
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
File: 3133382e39342e3134342e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier: fQ9Yg/0VB1/aUFfIhABHmBt+mY77enEq0JWoAYyrr74=
Subject key identifier: 95:15:82:2C:D9:C6:0B:96:D4:FB:4D:C8:48:6C:E0:5F:CE:2F:F5:4D
Certificate issuer: /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial: 4D8EE55F1738268771EB9F7E70AD0CCD5FFE86CC
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
Signing time: Tue 04 Feb 2025 18:24:02 +0000
ROA not before: Tue 04 Feb 2025 18:19:02 +0000
ROA not after: Tue 03 Feb 2026 18:24:02 +0000
asID: 22869
IP address blocks: 138.94.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8e:e5:5f:17:38:26:87:71:eb:9f:7e:70:ad:0c:cd:5f:fe:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231411337300474BC5489725C8707684F70A876D
Validity
Not Before: Feb 4 18:19:02 2025 GMT
Not After : Feb 3 18:24:02 2026 GMT
Subject: CN=9515822CD9C60B96D4FB4DC8486CE05FCE2FF54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:d8:85:d0:88:92:b2:76:b4:57:06:58:fd:
7f:98:c4:dc:22:d2:e6:1e:b1:1b:89:a6:50:9e:3f:
22:1e:15:6e:85:bd:bb:b8:78:c0:be:24:9f:4b:bc:
83:e6:41:8f:40:ae:2f:45:f7:30:b3:16:1e:66:90:
be:b8:f3:d7:53:84:3c:0d:1c:76:ee:07:96:5a:f0:
f7:ea:a6:8d:28:0c:78:a3:1e:ae:1f:a8:7d:75:c4:
97:80:f2:c3:ed:10:09:a6:0a:39:1a:48:26:82:c3:
52:c9:77:44:2f:35:f3:3c:ac:a0:89:79:4b:1b:88:
ba:d3:f2:c9:88:d7:a6:af:0b:94:09:05:42:2f:e5:
21:38:a0:85:61:06:c5:f0:7c:f8:3d:24:a1:5a:94:
ea:d4:33:77:64:6c:a5:cd:a4:39:93:8c:49:9d:35:
44:ce:d9:15:21:38:47:62:bc:fe:b0:79:32:47:cf:
c0:2e:70:7b:ae:d2:89:2c:89:2a:70:41:7c:df:db:
3a:34:8e:fc:1d:c1:86:d5:3e:e3:a0:87:d6:1c:46:
27:34:71:76:e7:5b:c2:c0:37:be:45:f5:e4:3c:54:
b7:40:d9:4a:ad:77:d0:a1:60:14:59:da:5a:64:b2:
e4:b7:52:b8:cf:e9:cd:dc:b5:83:e0:76:4f:3c:d8:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:82:2C:D9:C6:0B:96:D4:FB:4D:C8:48:6C:E0:5F:CE:2F:F5:4D
X509v3 Authority Key Identifier:
keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.144.0/22
Signature Algorithm: sha256WithRSAEncryption
44:45:0c:1f:26:40:7d:9b:14:a7:7e:d8:27:d5:63:27:ae:26:
fb:62:38:5c:02:17:16:21:28:52:85:3f:72:d5:65:97:26:91:
14:57:98:b5:32:46:58:bc:49:97:b9:91:b2:9f:3f:f1:1a:e5:
ca:36:01:79:9d:5f:5e:ac:a0:b2:1b:7b:61:1a:49:ab:f9:db:
6e:b9:b8:31:8b:05:7d:32:45:f7:9a:4a:c8:6c:5a:e7:ad:8a:
fc:1b:72:a1:87:62:25:44:45:14:2a:fb:96:2a:ab:f5:94:35:
02:6d:20:c0:ea:6f:70:1a:ef:29:99:47:60:90:4e:d0:70:90:
a0:bc:40:11:01:3e:af:03:aa:7f:2f:d7:89:ca:62:01:b2:17:
03:e2:99:82:25:59:a4:1f:b6:b1:94:45:ec:d6:97:c9:cb:8a:
09:6e:07:99:05:67:76:0a:e8:39:cf:b3:e8:33:cb:59:bf:64:
fa:a8:09:33:c9:c7:b4:56:94:6c:dd:4f:0f:bc:55:04:f2:b3:
75:a0:29:26:f8:dc:0e:9b:c5:8a:c4:e2:09:41:a2:a3:d5:e5:
8c:fb:7c:7d:38:be:a3:ae:d7:e7:77:32:9d:e6:f6:b3:e2:bd:
bd:d0:6b:15:bf:81:56:d6:0e:40:fb:b8:c9:05:83:f9:7d:d3:
2b:f1:7c:05
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTY7lXxc4Jodx659+cK0MzV/+hswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxNDExMzM3MzAwNDc0QkM1NDg5NzI1Qzg3MDc2ODRG
NzBBODc2RDAeFw0yNTAyMDQxODE5MDJaFw0yNjAyMDMxODI0MDJaMDMxMTAvBgNV
BAMTKDk1MTU4MjJDRDlDNjBCOTZENEZCNERDODQ4NkNFMDVGQ0UyRkY1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN8tiF0IiSsna0VwZY/X+YxNwi
0uYesRuJplCePyIeFW6Fvbu4eMC+JJ9LvIPmQY9Ari9F9zCzFh5mkL6489dThDwN
HHbuB5Za8Pfqpo0oDHijHq4fqH11xJeA8sPtEAmmCjkaSCaCw1LJd0QvNfM8rKCJ
eUsbiLrT8smI16avC5QJBUIv5SE4oIVhBsXwfPg9JKFalOrUM3dkbKXNpDmTjEmd
NUTO2RUhOEdivP6weTJHz8AucHuu0oksiSpwQXzf2zo0jvwdwYbVPuOgh9YcRic0
cXbnW8LAN75F9eQ8VLdA2Uqtd9ChYBRZ2lpksuS3UrjP6c3ctYPgdk882BuxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlRWCLNnGC5bU+03ISGzgX84v9U0wHwYDVR0j
BBgwFoAUIxQRM3MAR0vFSJclyHB2hPcKh20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EODBGRDBENTc0NkU0NDg2OTc0Rjg3RjBCNThBQTNEMjJE
RjdBOUQzNDAwMzdFNzNENURBNDRBMzkxRUUyNjQwLzAvMjMxNDExMzM3MzAwNDc0
QkM1NDg5NzI1Qzg3MDc2ODRGNzBBODc2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzE0MTEzMzczMDA0NzRCQzU0
ODk3MjVDODcwNzY4NEY3MEE4NzZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDgwRkQwRDU3NDZFNDQ4Njk3NEY4N0YwQjU4QUEzRDIyREY3QTlEMzQw
MDM3RTczRDVEQTQ0QTM5MUVFMjY0MC8wLzMxMzMzODJlMzkzNDJlMzEzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMjM4MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopekDAN
BgkqhkiG9w0BAQsFAAOCAQEAREUMHyZAfZsUp37YJ9VjJ64m+2I4XAIXFiEoUoU/
ctVllyaRFFeYtTJGWLxJl7mRsp8/8RrlyjYBeZ1fXqygsht7YRpJq/nbbrm4MYsF
fTJF95pKyGxa562K/BtyoYdiJURFFCr7liqr9ZQ1Am0gwOpvcBrvKZlHYJBO0HCQ
oLxAEQE+rwOqfy/XicpiAbIXA+KZgiVZpB+2sZRF7NaXycuKCW4HmQVndgroOc+z
6DPLWb9k+qgJM8nHtFaUbN1PD7xVBPKzdaApJvjcDpvFisTiCUGio9XljPt8fTi+
o67X53cyneb2s+K9vdBrFb+BVtYOQPu4yQWD+X3TK/F8BQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:31:30 2025 by rpki-client