
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
File: 3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier: XGwtOih+mZgbY31e45xU2aYj+vIwySXnfA2BbGnEmbc=
Subject key identifier: 72:DD:60:5E:D0:B3:76:24:79:A7:59:A4:82:88:BF:23:63:E6:BC:FE
Certificate issuer: /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial: 5536610B2041165DA512E882FAEE5AC86D2BD019
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
Signing time: Tue 04 Feb 2025 18:00:49 +0000
ROA not before: Tue 04 Feb 2025 17:55:49 +0000
ROA not after: Tue 03 Feb 2026 18:00:49 +0000
asID: 22411
IP address blocks: 143.137.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:36:61:0b:20:41:16:5d:a5:12:e8:82:fa:ee:5a:c8:6d:2b:d0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Validity
Not Before: Feb 4 17:55:49 2025 GMT
Not After : Feb 3 18:00:49 2026 GMT
Subject: CN=72DD605ED0B3762479A759A48288BF2363E6BCFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:ae:17:8b:b7:9c:a1:9c:e8:93:0b:42:e9:
6a:8b:28:90:df:ec:df:6d:ec:07:58:b1:b7:53:fb:
9a:60:2c:7e:eb:c2:f3:8b:5b:8e:73:4a:05:84:e5:
81:6a:91:74:7a:61:53:f4:42:c1:59:0e:66:2e:43:
c8:e6:fb:dc:27:aa:84:56:08:be:99:5c:ab:7f:99:
d0:5a:85:a9:40:b1:e6:01:15:f0:43:ed:05:da:82:
57:32:3f:aa:5d:23:c8:60:98:07:b5:bc:c3:2e:eb:
71:d2:28:c0:df:04:ff:16:06:10:d2:58:4c:c2:9c:
20:4d:a4:e5:28:15:93:48:a6:0a:54:9e:d4:19:92:
0d:b8:41:7f:56:2c:fb:89:b1:3a:83:89:3c:a4:59:
e7:09:db:c1:5a:f3:3c:cb:3f:52:b3:4e:44:1a:88:
3a:18:0a:92:51:a5:8d:7d:e9:e8:99:15:83:8f:b0:
2b:0e:fa:8e:4d:2a:ae:d9:f7:f8:59:a7:be:0f:c3:
52:21:9a:d2:01:aa:44:2f:63:f5:14:9a:d7:87:9c:
78:2d:5a:79:4c:ad:39:dc:29:91:7f:8e:54:53:70:
b1:50:34:f8:8f:0b:f8:47:fe:b1:f4:9a:f1:5f:6c:
92:0c:01:e2:50:ce:4a:ce:32:fb:5b:bd:ac:70:64:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:60:5E:D0:B3:76:24:79:A7:59:A4:82:88:BF:23:63:E6:BC:FE
X509v3 Authority Key Identifier:
keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6e:ae:8a:07:8c:b3:7e:1d:4b:c9:7e:e5:31:e0:d0:e3:4d:
1d:56:52:0c:81:42:c4:19:5d:a5:38:50:16:ee:4a:e3:a6:c9:
04:e4:af:e6:9e:c1:b1:9b:72:13:8f:10:3a:ff:75:84:e6:29:
0b:71:bb:dd:8a:27:22:f6:eb:03:22:f8:d1:1a:e9:9e:29:e4:
1e:76:52:47:d4:4f:ea:8e:d2:dd:9b:1d:c9:7f:97:7f:ac:b0:
92:36:96:bc:db:d1:07:7f:1a:97:57:2b:91:61:70:49:cb:87:
15:46:25:08:8a:3b:09:cc:cb:78:9e:8f:8a:62:94:c0:96:2b:
ef:0c:90:95:cb:0f:f9:ac:74:ad:03:bb:2f:34:36:d3:9b:ef:
4e:a9:f1:ed:50:29:53:80:a9:0f:53:1a:7d:82:91:02:4a:ea:
5c:23:e3:20:54:4c:45:71:36:ab:35:46:05:40:f6:2e:cb:8a:
f8:23:4d:5f:ed:33:16:cf:85:74:82:9a:72:fe:5d:c0:95:a9:
b3:73:a1:97:ce:df:ca:11:c5:42:54:53:c0:6d:64:7c:1e:1d:
29:d5:f0:9d:bd:6a:37:2d:3b:5f:4b:35:0c:55:e2:f0:00:d2:
cb:f2:c8:d0:98:2a:db:ca:ec:61:6b:ab:7d:73:32:33:14:7f:
72:0c:0b:e9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVTZhCyBBFl2lEuiC+u5ayG0r0BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QTE4RDIzOEY3MEZDQTc2MDhFMENGOTFGMDQ0MzAy
Rjg4NkE3ODAeFw0yNTAyMDQxNzU1NDlaFw0yNjAyMDMxODAwNDlaMDMxMTAvBgNV
BAMTKDcyREQ2MDVFRDBCMzc2MjQ3OUE3NTlBNDgyODhCRjIzNjNFNkJDRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr264Xi7ecoZzokwtC6WqLKJDf
7N9t7AdYsbdT+5pgLH7rwvOLW45zSgWE5YFqkXR6YVP0QsFZDmYuQ8jm+9wnqoRW
CL6ZXKt/mdBahalAseYBFfBD7QXaglcyP6pdI8hgmAe1vMMu63HSKMDfBP8WBhDS
WEzCnCBNpOUoFZNIpgpUntQZkg24QX9WLPuJsTqDiTykWecJ28Fa8zzLP1KzTkQa
iDoYCpJRpY196eiZFYOPsCsO+o5NKq7Z9/hZp74Pw1IhmtIBqkQvY/UUmteHnHgt
WnlMrTncKZF/jlRTcLFQNPiPC/hH/rH0mvFfbJIMAeJQzkrOMvtbvaxwZDltAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUct1gXtCzdiR5p1mkgoi/I2PmvP4wHwYDVR0j
BBgwFoAUr0oY0jj3D8p2CODPkfBEMC+IangwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MTZCMkY3RDY2QTYzM0IzQ0U4QzI2NUVGQjREQzYzNjFG
NjgxM0EzRkM5MjkzMzNGREVCQUQ3RUUxNjZCQkIzLzAvQUY0QTE4RDIzOEY3MEZD
QTc2MDhFMENGOTFGMDQ0MzAyRjg4NkE3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjRBMThEMjM4RjcwRkNBNzYw
OEUwQ0Y5MUYwNDQzMDJGODg2QTc4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODE2QjJGN0Q2NkE2MzNCM0NFOEMyNjVFRkI0REM2MzYxRjY4MTNBM0ZD
OTI5MzMzRkRFQkFEN0VFMTY2QkJCMy8wLzMxMzQzMzJlMzEzMzM3MmUzMTM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMyMzQzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj4mQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBNbq6KB4yzfh1LyX7lMeDQ400dVlIMgULEGV2l
OFAW7krjpskE5K/mnsGxm3ITjxA6/3WE5ikLcbvdiici9usDIvjRGumeKeQedlJH
1E/qjtLdmx3Jf5d/rLCSNpa829EHfxqXVyuRYXBJy4cVRiUIijsJzMt4no+KYpTA
livvDJCVyw/5rHStA7svNDbTm+9OqfHtUClTgKkPUxp9gpECSupcI+MgVExFcTar
NUYFQPYuy4r4I01f7TMWz4V0gppy/l3Alamzc6GXzt/KEcVCVFPAbWR8Hh0p1fCd
vWo3LTtfSzUMVeLwANLL8sjQmCrbyuxha6t9czIzFH9yDAvp
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:50:13 2025 by rpki-client