
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
File: 34352e3233362e33322e302f32322d3232203d3e20323636373931.roa (raw, json)
Hash identifier: 20O0L3cpZ69rEDwwRTdFxObeeWxAIT3UMMadcZ8Q2yg=
Subject key identifier: CA:FD:E0:08:BF:0B:6A:8F:4F:2A:6F:61:54:F6:E0:0B:0F:3F:83:11
Certificate issuer: /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial: 25A08645C0C35BFA7E434958FB3C0B7C72C3004D
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
Signing time: Tue 04 Feb 2025 18:30:49 +0000
ROA not before: Tue 04 Feb 2025 18:25:49 +0000
ROA not after: Tue 03 Feb 2026 18:30:49 +0000
asID: 266791
IP address blocks: 45.236.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a0:86:45:c0:c3:5b:fa:7e:43:49:58:fb:3c:0b:7c:72:c3:00:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Validity
Not Before: Feb 4 18:25:49 2025 GMT
Not After : Feb 3 18:30:49 2026 GMT
Subject: CN=CAFDE008BF0B6A8F4F2A6F6154F6E00B0F3F8311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:3a:e6:ad:24:dd:b3:2d:af:00:c3:cf:d5:
24:cf:06:f8:0a:5e:eb:b1:26:38:59:3a:f4:6f:ce:
74:fa:46:ef:8e:0d:d9:90:8f:84:db:4d:68:66:70:
55:a7:a8:52:26:99:89:7d:40:6b:10:fd:0b:f9:bb:
a7:1b:24:25:1d:5b:42:47:d4:2c:c5:40:e9:c1:23:
f9:c5:12:02:09:75:24:f1:dd:cc:be:6d:3b:75:ec:
ba:ae:ff:0d:45:07:89:da:12:f4:47:00:c5:e9:6a:
cc:27:e9:d8:75:17:6c:37:53:22:60:e4:62:1e:cc:
b9:28:be:9c:f2:84:66:27:c1:44:c0:27:7a:b4:58:
da:1d:dc:3b:fb:86:71:d2:8a:ec:3b:37:92:37:b4:
bc:5f:de:d1:53:56:19:1d:b3:29:0c:d8:35:4d:e9:
e7:ce:74:be:cb:f0:03:ea:90:46:88:21:76:b1:65:
35:af:b3:53:54:31:d1:33:91:99:32:f4:05:ee:4a:
22:c9:53:3f:29:47:62:0a:0d:b0:a9:c0:95:9e:bc:
39:44:a0:d3:59:ed:a6:40:89:29:81:3d:7d:13:22:
d1:56:ba:ee:10:1f:ac:ea:8e:94:fa:02:9f:d9:0c:
90:ce:ec:f3:42:54:f0:9a:df:68:eb:42:c0:eb:f9:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:E0:08:BF:0B:6A:8F:4F:2A:6F:61:54:F6:E0:0B:0F:3F:83:11
X509v3 Authority Key Identifier:
keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:49:bb:81:0b:45:b5:38:fb:5b:63:88:ac:b1:e2:cb:b8:53:
1a:e2:53:cc:fb:e5:d6:c7:9e:a3:f3:38:d0:9b:65:3d:e2:6e:
16:c0:0e:32:98:eb:22:9b:5f:fe:08:21:5d:54:19:35:98:64:
91:0c:60:86:f3:70:e0:3b:91:37:3d:36:aa:a8:90:df:b3:dc:
fe:dd:ba:71:d5:26:82:c6:ff:3d:1d:fd:e8:5b:aa:13:de:42:
42:91:0c:f2:29:18:d0:45:0c:d5:4e:78:6e:dc:87:11:f3:a1:
21:09:83:ce:9d:84:ef:f2:ba:47:c2:79:59:dd:7d:c0:f2:95:
e2:ff:62:fc:ec:2a:13:3c:f4:f7:b4:d3:07:e3:c7:a1:96:33:
8c:c4:9f:a4:8d:0c:af:d0:8f:6d:31:f3:fe:60:f9:7a:8c:9a:
2b:7a:73:23:1e:60:2e:35:b5:38:bd:fc:e1:ca:63:5b:e0:02:
e6:b5:20:ba:25:91:bc:3d:de:8e:b1:07:68:66:cf:18:6f:8d:
a9:05:d9:3b:85:73:ca:15:2c:77:37:2b:50:ec:9d:8c:36:99:
8b:6d:0a:0c:4b:68:ae:4e:93:4e:9d:3c:72:95:4e:88:f6:c8:
38:68:40:4e:1f:6b:2e:f6:ee:f4:e7:3e:f8:57:36:d8:ea:31:
e3:48:d6:42
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJaCGRcDDW/p+Q0lY+zwLfHLDAE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MUJFNkNGNjQwMDBBQjlGRjVCNDNBRkY3OEYyNjIz
MTk5RjE1MzAeFw0yNTAyMDQxODI1NDlaFw0yNjAyMDMxODMwNDlaMDMxMTAvBgNV
BAMTKENBRkRFMDA4QkYwQjZBOEY0RjJBNkY2MTU0RjZFMDBCMEYzRjgzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYTrmrSTdsy2vAMPP1STPBvgK
XuuxJjhZOvRvznT6Ru+ODdmQj4TbTWhmcFWnqFImmYl9QGsQ/Qv5u6cbJCUdW0JH
1CzFQOnBI/nFEgIJdSTx3cy+bTt17Lqu/w1FB4naEvRHAMXpaswn6dh1F2w3UyJg
5GIezLkovpzyhGYnwUTAJ3q0WNod3Dv7hnHSiuw7N5I3tLxf3tFTVhkdsykM2DVN
6efOdL7L8APqkEaIIXaxZTWvs1NUMdEzkZky9AXuSiLJUz8pR2IKDbCpwJWevDlE
oNNZ7aZAiSmBPX0TItFWuu4QH6zqjpT6Ap/ZDJDO7PNCVPCa32jrQsDr+QP9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyv3gCL8Lao9PKm9hVPbgCw8/gxEwHwYDVR0j
BBgwFoAU84G+bPZAAKuf9bQ6/3jyYjGZ8VMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREM2QUU0RjIwNDc0OTM3OTM0QUY1RUY0OEVGOEIyQzY0
NTU1RkZFRTk4NDg2NDVCMUI4NkI3NTc5MjhGNzM4LzAvRjM4MUJFNkNGNjQwMDBB
QjlGRjVCNDNBRkY3OEYyNjIzMTk5RjE1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzgxQkU2Q0Y2NDAwMEFCOUZG
NUI0M0FGRjc4RjI2MjMxOTlGMTUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDNkFFNEYyMDQ3NDkzNzkzNEFGNUVGNDhFRjhCMkM2NDU1NUZGRUU5
ODQ4NjQ1QjFCODZCNzU3OTI4RjczOC8wLzM0MzUyZTMyMzMzNjJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3sIDAN
BgkqhkiG9w0BAQsFAAOCAQEAm0m7gQtFtTj7W2OIrLHiy7hTGuJTzPvl1seeo/M4
0JtlPeJuFsAOMpjrIptf/gghXVQZNZhkkQxghvNw4DuRNz02qqiQ37Pc/t26cdUm
gsb/PR396FuqE95CQpEM8ikY0EUM1U54btyHEfOhIQmDzp2E7/K6R8J5Wd19wPKV
4v9i/OwqEzz097TTB+PHoZYzjMSfpI0Mr9CPbTHz/mD5eoyaK3pzIx5gLjW1OL38
4cpjW+AC5rUguiWRvD3ejrEHaGbPGG+NqQXZO4VzyhUsdzcrUOydjDaZi20KDEto
rk6TTp08cpVOiPbIOGhATh9rLvbu9Oc++Fc22Oox40jWQg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:34:31 2025 by rpki-client