
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
File: 34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa (raw, json)
Hash identifier: KSQf844yl3THpESi8ejIbnSA8FtZh1VVEqb/kNiHh8c=
Subject key identifier: 58:4F:56:18:45:11:16:39:E4:18:68:5F:96:56:14:58:D1:76:80:E5
Certificate issuer: /CN=1B0F0F43ADFB6665EE40662998FE2F940C303C66
Certificate serial: 3D9A069DEDFC9155028B01F2D5C8C1B65A1B7E97
Authority key identifier: 1B:0F:0F:43:AD:FB:66:65:EE:40:66:29:98:FE:2F:94:0C:30:3C:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
Signing time: Tue 04 Feb 2025 18:15:04 +0000
ROA not before: Tue 04 Feb 2025 18:10:04 +0000
ROA not after: Tue 03 Feb 2026 18:15:04 +0000
asID: 266735
IP address blocks: 45.231.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.crl
rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9a:06:9d:ed:fc:91:55:02:8b:01:f2:d5:c8:c1:b6:5a:1b:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B0F0F43ADFB6665EE40662998FE2F940C303C66
Validity
Not Before: Feb 4 18:10:04 2025 GMT
Not After : Feb 3 18:15:04 2026 GMT
Subject: CN=584F561845111639E418685F96561458D17680E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:d1:8c:51:71:3e:40:06:01:d3:b9:a4:de:
90:cc:07:b1:26:08:56:68:a0:bd:14:b1:0c:5b:b2:
8e:d4:ca:b0:9c:76:a9:5b:19:c7:a9:78:bc:53:c6:
de:6b:35:19:d5:ae:37:dd:7c:8a:2c:2d:00:5b:a0:
22:84:ac:93:ab:50:58:10:f0:93:cd:f8:c8:74:a1:
e1:53:61:dd:07:f9:ac:d5:ec:a4:8e:95:2b:8c:c1:
a7:4a:3e:7c:ae:1d:39:ef:6b:8a:95:4e:16:25:e2:
e5:fe:11:38:c4:22:d9:33:b4:6b:ca:79:3b:58:37:
8c:69:a6:f9:e6:26:ec:c5:a1:ff:3d:51:41:a1:83:
28:83:9c:d1:a2:78:b7:28:7d:96:7e:50:9d:74:8a:
92:0c:4e:44:74:cf:fc:6b:90:7d:9a:70:a2:4b:c6:
f9:9c:8b:40:f8:e6:9e:c0:ef:27:48:b0:2d:f5:32:
ca:fe:c3:de:d3:bd:0f:6f:b1:1c:41:46:a8:8a:35:
95:c7:53:15:72:26:19:9c:c7:5d:c0:6f:f7:87:74:
a0:b9:3f:b8:29:3a:a7:c5:23:f2:4f:f5:d4:55:74:
d7:d8:5b:f5:1b:64:16:c9:60:c3:10:85:a6:58:59:
4b:b6:d4:3a:91:78:9c:04:64:9d:9c:2a:06:f0:1e:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:56:18:45:11:16:39:E4:18:68:5F:96:56:14:58:D1:76:80:E5
X509v3 Authority Key Identifier:
keyid:1B:0F:0F:43:AD:FB:66:65:EE:40:66:29:98:FE:2F:94:0C:30:3C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.224.0/22
Signature Algorithm: sha256WithRSAEncryption
88:34:09:cd:da:c8:f3:ed:d0:99:d8:d1:06:f1:da:d9:4a:43:
ce:12:d1:a5:0f:18:1b:ab:3c:3e:57:d9:69:cd:93:49:fd:4b:
fc:5c:37:6d:4f:74:7c:8a:a5:ea:84:a9:fd:36:a4:44:10:39:
df:b2:69:30:db:af:48:6e:39:15:67:34:28:9c:66:59:15:73:
b6:8c:e0:dd:33:12:32:d3:56:20:f2:d0:2d:c5:99:4a:0a:a6:
b2:99:e3:37:1e:d0:09:07:31:78:e3:b8:ef:e7:a5:6a:26:bd:
fe:dc:72:a5:9e:77:3d:77:d8:fd:a6:e3:6f:57:65:0c:a7:b7:
cf:be:7b:70:62:d9:9e:80:0e:86:c9:2d:0a:be:46:b2:72:bc:
cf:ad:a9:4a:3c:2e:f7:fb:72:b7:b6:78:bc:8a:3a:c5:67:84:
34:60:b4:1a:b8:24:63:73:8a:62:3b:9f:da:58:d7:6c:f3:b7:
a8:2a:5a:6c:94:ea:55:ef:40:ac:a5:fe:15:4e:bb:e9:1a:ff:
47:5c:67:8b:36:61:ea:a8:77:09:66:d6:25:aa:aa:0d:60:7f:
14:21:0f:02:41:99:18:a5:6e:0b:8e:dc:d4:7e:e8:da:c3:76:
56:9b:fe:ae:88:3a:82:5d:a5:6f:40:65:a4:44:4c:8a:c0:d6:
28:b2:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:25:14 2025 by rpki-client