
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203231353939.roa
File: 323830333a3630303a3a2f33322d3536203d3e203231353939.roa (raw, json)
Hash identifier: RSQWMqdWpT5vzABENVTDEYkidJZegkF15IexyuatOCY=
Subject key identifier: DC:A7:55:81:C8:AC:85:7D:F9:E7:36:63:DA:49:2A:A5:50:BA:15:81
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 50F1C5609D6739B20FC665517785EEB218DAC545
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203231353939.roa
Signing time: Fri 24 Oct 2025 14:35:17 +0000
ROA not before: Fri 24 Oct 2025 14:30:17 +0000
ROA not after: Fri 23 Oct 2026 14:35:17 +0000
asID: 21599
IP address blocks: 2803:600::/32 maxlen: 56
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f1:c5:60:9d:67:39:b2:0f:c6:65:51:77:85:ee:b2:18:da:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:17 2025 GMT
Not After : Oct 23 14:35:17 2026 GMT
Subject: CN=DCA75581C8AC857DF9E73663DA492AA550BA1581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:be:5e:75:dc:9e:cb:1e:f7:8b:64:50:05:
49:c2:49:32:9f:93:f3:b6:22:3c:12:0d:08:5b:01:
47:5b:47:a5:b5:96:d8:86:d4:04:b1:04:13:41:9e:
f6:6b:5d:b0:c5:6f:84:db:e0:45:93:e6:05:d2:60:
09:f4:d9:b0:9a:89:ce:28:28:00:af:ee:c7:0b:87:
10:ba:5f:3d:5d:8d:7f:5a:65:8a:0a:b2:bb:90:50:
95:ee:9f:4a:51:4b:ee:ae:34:5c:e7:43:87:b4:63:
6a:fd:3c:af:f8:79:b1:fc:6a:4c:58:ba:60:5f:25:
ba:b9:72:0f:28:43:c6:d6:85:f7:40:1c:37:a9:89:
29:04:f5:a3:2c:41:99:bd:3e:d0:9d:4f:1b:e3:ee:
98:ee:34:33:11:46:5f:4a:55:76:ff:f8:b1:ef:79:
78:23:71:12:35:cc:e7:91:87:1c:01:80:8e:c8:e8:
bf:29:92:b9:af:c6:a0:1b:cf:88:1d:f4:e3:4e:c9:
5d:7f:e4:14:2d:f7:2e:05:b7:68:69:09:e0:54:5e:
8a:82:f3:89:a5:7b:70:09:27:99:42:50:37:e3:aa:
bd:27:7f:4c:80:21:d3:5a:82:35:30:58:18:7f:29:
51:d7:b2:f3:e8:1f:db:c3:f8:b1:5a:75:e8:d8:39:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:55:81:C8:AC:85:7D:F9:E7:36:63:DA:49:2A:A5:50:BA:15:81
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203231353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:600::/32
Signature Algorithm: sha256WithRSAEncryption
42:6a:dd:b8:e9:28:3a:80:71:53:51:89:31:28:a9:25:dd:16:
4b:02:ce:bb:67:90:de:b8:00:4c:0d:8f:b1:90:18:d5:8c:36:
36:e8:44:34:bb:f7:14:55:33:cc:1b:7c:7e:2b:10:bf:71:e5:
8a:1c:31:73:0f:7f:37:af:62:8f:35:2c:45:08:21:98:ec:be:
94:1f:49:ed:8e:d0:97:32:fc:d9:cf:f4:db:6e:d0:cd:58:52:
1f:79:5b:5d:a3:4c:60:db:c7:bd:cb:3e:58:99:55:08:32:2a:
7c:74:f9:30:77:c6:8e:49:3e:32:82:1b:2f:0b:8b:3a:8c:7d:
d4:84:45:56:51:ae:91:11:20:e8:bd:39:04:94:36:88:47:f7:
94:41:cd:8b:d4:a7:6d:93:37:76:2b:66:db:14:e4:01:99:a7:
75:63:f3:90:64:b7:e1:cf:1c:2d:9b:90:08:8e:32:cc:14:c5:
77:c4:36:c9:b6:e0:95:85:47:cb:21:91:fe:57:c9:04:d0:d3:
3a:88:ca:ea:93:99:e6:55:8c:7c:3e:71:b5:3f:3e:4c:c6:4a:
20:c1:8f:d9:8c:01:a9:a2:13:d1:52:86:0e:97:1f:19:0e:68:
1a:93:42:92:20:f3:16:aa:f1:a6:8a:19:f9:ef:61:7d:18:08:
0e:44:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:12:26 2025 by rpki-client