
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
File: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (raw, json)
Hash identifier: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=
Subject key identifier: D0:1B:20:09:D5:3C:78:E5:5C:0A:3E:5B:86:99:D6:12:55:7A:F7:5C
Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial: 24204DBF9C977FE4C2814E75D56B137D383B7404
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
Signing time: Tue 04 Feb 2025 18:46:55 +0000
ROA not before: Tue 04 Feb 2025 18:41:55 +0000
ROA not after: Tue 03 Feb 2026 18:46:55 +0000
asID: 270078
IP address blocks: 2803:4be0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:20:4d:bf:9c:97:7f:e4:c2:81:4e:75:d5:6b:13:7d:38:3b:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Validity
Not Before: Feb 4 18:41:55 2025 GMT
Not After : Feb 3 18:46:55 2026 GMT
Subject: CN=D01B2009D53C78E55C0A3E5B8699D612557AF75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:1b:26:cb:b5:b7:85:e5:c5:f0:75:ec:d4:
03:99:3c:95:6b:e4:b4:24:67:49:2b:23:84:76:59:
41:d8:63:46:a9:42:3c:25:3f:9a:51:9e:7b:f8:76:
a5:a4:5c:17:64:69:f9:03:21:2b:52:a6:52:af:72:
cb:8c:6f:61:9f:40:d7:ea:17:3b:4c:fa:12:3e:a0:
c0:0a:50:7e:3f:9e:0f:b0:63:e6:31:1e:6f:c9:de:
cf:84:93:5c:cf:e2:21:7d:12:dc:c0:29:3b:14:18:
8e:d8:6c:9d:03:67:de:f5:35:a4:12:e8:01:34:8e:
15:3b:ae:ad:88:c9:5d:4f:02:68:cd:90:59:f0:69:
59:70:8c:83:b2:7f:00:b6:dd:02:56:9c:79:c9:e7:
93:07:d4:46:99:b5:f5:2d:4d:6b:b9:33:31:ba:c3:
cc:10:a7:a4:76:66:5d:28:94:60:ee:ec:27:45:78:
d6:1f:aa:e0:9d:7b:08:8b:c7:13:73:ea:02:fa:42:
24:5c:a4:22:4b:10:55:8b:a7:8d:f3:7a:2e:13:70:
58:2a:b7:8b:f2:d8:50:4c:d8:8d:2b:27:1e:e1:ad:
bc:11:be:ec:1d:ac:52:7b:c4:05:ea:fc:1e:a0:3f:
f3:82:b8:99:e4:45:9e:8f:b4:fd:a6:12:17:cb:59:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1B:20:09:D5:3C:78:E5:5C:0A:3E:5B:86:99:D6:12:55:7A:F7:5C
X509v3 Authority Key Identifier:
keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/323830333a346265303a3a2f33322d3438203d3e20323730303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4be0::/32
Signature Algorithm: sha256WithRSAEncryption
92:a0:5e:83:b7:c0:cc:d0:50:95:b0:b5:cd:61:c6:83:ec:f2:
fd:62:56:ab:4b:15:d7:5b:5a:9e:42:5c:d8:40:a5:85:4d:d7:
59:c2:72:45:96:8d:84:87:e1:85:74:bb:6e:05:b1:04:70:d1:
31:d0:b2:40:98:de:fd:f0:7b:1d:4e:1d:e5:f2:94:00:98:68:
cb:84:d9:25:01:80:9f:95:51:01:cc:4d:75:95:01:d8:dc:15:
d3:8f:bd:cc:f0:0a:8f:48:dc:0a:66:1e:38:f3:5e:1c:87:be:
da:3f:0f:c8:9f:a4:7d:02:94:ac:5d:c1:e9:bf:3f:d3:ff:7a:
c7:cd:e8:d4:e9:cc:e0:18:03:1f:76:1a:ee:74:70:3e:8b:35:
56:b2:c7:ac:ee:8d:2a:54:b0:8c:b9:21:8e:d5:02:2f:49:a5:
80:66:be:8c:96:4a:5c:78:5a:aa:46:06:cc:d3:82:3e:f3:92:
23:a4:2d:e1:79:c4:9d:67:92:e3:d4:94:29:d9:5e:2e:46:5e:
e0:7d:7b:13:e8:eb:87:2d:35:8f:aa:fd:03:b7:3e:d2:b5:a2:
24:0a:79:82:fa:c3:66:bb:73:87:58:76:ef:9f:23:5b:68:98:
df:04:13:9e:2c:e4:4f:46:65:0b:57:1d:f7:99:3b:9d:b6:1f:
8f:f4:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:30 2025 by rpki-client