
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
File: 323830303a3561303a3a2f33322d3335203d3e203237373932.roa (raw, json)
Hash identifier: fMY9aGGR1i+J3ji8OBR1VAd6K1Ks5NePPEASVBvqcOc=
Subject key identifier: 71:B1:2C:B3:6A:C2:5A:83:4B:80:32:92:1A:06:6D:5C:AB:CA:C7:E8
Certificate issuer: /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial: 05FF41D5D8976AFA4C0D2010A6394641566127DF
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
Signing time: Tue 04 Feb 2025 18:19:49 +0000
ROA not before: Tue 04 Feb 2025 18:14:49 +0000
ROA not after: Tue 03 Feb 2026 18:19:49 +0000
asID: 27792
IP address blocks: 2800:5a0::/32 maxlen: 35
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ff:41:d5:d8:97:6a:fa:4c:0d:20:10:a6:39:46:41:56:61:27:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Validity
Not Before: Feb 4 18:14:49 2025 GMT
Not After : Feb 3 18:19:49 2026 GMT
Subject: CN=71B12CB36AC25A834B8032921A066D5CABCAC7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:b6:15:d8:c9:d1:3f:8d:cc:dd:fe:42:6e:
ab:9d:a7:dd:9a:4d:5b:59:50:f3:87:65:af:cf:e2:
04:e4:57:90:f0:9c:b6:12:01:b7:82:7d:8d:53:60:
a3:f0:85:6a:2d:06:84:a8:c6:35:2a:8e:7a:77:f0:
c5:b8:0a:46:a9:1c:ea:8f:77:27:bd:7c:54:f1:68:
60:b3:79:b0:36:23:fc:9b:10:1d:1a:1f:6a:f2:ff:
c7:f3:ab:76:a0:7d:49:ac:d4:88:91:05:cf:36:f3:
bf:01:34:29:ee:c1:06:5f:d8:8f:c4:41:e3:cb:26:
52:58:24:20:9f:87:2b:90:73:e8:1b:33:4f:25:d0:
19:a0:c0:d8:1d:b9:a4:44:11:38:8e:45:f6:0a:2a:
f5:78:db:f5:04:88:20:90:f1:b5:47:45:93:39:5b:
ad:97:9e:60:e0:8d:7d:ef:0f:8a:d5:db:c9:4e:fe:
e5:96:be:fc:23:42:85:e7:69:9d:40:33:6e:01:62:
9d:d2:44:9b:c5:da:fd:8a:f5:73:39:91:56:e1:e1:
42:03:fb:55:ef:01:a7:bf:18:71:79:ea:e4:51:f1:
03:8a:f3:05:01:36:e5:dd:49:c4:70:3c:49:1d:a4:
b0:4b:66:09:8e:51:7b:06:70:09:c7:fb:d8:f5:b8:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:2C:B3:6A:C2:5A:83:4B:80:32:92:1A:06:6D:5C:AB:CA:C7:E8
X509v3 Authority Key Identifier:
keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/323830303a3561303a3a2f33322d3335203d3e203237373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:5a0::/32
Signature Algorithm: sha256WithRSAEncryption
11:ef:dd:e1:59:4b:05:dc:26:29:35:aa:9c:53:c1:55:ec:b6:
19:09:a3:39:c9:24:dc:ef:d9:9c:1f:e5:62:bc:69:82:f3:cd:
01:ca:c1:61:85:ca:d2:55:a8:b9:62:94:bb:d6:99:b9:0a:e8:
ed:f7:b7:ca:f3:67:0c:0d:a1:f0:69:6b:f8:ef:ae:25:3f:0d:
3e:5d:14:ac:4d:9c:af:65:94:56:2f:0e:58:0c:11:63:e5:22:
c4:2c:7f:36:11:5b:16:66:04:d2:96:7c:8c:d0:20:ea:6a:f9:
1c:dc:92:cc:f2:d0:a3:e2:c6:c7:cd:ab:bf:bf:7e:c4:9a:fb:
68:ba:2d:10:55:56:6e:7a:ed:b6:6a:81:77:b5:c5:ba:54:f0:
db:02:60:0b:5b:63:8f:98:b9:e8:04:b7:31:db:a7:f2:d4:c9:
3e:18:d5:9e:44:e1:75:9b:05:ab:b3:68:71:b9:46:19:86:9a:
d7:60:2f:5c:9c:20:94:d4:18:01:08:72:52:d9:9a:34:6b:22:
d2:7e:80:77:a1:a0:35:4d:bf:7a:49:44:42:98:e3:84:7d:c7:
02:a6:9a:6a:d0:00:de:54:28:6e:a9:52:70:cb:3d:c2:a7:c8:
52:81:84:12:02:98:09:27:1a:5c:ab:90:89:82:62:00:69:2d:
4e:98:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:30:57 2025 by rpki-client