
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
File: 3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier: SiagUdDYgowZmWfj8awGuxinNLMJ2Vf29Qj5CXb0egU=
Subject key identifier: D4:57:73:8C:54:7B:F0:AF:FB:FE:BF:C0:95:39:77:02:5D:10:C8:3B
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 739A4D174354274404BB22E26F697E89E7D0B26E
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:39:00 +0000
ROA not before: Tue 04 Feb 2025 18:34:00 +0000
ROA not after: Tue 03 Feb 2026 18:39:00 +0000
asID: 22122
IP address blocks: 148.209.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9a:4d:17:43:54:27:44:04:bb:22:e2:6f:69:7e:89:e7:d0:b2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:34:00 2025 GMT
Not After : Feb 3 18:39:00 2026 GMT
Subject: CN=D457738C547BF0AFFBFEBFC0953977025D10C83B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:ef:98:4a:46:fe:bc:eb:39:32:03:03:2e:
9f:96:d4:93:06:cb:50:cd:84:82:0d:99:4b:e7:3f:
ae:86:ce:63:6a:3c:b3:cd:09:54:05:d9:9b:38:a5:
96:9d:2b:63:2b:67:bc:ee:15:03:eb:44:ee:a4:66:
0f:90:f6:69:60:3d:ba:3a:7a:ad:df:09:3b:30:66:
ed:a8:24:a4:ae:ac:40:73:31:3b:a5:b8:84:e4:61:
90:fe:26:c1:b5:b7:95:20:c5:8b:85:ce:8d:79:3d:
10:7b:41:f8:c3:40:43:db:86:c3:94:ed:2c:4d:c6:
ad:cc:e9:01:66:9f:6e:4e:f5:d0:26:4e:1e:68:ff:
61:5a:a9:27:ca:85:13:e0:20:2c:f6:c1:7f:23:8d:
32:4f:f0:93:9f:ef:ed:d7:36:33:4f:6a:2f:d8:84:
b6:eb:98:81:c1:2c:d5:04:60:57:cf:27:47:de:65:
c9:78:90:5e:bd:d4:21:14:42:04:6e:c9:56:c6:b6:
a4:de:42:9a:62:f0:7d:3b:3b:66:ea:18:6a:fc:ba:
92:9e:1f:43:da:c0:05:1d:aa:ef:3e:5e:8f:4d:e4:
31:35:84:76:57:06:3f:6a:82:d9:0f:53:f5:8e:25:
6a:35:e3:73:89:d0:65:c0:11:75:e2:c6:5c:5d:2e:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:73:8C:54:7B:F0:AF:FB:FE:BF:C0:95:39:77:02:5D:10:C8:3B
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.130.0/23
Signature Algorithm: sha256WithRSAEncryption
32:21:26:7d:b3:31:d5:24:93:1e:7a:38:94:96:76:08:76:3f:
18:17:01:05:13:c2:47:25:53:4f:d7:31:9c:ec:0e:05:61:f2:
f0:24:a9:08:bf:69:a0:59:70:91:4e:22:4f:15:54:24:3e:c8:
0b:20:b7:f8:be:4c:0b:bf:e3:bc:66:9b:c0:da:48:da:b2:b6:
d4:15:88:c4:8a:c1:2f:ae:ff:67:ae:3c:17:20:6b:77:a6:4d:
0b:77:4e:c9:ad:89:29:84:87:c0:af:f9:8a:38:d3:02:7d:8d:
4f:c4:99:e9:55:ab:8f:99:82:57:7f:cd:01:bb:04:34:fa:8f:
b5:1c:0e:08:94:df:ee:e8:f6:c3:1b:f6:9f:19:41:b4:41:b1:
4a:22:69:32:be:35:b3:e0:27:6e:3b:b6:92:25:ee:27:90:e2:
5e:56:4f:40:f0:77:aa:40:55:e1:3b:00:f2:e2:2a:8e:83:f6:
f9:84:5f:3d:1d:5e:e2:68:15:0d:65:48:51:0f:ea:ee:db:77:
82:cc:64:bb:a2:9e:76:8c:12:3d:3e:91:d7:c5:b4:a4:89:69:
60:7f:99:d4:e4:b1:81:0d:bb:e6:db:59:b0:5a:2f:13:b8:1b:
5e:6f:a3:a8:76:f8:1e:e2:4f:47:3e:2d:d2:6a:d3:67:51:78:
c1:be:2a:df
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc5pNF0NUJ0QEuyLib2l+iefQsm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODM0MDBaFw0yNjAyMDMxODM5MDBaMDMxMTAvBgNV
BAMTKEQ0NTc3MzhDNTQ3QkYwQUZGQkZFQkZDMDk1Mzk3NzAyNUQxMEM4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ye+YSkb+vOs5MgMDLp+W1JMG
y1DNhIINmUvnP66GzmNqPLPNCVQF2Zs4pZadK2MrZ7zuFQPrRO6kZg+Q9mlgPbo6
eq3fCTswZu2oJKSurEBzMTuluITkYZD+JsG1t5UgxYuFzo15PRB7QfjDQEPbhsOU
7SxNxq3M6QFmn25O9dAmTh5o/2FaqSfKhRPgICz2wX8jjTJP8JOf7+3XNjNPai/Y
hLbrmIHBLNUEYFfPJ0feZcl4kF691CEUQgRuyVbGtqTeQppi8H07O2bqGGr8upKe
H0PawAUdqu8+Xo9N5DE1hHZXBj9qgtkPU/WOJWo143OJ0GXAEXXixlxdLh7dAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1FdzjFR78K/7/r/AlTl3Al0QyDswHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTMzMzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNGC
MA0GCSqGSIb3DQEBCwUAA4IBAQAyISZ9szHVJJMeejiUlnYIdj8YFwEFE8JHJVNP
1zGc7A4FYfLwJKkIv2mgWXCRTiJPFVQkPsgLILf4vkwLv+O8ZpvA2kjasrbUFYjE
isEvrv9nrjwXIGt3pk0Ld07JrYkphIfAr/mKONMCfY1PxJnpVauPmYJXf80BuwQ0
+o+1HA4IlN/u6PbDG/afGUG0QbFKImkyvjWz4CduO7aSJe4nkOJeVk9A8HeqQFXh
OwDy4iqOg/b5hF89HV7iaBUNZUhRD+ru23eCzGS7op52jBI9PpHXxbSkiWlgf5nU
5LGBDbvm21mwWi8TuBteb6Oodvge4k9HPi3SatNnUXjBvirf
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:39:51 2025 by rpki-client