
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa
File: 3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier: 00J5sVSy5ChWY1KIIVpm77Ws7PJSJ0lkmHqHcGVQgxk=
Subject key identifier: 6B:9D:AC:66:33:8D:FD:AF:4E:64:AA:AB:5C:8A:CE:1B:F6:13:35:8E
Certificate issuer: /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial: 661BC94B88E85571B11D27D41FE4376A72ABDB1E
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa
Signing time: Tue 04 Feb 2025 18:33:53 +0000
ROA not before: Tue 04 Feb 2025 18:28:53 +0000
ROA not after: Tue 03 Feb 2026 18:33:53 +0000
asID: 28408
IP address blocks: 167.249.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1b:c9:4b:88:e8:55:71:b1:1d:27:d4:1f:e4:37:6a:72:ab:db:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Validity
Not Before: Feb 4 18:28:53 2025 GMT
Not After : Feb 3 18:33:53 2026 GMT
Subject: CN=6B9DAC66338DFDAF4E64AAAB5C8ACE1BF613358E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:11:47:0f:db:d8:cc:85:64:3f:03:59:05:72:
1c:14:d3:41:c0:6a:7c:0e:90:1d:0f:39:cb:38:05:
02:02:08:ef:11:21:82:57:b6:38:29:a5:b4:00:cb:
4b:4e:c3:07:95:88:45:40:af:52:af:af:66:81:a7:
0a:48:70:02:9f:df:ff:90:f4:a4:e5:c6:fd:68:c4:
d7:04:ea:d3:c6:99:f2:68:1f:a8:90:43:18:77:b3:
d2:5b:cd:39:6a:67:e3:94:57:9d:7e:cc:56:e9:94:
93:6f:3d:67:ec:e0:a9:63:9c:ba:50:7c:c9:34:9b:
2a:b6:87:f5:84:7c:2a:40:f3:e5:e9:e6:4a:66:28:
37:94:98:c6:a5:c7:f5:1e:0c:ad:ee:69:a9:0d:90:
d9:f9:ad:53:80:56:97:17:db:bf:4c:6b:20:a3:e6:
bb:8b:72:aa:8b:8d:80:ac:4b:f1:56:96:a6:f0:df:
b0:a7:f3:e0:90:2e:cf:16:b6:54:29:6e:7f:02:67:
b4:78:a0:75:2d:2f:29:35:aa:20:24:c0:80:56:51:
3e:2c:f7:e3:01:c6:0d:5b:01:29:02:ad:7e:e1:e1:
cc:c8:f4:c4:80:84:25:4d:4c:98:2e:8b:c1:83:e2:
46:f2:da:8a:64:5d:5a:7f:37:88:67:6e:e4:6a:59:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:AC:66:33:8D:FD:AF:4E:64:AA:AB:5C:8A:CE:1B:F6:13:35:8E
X509v3 Authority Key Identifier:
keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.252.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:31:40:ac:aa:be:da:71:5e:8f:74:4c:cc:38:0b:ae:69:a7:
70:48:d2:9f:e6:4a:f3:fb:ae:11:d3:03:cb:ef:ea:72:9c:a8:
91:98:68:57:0b:2d:86:ba:ee:f2:c2:c4:ce:88:ae:3c:7a:8e:
79:0c:80:71:53:09:08:cc:81:b7:60:b8:2f:da:ce:09:26:cb:
a4:0d:a5:02:52:a2:72:b4:0c:0b:9c:a2:76:d5:08:65:c4:4b:
85:09:76:91:4f:e1:b6:89:cb:90:c0:7a:e2:87:6a:ac:01:72:
c1:f3:86:b5:f1:66:a8:b7:81:16:ac:15:d4:2c:07:c0:9f:3d:
0e:1a:17:65:82:e7:f9:3a:30:23:08:f7:7c:c6:1f:70:9e:92:
aa:c6:b5:6a:38:c4:06:32:83:79:a2:9d:6e:e2:85:69:c2:e2:
c4:b7:7f:31:03:2a:a6:d5:a7:d4:38:d3:4b:a0:ce:5a:c6:b1:
a7:2a:cb:de:e1:b1:af:94:9e:c7:35:d4:b2:fc:7d:b9:69:31:
a1:5a:39:d6:7f:87:31:bd:ae:5d:4e:ba:43:bc:d3:26:f3:86:
55:c9:da:e7:56:4b:26:73:cc:ae:88:e3:10:28:b6:59:85:7f:
52:b5:d7:01:a8:0e:2d:90:09:1f:8c:3f:38:05:8a:a2:ef:16:
a6:37:60:01
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZhvJS4joVXGxHSfUH+Q3anKr2x4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFRDU4NUM3RkY2OTVENTE1QzIxM0NDRDkyRjk4QTI2
QUY4MThENzAeFw0yNTAyMDQxODI4NTNaFw0yNjAyMDMxODMzNTNaMDMxMTAvBgNV
BAMTKDZCOURBQzY2MzM4REZEQUY0RTY0QUFBQjVDOEFDRTFCRjYxMzM1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxEUcP29jMhWQ/A1kFchwU00HA
anwOkB0POcs4BQICCO8RIYJXtjgppbQAy0tOwweViEVAr1Kvr2aBpwpIcAKf3/+Q
9KTlxv1oxNcE6tPGmfJoH6iQQxh3s9JbzTlqZ+OUV51+zFbplJNvPWfs4KljnLpQ
fMk0myq2h/WEfCpA8+Xp5kpmKDeUmMalx/UeDK3uaakNkNn5rVOAVpcX279MayCj
5ruLcqqLjYCsS/FWlqbw37Cn8+CQLs8WtlQpbn8CZ7R4oHUtLyk1qiAkwIBWUT4s
9+MBxg1bASkCrX7h4czI9MSAhCVNTJgui8GD4kby2opkXVp/N4hnbuRqWQAlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUa52sZjON/a9OZKqrXIrOG/YTNY4wHwYDVR0j
BBgwFoAUAe1YXH/2ldUVwhPM2S+Yomr4GNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDk2QTEwQTY1MUUwMUMwMzJGN0YyNUFBMjBBRjMxMUJG
RTM2RjA0Nzc2NjA2MTI1RDM3MEE2Mjc3Mjc2RjI5LzAvMDFFRDU4NUM3RkY2OTVE
NTE1QzIxM0NDRDkyRjk4QTI2QUY4MThENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUVENTg1QzdGRjY5NUQ1MTVD
MjEzQ0NEOTJGOThBMjZBRjgxOEQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q5NkExMEE2NTFFMDFDMDMyRjdGMjVBQTIwQUYzMTFCRkUzNkYwNDc3
NjYwNjEyNUQzNzBBNjI3NzI3NkYyOS8wLzMxMzYzNzJlMzIzNDM5MmUzMjM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/n8
MA0GCSqGSIb3DQEBCwUAA4IBAQCuMUCsqr7acV6PdEzMOAuuaadwSNKf5krz+64R
0wPL7+pynKiRmGhXCy2Guu7ywsTOiK48eo55DIBxUwkIzIG3YLgv2s4JJsukDaUC
UqJytAwLnKJ21QhlxEuFCXaRT+G2icuQwHrih2qsAXLB84a18Waot4EWrBXULAfA
nz0OGhdlguf5OjAjCPd8xh9wnpKqxrVqOMQGMoN5op1u4oVpwuLEt38xAyqm1afU
ONNLoM5axrGnKsve4bGvlJ7HNdSy/H25aTGhWjnWf4cxva5dTrpDvNMm84ZVydrn
Vksmc8yuiOMQKLZZhX9StdcBqA4tkAkfjD84BYqi7xamN2AB
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:51:36 2025 by rpki-client