
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
File: 3230312e3231372e35392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier: NcZBle0XW2txngmz+DljyAkvzjw++0B+PLHY4q9xEJY=
Subject key identifier: D5:9B:E6:4B:8D:40:B7:2B:A5:4B:E8:44:35:BC:52:2D:00:11:8B:1B
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 2B8369FEB433468A5D2B8A7662892ED111BAADAE
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
Signing time: Tue 04 Feb 2025 18:31:16 +0000
ROA not before: Tue 04 Feb 2025 18:26:16 +0000
ROA not after: Tue 03 Feb 2026 18:31:16 +0000
asID: 27768
IP address blocks: 201.217.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:83:69:fe:b4:33:46:8a:5d:2b:8a:76:62:89:2e:d1:11:ba:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Feb 4 18:26:16 2025 GMT
Not After : Feb 3 18:31:16 2026 GMT
Subject: CN=D59BE64B8D40B72BA54BE84435BC522D00118B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:2b:28:db:7c:04:09:17:cc:9f:79:fe:27:
37:1b:e1:ea:30:30:bf:3b:33:c9:31:c4:6c:0d:b2:
f3:13:67:52:9a:da:76:27:51:fb:2f:e5:20:95:47:
3a:48:73:d5:64:42:ce:02:f0:48:1f:88:b5:16:ee:
9a:50:1d:1e:ec:2a:62:af:35:12:ca:c8:a6:12:9e:
97:cc:f2:d6:88:bd:85:32:86:2c:20:87:4b:9c:42:
36:4b:38:01:00:57:01:fd:23:9b:8f:62:b4:e1:2f:
7c:2b:e1:e8:e1:ba:47:f6:99:71:10:ea:6a:b3:cb:
15:20:8c:19:d3:9a:8b:5c:cf:56:cb:ef:10:30:9e:
2e:f8:9d:d0:aa:3a:ab:31:e8:72:30:fe:f2:22:fb:
9f:8d:17:3e:6b:48:31:a0:dd:d0:a8:25:d7:61:a1:
bc:d8:a1:69:ad:76:43:ad:4e:37:6c:f6:eb:62:a8:
86:d1:83:7b:f0:65:42:48:ae:ff:b9:b0:78:0c:c9:
99:9d:47:af:80:2b:d5:36:b2:d6:a5:f6:56:cf:d4:
f5:d6:2f:4d:c0:65:02:ee:a4:b7:8c:b8:e6:73:38:
de:70:c3:4c:90:23:77:dd:78:18:24:72:5e:a0:0b:
1d:a8:72:43:20:20:53:69:4e:47:63:9c:cb:eb:2b:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:E6:4B:8D:40:B7:2B:A5:4B:E8:44:35:BC:52:2D:00:11:8B:1B
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.59.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b0:c6:10:c6:96:35:02:76:35:c9:bd:49:f1:c8:20:35:e3:
63:1a:7b:cd:b8:20:39:0b:93:8e:de:1b:e4:a1:e2:e3:34:22:
25:c2:44:f0:4e:64:de:06:c8:35:c7:e8:0c:10:03:31:93:50:
22:30:12:19:7a:66:f4:a1:93:9d:91:f9:1e:b4:69:8b:09:61:
3e:54:1b:e1:7c:eb:d8:74:35:95:f6:80:94:77:85:05:58:00:
00:5d:b4:35:72:43:d6:83:0f:34:6c:11:e5:40:c1:3a:af:b3:
d1:6f:94:36:10:30:af:81:fc:e9:8f:a8:1c:2b:0c:b5:28:e7:
54:30:c7:a9:49:89:5a:22:13:84:3e:ba:b1:59:72:21:5d:87:
fa:f1:26:6c:d0:80:08:61:fc:c3:17:43:b2:61:9e:39:ef:5b:
86:99:13:13:ee:81:26:63:f5:38:ba:76:4f:69:e9:72:c5:13:
5b:ba:a3:2e:52:68:ac:4f:15:8b:a4:dd:4a:7b:c0:58:91:38:
6e:eb:04:52:49:cb:46:4f:5f:6f:af:f1:17:4c:ed:f6:ac:47:
b4:0e:12:73:d1:63:4a:b5:32:03:d2:b2:a8:9e:01:df:9d:70:
ac:50:bf:a1:1e:ed:9f:d7:39:b4:cb:ef:e6:41:1f:43:c7:a9:
3f:66:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:26:35 2025 by rpki-client