
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
File: 3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa (raw, json)
Hash identifier: vfgh6G2RKd5aEwQ/ACQa0BTyL9+WlZdh3VaMQqqPCHs=
Subject key identifier: FC:7E:15:93:64:D4:77:C2:51:EB:AF:9A:38:D9:1E:E0:CC:E8:2B:7A
Certificate issuer: /CN=6A21791828146BC17DAE86EA069BF125DBBC3007
Certificate serial: 550942BBA17D9131F31A8AACFEC0958B634907AA
Authority key identifier: 6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
Signing time: Tue 04 Feb 2025 18:26:49 +0000
ROA not before: Tue 04 Feb 2025 18:21:49 +0000
ROA not after: Tue 03 Feb 2026 18:26:49 +0000
asID: 264821
IP address blocks: 138.97.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl
rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:09:42:bb:a1:7d:91:31:f3:1a:8a:ac:fe:c0:95:8b:63:49:07:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A21791828146BC17DAE86EA069BF125DBBC3007
Validity
Not Before: Feb 4 18:21:49 2025 GMT
Not After : Feb 3 18:26:49 2026 GMT
Subject: CN=FC7E159364D477C251EBAF9A38D91EE0CCE82B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:09:0b:07:a4:ec:6a:64:75:89:5e:1e:96:
27:fb:70:63:0d:d1:84:df:f5:0d:ff:7e:4d:1e:5a:
60:7f:55:ee:e7:f6:6e:fc:5e:d5:80:03:1a:a8:3d:
cd:1d:4b:75:bf:ec:0f:31:8a:cb:68:8f:03:9f:0b:
55:59:6c:5b:9c:b7:a8:95:da:f6:89:2b:76:6d:96:
d1:3b:9a:0d:db:c1:7d:50:d2:73:c0:f7:6c:b5:09:
ab:84:a4:14:0e:08:30:ca:63:75:3c:3d:29:61:2a:
4f:68:85:7f:f5:1a:f9:93:47:aa:c5:98:6a:a5:1c:
d3:d5:af:23:5c:65:96:18:84:8f:2b:2f:72:2b:50:
6d:ea:b4:9a:75:7c:be:38:1a:3f:4a:21:cd:bc:ed:
06:b9:83:cf:63:f0:cd:27:b8:21:3a:e2:b0:3e:bc:
c9:46:47:3d:2f:40:f9:08:97:c2:94:1b:4b:cb:22:
f7:0d:e5:3c:95:65:47:6b:db:c8:76:35:c8:80:95:
27:1b:8b:21:dd:27:9c:97:ea:fd:de:6f:42:aa:77:
aa:6f:c3:6f:c3:e8:a8:d2:3f:8c:0a:bb:11:11:bb:
1c:b5:22:74:37:bc:c8:fd:28:28:6e:0a:98:99:51:
43:f6:82:a2:71:06:54:1b:f2:08:90:2c:2d:db:18:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:15:93:64:D4:77:C2:51:EB:AF:9A:38:D9:1E:E0:CC:E8:2B:7A
X509v3 Authority Key Identifier:
keyid:6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:92:bb:d9:57:c1:46:b8:79:4b:1e:db:0c:48:5c:32:c3:7a:
dd:a6:42:98:e5:c8:2b:89:03:8c:56:e2:68:21:83:36:82:90:
07:a3:87:c1:76:fc:37:24:f9:7b:de:60:f2:56:f5:42:8d:e9:
90:38:50:9a:3b:32:e3:8a:62:28:87:dc:89:b2:52:ff:fc:b9:
76:99:42:74:2a:b7:38:5a:e4:d8:80:ed:3e:51:02:07:53:44:
88:9f:b3:bc:17:4f:49:3a:35:b1:ac:52:06:8b:ee:b2:bf:11:
e2:97:86:cf:6c:67:a8:cf:0b:ec:e8:9d:d4:2c:1f:f2:f7:2c:
bd:64:a1:ae:af:c3:9d:7d:b3:97:5a:61:ed:bd:22:19:ea:de:
0e:35:56:0b:09:15:18:f2:59:2b:cc:32:23:9d:7a:9a:4d:72:
07:18:00:61:8b:4a:84:ac:0d:c3:c7:35:69:45:eb:11:f3:3a:
3b:18:bb:0d:62:e6:28:b9:31:84:7e:42:ff:ea:b1:ae:ee:f2:
c0:5d:7c:86:a4:d8:cc:79:05:a0:3b:f5:c8:83:c0:e9:1b:4c:
79:3b:f3:06:9d:c0:d3:c6:16:e3:aa:54:a6:75:3a:77:82:a1:
d4:a2:e9:4e:79:30:4f:09:94:ca:27:04:4c:47:e2:9f:63:e5:
a6:21:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:34:10 2025 by rpki-client