
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34332e302f32342d3234203d3e20323733383637.roa
File: 34352e36382e34332e302f32342d3234203d3e20323733383637.roa (raw, json)
Hash identifier: 4DetoGnvsbaWRKbSUOGEGl5gpBKCd1BYP7x9fQaANYQ=
Subject key identifier: A0:98:E1:8A:D3:CE:DF:70:46:05:00:06:25:7E:45:BD:2E:83:23:0D
Certificate issuer: /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial: 0B7D251D11C5F50240C243E3A754EFCDD92ED5DA
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34332e302f32342d3234203d3e20323733383637.roa
Signing time: Sat 14 Jun 2025 06:22:15 +0000
ROA not before: Sat 14 Jun 2025 06:17:15 +0000
ROA not after: Sat 13 Jun 2026 06:22:15 +0000
asID: 273867
IP address blocks: 45.68.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7d:25:1d:11:c5:f5:02:40:c2:43:e3:a7:54:ef:cd:d9:2e:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Validity
Not Before: Jun 14 06:17:15 2025 GMT
Not After : Jun 13 06:22:15 2026 GMT
Subject: CN=A098E18AD3CEDF7046050006257E45BD2E83230D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:cf:dd:e8:0b:e3:36:62:36:1b:72:68:86:
17:21:ac:d3:50:6e:27:fd:c0:2c:83:4c:f9:63:26:
4e:74:da:3f:b2:29:f7:70:ea:b6:c0:d4:b0:ef:f8:
34:f7:46:7e:ed:82:37:e6:c2:6d:d9:09:df:f0:36:
ac:39:4e:5b:9f:07:15:e4:1b:24:4e:2b:a6:ee:4e:
a7:2f:41:11:cd:e3:90:81:d8:63:f2:10:f0:b9:60:
59:29:ae:26:4a:19:63:d6:6e:af:1d:e3:65:f0:7d:
f1:e5:57:92:a9:04:ad:30:65:f9:fd:dc:ee:21:45:
51:21:b3:48:bc:3a:7e:3e:9e:ab:41:71:22:5c:f6:
d1:5d:54:da:d9:dd:48:7b:ba:6b:3c:83:13:4c:e7:
24:d3:fa:57:37:fd:3d:24:fd:80:b4:17:d5:c0:1b:
55:dd:8c:5e:0a:78:14:58:1a:67:9d:87:dc:ee:1e:
c4:46:b0:92:cd:46:20:ff:ad:b5:bd:16:83:d4:85:
b6:43:1f:e9:29:56:73:ae:99:e7:b6:3e:4c:f1:d6:
dc:98:1e:1b:60:b1:1c:5f:0c:09:03:fa:72:dc:2c:
22:c9:48:b9:b8:0d:83:99:eb:1b:3f:01:7c:45:8c:
8a:ec:a6:0c:41:a5:5f:4e:d4:8f:e7:25:cb:99:7a:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:E1:8A:D3:CE:DF:70:46:05:00:06:25:7E:45:BD:2E:83:23:0D
X509v3 Authority Key Identifier:
keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34332e302f32342d3234203d3e20323733383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.43.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9f:d8:fa:69:8a:71:df:70:26:7d:64:52:10:a3:47:ac:39:
e0:3f:82:27:a9:83:98:cc:f2:a5:06:f1:cb:c7:56:34:5a:0e:
86:78:cf:1a:d8:5d:e3:c8:91:62:c2:86:66:2a:1c:b5:a3:85:
fd:75:3d:dd:40:f9:ba:fb:31:e1:9b:0c:fd:e8:08:96:0a:1f:
66:ae:85:3e:a1:f1:10:3d:ec:93:0d:bc:5a:0f:72:33:4e:26:
d4:12:3a:49:52:60:74:da:25:92:06:41:21:ba:12:82:86:52:
4a:cb:a4:20:1e:5c:bf:51:df:12:53:be:81:2e:7a:42:bf:dd:
95:18:5d:e8:c7:06:7e:bc:cd:b0:92:07:dc:95:6f:80:82:e6:
14:95:98:5a:0d:6c:ec:66:7f:cf:0e:72:cf:c3:e6:a9:a6:69:
f2:6a:81:6d:9a:78:d4:3b:6a:15:00:ba:24:4a:57:74:4d:68:
d5:b2:2d:ff:eb:51:8c:c9:bb:7d:19:ac:ff:5b:a1:da:dd:ef:
2b:b9:88:00:21:96:3b:1e:ad:72:89:5c:a6:d7:92:6d:1d:67:
c4:99:42:40:d1:19:c0:a1:a9:72:f0:fa:da:41:33:5f:ef:bd:
ca:14:f6:a4:08:0d:b3:80:b1:1a:4d:6c:ef:01:57:96:30:23:
e5:b4:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:43:56 2025 by rpki-client