
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a3a2f33322d3430203d3e203431303935.roa
File: 323830333a633234303a3a2f33322d3430203d3e203431303935.roa (raw, json)
Hash identifier: IOww2sxuN84dxsf4sS4VIYx6oqNxcykpoaG7UN2h21c=
Subject key identifier: 44:BE:A1:53:7B:7C:51:F7:C0:5B:EA:39:63:16:9B:13:2D:36:EA:F1
Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial: 4ACBE910824D6A8C6116AB5200CE7F693EF78531
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a3a2f33322d3430203d3e203431303935.roa
Signing time: Tue 04 Feb 2025 20:01:08 +0000
ROA not before: Tue 04 Feb 2025 19:56:08 +0000
ROA not after: Tue 03 Feb 2026 20:01:08 +0000
asID: 41095
IP address blocks: 2803:c240::/32 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:cb:e9:10:82:4d:6a:8c:61:16:ab:52:00:ce:7f:69:3e:f7:85:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Validity
Not Before: Feb 4 19:56:08 2025 GMT
Not After : Feb 3 20:01:08 2026 GMT
Subject: CN=44BEA1537B7C51F7C05BEA3963169B132D36EAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:03:78:fc:fc:49:3a:be:ff:7a:34:b9:45:
41:c9:39:b2:eb:97:51:e7:05:a3:cf:66:84:bc:64:
ea:fb:60:fd:e5:0e:1e:8e:ac:f4:4b:98:2f:39:40:
2d:26:eb:8b:87:55:d3:31:c8:d7:3f:42:00:26:7c:
6e:36:00:7b:0e:aa:a5:0a:6b:0c:02:4f:d4:c0:4e:
bd:82:0a:83:07:6f:09:18:19:73:eb:58:16:e6:f4:
19:22:35:68:02:c4:c8:16:c3:32:1a:77:ea:fe:56:
44:69:5c:db:63:08:f8:cd:49:c6:0f:a6:dd:6a:16:
17:9d:91:23:6d:8a:bf:4a:37:36:09:a0:c5:8c:ea:
b4:eb:49:07:d0:ad:42:30:bd:50:57:95:c4:19:00:
ed:29:98:0e:6c:17:22:be:d5:db:aa:a9:b8:40:c8:
e3:51:ac:6b:8f:86:41:92:e7:25:cc:cc:dd:5c:bf:
9f:f2:4c:43:a8:20:94:8c:c4:2b:9f:3c:ef:83:ed:
ca:70:3f:23:9c:0d:aa:c7:ac:c1:28:8a:61:af:11:
0e:f5:d4:26:9a:bd:55:73:5a:30:79:2f:3d:c6:53:
9a:14:cf:53:5b:d2:55:a3:70:3b:ee:d5:a6:02:99:
0f:3b:ed:1d:79:d8:b5:1d:d7:b3:f8:a1:ce:53:30:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:A1:53:7B:7C:51:F7:C0:5B:EA:39:63:16:9B:13:2D:36:EA:F1
X509v3 Authority Key Identifier:
keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a3a2f33322d3430203d3e203431303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c240::/32
Signature Algorithm: sha256WithRSAEncryption
9b:88:6e:df:80:a5:de:3a:56:81:e6:a6:e9:57:36:14:97:02:
b4:41:2d:87:1a:dd:c4:70:b6:69:1c:60:e7:77:3a:fa:97:0e:
41:46:9b:ce:7b:83:d2:5a:56:9e:c9:e5:38:4e:04:e1:61:7a:
56:8e:77:1f:34:f6:4d:a1:7b:7b:48:8d:7f:f8:06:08:cc:c7:
f0:3f:0b:1e:3c:70:84:a6:88:a7:72:3f:55:8f:20:a4:0b:43:
a3:1c:5c:4f:54:9b:c5:75:e5:51:26:40:a3:fc:35:46:0e:69:
c5:2f:60:95:b2:74:81:a7:38:01:32:16:b1:11:c1:ca:ae:55:
32:e4:5f:ef:d7:54:93:1a:c3:b4:76:b0:19:10:88:a9:4e:68:
53:b1:17:5e:c2:ce:18:52:db:d9:43:bd:d5:f4:e8:f3:86:1a:
34:76:5d:6c:5d:9b:21:37:a7:42:04:0a:f0:d2:72:00:62:2f:
03:e8:b1:66:d6:88:89:8c:72:04:da:19:6c:f0:91:a2:1e:a5:
7a:ab:39:15:67:16:58:1f:b4:68:30:f7:ad:92:d9:a7:21:9f:
ff:b5:a8:df:c0:df:12:52:3e:00:12:66:92:98:75:f1:d8:f1:
82:48:9f:66:e1:fe:61:de:d1:1d:ca:a8:08:86:16:82:aa:f2:
b6:73:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:25 2025 by rpki-client