
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
File: 3138362e332e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier: PShlWkwLdyVHpgdmr8dzbJmYaOKk8Dmq95nZOauH1g4=
Subject key identifier: 37:3D:66:71:2A:33:C3:78:54:77:9D:5C:14:99:41:B5:7E:34:14:AF
Certificate issuer: /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial: 42472689A49BC84AD7A16FBF8BBAC0698BE13271
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
Signing time: Tue 04 Feb 2025 18:11:12 +0000
ROA not before: Tue 04 Feb 2025 18:06:12 +0000
ROA not after: Tue 03 Feb 2026 18:11:12 +0000
asID: 52257
IP address blocks: 186.3.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:47:26:89:a4:9b:c8:4a:d7:a1:6f:bf:8b:ba:c0:69:8b:e1:32:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Validity
Not Before: Feb 4 18:06:12 2025 GMT
Not After : Feb 3 18:11:12 2026 GMT
Subject: CN=373D66712A33C37854779D5C149941B57E3414AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:eb:07:0c:39:b1:94:78:f0:1a:2b:07:a2:
09:bd:71:a6:e7:ec:0f:7d:dd:fb:96:d1:13:bb:5f:
b3:22:93:c2:a7:17:f3:33:e8:a9:5d:57:a1:89:e3:
dc:42:f3:91:3a:c9:c1:71:9e:0f:3c:1e:92:38:67:
9f:f9:75:1c:2b:fd:2b:b0:cf:63:8e:a7:d5:12:22:
99:ee:2c:51:25:21:51:3e:47:92:73:ad:84:97:cb:
f1:a7:4f:f6:c5:3e:e9:31:3f:6f:09:1c:85:4b:f6:
25:a7:e2:2a:bd:b9:0f:76:3e:74:45:db:c9:a3:36:
05:53:48:95:9f:5c:fb:df:14:b0:ee:57:42:c2:65:
eb:66:3b:6c:8b:28:ee:2f:0d:65:dc:b2:be:90:62:
da:43:35:09:b5:05:38:48:ce:b6:20:19:d0:e4:08:
3e:51:41:77:34:de:e8:8f:87:f1:66:a2:b6:ce:b0:
86:ab:cb:d4:3d:9f:03:ee:73:69:78:5b:dd:e6:bc:
0a:5b:c0:69:dd:1f:88:c7:bf:4a:68:7d:59:f5:07:
1b:61:71:59:ff:47:1f:6b:99:63:c7:79:8d:1f:36:
bd:6e:32:13:15:72:2d:43:f8:2c:5e:e3:b4:6d:cd:
c8:2e:0a:eb:9b:7a:8d:50:0d:93:0f:0a:87:29:bc:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:66:71:2A:33:C3:78:54:77:9D:5C:14:99:41:B5:7E:34:14:AF
X509v3 Authority Key Identifier:
keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.3.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0d:e7:ca:9b:99:16:91:fc:3a:62:23:78:a8:27:bb:9d:c1:cd:
b6:3c:7d:30:04:25:0c:cd:6f:58:22:1b:49:0d:9c:da:7b:08:
c7:55:c1:4c:53:18:a3:03:4f:d5:0f:55:0c:9a:ad:65:77:39:
93:21:73:00:7b:2d:55:54:03:44:0f:da:7c:45:1e:85:1b:56:
b0:1d:ce:3e:2f:3b:9c:48:ff:38:33:a7:8c:ba:7c:f2:80:50:
a2:4f:57:16:62:58:31:45:cb:e1:f6:c4:8c:2f:28:3c:44:43:
82:d4:27:41:44:a1:4a:1f:a0:67:11:28:e3:8d:06:72:a6:58:
be:18:af:cc:c6:28:52:a1:c3:33:04:ed:15:4f:5e:5a:43:9f:
30:c2:a8:1f:6f:25:41:37:26:43:34:28:83:0b:38:38:a4:d3:
02:5b:33:c5:9e:c3:f0:4c:c1:6c:3a:20:91:69:5a:e3:70:94:
76:a1:19:18:84:1b:2f:1a:5e:3c:3f:a7:5a:8e:4a:97:41:15:
d9:63:3a:1c:33:2b:9a:a1:a2:ef:47:67:b7:43:c1:a4:c8:e2:
99:dc:52:d8:16:98:26:06:71:7c:92:54:81:6e:b5:b2:80:24:
a0:d5:10:45:e5:a3:29:a6:08:41:ff:1a:f2:85:48:8b:07:08:
40:97:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:47 2025 by rpki-client