
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139393035.roa
File: 3139302e382e3132382e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier: mrYXTHW9mbGZkiiuucYK50KAbKy6MLpfHfNiql3Tv7g=
Subject key identifier: 61:D3:53:93:9A:A6:55:F5:33:91:01:B1:A9:63:B7:FF:6D:34:1B:85
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 50DB456958E3522107AF7E86555E4059A550A60D
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139393035.roa
Signing time: Tue 04 Feb 2025 18:42:32 +0000
ROA not before: Tue 04 Feb 2025 18:37:32 +0000
ROA not after: Tue 03 Feb 2026 18:42:32 +0000
asID: 19905
IP address blocks: 190.8.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 01:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:db:45:69:58:e3:52:21:07:af:7e:86:55:5e:40:59:a5:50:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:32 2025 GMT
Not After : Feb 3 18:42:32 2026 GMT
Subject: CN=61D353939AA655F5339101B1A963B7FF6D341B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:23:ff:4d:0e:73:11:7f:8b:e2:9f:2e:6e:
4f:74:88:09:7f:60:80:c0:2f:b5:0e:86:f9:3c:0d:
90:82:ac:68:5d:83:fd:5d:e0:6d:77:61:0f:b9:15:
a5:4d:d5:64:30:aa:40:1d:0c:c9:41:f7:54:b0:7a:
c3:ac:1c:e6:04:19:1e:ee:1b:80:d7:9e:98:4e:47:
8a:22:4e:ca:ec:7b:87:b5:68:2d:fe:22:52:97:09:
0f:e7:d1:4f:c2:7f:f2:01:d6:57:86:f8:4b:aa:bc:
93:8b:12:5d:98:78:0c:3f:db:cc:22:c4:91:06:99:
95:f3:d3:e9:0b:d0:08:9b:b9:78:7e:b1:51:20:33:
aa:2b:9f:4f:56:ac:1b:2f:63:ab:85:9d:18:08:43:
27:64:57:b4:48:88:09:6a:f9:00:ec:b1:b2:8f:b5:
3a:11:a7:d9:62:a3:2a:89:22:f8:50:56:7b:16:f6:
ce:05:39:b8:1e:77:a0:86:dc:75:33:55:11:c4:37:
09:22:92:da:06:63:ce:b1:59:f6:74:17:2f:45:20:
aa:3c:f9:be:f0:65:f5:fc:bc:ef:81:11:7a:ad:17:
cd:14:f3:c7:13:c4:56:cf:ca:36:ff:84:51:45:4a:
4e:7b:40:98:ba:df:51:17:cf:b1:ab:34:d3:cb:97:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:53:93:9A:A6:55:F5:33:91:01:B1:A9:63:B7:FF:6D:34:1B:85
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3132382e302f31392d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.8.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:e6:d2:e3:e6:d6:1d:93:29:18:a3:11:fc:b2:2a:33:8a:93:
72:02:38:17:38:0c:d0:f6:75:66:4a:ba:40:d5:01:e0:20:90:
76:b0:7c:37:fe:f1:d5:6f:74:e8:46:66:9a:58:ff:cd:c4:df:
77:9b:6e:25:32:9b:25:38:84:5a:e4:6c:4c:c7:d0:7a:6e:34:
6f:2f:3f:3c:d1:6f:5e:12:a2:6e:2a:68:9e:8a:97:e8:e8:cf:
e4:47:88:12:56:65:ed:5c:99:74:79:0e:4e:36:2a:99:1c:48:
64:61:97:00:2d:9f:bb:be:4a:52:33:4e:fb:b7:2a:f4:d9:8b:
2b:89:2a:f6:ae:a8:95:a0:c6:f1:4a:7a:c7:87:0c:a9:3d:bb:
2e:0d:30:24:a8:44:b5:f1:03:76:cf:41:e5:ec:58:a3:5e:76:
e6:91:4b:5a:98:d6:5e:90:4e:c9:32:fc:3e:16:16:d8:51:bb:
43:9b:2a:91:db:1f:b7:5f:8a:ee:2f:cb:cc:e7:b5:6b:7d:8c:
5e:71:d9:9e:f1:8a:10:86:b1:f5:1b:a5:7e:5c:df:9d:15:b6:
b5:11:71:5e:12:2a:0f:27:fe:6a:7a:b9:c6:d6:49:01:6c:30:
d9:fc:0e:38:59:36:d3:5d:51:4c:ea:15:33:72:ac:8b:82:80:
5c:57:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:54 2025 by rpki-client