
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a34303a3a2f34322d3432203d3e20323733313334.roa
File: 323830333a353435303a34303a3a2f34322d3432203d3e20323733313334.roa (raw, json)
Hash identifier: G1iFN7dI5l7kyrFmdehjumXtkfwbV0+H5reJCJStpJc=
Subject key identifier: 91:74:65:CF:FE:C0:BD:0C:0C:34:09:58:B8:9A:B9:13:F1:ED:33:BF
Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
Certificate serial: 3A73507F7403E968D96B492DA178288920B946BC
Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a34303a3a2f34322d3432203d3e20323733313334.roa
Signing time: Mon 03 Nov 2025 01:25:02 +0000
ROA not before: Mon 03 Nov 2025 01:20:02 +0000
ROA not after: Mon 02 Nov 2026 01:25:02 +0000
asID: 273134
IP address blocks: 2803:5450:40::/42 maxlen: 42
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl
rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 15:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:73:50:7f:74:03:e9:68:d9:6b:49:2d:a1:78:28:89:20:b9:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
Validity
Not Before: Nov 3 01:20:02 2025 GMT
Not After : Nov 2 01:25:02 2026 GMT
Subject: CN=917465CFFEC0BD0C0C340958B89AB913F1ED33BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:5b:d7:85:28:0d:fd:a5:42:ed:91:98:eb:
94:b5:53:04:24:1f:b9:f1:aa:db:45:32:96:5c:2b:
20:22:a5:ca:7d:8a:d2:2f:e2:50:6c:d4:d6:bf:07:
db:78:98:ab:b3:78:7d:d6:10:bf:95:8e:3f:f8:9b:
eb:d3:39:5d:33:2e:a7:6e:11:1f:d5:90:78:1e:91:
6a:a2:0d:d0:bd:da:58:31:80:f9:b8:64:6a:4e:12:
14:24:f5:38:c8:14:f8:24:4e:b8:14:85:9b:82:76:
80:c9:c5:ea:fa:84:23:7c:4a:0e:1a:c4:13:80:46:
ef:97:6b:b7:8f:bd:f3:bb:10:9d:1d:be:99:73:ed:
c5:bd:53:10:a3:ab:e8:7b:2a:dd:b2:86:16:68:e0:
22:ce:92:86:8e:a8:20:da:a1:24:01:29:2b:d6:0f:
23:10:59:ec:46:45:46:9d:0c:72:09:f4:4d:c0:e0:
f8:c8:a2:bb:fd:b6:86:e6:44:74:70:0f:2b:d4:9a:
e9:c2:61:b6:46:83:9f:e9:a6:6f:91:58:ef:db:d6:
c1:2f:67:67:09:c2:19:9a:2c:ee:4e:35:c8:fa:a1:
f2:47:34:a3:f0:42:43:4b:c0:25:f5:18:7e:43:0e:
73:89:3f:36:67:dc:81:90:b8:05:56:5a:f7:78:34:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:65:CF:FE:C0:BD:0C:0C:34:09:58:B8:9A:B9:13:F1:ED:33:BF
X509v3 Authority Key Identifier:
keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a34303a3a2f34322d3432203d3e20323733313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5450:40::/42
Signature Algorithm: sha256WithRSAEncryption
3e:82:c4:72:fc:cb:64:6a:92:4a:97:4d:03:7e:99:40:73:e4:
07:9d:e0:98:f1:55:20:74:8a:68:4b:44:fe:71:c2:2c:04:6d:
92:7a:fc:03:9c:a7:34:7f:99:fd:ca:db:2c:38:e9:67:f5:a8:
6a:d6:cc:e0:1e:25:70:8f:2d:2e:4a:48:5c:b8:ba:27:22:30:
e2:75:3d:dd:ca:f4:bb:16:5e:30:6a:97:59:4c:17:14:ea:09:
8a:51:68:7a:07:fb:58:c2:0a:7c:ca:c6:e6:2d:df:fb:b3:4d:
c0:ad:00:27:1f:eb:0c:92:76:11:54:cc:64:ff:85:fc:89:81:
86:35:d2:68:28:8f:ea:a9:26:79:24:c5:a8:4b:50:f3:ec:11:
6e:72:1d:73:45:fe:a0:de:0b:71:e8:8a:66:d7:53:30:62:33:
f6:e4:e9:cf:0c:71:fc:66:36:fd:fe:5d:81:b8:30:68:ce:d1:
a1:02:f7:b8:2d:ae:7a:fd:6b:5e:1c:a5:a5:b6:ca:af:fa:fb:
0e:1a:52:56:a2:b2:13:aa:41:f7:72:df:49:3f:fc:58:fa:f8:
12:c6:00:61:fa:cc:de:1d:fb:7d:3a:5c:2f:3d:1c:0b:ed:27:
dc:7e:3d:93:55:ba:ca:d6:13:c1:b8:ac:b5:63:4c:c0:6a:a3:
ce:96:86:c4
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOnNQf3QD6WjZa0ktoXgoiSC5RrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB
OTdGMzI3QzAeFw0yNTExMDMwMTIwMDJaFw0yNjExMDIwMTI1MDJaMDMxMTAvBgNV
BAMTKDkxNzQ2NUNGRkVDMEJEMEMwQzM0MDk1OEI4OUFCOTEzRjFFRDMzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzc1vXhSgN/aVC7ZGY65S1UwQk
H7nxqttFMpZcKyAipcp9itIv4lBs1Na/B9t4mKuzeH3WEL+Vjj/4m+vTOV0zLqdu
ER/VkHgekWqiDdC92lgxgPm4ZGpOEhQk9TjIFPgkTrgUhZuCdoDJxer6hCN8Sg4a
xBOARu+Xa7ePvfO7EJ0dvplz7cW9UxCjq+h7Kt2yhhZo4CLOkoaOqCDaoSQBKSvW
DyMQWexGRUadDHIJ9E3A4PjIorv9tobmRHRwDyvUmunCYbZGg5/ppm+RWO/b1sEv
Z2cJwhmaLO5ONcj6ofJHNKPwQkNLwCX1GH5DDnOJPzZn3IGQuAVWWvd4NM/XAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUkXRlz/7AvQwMNAlYuJq5E/HtM78wHwYDVR0j
BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0
M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy
QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy
MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz
OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzQz
MDNhM2EyZjM0MzIyZDM0MzIyMDNkM2UyMDMyMzczMzMxMzMzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BigDVFAAQDANBgkqhkiG9w0BAQsFAAOCAQEAPoLEcvzLZGqSSpdNA36ZQHPkB53g
mPFVIHSKaEtE/nHCLARtknr8A5ynNH+Z/crbLDjpZ/WoatbM4B4lcI8tLkpIXLi6
JyIw4nU93cr0uxZeMGqXWUwXFOoJilFoegf7WMIKfMrG5i3f+7NNwK0AJx/rDJJ2
EVTMZP+F/ImBhjXSaCiP6qkmeSTFqEtQ8+wRbnIdc0X+oN4LceiKZtdTMGIz9uTp
zwxx/GY2/f5dgbgwaM7RoQL3uC2uev1rXhylpbbKr/r7DhpSVqKyE6pB93LfST/8
WPr4EsYAYfrM3h37fTpcLz0cC+0n3H49k1W6ytYTwbistWNMwGqjzpaGxA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:34:19 2025 by rpki-client