cd:fe:4e:43:
47:64:35:38:82:df:20:f4:ce:a1:52:6f:99:d3:5a:
27:2f:f6:26:42:36:84:fe:2b:ef:7f:f6:09:c8:cd:
49:af:61:2c:74:61:c3:30:8b:ca:2e:db:ec:bb:c3:
a4:0f:e7:e3:df:f0:54:45:b0:14:89:93:8a:65:25:
fd:49:9f:2f:08:72:0a:67:19:8b:04:4e:2a:15:c8:
7c:96:27:e9:ce:a3:c3:1a:1c:eb:c0:64:6c:9a:65:
0d:53:ea:e1:6b:60:87:0c:22:8c:52:51:d1:f6:a9:
a0:e7:cb:b4:c9:90:47:8d:2d:18:18:48:20:2c:e9:
d8:0f:ec:2f:c3:fd:eb:45:06:0e:07:92:e6:07:67:
93:80:52:ff:9e:97:ff:dc:9e:79:f2:cd:8f:d9:4f:
b0:61:c3:f9:ae:96:c6:86:bf:e6:a7:4f:97:87:63:
d1:89:63:65:66:e7:f8:cb:42:d1:a3:f4:ef:84:fb:
ff:6c:12:01:1d:a6:9d:3f:34:8a:64:89:69:52:61:
b5:58:d4:94:51:ee:b9:20:38:80:c8:e5:1b:b8:17:
1b:f3:5d:e9:3b:4f:fd:61:d6:81:05:bf:56:0b:c5:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:43:54:E8:93:59:9A:F7:1C:0B:DA:B8:4A:DA:C8:70:36:75:49
X509v3 Authority Key Identifier:
keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3234203d3e203336343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.8.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:08:ef:56:e3:02:b8:b5:15:d3:16:5b:22:a9:5d:b2:b9:be:
d4:da:f7:fc:eb:92:86:d5:67:92:95:c4:95:cd:84:a3:8c:f6:
30:3e:0f:2b:c6:aa:ae:2b:5b:e4:b5:63:17:b4:23:f9:a5:22:
0a:d7:f9:fa:7a:64:31:6f:9a:d4:64:0a:7e:0a:24:10:a0:13:
66:f3:ed:cd:c3:1c:af:54:b7:1f:d5:35:eb:5c:65:a5:00:2e:
a7:ea:e6:e6:b9:df:48:1e:00:70:0a:78:d6:ee:72:06:5f:74:
ae:28:93:c3:4f:94:23:78:8b:5f:42:f8:c9:c7:a2:c2:b2:4b:
af:df:20:58:05:f2:06:ad:3f:59:0b:32:71:91:80:ca:8a:55:
49:54:bd:54:ba:69:91:95:2d:32:d7:8d:4b:47:f8:ba:3a:ed:
60:25:fe:7f:b5:fe:60:ca:48:dd:ba:ff:6a:5f:43:83:e9:57:
6f:c3:11:77:32:58:17:a0:e4:91:c5:4a:6f:06:b8:1c:1f:53:
7b:c7:ab:12:96:64:5a:96:7e:51:f8:1e:ac:59:d3:e0:4c:96:
d8:7e:a4:09:26:22:ef:7c:75:14:b8:a5:7b:21:04:2b:4e:45:
d5:1e:9b:a7:94:9d:cd:b7:a5:64:8c:04:1b:53:19:e4:24:f9:
5a:f9:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:32:04 2025 by rpki-client