
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
File: 3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier: kKUBwkJ+BWPujWt865GWLwzL+bWkWpX0RyQPTZAHCCM=
Subject key identifier: F9:45:AD:67:2F:40:9F:BA:C9:37:90:94:70:8F:45:05:61:BD:88:EB
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 5B6E17F3390757A6F29BCBADBCE0F85A9B33D4E6
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
Signing time: Tue 04 Feb 2025 18:06:42 +0000
ROA not before: Tue 04 Feb 2025 18:01:42 +0000
ROA not after: Tue 03 Feb 2026 18:06:42 +0000
asID: 18734
IP address blocks: 189.204.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6e:17:f3:39:07:57:a6:f2:9b:cb:ad:bc:e0:f8:5a:9b:33:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Feb 4 18:01:42 2025 GMT
Not After : Feb 3 18:06:42 2026 GMT
Subject: CN=F945AD672F409FBAC9379094708F450561BD88EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:10:c3:55:c0:2e:b8:6d:a4:39:67:6b:19:
81:7e:92:28:04:87:8a:f3:c6:58:a2:e0:59:b9:2a:
87:a8:ff:57:06:aa:df:0d:71:81:c2:8d:f7:dd:07:
69:93:a3:1a:a0:48:17:7f:f0:c3:8f:54:b7:a2:49:
2f:1c:49:6e:1e:d0:ef:81:44:ad:63:5e:fa:20:be:
73:c4:18:38:fe:36:7a:65:ac:e9:1c:f1:07:21:c0:
cf:af:98:28:2b:25:cc:8a:57:6b:13:32:ce:59:ae:
9f:77:5c:4e:05:4d:3f:21:e6:dc:58:65:14:3c:c9:
fb:0f:62:47:7a:a3:f5:bf:4b:88:5d:5d:63:ea:42:
7f:72:18:4f:72:64:ac:cb:0d:95:74:34:d2:a0:5a:
d0:e4:52:a7:59:66:8f:e4:b0:93:94:1b:02:54:f0:
30:3c:24:f7:32:4a:43:94:d8:da:83:b9:ed:1a:27:
7c:7e:6b:bd:7e:32:5b:7b:85:b6:0c:a4:86:eb:71:
8e:6e:29:06:ef:72:54:60:84:03:a7:c5:c3:33:be:
7d:ae:3f:0b:09:05:4c:14:34:ee:b1:64:fd:30:c3:
74:42:d1:ad:67:c9:99:c7:7c:52:44:15:f8:13:ab:
31:bf:cf:6e:4b:a7:1e:d3:c6:94:4a:f8:b2:47:3a:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:AD:67:2F:40:9F:BA:C9:37:90:94:70:8F:45:05:61:BD:88:EB
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.204.128.0/17
Signature Algorithm: sha256WithRSAEncryption
88:c1:11:6e:08:c8:a5:a7:63:15:4c:cb:13:89:7e:78:f4:58:
1f:62:21:6f:30:d5:5d:2e:42:25:19:6e:74:88:b1:cc:46:7e:
6d:65:05:86:d6:b9:ce:7d:00:c1:71:8f:fb:19:64:33:dc:fb:
3c:d4:11:f8:1f:58:67:8e:01:49:8c:5d:28:19:e1:9a:e3:8c:
cb:f1:94:78:c6:a3:6d:63:fa:70:96:36:da:66:a9:76:d1:58:
b7:7a:57:24:de:9e:47:a0:c9:20:8e:ec:f3:7c:b4:0f:ab:9d:
37:97:75:f8:63:1a:6e:ea:fa:f5:75:78:28:27:5a:01:2c:4c:
81:ba:af:fe:53:c0:91:b0:f3:73:23:56:c5:58:e7:a0:d5:a1:
7b:6e:1e:ab:11:9b:fb:57:c9:7c:16:ce:5b:6e:2c:7c:15:44:
4f:cf:a1:78:f6:f5:10:89:98:c6:89:5b:18:bf:6d:d7:58:bd:
63:32:d2:e4:02:53:1e:20:b2:30:b3:ac:59:a6:34:59:90:dd:
b8:35:52:84:dc:88:2a:4f:dd:bc:56:aa:5a:fc:00:a4:e9:7f:
55:f1:44:fa:ac:64:c2:38:d8:03:25:9f:50:81:e7:fd:83:4b:
c8:5d:36:81:60:9b:2b:17:5c:13:d1:f5:70:ca:86:a3:74:71:
f5:55:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:46 2025 by rpki-client