
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
File: 3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier: Zm9ZPUqkMUMjMKwUN+ZyDJiGxofNYMOZCP8BNNEVMNs=
Subject key identifier: BB:DF:BA:2F:2E:5F:0A:99:D1:6A:AE:D6:76:CA:EB:84:30:68:BB:2E
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 151D04058DDFD77219BD16142BC32188F8AB9911
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
Signing time: Tue 04 Feb 2025 18:18:09 +0000
ROA not before: Tue 04 Feb 2025 18:13:09 +0000
ROA not after: Tue 03 Feb 2026 18:18:09 +0000
asID: 19905
IP address blocks: 201.131.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1d:04:05:8d:df:d7:72:19:bd:16:14:2b:c3:21:88:f8:ab:99:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:09 2025 GMT
Not After : Feb 3 18:18:09 2026 GMT
Subject: CN=BBDFBA2F2E5F0A99D16AAED676CAEB843068BB2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:63:17:2d:c3:ad:eb:36:9a:e1:c9:7a:f2:
fe:57:ed:be:40:4b:09:a2:c6:40:97:cb:10:a6:a3:
23:01:7a:7b:41:92:bc:76:b5:d4:49:46:fb:ee:0b:
66:f1:ba:3b:2b:25:f2:4f:fa:0e:e6:75:59:3f:6d:
4d:6c:29:6d:5d:32:3b:02:89:90:41:e0:f1:88:52:
57:87:a6:eb:f7:08:38:c3:06:b8:1b:a0:cc:6c:df:
11:bf:d1:58:ff:a5:6e:c9:32:83:62:c3:c1:24:24:
9a:f4:e9:ef:0a:5d:2f:5f:ca:f2:96:83:86:24:a4:
cb:8b:6a:20:d5:ce:63:df:be:43:7f:7f:c3:a3:c3:
49:85:93:a6:f6:ab:31:ad:f4:2f:5e:a2:54:b5:b1:
5e:9c:19:d6:0a:c1:67:51:f1:d6:55:bb:0e:e2:e1:
a8:cc:76:6f:b0:d1:c3:aa:98:4e:61:95:ee:63:b0:
34:61:cb:09:21:e4:ec:02:f8:83:8d:e7:03:24:b9:
7f:9a:e5:bf:9b:25:30:5a:bb:e7:95:69:10:f5:ef:
54:f6:23:ed:6f:86:71:74:fa:af:44:9a:2d:a9:31:
72:be:9b:a2:b4:37:d3:43:bb:6c:5c:3e:d2:7f:82:
d2:a5:59:c8:d5:c8:86:c7:5b:88:56:59:17:12:2a:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:BA:2F:2E:5F:0A:99:D1:6A:AE:D6:76:CA:EB:84:30:68:BB:2E
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.121.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bc:e8:03:b0:ba:ec:a8:15:61:bd:d4:8d:49:d6:39:87:b7:
df:bf:a5:53:34:79:31:b1:f5:4b:88:9e:41:bb:e8:ee:5e:f4:
11:b3:95:74:74:ba:7b:af:ad:54:10:c3:0a:06:3f:07:ae:92:
ab:d8:b0:51:ee:85:58:43:03:22:b8:e2:7c:96:3e:39:d7:7c:
df:0e:0b:7b:ed:ca:ce:71:15:ed:fc:a7:b3:ad:9c:f3:fb:fb:
58:4d:43:8d:8e:b0:8b:7e:e1:98:7c:2b:c6:bd:bc:31:2a:2c:
4e:04:64:fd:97:f4:ce:27:9f:db:ac:34:8f:a9:33:88:53:2c:
1e:fd:0d:a4:89:0e:cc:5f:7a:01:ad:e4:b5:51:3c:b9:69:6e:
bf:19:5a:e0:4a:c5:8f:ec:a3:fa:99:71:08:c9:f7:84:c3:fc:
3b:bc:3b:8b:8e:a0:c8:71:ad:29:4d:d0:18:fe:8f:a1:59:a8:
8d:db:8e:4f:11:70:b8:25:68:84:a9:63:13:dc:e5:a7:3e:cd:
49:63:5f:d5:5d:5c:44:2c:52:37:17:55:15:98:16:5e:39:1d:
83:a6:2e:30:f2:fc:de:80:86:55:1b:b5:3e:e9:35:51:31:11:
ab:14:81:99:ce:e6:7e:32:c1:66:d7:33:cb:e3:ae:7e:29:cd:
5b:71:a0:32
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFR0EBY3f13IZvRYUK8MhiPirmREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNTAyMDQxODEzMDlaFw0yNjAyMDMxODE4MDlaMDMxMTAvBgNV
BAMTKEJCREZCQTJGMkU1RjBBOTlEMTZBQUVENjc2Q0FFQjg0MzA2OEJCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OGMXLcOt6zaa4cl68v5X7b5A
SwmixkCXyxCmoyMBentBkrx2tdRJRvvuC2bxujsrJfJP+g7mdVk/bU1sKW1dMjsC
iZBB4PGIUleHpuv3CDjDBrgboMxs3xG/0Vj/pW7JMoNiw8EkJJr06e8KXS9fyvKW
g4YkpMuLaiDVzmPfvkN/f8Ojw0mFk6b2qzGt9C9eolS1sV6cGdYKwWdR8dZVuw7i
4ajMdm+w0cOqmE5hle5jsDRhywkh5OwC+ION5wMkuX+a5b+bJTBau+eVaRD171T2
I+1vhnF0+q9Emi2pMXK+m6K0N9NDu2xcPtJ/gtKlWcjVyIbHW4hWWRcSKsWBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUu9+6Ly5fCpnRaq7WdsrrhDBouy4wHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzMTJlMzEzMzMxMmUzMTMyMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYN5
MA0GCSqGSIb3DQEBCwUAA4IBAQAGvOgDsLrsqBVhvdSNSdY5h7ffv6VTNHkxsfVL
iJ5Bu+juXvQRs5V0dLp7r61UEMMKBj8HrpKr2LBR7oVYQwMiuOJ8lj4513zfDgt7
7crOcRXt/KezrZzz+/tYTUONjrCLfuGYfCvGvbwxKixOBGT9l/TOJ5/brDSPqTOI
Uywe/Q2kiQ7MX3oBreS1UTy5aW6/GVrgSsWP7KP6mXEIyfeEw/w7vDuLjqDIca0p
TdAY/o+hWaiN245PEXC4JWiEqWMT3OWnPs1JY1/VXVxELFI3F1UVmBZeOR2Dpi4w
8vzegIZVG7U+6TVRMRGrFIGZzuZ+MsFm1zPL465+Kc1bcaAy
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:41 2025 by rpki-client