
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa
File: 34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa (raw, json)
Hash identifier: vVopfgb+bFdFX+tYdubIiO+VLXMSxIJFOTADeYqoBjQ=
Subject key identifier: 71:2A:95:FB:37:F6:52:12:2E:F9:F6:90:B4:6C:C4:65:83:EC:2C:E8
Certificate issuer: /CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
Certificate serial: 202FBC5183CEA688C81384F20FD906B2C0FDE441
Authority key identifier: 84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa
Signing time: Tue 04 Feb 2025 18:26:57 +0000
ROA not before: Tue 04 Feb 2025 18:21:57 +0000
ROA not after: Tue 03 Feb 2026 18:26:57 +0000
asID: 266760
IP address blocks: 45.232.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl
rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2f:bc:51:83:ce:a6:88:c8:13:84:f2:0f:d9:06:b2:c0:fd:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
Validity
Not Before: Feb 4 18:21:57 2025 GMT
Not After : Feb 3 18:26:57 2026 GMT
Subject: CN=712A95FB37F652122EF9F690B46CC46583EC2CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:e2:01:fc:3b:19:3b:44:96:de:32:04:81:
b1:cf:7a:26:ea:9a:ac:b3:3a:98:24:ff:75:5f:f1:
23:f0:24:d5:86:49:fd:6d:58:81:ab:c4:65:1b:a5:
ab:ee:29:f2:75:c2:57:83:52:ec:c0:f0:fc:7f:13:
32:17:e4:f0:70:3f:3e:97:6b:10:26:76:71:33:eb:
68:af:f5:ec:54:2d:eb:21:ad:54:be:84:0e:f1:de:
b5:01:56:e3:24:b0:01:57:70:d1:57:bd:d0:bb:b6:
49:4a:26:34:7c:c1:d8:f4:7b:a4:d3:70:5e:ee:d6:
f3:2a:b1:f9:48:02:f6:9d:84:16:c5:6a:cf:25:7c:
c7:f1:49:5a:a2:fb:23:6e:a4:73:9c:a0:97:60:2a:
d5:52:dc:c9:4a:f9:fe:bb:c5:80:9f:fd:ed:75:1b:
60:6c:5e:86:bd:4e:b5:4e:20:cc:a9:7d:c4:ec:90:
89:a4:4c:9a:5c:ce:51:4b:93:29:1d:3c:e3:1e:a7:
ee:90:4e:7b:62:7e:b3:cb:31:1c:23:c1:7d:51:39:
74:67:70:41:d2:16:9a:2e:09:8a:52:29:7f:94:14:
1a:17:90:75:7f:a6:da:8d:18:83:6f:44:70:70:e7:
91:88:c3:ea:ed:c8:99:25:28:ab:bd:af:38:6f:92:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:95:FB:37:F6:52:12:2E:F9:F6:90:B4:6C:C4:65:83:EC:2C:E8
X509v3 Authority Key Identifier:
keyid:84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:55:18:63:b6:60:52:f7:8e:4b:f4:90:d4:11:14:db:a4:51:
a7:71:d9:74:20:91:5d:66:0d:f6:81:85:d2:b5:d1:6d:c0:91:
ea:f5:31:04:23:b6:3b:15:e7:85:1e:8a:06:cd:a5:14:95:11:
4d:d6:6f:57:39:ec:5c:ea:ec:b6:ce:24:a8:6d:66:bc:61:d3:
38:ae:6f:10:3c:fc:a4:8b:c4:db:89:4a:0c:c6:db:a3:a7:98:
4f:c0:f7:4e:7a:2b:45:59:ff:9e:6f:f7:3b:fa:6a:b6:79:39:
97:2f:b3:50:d0:25:58:d8:3a:08:32:77:21:55:ef:a1:0a:15:
8c:4a:85:c1:75:5e:cf:fb:64:04:00:48:41:35:bf:c8:ab:ac:
3b:29:72:55:94:48:9f:d9:33:0f:b2:41:75:b1:85:6a:ad:63:
58:fa:2b:1b:69:56:78:cd:02:5e:e6:c9:32:34:c2:ab:e8:5e:
6c:9f:df:5b:6f:16:15:2c:3d:43:75:0c:d3:71:87:8c:3a:78:
62:1d:60:9d:07:b0:6d:c5:98:1c:5c:74:15:cd:70:f7:61:f1:
0b:35:a5:ad:3c:02:33:c3:ed:f1:1e:b0:32:2e:bf:10:59:04:
58:72:18:34:0e:fa:a6:4b:72:0b:04:3d:70:3c:9b:75:83:f2:
d4:f1:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:57:29 2025 by rpki-client