
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/34352e3233382e382e302f32322d3234203d3e20323633373735.roa
File: 34352e3233382e382e302f32322d3234203d3e20323633373735.roa (raw, json)
Hash identifier: Z3lz6doNgxOpR++1ttrr4jdZ3ASiFhz8BqShgTMT1fU=
Subject key identifier: 44:D9:4B:83:48:29:62:16:39:C3:FE:85:47:AA:96:A0:37:DB:7C:9B
Certificate issuer: /CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Certificate serial: 3E6B03C51C5032C2E55FC0526D7F893189DE784D
Authority key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/34352e3233382e382e302f32322d3234203d3e20323633373735.roa
Signing time: Thu 25 Sep 2025 14:50:00 +0000
ROA not before: Thu 25 Sep 2025 14:45:00 +0000
ROA not after: Thu 24 Sep 2026 14:50:00 +0000
asID: 263775
IP address blocks: 45.238.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 16:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6b:03:c5:1c:50:32:c2:e5:5f:c0:52:6d:7f:89:31:89:de:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Validity
Not Before: Sep 25 14:45:00 2025 GMT
Not After : Sep 24 14:50:00 2026 GMT
Subject: CN=44D94B834829621639C3FE8547AA96A037DB7C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:31:54:00:9f:71:7e:1e:45:40:7e:37:48:
d7:0c:88:3e:ca:f7:9f:fd:3d:e0:d6:48:d9:f3:df:
c1:ff:2e:0b:4d:3d:6e:43:2d:65:89:2d:c4:6b:32:
44:8f:bd:d1:2a:1d:88:d5:27:32:37:54:42:8e:db:
75:e2:97:30:aa:cc:49:82:5b:5c:bf:1b:61:15:e9:
0e:7a:fd:cd:f0:86:cb:10:7a:ae:15:6c:f9:1a:6c:
8e:c2:30:ca:b0:0e:67:88:7c:a7:70:e9:72:9d:38:
b1:4c:0c:d9:78:89:fd:cb:a3:3f:39:d6:2c:cb:09:
21:e5:dc:e9:f1:36:ba:77:b7:4f:1c:18:05:c6:30:
e6:ed:81:6a:30:dd:f1:2b:14:45:ee:43:5c:d4:0a:
ed:c3:1f:b8:08:e3:a9:82:d7:d2:c3:3b:5b:e6:42:
90:97:8f:aa:1f:3f:df:4a:cd:51:54:2b:00:fa:64:
e2:7f:00:0f:4c:86:94:1e:ec:c3:24:b0:9b:f3:50:
20:ed:2c:8e:00:d1:50:62:aa:62:93:03:37:e2:33:
87:22:8e:ea:89:51:8d:9b:2c:92:92:ed:c9:2b:1b:
66:72:5c:8f:72:1d:e0:6b:f3:e2:2a:d9:a6:05:0b:
ad:31:a7:57:76:1c:08:30:82:b8:6a:6d:97:4d:4f:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:4B:83:48:29:62:16:39:C3:FE:85:47:AA:96:A0:37:DB:7C:9B
X509v3 Authority Key Identifier:
keyid:C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/34352e3233382e382e302f32322d3234203d3e20323633373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.8.0/22
Signature Algorithm: sha256WithRSAEncryption
37:bb:ef:64:09:63:2d:d7:0d:47:3b:d4:e2:ef:0f:54:75:47:
a5:87:c4:1f:5c:bc:0b:c4:18:6c:8d:a2:0c:18:d6:ba:26:5c:
e4:23:19:b0:c6:e1:c3:81:13:1b:b7:d1:86:59:35:75:34:f9:
be:b5:72:e6:5e:b5:1b:9e:f3:af:ea:17:33:af:82:19:91:f1:
34:4c:6b:2d:60:24:b8:07:49:fa:67:fc:9a:ba:31:1c:20:6f:
0e:40:84:75:d5:b6:4d:bd:09:67:ad:eb:de:bf:22:b4:f3:5c:
84:8d:35:58:fa:b2:5c:68:67:e1:42:e6:03:01:a8:54:2d:d0:
8c:9e:43:1a:ed:08:e9:cd:1f:97:9a:3b:49:b4:84:6a:2b:41:
53:e9:2d:85:3c:4e:0f:84:74:9e:0d:34:c1:a3:e3:e3:22:d3:
d8:71:04:f4:8e:19:0c:b3:e0:0a:a3:b6:26:d8:a2:0c:d6:1f:
f2:57:01:bd:bc:19:ce:9f:bc:f3:c7:9d:94:a8:a8:18:93:1b:
5d:06:a2:d6:d5:89:60:ce:8b:27:5b:6d:3e:49:9b:d4:6d:37:
30:c4:4e:23:2f:88:77:79:c5:f9:41:64:6d:48:ae:f7:56:f3:
8e:fa:27:4a:8b:b6:f3:e6:68:c9:50:73:b8:5c:d8:21:cb:ad:
a5:a5:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:30:22 2025 by rpki-client