
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
File: 3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa (raw, json)
Hash identifier: YjKcL0kfNC4hgjJGB22Cfr5yqM/zKoJUiRLkbuK1iFE=
Subject key identifier: DD:D6:BB:FE:09:79:F1:04:EA:11:0F:96:86:43:93:79:4F:13:7F:CE
Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial: 67A95AFAFF693E28264947213D3BF6EE56A92481
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
Signing time: Thu 19 Jun 2025 05:22:48 +0000
ROA not before: Thu 19 Jun 2025 05:17:48 +0000
ROA not after: Thu 18 Jun 2026 05:22:48 +0000
asID: 263681
IP address blocks: 138.204.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a9:5a:fa:ff:69:3e:28:26:49:47:21:3d:3b:f6:ee:56:a9:24:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Validity
Not Before: Jun 19 05:17:48 2025 GMT
Not After : Jun 18 05:22:48 2026 GMT
Subject: CN=DDD6BBFE0979F104EA110F96864393794F137FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:ea:10:3c:ff:2e:2f:69:c7:9f:54:5f:96:
8b:69:fa:81:6c:f6:f1:9b:15:d7:fb:19:9e:25:79:
13:e0:1c:3f:65:15:3d:bc:d8:61:ff:04:54:ff:9f:
ee:e0:6b:eb:ac:1e:f9:e3:b3:03:68:c8:3c:3c:8c:
cd:90:ff:4e:23:c4:7e:b2:31:45:4f:af:0e:2a:69:
13:3b:8e:55:75:ad:80:c3:f3:12:e8:69:95:41:98:
32:4c:dd:13:f9:f7:6c:cb:30:69:54:dd:a8:be:27:
02:8d:d7:98:2d:40:e8:7f:65:e4:9e:c0:df:30:70:
b9:fb:4f:90:73:07:cf:0f:51:d6:0e:4f:86:ac:ac:
46:f0:2c:d0:e7:00:9a:10:93:47:23:5f:53:78:f0:
07:51:32:6f:cb:e7:ee:5f:71:8a:83:bb:f5:d4:fe:
9b:71:10:7e:c0:49:11:c4:ac:9a:57:a6:18:7f:cd:
65:ed:38:f2:00:e9:14:67:dd:ab:af:80:02:a5:eb:
81:af:51:9d:e5:c2:65:85:2c:dd:23:9e:66:06:6d:
e2:b9:0c:35:79:54:04:8b:68:1c:93:49:55:43:93:
ae:80:36:fc:a5:a5:4b:94:ca:13:e3:08:81:c7:4c:
de:d1:37:55:2a:3f:34:bc:cf:a7:d4:cc:fe:32:3f:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D6:BB:FE:09:79:F1:04:EA:11:0F:96:86:43:93:79:4F:13:7F:CE
X509v3 Authority Key Identifier:
keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.13.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b6:20:36:7e:a9:d7:21:b9:89:e1:fc:e2:8f:62:c5:ed:d9:
9f:5e:6f:ac:6e:a1:a8:e1:c0:eb:5b:99:be:c1:56:d2:15:d0:
2a:0b:66:22:d6:3e:4d:a0:23:54:68:6a:d5:91:be:c8:04:6c:
d9:79:54:89:4c:74:7a:a8:3f:5b:07:5f:ad:79:53:e0:f5:e5:
d5:99:7d:2f:30:9d:88:74:de:6d:77:78:0a:cb:ae:94:9d:2f:
a7:c1:92:e4:cf:3f:cc:5a:f2:21:ea:43:9f:56:55:b2:57:ea:
6a:5d:88:81:c7:37:1c:3f:a6:ab:a4:f4:90:90:04:11:44:69:
06:ca:e8:90:ae:a1:9f:be:5f:90:9e:e9:9e:91:18:1c:9c:82:
69:7e:49:c5:c4:f9:8e:9b:b3:ad:b4:19:cc:e3:0c:f4:fe:65:
d8:a3:01:fc:f8:73:18:43:84:1c:b2:9b:fb:56:8f:0e:ef:06:
d6:11:de:1d:aa:68:63:be:c6:dc:ce:9a:f0:4f:b3:95:38:4c:
73:36:45:ee:bb:71:3c:4a:28:81:4a:da:7f:a3:1b:03:d3:9e:
71:ef:4c:b8:3c:38:7e:c7:42:40:9b:62:ba:73:0e:ee:e3:9b:
9f:4d:92:ab:48:40:8d:ab:cd:d4:ea:4d:a6:66:6a:f2:cb:5c:
29:82:52:ff
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZ6la+v9pPigmSUchPTv27lapJIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5QjVBNjBFN0ZG
MkQzNTVDNjAeFw0yNTA2MTkwNTE3NDhaFw0yNjA2MTgwNTIyNDhaMDMxMTAvBgNV
BAMTKERERDZCQkZFMDk3OUYxMDRFQTExMEY5Njg2NDM5Mzc5NEYxMzdGQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWOoQPP8uL2nHn1Rflotp+oFs
9vGbFdf7GZ4leRPgHD9lFT282GH/BFT/n+7ga+usHvnjswNoyDw8jM2Q/04jxH6y
MUVPrw4qaRM7jlV1rYDD8xLoaZVBmDJM3RP592zLMGlU3ai+JwKN15gtQOh/ZeSe
wN8wcLn7T5BzB88PUdYOT4asrEbwLNDnAJoQk0cjX1N48AdRMm/L5+5fcYqDu/XU
/ptxEH7ASRHErJpXphh/zWXtOPIA6RRn3auvgAKl64GvUZ3lwmWFLN0jnmYGbeK5
DDV5VASLaByTSVVDk66ANvylpUuUyhPjCIHHTN7RN1UqPzS8z6fUzP4yP5bFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3da7/gl58QTqEQ+WhkOTeU8Tf84wHwYDVR0j
BBgwFoAU3NPw5O4EPFuphYqJtaYOf/LTVcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZD
NUU2RUVBRDhERThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1
QkE5ODU4QTg5QjVBNjBFN0ZGMkQzNTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0QzRjBFNEVFMDQzQzVCQTk4
NThBODlCNUE2MEU3RkYyRDM1NUM2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3RTBBQjUyMjE2QzVFNkVFQUQ4
REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wLzMxMzMzODJlMzIzMDM0MmUzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiswN
MA0GCSqGSIb3DQEBCwUAA4IBAQBwtiA2fqnXIbmJ4fzij2LF7dmfXm+sbqGo4cDr
W5m+wVbSFdAqC2Yi1j5NoCNUaGrVkb7IBGzZeVSJTHR6qD9bB1+teVPg9eXVmX0v
MJ2IdN5td3gKy66UnS+nwZLkzz/MWvIh6kOfVlWyV+pqXYiBxzccP6arpPSQkAQR
RGkGyuiQrqGfvl+QnumekRgcnIJpfknFxPmOm7OttBnM4wz0/mXYowH8+HMYQ4Qc
spv7Vo8O7wbWEd4dqmhjvsbczprwT7OVOExzNkXuu3E8SiiBStp/oxsD055x70y4
PDh+x0JAm2K6cw7u45ufTZKrSECNq83U6k2mZmryy1wpglL/
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:41 2025 by rpki-client