
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203532333339.roa
File: 3133312e37322e32382e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier: MxDz3M61IINiU2HFnI946m8ECwAN7INpBSZ/HwIIfj8=
Subject key identifier: A1:30:5B:BA:96:4D:3A:47:0D:E9:2D:82:20:EB:1F:19:0C:94:7D:89
Certificate issuer: /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial: 05D600844208128D127B5D373EFB59E1C19D9118
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203532333339.roa
Signing time: Mon 09 Jun 2025 20:21:33 +0000
ROA not before: Mon 09 Jun 2025 20:16:33 +0000
ROA not after: Mon 08 Jun 2026 20:21:33 +0000
asID: 52339
IP address blocks: 131.72.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 00:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d6:00:84:42:08:12:8d:12:7b:5d:37:3e:fb:59:e1:c1:9d:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Validity
Not Before: Jun 9 20:16:33 2025 GMT
Not After : Jun 8 20:21:33 2026 GMT
Subject: CN=A1305BBA964D3A470DE92D8220EB1F190C947D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:34:94:6a:4a:2a:5a:d0:5b:22:bd:94:42:
4f:a3:1e:6b:49:b3:07:e9:0f:fd:57:b2:0a:9e:69:
d4:5f:c6:4c:ac:99:48:91:c5:8d:a8:f0:02:96:ad:
93:b0:17:ab:ab:95:42:70:6a:ff:37:23:e2:20:c7:
1a:c3:2d:ba:ee:d8:7c:94:e1:55:65:bb:52:18:83:
4a:12:50:55:a8:bf:3c:f5:a9:49:e7:50:ba:e5:5d:
18:50:44:62:b8:bd:28:9c:cb:de:11:05:48:96:2c:
41:f6:43:3b:53:04:df:f1:2e:8c:83:7f:c4:f5:78:
53:6c:c7:c2:ed:c2:67:ab:bd:c7:7e:f4:7c:05:60:
02:d6:77:27:c0:8f:73:e2:4a:16:ca:26:7a:20:49:
85:cf:8c:1d:8b:64:21:bf:3e:57:58:54:dd:5a:2c:
8c:2e:0b:b8:0e:32:7e:3a:8c:0c:59:08:ec:ba:ce:
53:ef:5a:ca:58:92:13:c5:83:43:55:bc:89:d5:95:
9a:f2:f9:5b:d2:23:9e:65:9c:6c:d5:5c:54:3e:06:
17:77:92:3e:fc:36:61:6d:3c:4d:a2:8a:17:03:5b:
0d:dc:e4:be:d7:cc:34:13:3e:2c:54:ee:f6:6e:80:
bb:64:4a:f7:a6:47:92:d9:a4:26:a1:47:91:88:50:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:30:5B:BA:96:4D:3A:47:0D:E9:2D:82:20:EB:1F:19:0C:94:7D:89
X509v3 Authority Key Identifier:
keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203532333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:80:31:d7:ee:56:5b:16:ec:ef:0b:ce:89:f4:1d:a1:09:46:
5f:15:9e:92:37:af:20:c0:0f:11:c6:10:35:89:e0:a9:0b:a0:
11:23:3f:28:63:42:63:cc:7f:04:c0:ef:32:de:9a:96:c5:53:
44:da:bd:8c:9e:64:9e:1d:47:56:af:15:ab:21:8a:b3:04:4e:
67:6a:88:da:9d:65:26:cb:14:5c:d2:a7:91:3e:de:79:51:c1:
d7:e7:1f:ca:a5:6d:af:33:ee:89:20:52:be:88:1a:60:7c:97:
0e:ba:8f:bf:35:9d:4e:09:73:76:cc:d1:f0:69:ad:85:5d:26:
28:18:f7:15:7f:06:a4:27:89:aa:53:64:35:87:6b:19:de:79:
94:b0:dd:11:58:c1:76:82:68:66:f9:95:2a:18:5a:19:18:2a:
5c:c4:23:c6:13:74:87:23:79:3f:24:1f:33:b0:5c:3e:5d:dd:
f8:0e:96:46:9a:8d:2b:4f:12:92:88:0e:5d:3b:cf:46:7c:df:
37:c4:6b:90:9d:7c:d7:82:db:6d:09:e9:39:d3:ad:4c:a3:4a:
07:8a:90:06:d7:1c:7a:fe:c9:8d:9b:7a:67:8e:12:37:d8:dd:
45:75:8d:b0:7f:81:92:5c:db:66:0a:8b:c3:fe:e0:36:90:b2:
b5:50:90:78
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBdYAhEIIEo0Se103PvtZ4cGdkRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNTA2MDkyMDE2MzNaFw0yNjA2MDgyMDIxMzNaMDMxMTAvBgNV
BAMTKEExMzA1QkJBOTY0RDNBNDcwREU5MkQ4MjIwRUIxRjE5MEM5NDdEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDTSUakoqWtBbIr2UQk+jHmtJ
swfpD/1XsgqeadRfxkysmUiRxY2o8AKWrZOwF6urlUJwav83I+IgxxrDLbru2HyU
4VVlu1IYg0oSUFWovzz1qUnnULrlXRhQRGK4vSicy94RBUiWLEH2QztTBN/xLoyD
f8T1eFNsx8Ltwmervcd+9HwFYALWdyfAj3PiShbKJnogSYXPjB2LZCG/PldYVN1a
LIwuC7gOMn46jAxZCOy6zlPvWspYkhPFg0NVvInVlZry+VvSI55lnGzVXFQ+Bhd3
kj78NmFtPE2iihcDWw3c5L7XzDQTPixU7vZugLtkSvemR5LZpCahR5GIUPhhAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUoTBbupZNOkcN6S2CIOsfGQyUfYkwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzMzMTJlMzczMjJlMzIzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMzMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDSBwwDQYJ
KoZIhvcNAQELBQADggEBAMmAMdfuVlsW7O8Lzon0HaEJRl8VnpI3ryDADxHGEDWJ
4KkLoBEjPyhjQmPMfwTA7zLempbFU0TavYyeZJ4dR1avFashirMETmdqiNqdZSbL
FFzSp5E+3nlRwdfnH8qlba8z7okgUr6IGmB8lw66j781nU4Jc3bM0fBprYVdJigY
9xV/BqQniapTZDWHaxneeZSw3RFYwXaCaGb5lSoYWhkYKlzEI8YTdIcjeT8kHzOw
XD5d3fgOlkaajStPEpKIDl07z0Z83zfEa5CdfNeC220J6TnTrUyjSgeKkAbXHHr+
yY2bemeOEjfY3UV1jbB/gZJc22YKi8P+4DaQsrVQkHg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:53:59 2025 by rpki-client