
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323733383832.roa
File: 323830333a613231303a3a2f33322d3332203d3e20323733383832.roa (raw, json)
Hash identifier: CUTGCnMTKm+pVkl+LYAUnVmG9JR6KGLpUXel7cRf/Tw=
Subject key identifier: C2:31:07:06:1B:F2:E3:31:24:8D:26:68:BA:F3:5A:A0:5F:E5:46:69
Certificate issuer: /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial: 2150FEC12B738BA328CFBBD88238B29066AC7CE8
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323733383832.roa
Signing time: Fri 11 Apr 2025 20:55:00 +0000
ROA not before: Fri 11 Apr 2025 20:50:00 +0000
ROA not after: Fri 10 Apr 2026 20:55:00 +0000
asID: 273882
IP address blocks: 2803:a210::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:fe:c1:2b:73:8b:a3:28:cf:bb:d8:82:38:b2:90:66:ac:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Validity
Not Before: Apr 11 20:50:00 2025 GMT
Not After : Apr 10 20:55:00 2026 GMT
Subject: CN=C23107061BF2E331248D2668BAF35AA05FE54669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:3d:9c:3f:61:50:82:ab:2b:68:75:ac:d2:
49:68:4d:31:a9:89:cb:78:75:8a:3c:d8:30:a6:c6:
05:3b:6e:42:2b:2a:c0:e9:49:5a:7b:25:5a:dd:be:
48:9f:77:f7:a1:21:f6:59:61:5f:a4:19:14:7d:92:
2f:b5:4c:6f:4d:f6:f4:a8:ce:9a:a3:b4:24:b6:b2:
dc:65:16:7d:03:fd:3a:cf:00:01:72:6f:a5:c1:88:
3b:ad:6a:06:ac:5c:93:42:4b:0c:06:ee:07:a2:64:
98:df:c2:f1:37:4b:cc:28:3c:8a:ba:21:37:d2:bb:
ee:1f:8d:57:f8:e1:31:78:f1:23:e7:2a:c0:cc:78:
a0:d8:6a:6f:8f:08:bf:0a:08:4a:80:b4:b7:b7:dc:
69:0a:68:dc:72:6e:34:3e:b7:28:a6:ee:d2:67:7b:
6f:a1:f2:3a:f8:14:2b:e3:ce:84:21:93:0c:6f:cb:
2d:c7:43:53:99:78:05:28:48:ac:b4:f0:fd:06:2b:
e6:a2:0c:00:9b:ef:db:c7:d2:d0:0f:83:da:a7:e0:
f6:8b:bb:83:93:b9:89:de:f1:8b:c9:d2:fd:bc:ca:
cc:6c:e6:c7:3b:0f:5a:52:35:2a:44:ab:2d:b0:28:
24:51:6f:90:d1:82:11:b6:ef:4c:ac:47:1b:82:2b:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:31:07:06:1B:F2:E3:31:24:8D:26:68:BA:F3:5A:A0:5F:E5:46:69
X509v3 Authority Key Identifier:
keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/323830333a613231303a3a2f33322d3332203d3e20323733383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:a210::/32
Signature Algorithm: sha256WithRSAEncryption
5b:77:ea:9d:e4:7a:43:a8:b6:fe:c3:5d:bd:2c:f2:c6:f4:3c:
f5:66:87:c9:ff:83:51:b2:32:19:55:0c:8c:97:0d:23:e4:d5:
25:24:aa:bd:a2:52:59:91:de:9e:d9:e2:a6:de:3c:61:54:8b:
48:47:49:0f:6a:ad:8b:37:87:3a:86:01:f2:93:fa:62:89:a3:
73:39:88:e1:d3:31:9e:2a:4a:43:ac:59:3e:56:4c:0a:72:8d:
ca:44:9f:4c:47:8f:1d:13:b5:44:73:44:af:bf:69:59:39:6f:
45:15:02:93:21:ac:22:71:25:ca:f8:91:a0:52:98:80:c8:2c:
84:8c:21:57:e5:9c:aa:ba:75:db:df:0b:fc:eb:bc:12:6f:ab:
16:3c:90:11:d2:c3:84:e8:c8:0d:15:e0:ef:4f:f1:b7:04:11:
40:62:b5:84:db:5b:9f:75:12:9f:cf:2e:ff:28:a9:7d:0c:5e:
67:55:12:93:c1:b3:90:5d:34:f4:8d:cb:f0:11:da:ea:48:ec:
94:0b:4b:8c:14:eb:77:03:fc:10:78:ce:80:13:b4:80:c4:06:
7e:3c:62:18:fb:dc:78:56:e1:96:cd:97:13:9b:b8:4d:3d:33:
ad:2d:82:20:2b:0a:d4:12:ab:ef:78:88:32:fe:9a:5b:9c:a8:
a5:4c:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:43:47 2025 by rpki-client