
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
File: 3139312e39372e35322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: zelILFOhZfVJb9m/ux5h3KYLjhyjJyjaJKPt/4OmOxo=
Subject key identifier: 51:EC:02:B3:51:F7:64:6F:50:1F:A7:F4:FE:13:20:E8:BF:0E:2C:64
Certificate issuer: /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial: 3BAA4214E1C36C89AEA04D6EB06E05396FBBB60C
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
Signing time: Tue 05 Aug 2025 20:25:00 +0000
ROA not before: Tue 05 Aug 2025 20:20:00 +0000
ROA not after: Tue 04 Aug 2026 20:25:00 +0000
asID: 18678
IP address blocks: 191.97.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:aa:42:14:e1:c3:6c:89:ae:a0:4d:6e:b0:6e:05:39:6f:bb:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
Validity
Not Before: Aug 5 20:20:00 2025 GMT
Not After : Aug 4 20:25:00 2026 GMT
Subject: CN=51EC02B351F7646F501FA7F4FE1320E8BF0E2C64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:f5:8c:0f:ad:4c:60:37:0e:72:03:91:bd:
87:d5:7d:47:9f:05:b4:40:25:99:51:9c:eb:50:5c:
85:ea:67:36:96:bc:67:6b:eb:8c:0d:83:74:3d:7e:
4f:80:31:b4:b3:d8:0a:6a:20:0e:53:d2:23:9c:36:
59:bc:a6:f2:e0:4e:e3:66:77:6c:3e:50:40:c7:04:
37:b6:86:7f:fc:8e:e7:69:39:ca:b8:2a:ba:73:04:
1e:83:9b:50:a0:72:53:5c:f6:cd:fc:f6:62:cd:33:
a8:1f:f1:4d:3e:cd:01:b2:78:6f:a1:c3:79:f4:8e:
5c:3c:d9:14:79:bc:4d:bb:84:bb:63:e6:de:25:d1:
87:db:d9:f2:54:4a:d4:4c:24:f8:61:39:98:20:b1:
f7:97:19:43:22:b7:fb:08:14:eb:04:32:2c:f0:2d:
1b:df:02:12:c4:bf:2d:30:e5:a2:52:db:72:29:85:
b7:c4:12:ba:9c:a5:be:70:4e:2c:68:3c:c7:37:63:
82:54:89:9b:05:13:ee:c8:78:95:f6:96:47:99:ee:
ba:af:d2:d0:5a:cf:f7:74:c3:65:52:fd:25:f4:24:
49:b5:33:3d:7b:f7:19:3b:e5:53:25:10:4f:f7:7a:
80:46:f4:de:70:f8:d9:30:2c:a8:a2:ae:7d:a0:bc:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:02:B3:51:F7:64:6F:50:1F:A7:F4:FE:13:20:E8:BF:0E:2C:64
X509v3 Authority Key Identifier:
keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35322e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.52.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3c:4e:12:fa:48:5c:59:b0:2e:b8:e9:02:fb:d2:bc:5b:50:
99:4a:1f:1c:1e:e6:22:a4:27:36:f0:18:db:65:48:7a:1a:24:
bd:57:6b:5f:24:f7:80:a6:a7:24:5c:01:51:23:f0:18:e2:80:
74:2e:98:dd:03:0a:9a:96:7e:57:2c:46:18:68:92:c8:98:3b:
78:59:be:09:74:1a:66:f7:b4:36:d3:b5:16:ae:95:5e:b6:87:
b7:a5:55:e1:08:7b:fc:82:8a:62:96:e9:6e:f2:0f:71:c5:78:
79:44:36:a5:36:82:7f:57:6f:c2:73:8f:f0:68:95:81:c7:59:
90:45:1a:32:b4:31:c4:6d:f8:53:97:c6:86:ec:35:85:f8:57:
b6:15:58:65:6d:31:8e:a9:a1:48:11:64:0d:63:84:88:ab:8f:
79:da:63:47:3e:ec:cc:54:6a:d8:b8:ce:0c:c7:7e:e5:20:2e:
aa:9d:fa:91:64:94:53:b1:19:c5:40:69:06:49:22:ba:e4:cb:
de:79:98:53:6a:37:6e:d0:e4:0b:61:80:43:17:40:d1:7c:95:
d6:65:de:e5:7d:a8:1d:85:ab:e5:36:d7:e7:2f:3d:fe:2c:48:
49:d5:64:56:c8:94:2c:72:b0:6f:95:e2:f6:9e:05:de:06:d8:
f6:78:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:14 2025 by rpki-client