
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
File: 34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa (raw, json)
Hash identifier: 3x6Q6bxPUAVwnprDGnve04G05bqzhKCJRKg/hsC1RVg=
Subject key identifier: 94:BF:98:3F:A4:E0:1B:8F:90:9D:41:BC:72:2A:9E:14:D3:DE:F0:D3
Certificate issuer: /CN=9AB130A96BF3302DC0486818E0523507034D3DA9
Certificate serial: 79649195E9D7F54B8D38B77516FD2A9409753B5E
Authority key identifier: 9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
Signing time: Tue 04 Feb 2025 18:20:04 +0000
ROA not before: Tue 04 Feb 2025 18:15:04 +0000
ROA not after: Tue 03 Feb 2026 18:20:04 +0000
asID: 265843
IP address blocks: 45.224.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl
rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:64:91:95:e9:d7:f5:4b:8d:38:b7:75:16:fd:2a:94:09:75:3b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AB130A96BF3302DC0486818E0523507034D3DA9
Validity
Not Before: Feb 4 18:15:04 2025 GMT
Not After : Feb 3 18:20:04 2026 GMT
Subject: CN=94BF983FA4E01B8F909D41BC722A9E14D3DEF0D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:6e:b0:38:35:cc:d7:40:b7:96:e5:6f:08:
51:23:86:7e:b4:fb:40:d4:b3:2b:18:ec:ed:30:dc:
bd:4e:b5:5c:8e:8a:25:15:d1:3a:ee:d5:67:bf:d0:
4c:11:55:69:f8:0e:b8:29:b1:7f:4b:37:0d:4d:12:
c7:92:c0:bc:9d:45:32:08:bd:d7:e5:31:11:03:bd:
ea:75:b1:87:86:8a:a2:f2:50:6f:48:cf:2b:c4:b3:
73:e7:89:4a:f1:0f:8c:62:07:e2:0f:a3:0a:4b:ad:
0b:3a:e9:ad:a3:4a:13:af:8a:44:d7:57:e3:5a:21:
ac:37:29:76:d4:dd:36:38:29:61:c0:2f:5d:0f:b3:
78:9f:31:c3:df:2c:27:74:f4:6f:b9:c6:dd:db:1f:
74:0e:a5:4c:09:fb:ca:a3:cd:dc:ea:6f:f4:c3:ed:
c1:25:8f:31:55:2d:36:45:91:a7:c8:e0:df:ad:36:
27:7a:3f:46:e5:7f:7e:cb:08:47:ab:fc:17:99:dc:
0e:7f:cb:f1:fa:a5:e2:23:52:45:ac:26:2d:96:73:
c9:0a:be:ac:91:77:49:f6:68:6f:1a:12:ed:fc:e6:
e7:ce:78:2b:05:5a:22:d4:0b:91:98:19:56:31:65:
91:50:65:f2:db:dc:d4:8b:64:ae:68:b0:11:8d:0e:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BF:98:3F:A4:E0:1B:8F:90:9D:41:BC:72:2A:9E:14:D3:DE:F0:D3
X509v3 Authority Key Identifier:
keyid:9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.143.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c0:3d:b5:a2:1b:25:31:2b:89:73:9c:7a:b6:95:0b:b5:80:
e1:e9:a8:11:f2:4c:cf:44:2e:97:a1:1d:35:70:25:14:40:72:
27:43:48:02:40:88:1a:c1:df:51:50:8a:5d:7c:59:ca:2c:b0:
8d:18:ab:9d:1a:40:38:35:cd:db:6c:37:42:d4:e5:7a:e8:29:
5d:cb:c5:40:08:7c:4a:9c:95:41:ea:a6:1a:58:02:40:83:37:
f3:96:c7:b5:7f:d1:eb:91:ab:53:14:8c:b7:43:3d:3e:47:29:
70:38:fd:2d:d7:24:ea:bb:cd:49:d1:60:dd:3d:9b:86:58:04:
5d:17:46:3d:0b:fa:73:2a:cb:8a:78:0a:9b:99:07:6d:a4:7c:
a5:eb:f1:81:42:62:51:e6:0d:70:f9:43:4d:1b:a5:12:80:f1:
bd:01:3f:1f:58:5c:98:c8:ea:e3:85:ad:16:30:c9:a4:49:ed:
bf:0e:fb:8f:95:15:7c:69:37:8d:63:e8:ae:54:43:df:07:ae:
84:05:8a:f5:9b:c2:fb:68:f8:7f:96:33:14:91:29:40:2a:4b:
1d:51:59:8b:b5:9a:48:6a:f5:81:51:d4:e9:40:27:f4:a0:4a:
9a:46:18:3b:74:a5:e7:6b:ce:9b:92:a7:ac:ca:3d:52:80:80:
d8:dd:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:01:04 2025 by rpki-client