
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
File: 3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa (raw, json)
Hash identifier: BA2yhalZUb+zdzEPBKr7vIJI1jMpouDHxeNKzx1tAdw=
Subject key identifier: 98:DB:22:42:A2:AA:FA:77:82:7C:80:DB:CC:0A:F9:E8:58:55:BB:15
Certificate issuer: /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial: 24DCE2CEEDEC2E182D4001E243CBCEDD620FB309
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
Signing time: Tue 04 Feb 2025 19:57:50 +0000
ROA not before: Tue 04 Feb 2025 19:52:50 +0000
ROA not after: Tue 03 Feb 2026 19:57:50 +0000
asID: 265780
IP address blocks: 168.227.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:dc:e2:ce:ed:ec:2e:18:2d:40:01:e2:43:cb:ce:dd:62:0f:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Validity
Not Before: Feb 4 19:52:50 2025 GMT
Not After : Feb 3 19:57:50 2026 GMT
Subject: CN=98DB2242A2AAFA77827C80DBCC0AF9E85855BB15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:2b:c8:40:1c:75:a1:71:13:d9:6f:05:8c:
87:21:6c:21:54:6c:79:56:74:b9:a9:f7:fc:e7:63:
72:4c:00:70:6e:bf:7c:38:0d:58:76:a6:97:ac:92:
e1:ac:77:83:71:bc:63:40:c5:4b:36:c6:f5:b8:9e:
81:6f:d7:98:e4:9e:32:59:24:71:19:80:e2:53:44:
e4:aa:87:77:d2:17:7c:84:d9:95:c0:3f:b3:9a:1f:
a2:a4:72:18:3d:97:2e:2c:21:f5:1e:7b:f9:4d:72:
18:c7:35:fe:8d:fe:89:0b:bd:4e:ce:04:12:36:b9:
19:86:7b:0e:b2:2f:45:e1:bd:ef:88:27:34:d1:33:
5a:1e:16:19:ea:8c:bc:ba:d1:1b:f6:cd:c7:a1:e3:
a2:c7:26:71:3f:7a:cb:da:b8:57:7a:dc:ec:92:32:
24:11:48:56:c2:52:85:17:fe:45:6a:ad:53:d7:e3:
c0:23:43:7e:20:d1:89:00:20:2f:82:10:9e:c9:b6:
f0:34:a7:45:a4:1b:cc:ef:a1:d0:1a:d0:db:f2:05:
d1:e7:d4:76:ad:0e:26:2c:48:2c:44:91:d4:19:ae:
39:3c:11:40:97:40:a9:a6:ad:5f:d8:70:9a:49:65:
43:0b:34:11:95:20:39:7e:b6:0e:5b:17:a4:12:52:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:22:42:A2:AA:FA:77:82:7C:80:DB:CC:0A:F9:E8:58:55:BB:15
X509v3 Authority Key Identifier:
keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a7:bf:6b:85:be:cc:0e:2f:36:43:43:e7:aa:18:96:0c:6e:
33:b5:4a:c9:d0:0c:7d:2e:7e:9e:34:50:ff:7b:ec:a0:68:98:
06:c2:9c:db:31:4b:59:a3:0a:6e:e3:eb:2f:65:f0:a8:aa:4a:
67:34:6d:32:62:4f:08:cf:0a:3c:43:97:7b:19:d9:35:b0:db:
5e:a1:e7:7b:c2:05:ca:ed:e7:d2:67:14:7e:dc:dd:0d:1c:1a:
d1:8a:7f:af:17:9b:50:3e:c3:bd:7b:4d:15:48:06:ba:d8:ae:
9a:6d:97:95:5b:8b:73:2f:5a:b1:6e:7d:b2:21:cf:74:a0:91:
64:36:7a:f9:53:0d:c4:3d:b1:ef:ae:c8:1a:4b:1b:48:1e:98:
c0:1a:a1:9b:5a:62:19:43:c2:c2:e5:dc:37:f4:c9:a0:ac:95:
c5:04:8b:a5:cb:65:88:54:98:b4:ee:c4:a8:2a:22:89:e4:fd:
6d:30:42:7a:61:9a:c7:66:97:4e:69:5f:2a:2d:32:e8:88:09:
7f:c3:74:e7:da:41:26:8f:1a:d8:8e:bb:2a:a4:07:67:9a:ad:
84:b1:fe:e1:8b:00:4c:8f:d6:c7:64:10:57:7a:17:d5:08:e2:
ef:fe:f4:29:8b:14:69:72:c7:d7:78:50:10:d8:24:7d:80:f3:
8b:97:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:17:24 2025 by rpki-client