
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
File: 3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier: 7nHfyZENAhn/EHX+Obu3RQ4nl8tDgn5T0gXVRVRa0hg=
Subject key identifier: C5:C2:7F:E2:44:10:6D:50:16:7E:FB:B2:D5:9A:7C:E7:B2:23:A6:0C
Certificate issuer: /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial: 351A312D100D89D69F9D5C0353838EF32533B573
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
Signing time: Tue 04 Feb 2025 18:48:04 +0000
ROA not before: Tue 04 Feb 2025 18:43:04 +0000
ROA not after: Tue 03 Feb 2026 18:48:04 +0000
asID: 32098
IP address blocks: 201.174.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1a:31:2d:10:0d:89:d6:9f:9d:5c:03:53:83:8e:f3:25:33:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Validity
Not Before: Feb 4 18:43:04 2025 GMT
Not After : Feb 3 18:48:04 2026 GMT
Subject: CN=C5C27FE244106D50167EFBB2D59A7CE7B223A60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:16:41:89:76:65:26:75:b0:a1:cd:7c:e7:
96:fa:8a:06:f8:9c:5b:b7:f6:1f:8c:a4:1d:a5:2f:
d6:c8:ee:15:8f:46:f2:cb:a1:8e:21:56:82:20:df:
1f:6d:42:80:5d:f1:bb:9b:5d:d1:8f:80:cf:4c:c9:
fd:20:d6:4b:1b:7e:7a:01:73:75:23:cf:d9:41:1e:
dc:96:12:b9:20:21:0a:d8:94:9b:cd:ec:0e:dc:cc:
68:c5:49:2f:a5:36:54:fe:43:21:94:aa:b2:5f:55:
ed:c8:d9:e1:a8:d6:6f:e9:f7:f4:e4:7d:6c:3d:7d:
c2:5f:8a:e4:13:1b:9a:77:5a:12:71:58:31:f4:b4:
1d:a0:cc:0e:8b:fb:ee:28:ee:7b:d8:db:97:f3:e8:
f3:35:2e:eb:f5:c0:0b:81:bd:20:c7:8e:e3:0f:ff:
56:fe:b7:22:58:4f:eb:6c:02:d1:ab:9c:9e:e3:48:
40:6c:a5:40:cd:df:84:06:4d:27:3c:9f:88:f1:79:
0b:f6:eb:44:b9:e0:d0:6d:b3:97:2e:7e:04:1d:30:
69:d8:fd:a0:94:aa:e1:83:51:97:6b:55:1e:37:84:
d2:00:a7:6e:3f:99:68:2a:0f:a0:85:cc:d5:e2:24:
55:1d:cd:1d:f0:0b:b7:05:bb:45:40:cb:b2:fc:0f:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:7F:E2:44:10:6D:50:16:7E:FB:B2:D5:9A:7C:E7:B2:23:A6:0C
X509v3 Authority Key Identifier:
keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.192.0/21
Signature Algorithm: sha256WithRSAEncryption
91:4a:ea:06:55:17:f3:1d:1b:63:a1:09:41:42:66:90:90:45:
cc:11:53:d5:e8:bd:8e:69:1e:85:cd:92:aa:08:e9:42:63:dc:
dc:8a:14:06:f1:90:c9:d2:1f:0a:61:ad:e9:fc:a9:65:d0:b2:
81:4e:eb:19:a3:c3:da:fa:73:48:42:61:a3:b4:ca:b4:1c:02:
a1:f5:74:72:b2:a8:dc:a6:d2:86:67:78:ac:ba:b8:92:4d:24:
2a:96:a9:64:c5:cd:d9:bd:87:34:79:f3:6e:68:81:ea:8a:56:
b3:eb:fd:b9:71:64:0b:93:c7:f9:78:5b:7f:75:5f:8d:f2:19:
45:c4:49:5f:bd:95:cf:ee:5b:3b:62:26:02:72:d1:aa:f0:31:
7d:ef:22:a2:8e:f0:90:7d:91:f6:d3:03:ec:e9:19:88:9c:30:
ca:51:b1:6a:da:92:61:07:11:59:69:f9:c0:7f:8a:5e:b5:fe:
d6:2f:d4:1c:05:2c:77:8c:3e:fd:89:52:50:ed:2c:ab:46:cb:
5d:a9:3f:69:5f:cb:7d:9b:46:1f:e0:ba:da:69:da:10:fa:2b:
ac:72:ba:28:97:f1:c5:5d:4a:b0:f7:46:e5:ef:37:1f:64:40:
a4:f0:ad:38:63:d8:03:59:75:12:c5:dc:b2:30:66:40:d6:cd:
06:7e:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:15 2025 by rpki-client