
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36342e302f32332d3234203d3e203238343035.roa
File: 3133382e3138362e36342e302f32332d3234203d3e203238343035.roa (raw, json)
Hash identifier: MIHL1x9K3bwq/HvSkTrwyDrZvXTCndskRXCRhot/Fu8=
Subject key identifier: F9:CF:E8:F9:ED:CA:25:54:97:72:0E:24:73:27:B6:AF:6C:06:E2:BF
Certificate issuer: /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial: 24C30C39256461BB844EA37187F324B7341D4CF3
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36342e302f32332d3234203d3e203238343035.roa
Signing time: Mon 20 Oct 2025 16:15:01 +0000
ROA not before: Mon 20 Oct 2025 16:10:01 +0000
ROA not after: Mon 19 Oct 2026 16:15:01 +0000
asID: 28405
IP address blocks: 138.186.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 20:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c3:0c:39:25:64:61:bb:84:4e:a3:71:87:f3:24:b7:34:1d:4c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Validity
Not Before: Oct 20 16:10:01 2025 GMT
Not After : Oct 19 16:15:01 2026 GMT
Subject: CN=F9CFE8F9EDCA255497720E247327B6AF6C06E2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:ca:5d:98:d0:f0:e3:5c:52:18:14:1f:9e:
d5:37:09:25:67:8f:c3:99:ed:e5:bd:a7:bf:08:43:
f0:07:c4:4d:4a:6f:b9:fb:c5:00:10:91:46:91:3e:
15:47:33:81:0f:42:f1:02:4b:6e:1a:6b:bc:f9:e3:
d1:d0:92:e5:5c:3d:9b:f5:bd:85:cb:5d:fb:a7:6a:
cd:e5:92:d2:f6:48:14:d5:4e:ae:37:88:32:fb:f1:
a1:69:f0:45:3a:32:a2:2d:d7:71:7f:31:b4:31:00:
18:47:de:5c:e5:43:b5:9f:53:5d:bd:54:39:8e:96:
40:e5:5f:c9:06:9a:2b:90:f9:08:2f:86:2b:56:86:
ed:ae:e9:f3:81:a7:d3:56:5a:64:aa:20:65:0a:ee:
51:3c:4b:e6:02:f1:88:c2:dc:91:69:01:98:a0:9e:
dd:71:ed:03:f2:58:5f:5c:33:06:1e:4f:c8:b2:45:
d6:f2:f1:30:21:55:d3:67:41:f6:e2:fe:b4:e4:06:
83:b3:96:b8:16:c4:8f:22:41:d6:cf:d7:7f:fb:af:
21:1e:25:b6:1d:45:28:b2:46:d7:05:f6:33:fc:4b:
18:28:d5:50:82:95:02:66:63:78:de:60:f2:2e:30:
c3:0a:4f:96:12:0a:e4:ab:a0:61:2e:d0:49:4a:b4:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:E8:F9:ED:CA:25:54:97:72:0E:24:73:27:B6:AF:6C:06:E2:BF
X509v3 Authority Key Identifier:
keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36342e302f32332d3234203d3e203238343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.64.0/23
Signature Algorithm: sha256WithRSAEncryption
98:13:b8:12:5d:ce:59:0d:ab:f8:0c:47:a3:f3:0e:29:b3:67:
e7:78:a4:61:dc:23:8f:0e:91:f3:de:35:c5:99:24:af:2f:d8:
93:c7:a0:e3:0d:9c:e1:de:3a:9e:4b:e3:17:bc:7b:2f:6b:91:
82:7a:9e:1b:78:4c:c3:8e:54:3a:bf:e0:91:1c:af:10:5e:aa:
c9:d6:62:ba:c0:1b:93:fd:c4:94:8a:c9:1b:3e:a0:f5:95:cc:
ac:75:a2:2f:86:88:59:8d:d2:54:d3:aa:d5:e4:28:3c:e3:c2:
95:ed:c3:db:3d:67:17:88:d0:55:ff:37:d2:b6:60:a6:c8:ac:
69:39:2e:e9:74:71:89:ff:4c:68:ce:c6:a3:83:2e:42:f2:ad:
e2:12:04:aa:74:ec:1c:7f:63:be:59:bf:d8:da:c8:4e:ed:1b:
7f:aa:3a:25:ad:0c:9c:0a:5e:5c:9d:f2:43:40:50:c6:c2:0a:
9b:c6:06:d6:ac:3a:81:65:b3:7e:5b:2d:fe:e7:71:78:fa:fb:
c5:9e:e3:3f:f9:e9:a0:7e:3c:6c:a4:bc:96:7f:3b:54:f1:ba:
2e:4e:a5:35:a2:ba:48:84:4f:bf:aa:a0:6f:04:c9:05:b7:8b:
de:94:16:14:a2:75:c1:31:f2:e1:81:b1:c1:bb:46:7e:c4:5d:
05:90:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:25:34 2025 by rpki-client