
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34312e302f32342d3234203d3e20323632313931.roa
File: 34352e3233352e34312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: uloVmuFvlVqYhxsMYSr9hbCAppKlxeAdsO07ZJG8reU=
Subject key identifier: AA:65:E4:59:C7:0E:83:A9:C4:07:04:AD:70:C8:14:A8:88:BB:FE:F8
Certificate issuer: /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial: 2FA931763F1D4301669B6648099F93D56E546537
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34312e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 04 Nov 2025 20:55:00 +0000
ROA not before: Tue 04 Nov 2025 20:50:00 +0000
ROA not after: Tue 03 Nov 2026 20:55:00 +0000
asID: 262191
IP address blocks: 45.235.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a9:31:76:3f:1d:43:01:66:9b:66:48:09:9f:93:d5:6e:54:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
Validity
Not Before: Nov 4 20:50:00 2025 GMT
Not After : Nov 3 20:55:00 2026 GMT
Subject: CN=AA65E459C70E83A9C40704AD70C814A888BBFEF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:36:40:06:89:d1:74:da:97:4a:db:bd:44:
ed:61:7b:71:20:6e:d0:e4:40:d2:db:6e:c9:3c:64:
9d:10:49:21:8e:85:0b:06:d3:95:39:b5:6c:56:2d:
5e:df:4e:d3:ce:1c:64:8d:42:69:bd:e9:b9:64:dc:
86:b6:36:fc:2f:62:d1:15:5b:04:80:a1:a0:15:aa:
37:7b:3c:88:3d:e8:b4:dd:49:84:ea:1e:44:b3:72:
ed:55:c9:a8:05:05:e1:56:9b:0c:00:a3:46:e2:ba:
4a:0f:ff:91:e3:b5:13:6a:3c:f2:40:42:7f:c3:50:
58:ed:e9:e8:a7:92:3f:f4:51:94:ec:43:59:86:24:
ca:83:b3:fe:27:48:e2:3a:4c:2c:18:0a:5f:1d:e0:
79:ba:d8:36:c0:7d:1e:f2:3f:54:41:f3:0e:22:f2:
bf:b1:12:45:72:66:f1:5b:71:bf:b6:87:7a:a5:20:
b8:5e:97:08:bc:f0:4c:62:83:36:d7:46:4a:b2:0d:
5a:93:34:84:82:ce:88:0b:ab:27:e5:9e:7a:ea:38:
79:aa:43:c2:61:2b:d0:8b:77:42:93:76:79:52:ab:
1b:86:da:2b:71:12:d7:e5:b8:b1:8d:71:b0:f2:7e:
75:31:2c:2b:79:af:6a:ba:b6:73:8f:12:2b:8c:4f:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:E4:59:C7:0E:83:A9:C4:07:04:AD:70:C8:14:A8:88:BB:FE:F8
X509v3 Authority Key Identifier:
keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34312e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.41.0/24
Signature Algorithm: sha256WithRSAEncryption
24:08:e2:da:2a:f4:74:d7:34:5f:bc:9f:4e:75:6f:50:0f:3a:
dd:21:99:64:c3:dd:2b:d4:f8:7a:a8:5e:b5:62:29:3d:87:ff:
a1:9b:81:2d:a9:cb:32:b6:61:dc:bb:1a:de:34:33:e4:d8:64:
b2:5f:17:2d:88:fc:29:87:de:fb:0f:11:bf:3e:d9:d1:a2:ae:
c9:b7:81:0c:61:d3:9b:a3:61:7b:6e:9a:e6:e4:13:86:23:cd:
ad:67:14:5b:e2:be:ef:d9:b0:9c:24:8c:e9:81:2b:1a:42:7b:
7f:c1:82:22:d7:9d:a9:cd:0f:03:46:c2:92:11:ac:f2:be:da:
25:af:ad:27:28:7f:da:50:fa:e1:f4:70:05:75:ad:73:2c:49:
1c:2d:aa:09:7e:39:65:5b:27:6b:92:0f:cf:de:fd:28:cf:1b:
5b:60:8d:c1:6a:31:70:53:9a:ed:04:bf:1f:3a:26:3f:c6:7b:
a8:ae:15:93:74:fc:32:a4:d7:ef:63:b0:2a:52:3f:29:9e:16:
7c:63:b6:91:73:ff:6c:b3:89:56:29:36:a6:a7:05:81:cc:d6:
58:f2:25:cc:92:70:da:20:3b:f3:d3:ca:d4:ac:db:a6:9f:57:
e5:74:88:e4:65:91:61:fb:3e:30:88:22:5c:33:2d:66:39:f5:
a4:a1:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:55:17 2025 by rpki-client