
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3234203d3e20323732303037.roa
File: 3230302e332e3134382e302f32322d3234203d3e20323732303037.roa (raw, json)
Hash identifier: ryP7ln0ZzaFG+zOjCMqfPRNPBqMBhjtGr5xwxNCuYpo=
Subject key identifier: F7:7F:CB:99:CF:63:C7:40:12:EE:1A:50:D6:83:FD:98:B6:6F:A1:52
Certificate issuer: /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial: 2878B079D5836493EC36677EE97A1317B2EE09F0
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3234203d3e20323732303037.roa
Signing time: Mon 29 Sep 2025 16:20:00 +0000
ROA not before: Mon 29 Sep 2025 16:15:00 +0000
ROA not after: Mon 28 Sep 2026 16:20:00 +0000
asID: 272007
IP address blocks: 200.3.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:78:b0:79:d5:83:64:93:ec:36:67:7e:e9:7a:13:17:b2:ee:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Validity
Not Before: Sep 29 16:15:00 2025 GMT
Not After : Sep 28 16:20:00 2026 GMT
Subject: CN=F77FCB99CF63C74012EE1A50D683FD98B66FA152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:0c:f5:11:c7:4c:7e:50:27:5d:ac:6d:23:
fa:9f:f1:5c:08:da:84:c8:81:7b:22:73:a4:d3:e9:
60:17:38:47:fb:f7:4e:cd:a1:41:b4:74:7b:78:1d:
4f:56:b3:b1:e2:0a:a0:16:b3:54:fe:21:27:76:d2:
bc:e6:68:9c:4c:e1:11:8a:fc:96:dc:fb:58:de:f4:
d8:65:4b:9c:d7:b9:b9:b7:72:46:65:36:66:8f:ba:
47:ad:6b:c9:04:2b:76:ab:9a:0b:ce:30:ca:a6:e3:
d0:71:27:89:8b:5e:28:54:09:6a:ab:88:cf:1b:ee:
8d:eb:a5:c3:c7:2e:25:f2:2b:d3:74:c6:ea:11:e0:
b2:83:34:e5:41:a6:17:fd:09:1f:66:27:b7:ce:b2:
89:8a:c8:cb:6a:2a:e7:fe:06:ad:38:14:3f:bc:c0:
d3:e5:50:fd:67:a1:c3:1c:f4:5e:4f:72:34:71:88:
ec:cb:b5:ad:7a:e1:08:2d:cc:82:57:cb:d8:ee:eb:
2c:52:c6:3a:5a:83:0b:9d:00:9a:ab:97:d9:5c:11:
23:90:43:4a:f3:bb:ca:94:84:fa:41:c6:95:7b:59:
f9:2a:21:f2:31:6e:f6:32:c5:43:0c:0a:25:8c:7c:
5e:a0:19:4a:7e:8b:05:ca:db:90:8a:2c:54:ed:cb:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:CB:99:CF:63:C7:40:12:EE:1A:50:D6:83:FD:98:B6:6F:A1:52
X509v3 Authority Key Identifier:
keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3234203d3e20323732303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.148.0/22
Signature Algorithm: sha256WithRSAEncryption
56:03:b1:20:0f:2c:0f:2e:7c:c2:51:28:b1:8f:e6:b6:9e:02:
44:de:2e:f9:8d:7c:4a:5c:fa:b7:26:54:6c:be:0d:fc:0d:3c:
62:16:2b:d9:f8:17:a8:35:38:f9:6a:da:e5:aa:48:e9:3f:bb:
78:ee:d9:74:b1:ae:a9:49:4c:64:53:22:f2:8d:e5:3f:08:6b:
2d:e4:d3:ed:11:bf:6a:0c:79:06:74:6a:73:27:97:88:dc:a5:
3c:a5:f5:2a:6e:79:91:eb:2f:fb:c5:df:d9:19:76:35:f0:e4:
5f:a6:bf:27:3e:44:73:e6:80:af:84:2c:56:41:17:43:5e:62:
38:7a:c6:7d:87:5c:a7:f3:a9:65:2b:47:ba:3d:d9:c9:51:98:
fe:a4:37:96:b6:5d:9c:5a:65:bf:27:f5:82:c9:d6:25:4b:85:
5e:9b:7a:1d:ff:be:cd:5d:64:ca:49:f0:09:59:0d:7d:0f:8a:
7d:8c:b5:fb:7b:f4:e1:d4:7d:a2:1c:1b:fb:5a:9e:e0:4a:7b:
51:99:3f:a3:9b:6b:04:2b:32:05:f1:23:1c:6c:4c:aa:9c:fb:
d7:87:8b:32:7d:9b:ee:77:83:c0:8b:d1:72:ac:d8:ef:b7:5e:
6a:ce:de:43:e0:29:74:a9:fe:36:e7:d1:30:f6:8e:78:60:3e:
d2:69:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:56:42 2025 by rpki-client