
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
File: 323830313a303a36303a3a2f34382d3438203d3e203532323734.roa (raw, json)
Hash identifier: 9oOZAEv4+2ulbpn/YhVdEFSFxkKdbkVqrYKeaZRSBSo=
Subject key identifier: 04:68:58:12:56:E4:C6:3E:65:F7:B4:D0:B0:E2:F0:C1:99:96:A2:36
Certificate issuer: /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial: 3BB7338DCE7F5934B76D38D0C3E9F3054576BA1E
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
Signing time: Tue 04 Feb 2025 18:05:34 +0000
ROA not before: Tue 04 Feb 2025 18:00:34 +0000
ROA not after: Tue 03 Feb 2026 18:05:34 +0000
asID: 52274
IP address blocks: 2801:0:60::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b7:33:8d:ce:7f:59:34:b7:6d:38:d0:c3:e9:f3:05:45:76:ba:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Validity
Not Before: Feb 4 18:00:34 2025 GMT
Not After : Feb 3 18:05:34 2026 GMT
Subject: CN=0468581256E4C63E65F7B4D0B0E2F0C19996A236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:e3:a3:0e:79:9f:10:00:cb:3e:ff:c9:bc:
3f:fa:df:f7:43:4b:53:de:22:bb:4a:84:9f:99:0d:
38:6f:7c:9c:6a:7f:61:b8:94:b9:67:c2:12:18:b1:
78:f4:9f:34:fd:82:12:cf:5f:85:17:bc:8f:62:e0:
b5:83:3d:cf:64:e1:84:2c:26:56:d1:4a:3e:d5:c8:
e6:b9:f4:08:02:27:96:5f:ee:42:eb:b7:e4:2b:b9:
74:82:e6:e9:15:56:c6:74:ea:33:12:71:f9:83:be:
15:73:24:13:21:b2:12:3a:35:8f:3f:27:49:2a:77:
8b:0f:40:35:ea:94:3a:23:a0:d3:79:96:3d:d0:4e:
d0:79:fb:d4:27:f4:dd:36:b0:95:5f:77:dc:ba:08:
85:94:2b:84:72:d5:63:51:39:37:37:00:77:86:84:
4d:ec:4f:f7:c7:4a:22:df:60:df:6f:5d:fa:eb:de:
e4:99:b6:98:eb:b2:e5:a0:b8:83:f4:6b:b8:00:f0:
b6:65:df:26:5a:eb:2f:c0:12:69:e7:1c:4e:c6:77:
07:85:53:37:aa:82:6f:62:d3:fa:5b:ac:18:cf:96:
92:4a:e9:97:4f:77:58:d8:b7:d3:63:53:a5:10:18:
ad:02:59:2f:c5:83:9b:18:38:f6:90:12:08:9f:47:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:58:12:56:E4:C6:3E:65:F7:B4:D0:B0:E2:F0:C1:99:96:A2:36
X509v3 Authority Key Identifier:
keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/323830313a303a36303a3a2f34382d3438203d3e203532323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:60::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c6:07:e9:36:5a:b8:25:fd:ee:5c:1d:d2:19:31:4e:5e:21:
37:e4:8c:09:15:93:63:69:a9:9f:26:83:63:bc:f9:a8:e3:25:
26:90:23:d5:7f:73:1c:b6:c4:20:89:9c:99:43:83:ed:5f:85:
0f:6c:0b:29:05:66:da:92:8b:10:41:c7:a6:b7:aa:c1:91:d9:
3f:e3:6c:df:50:f3:53:19:95:d1:81:8e:0e:a8:33:15:24:bc:
b5:2f:0c:6d:24:66:96:92:41:e8:8e:bd:d1:22:8a:56:1d:ad:
79:1e:be:05:c7:e3:73:7d:66:a5:c4:56:79:59:96:02:3c:fb:
f8:6e:ac:f5:58:5e:2b:5b:c2:f5:8e:cf:7e:8d:68:29:8b:e5:
04:e0:61:b4:15:f7:33:3e:66:86:93:4a:7f:78:59:81:a9:e8:
49:44:c4:67:7f:32:34:cb:34:95:c3:3c:9a:e3:94:ba:b8:cd:
62:b9:e0:51:cb:7a:0f:f1:00:c2:a1:fe:dd:99:c4:45:35:46:
b5:8f:ae:a4:90:14:93:a9:3d:a1:93:14:13:ed:71:68:5d:56:
cd:19:6a:0d:e2:cc:de:60:24:09:d8:d9:0f:d5:96:2a:f0:35:
e7:be:81:f8:50:d9:a9:f9:32:82:ba:27:07:49:15:79:12:17:
20:90:35:f6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUO7czjc5/WTS3bTjQw+nzBUV2uh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MDk4OUEwMjQwNDIxQjlFNjJGOTNCNTk4QkUzOTBG
RDZDRENDNjAeFw0yNTAyMDQxODAwMzRaFw0yNjAyMDMxODA1MzRaMDMxMTAvBgNV
BAMTKDA0Njg1ODEyNTZFNEM2M0U2NUY3QjREMEIwRTJGMEMxOTk5NkEyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnreOjDnmfEADLPv/JvD/63/dD
S1PeIrtKhJ+ZDThvfJxqf2G4lLlnwhIYsXj0nzT9ghLPX4UXvI9i4LWDPc9k4YQs
JlbRSj7VyOa59AgCJ5Zf7kLrt+QruXSC5ukVVsZ06jMScfmDvhVzJBMhshI6NY8/
J0kqd4sPQDXqlDojoNN5lj3QTtB5+9Qn9N02sJVfd9y6CIWUK4Ry1WNROTc3AHeG
hE3sT/fHSiLfYN9vXfrr3uSZtpjrsuWguIP0a7gA8LZl3yZa6y/AEmnnHE7GdweF
Uzeqgm9i0/pbrBjPlpJK6ZdPd1jYt9NjU6UQGK0CWS/Fg5sYOPaQEgifR3UDAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUBGhYElbkxj5l97TQsOLwwZmWojYwHwYDVR0j
BBgwFoAUP2CYmgJAQhueYvk7WYvjkP1s3MYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMUZDRjAwNkRFMjMxQzFFOEY5QUY0MzMwNkREQTVGN0ZB
MUQyRDhENEU2RjhEQjJGMEIwOEM2M0QyRkZCREZELzAvM0Y2MDk4OUEwMjQwNDIx
QjlFNjJGOTNCNTk4QkUzOTBGRDZDRENDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjYwOTg5QTAyNDA0MjFCOUU2
MkY5M0I1OThCRTM5MEZENkNEQ0M2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTFGQ0YwMDZERTIzMUMxRThGOUFGNDMzMDZEREE1RjdGQTFEMkQ4RDRF
NkY4REIyRjBCMDhDNjNEMkZGQkRGRC8wLzMyMzgzMDMxM2EzMDNhMzYzMDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQAAAGAw
DQYJKoZIhvcNAQELBQADggEBAH7GB+k2Wrgl/e5cHdIZMU5eITfkjAkVk2NpqZ8m
g2O8+ajjJSaQI9V/cxy2xCCJnJlDg+1fhQ9sCykFZtqSixBBx6a3qsGR2T/jbN9Q
81MZldGBjg6oMxUkvLUvDG0kZpaSQeiOvdEiilYdrXkevgXH43N9ZqXEVnlZlgI8
+/hurPVYXitbwvWOz36NaCmL5QTgYbQV9zM+ZoaTSn94WYGp6ElExGd/MjTLNJXD
PJrjlLq4zWK54FHLeg/xAMKh/t2ZxEU1RrWPrqSQFJOpPaGTFBPtcWhdVs0Zag3i
zN5gJAnY2Q/VlirwNee+gfhQ2an5MoK6JwdJFXkSFyCQNfY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:06 2025 by rpki-client