
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203631343638.roa
File: 3230302e372e38322e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier: FOD8OQk20A/eq2N9y6ackZVwqKJUvTQb1AdF0WNa5lY=
Subject key identifier: 3D:EA:EA:6A:BC:98:66:DE:59:A1:6B:DC:26:23:D2:06:8B:91:E0:7B
Certificate issuer: /CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3
Certificate serial: 3FD0DDC5D4C877F37E09206B52C14922A20D59A2
Authority key identifier: 1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203631343638.roa
Signing time: Tue 04 Feb 2025 19:59:47 +0000
ROA not before: Tue 04 Feb 2025 19:54:47 +0000
ROA not after: Tue 03 Feb 2026 19:59:47 +0000
asID: 61468
IP address blocks: 200.7.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl
rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d0:dd:c5:d4:c8:77:f3:7e:09:20:6b:52:c1:49:22:a2:0d:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3
Validity
Not Before: Feb 4 19:54:47 2025 GMT
Not After : Feb 3 19:59:47 2026 GMT
Subject: CN=3DEAEA6ABC9866DE59A16BDC2623D2068B91E07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:a4:30:4b:d3:01:6a:fb:29:ad:b3:34:b3:
57:05:80:bb:3d:ee:b6:6d:6e:28:43:e8:c5:d7:82:
70:4b:0d:b2:9d:66:a8:e7:6e:f7:61:76:22:0a:18:
6d:e1:cf:0b:d6:0a:84:f4:dc:0f:01:ba:50:ea:ad:
61:a6:b1:b6:49:36:c4:b5:6d:c8:f7:3e:6d:d9:53:
9b:9a:d5:bf:b3:8e:b8:e6:7f:55:52:ab:aa:12:4f:
16:12:ce:7d:b8:24:4e:4e:4e:04:1c:ed:5e:43:a7:
f6:4c:8f:03:d3:8c:1c:ae:ba:d7:6b:36:2c:fa:5b:
df:19:b2:41:09:7a:7c:22:48:7e:b7:a6:37:2e:e7:
82:25:c3:b1:23:4d:20:05:6b:3c:ea:87:80:83:e3:
40:15:35:de:ad:45:0c:d5:d9:7f:3e:9d:26:6f:a1:
a0:35:e6:ba:f7:4d:8d:8b:1d:47:dc:c5:a9:0a:a1:
20:be:27:b6:49:7d:24:f8:43:89:0b:7c:85:6b:78:
da:58:23:e0:36:aa:a1:72:9d:2e:bc:81:21:a6:16:
5f:58:8b:04:af:86:1a:62:47:8d:3c:6a:fe:7f:15:
ed:c5:3d:64:41:6b:0c:16:05:cc:c2:ae:2b:81:26:
6c:03:51:6f:82:59:0d:ab:3b:bf:87:3c:f1:3d:9b:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:EA:6A:BC:98:66:DE:59:A1:6B:DC:26:23:D2:06:8B:91:E0:7B
X509v3 Authority Key Identifier:
keyid:1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203631343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:85:98:88:6c:b4:78:4a:b5:4d:96:fd:e9:28:e3:fc:60:fa:
0e:43:33:41:11:13:9c:b6:01:8d:cc:b4:67:97:70:93:e0:2c:
e1:41:ef:1d:a0:1c:6b:1b:5f:d8:4a:89:9d:33:20:84:8f:ac:
81:0b:ee:d2:ce:7b:e4:78:db:63:3c:9a:49:7a:bd:49:6b:db:
a9:b1:0e:11:76:31:5d:fe:14:10:3d:bb:a8:75:57:0e:95:ed:
24:c1:42:ad:35:a4:d5:17:5c:fd:3a:7f:5c:b4:18:83:47:ad:
00:ed:c7:c1:54:df:05:b1:13:20:fa:c3:be:f7:48:a1:58:60:
21:ec:ff:a1:d8:92:7e:e8:f6:ea:27:ad:53:b3:e9:1a:6c:88:
2e:0c:dd:c1:fe:9c:e3:13:b3:ca:13:37:f1:e5:2f:5a:f0:72:
de:be:11:18:01:7e:46:8c:17:0b:fa:20:d6:7f:86:f9:c4:8a:
9d:ab:9b:6c:14:24:72:47:07:c6:1c:a5:af:66:69:bb:62:08:
87:53:14:5e:da:4d:9c:02:d3:ac:14:52:6a:f5:a3:a8:e1:68:
19:a8:60:ab:8c:1d:e6:31:bf:9a:ae:ed:e1:05:ec:18:a8:42:
7e:b6:8e:13:66:4b:ef:8b:62:27:ca:f5:6e:c6:21:d4:a9:1e:
99:e5:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:33:34 2025 by rpki-client