
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/323830333a373235303a3a2f33322d3438203d3e20323733313732.roa
File: 323830333a373235303a3a2f33322d3438203d3e20323733313732.roa (raw, json)
Hash identifier: tiXPMxw4efnl6ssPq6UCr7FsoaxLJGh64LUtex8qqxI=
Subject key identifier: 89:8E:0F:58:B3:BE:EC:AA:8E:4E:D1:56:E9:5E:F4:25:47:DE:E8:69
Certificate issuer: /CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D
Certificate serial: 505BC6597BA27E24F27F4D147321DEC7AC4269BD
Authority key identifier: CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/323830333a373235303a3a2f33322d3438203d3e20323733313732.roa
Signing time: Tue 04 Nov 2025 20:50:00 +0000
ROA not before: Tue 04 Nov 2025 20:45:00 +0000
ROA not after: Tue 03 Nov 2026 20:50:00 +0000
asID: 273172
IP address blocks: 2803:7250::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl
rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5b:c6:59:7b:a2:7e:24:f2:7f:4d:14:73:21:de:c7:ac:42:69:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D
Validity
Not Before: Nov 4 20:45:00 2025 GMT
Not After : Nov 3 20:50:00 2026 GMT
Subject: CN=898E0F58B3BEECAA8E4ED156E95EF42547DEE869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:eb:be:25:bc:23:7b:86:09:01:52:8e:1e:38:
65:91:6a:08:0a:87:c3:f2:f9:98:a7:73:09:19:8d:
5a:29:ce:6e:3e:ae:63:6e:1c:aa:f8:69:a2:bd:b8:
77:92:0d:05:bd:0e:2f:2b:2c:76:51:fb:44:60:27:
5c:f1:bb:ba:7c:cd:1a:3a:1b:db:66:75:d5:f6:79:
1b:9e:d0:6f:57:44:88:08:5c:81:da:5b:ff:c0:8d:
85:17:3c:37:4b:2f:3e:39:4f:21:1a:f7:5d:34:01:
f0:41:d7:ce:9a:73:b3:a4:2f:d4:2b:cf:cf:ad:cb:
83:6d:1c:71:dd:38:d2:c8:75:1a:2e:a3:e6:8e:a3:
65:14:8c:00:f4:ee:f5:90:64:30:f7:6f:d8:a1:6a:
6f:c3:b3:d7:06:e1:e8:16:b3:f6:ce:29:cb:88:5c:
e4:54:8f:05:eb:57:5e:9b:9c:ba:15:c4:d8:7c:e6:
2f:63:dd:16:6c:8c:c7:d4:ad:61:b6:92:68:97:25:
11:bd:df:0a:1c:c1:a7:bf:0c:ae:66:36:56:d5:b0:
24:20:80:9d:ed:af:8f:fa:d6:43:7b:5e:2f:e0:e4:
5f:95:4c:80:15:c1:d2:bd:aa:00:45:b8:f1:40:0b:
7f:9d:0d:a2:a1:4a:29:46:9a:4b:41:c5:51:78:bc:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:0F:58:B3:BE:EC:AA:8E:4E:D1:56:E9:5E:F4:25:47:DE:E8:69
X509v3 Authority Key Identifier:
keyid:CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/323830333a373235303a3a2f33322d3438203d3e20323733313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7250::/32
Signature Algorithm: sha256WithRSAEncryption
5c:fb:5b:8b:f3:84:5b:01:99:e3:4c:69:20:21:26:a3:cf:cc:
91:a2:9f:73:4e:d9:17:09:ae:4c:f7:f9:4e:1c:91:3c:a6:13:
d2:62:ab:80:df:52:c6:e7:2b:e9:e2:56:58:85:3f:30:0c:2f:
6b:cd:da:a2:36:ce:39:dd:da:51:75:6d:c8:bc:c8:07:02:b3:
e5:9d:68:4a:4d:26:c3:17:2f:75:90:b1:08:18:2d:32:4d:7b:
d5:c5:00:8b:cd:70:43:e3:53:42:5d:45:0e:f4:e3:4c:1f:26:
ee:91:1e:ac:4d:45:04:d9:7c:8a:32:14:14:ad:e5:fa:dd:d3:
3f:33:80:9d:07:b2:ac:1f:36:3b:b9:7b:78:1a:be:9f:99:47:
15:32:99:40:76:f4:f9:7a:68:73:6d:5e:15:20:68:74:03:8d:
ca:7c:0c:63:53:d1:14:8f:cb:80:47:7e:e2:64:6b:b4:fa:3a:
23:8d:63:b8:2b:60:99:1a:2b:99:2c:99:85:f3:e8:d7:b4:3a:
6a:7b:17:ee:c1:a8:69:48:47:0e:f6:94:cd:5b:03:64:dd:2e:
ba:17:fb:51:85:78:33:53:0d:ec:92:67:45:c2:f3:33:53:18:
e4:e5:41:29:6f:5b:bb:68:50:b0:d4:19:a5:13:99:04:1d:5d:
87:17:26:0b
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUFvGWXuifiTyf00UcyHex6xCab0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNzU3QjI2OUUzNUZEOTM4QTgzRkM5OTREMThBQzE2
N0MwRkM4RDAeFw0yNTExMDQyMDQ1MDBaFw0yNjExMDMyMDUwMDBaMDMxMTAvBgNV
BAMTKDg5OEUwRjU4QjNCRUVDQUE4RTRFRDE1NkU5NUVGNDI1NDdERUU4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv674lvCN7hgkBUo4eOGWRaggK
h8Py+ZincwkZjVopzm4+rmNuHKr4aaK9uHeSDQW9Di8rLHZR+0RgJ1zxu7p8zRo6
G9tmddX2eRue0G9XRIgIXIHaW//AjYUXPDdLLz45TyEa9100AfBB186ac7OkL9Qr
z8+ty4NtHHHdONLIdRouo+aOo2UUjAD07vWQZDD3b9iham/Ds9cG4egWs/bOKcuI
XORUjwXrV16bnLoVxNh85i9j3RZsjMfUrWG2kmiXJRG93wocwae/DK5mNlbVsCQg
gJ3tr4/61kN7Xi/g5F+VTIAVwdK9qgBFuPFAC3+dDaKhSilGmktBxVF4vBMRAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUiY4PWLO+7KqOTtFW6V70JUfe6GkwHwYDVR0j
BBgwFoAUzxdXsmnjX9k4qD/JlNGKwWfA/I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COEI1MjlBRDg5ODAyNEJCMDMxNzg4NkU0MjI1Rjc4MkQy
MTAyOUY2REZFNUNDM0ZFMEM2NDRFNEU5RkREQTMyLzAvQ0YxNzU3QjI2OUUzNUZE
OTM4QTgzRkM5OTREMThBQzE2N0MwRkM4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjE3NTdCMjY5RTM1RkQ5MzhB
ODNGQzk5NEQxOEFDMTY3QzBGQzhELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjhCNTI5QUQ4OTgwMjRCQjAzMTc4ODZFNDIyNUY3ODJEMjEwMjlGNkRG
RTVDQzNGRTBDNjQ0RTRFOUZEREEzMi8wLzMyMzgzMDMzM2EzNzMyMzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDclAw
DQYJKoZIhvcNAQELBQADggEBAFz7W4vzhFsBmeNMaSAhJqPPzJGin3NO2RcJrkz3
+U4ckTymE9Jiq4DfUsbnK+niVliFPzAML2vN2qI2zjnd2lF1bci8yAcCs+WdaEpN
JsMXL3WQsQgYLTJNe9XFAIvNcEPjU0JdRQ7040wfJu6RHqxNRQTZfIoyFBSt5frd
0z8zgJ0HsqwfNju5e3gavp+ZRxUymUB29Pl6aHNtXhUgaHQDjcp8DGNT0RSPy4BH
fuJka7T6OiONY7grYJkaK5ksmYXz6Ne0Omp7F+7BqGlIRw72lM1bA2TdLroX+1GF
eDNTDeySZ0XC8zNTGOTlQSlvW7toULDUGaUTmQQdXYcXJgs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:24:58 2025 by rpki-client