
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
File: 323830333a323263303a3a2f33322d3332203d3e20323634383337.roa (raw, json)
Hash identifier: FivkCR/URb1DB7x+IFZPaqoaXxAUPC7cmu/guUrzhns=
Subject key identifier: C9:DE:16:EE:21:4F:CC:9C:65:F8:61:40:14:2C:35:49:CD:4F:F7:BE
Certificate issuer: /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial: 5F514BA4C97DFE2F54291B532210A3F9B36C1A30
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
Signing time: Tue 04 Feb 2025 18:21:27 +0000
ROA not before: Tue 04 Feb 2025 18:16:27 +0000
ROA not after: Tue 03 Feb 2026 18:21:27 +0000
asID: 264837
IP address blocks: 2803:22c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:51:4b:a4:c9:7d:fe:2f:54:29:1b:53:22:10:a3:f9:b3:6c:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Validity
Not Before: Feb 4 18:16:27 2025 GMT
Not After : Feb 3 18:21:27 2026 GMT
Subject: CN=C9DE16EE214FCC9C65F86140142C3549CD4FF7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:78:75:71:87:59:ef:c5:8e:4d:fb:1d:d7:
3e:55:8b:9f:7c:b3:69:15:56:65:16:6d:d6:a6:72:
54:8e:aa:96:1a:67:91:b4:b7:d4:6a:9f:43:f5:23:
29:42:ca:45:ba:4d:9e:c4:75:a6:9b:67:16:02:7c:
23:ba:d6:d6:64:57:c3:8d:a1:9e:49:80:b0:32:1c:
9d:23:fb:2f:7d:d8:19:46:08:85:c0:2a:ef:f9:29:
b1:98:b4:f7:2d:db:c4:4c:1f:20:f5:9a:3f:c0:e8:
60:81:3f:f6:d0:e3:c9:0a:50:96:05:91:0e:01:ce:
34:16:95:48:05:17:ea:3c:d8:66:51:26:b2:a1:a1:
23:12:fd:d4:bf:a0:98:99:58:4a:51:65:74:3b:1f:
4d:53:90:1c:60:e8:8a:85:08:35:11:56:0f:7c:8f:
fd:39:fd:25:b0:2e:5c:cb:32:dd:d0:14:ef:a2:83:
56:5d:5e:28:8c:25:24:8f:37:e0:e3:ef:b0:dd:aa:
ff:ec:19:f8:99:81:e0:3e:58:e1:76:cf:2c:92:fa:
d5:5b:ac:0e:2d:39:67:90:93:be:38:91:0a:a7:c3:
62:e6:ec:ab:0d:84:34:9a:a1:9c:81:68:09:e1:7c:
34:db:75:44:dc:04:79:a0:a1:a2:34:00:07:9c:29:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:16:EE:21:4F:CC:9C:65:F8:61:40:14:2C:35:49:CD:4F:F7:BE
X509v3 Authority Key Identifier:
keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/323830333a323263303a3a2f33322d3332203d3e20323634383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
13:a4:d6:2d:25:8f:23:17:3b:81:a9:6f:99:8c:bd:a8:4e:cf:
af:1d:80:57:7c:fb:68:4d:8a:cb:ef:28:d4:ea:fa:2b:c5:5f:
20:72:3d:6f:a6:a3:0a:c3:79:ff:42:3a:56:b2:79:e0:3e:03:
60:b0:4f:65:bd:67:92:cf:56:43:da:9f:c7:83:b5:08:ec:ea:
37:3e:b4:77:a3:93:d3:f6:fe:27:ae:67:d8:8e:6b:41:fb:5e:
99:09:6c:7e:46:ed:04:01:08:cb:0f:18:4a:80:1c:60:7a:6b:
de:0a:94:3b:93:2f:18:3e:d7:16:ea:ab:1e:dd:3d:4a:89:c4:
1b:48:2f:33:e2:64:56:6e:09:e6:da:f2:2e:fd:48:e1:89:e4:
c4:d9:d9:aa:e1:8b:57:b2:f4:3a:c1:20:14:14:14:17:36:43:
07:4f:75:08:34:9d:87:de:f3:8d:d5:9b:1e:d3:df:3b:d6:bf:
82:35:2b:11:34:be:7d:02:93:65:37:40:0b:69:ed:be:63:27:
63:fc:2c:ab:6a:de:5d:35:32:1e:51:67:9e:bb:fc:2c:94:b4:
3b:ce:de:09:34:8f:40:25:0a:3a:d7:fc:cd:48:3a:e2:84:37:
4f:94:a1:79:3b:2f:f9:90:e0:d7:d7:ee:81:51:f6:41:e6:2c:
d9:46:1f:10
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUX1FLpMl9/i9UKRtTIhCj+bNsGjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxQUY1NEM0NkYyOUIxN0U3NThFOUY5NDYzRENGOTY1
MEM3MUE4RjAeFw0yNTAyMDQxODE2MjdaFw0yNjAyMDMxODIxMjdaMDMxMTAvBgNV
BAMTKEM5REUxNkVFMjE0RkNDOUM2NUY4NjE0MDE0MkMzNTQ5Q0Q0RkY3QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvHh1cYdZ78WOTfsd1z5Vi598
s2kVVmUWbdamclSOqpYaZ5G0t9Rqn0P1IylCykW6TZ7EdaabZxYCfCO61tZkV8ON
oZ5JgLAyHJ0j+y992BlGCIXAKu/5KbGYtPct28RMHyD1mj/A6GCBP/bQ48kKUJYF
kQ4BzjQWlUgFF+o82GZRJrKhoSMS/dS/oJiZWEpRZXQ7H01TkBxg6IqFCDURVg98
j/05/SWwLlzLMt3QFO+ig1ZdXiiMJSSPN+Dj77Ddqv/sGfiZgeA+WOF2zyyS+tVb
rA4tOWeQk744kQqnw2Lm7KsNhDSaoZyBaAnhfDTbdUTcBHmgoaI0AAecKdsRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUyd4W7iFPzJxl+GFAFCw1Sc1P974wHwYDVR0j
BBgwFoAUTxr1TEbymxfnWOn5Rj3PllDHGo8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjM2MzhDOERGNjkzMDAyRUI4QzA1MUE3NzhGQ0ZFMkNF
NzU3QjczNUUxQ0ZBNjY4QjNGNjAxRTdDRjYxN0Q3LzAvNEYxQUY1NEM0NkYyOUIx
N0U3NThFOUY5NDYzRENGOTY1MEM3MUE4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjFBRjU0QzQ2RjI5QjE3RTc1
OEU5Rjk0NjNEQ0Y5NjUwQzcxQThGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYzNjM4QzhERjY5MzAwMkVCOEMwNTFBNzc4RkNGRTJDRTc1N0I3MzVF
MUNGQTY2OEIzRjYwMUU3Q0Y2MTdENy8wLzMyMzgzMDMzM2EzMjMyNjMzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDIsAw
DQYJKoZIhvcNAQELBQADggEBABOk1i0ljyMXO4Gpb5mMvahOz68dgFd8+2hNisvv
KNTq+ivFXyByPW+mowrDef9COlayeeA+A2CwT2W9Z5LPVkPan8eDtQjs6jc+tHej
k9P2/ieuZ9iOa0H7XpkJbH5G7QQBCMsPGEqAHGB6a94KlDuTLxg+1xbqqx7dPUqJ
xBtILzPiZFZuCeba8i79SOGJ5MTZ2arhi1ey9DrBIBQUFBc2QwdPdQg0nYfe843V
mx7T3zvWv4I1KxE0vn0Ck2U3QAtp7b5jJ2P8LKtq3l01Mh5RZ567/CyUtDvO3gk0
j0AlCjrX/M1IOuKEN0+UoXk7L/mQ4NfX7oFR9kHmLNlGHxA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:34:04 2025 by rpki-client