
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
File: 3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa (raw, json)
Hash identifier: f7c9bcvM/FrtMuCnFu1B5phSyPDPmpffyZEjzw8ZDJk=
Subject key identifier: 85:2A:B9:33:22:5A:23:0C:FF:05:E9:3D:B4:75:F3:5D:3D:7C:DF:E6
Certificate issuer: /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial: 28A5C1963335BC51CEE7A74B317973123927A11B
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
Signing time: Tue 26 Nov 2024 11:45:00 +0000
ROA not before: Tue 26 Nov 2024 11:40:00 +0000
ROA not after: Tue 25 Nov 2025 11:45:00 +0000
asID: 273065
IP address blocks: 143.208.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a5:c1:96:33:35:bc:51:ce:e7:a7:4b:31:79:73:12:39:27:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Validity
Not Before: Nov 26 11:40:00 2024 GMT
Not After : Nov 25 11:45:00 2025 GMT
Subject: CN=852AB933225A230CFF05E93DB475F35D3D7CDFE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:e7:ae:f2:9d:b0:4c:c4:51:d1:ec:7d:c2:
95:64:73:d3:32:b5:09:c8:ba:8f:72:23:ae:c0:53:
55:44:ae:cd:a1:ec:73:9d:dd:b8:86:da:59:9d:37:
e9:4e:cc:cf:77:92:9b:4c:0c:ae:67:03:cd:a2:10:
13:3c:e3:dc:65:6a:0e:01:61:30:9e:d0:2b:07:81:
27:e8:98:37:0a:f6:c5:65:cb:b0:2f:e6:c5:3b:71:
e3:f5:5c:85:29:57:7f:71:a8:7f:bf:c0:42:e7:7b:
c0:4a:a0:8b:43:44:e4:db:a6:23:95:90:77:6f:38:
d4:13:e4:68:bc:3f:2b:ad:0e:2c:3a:4c:2f:ab:6d:
a1:aa:a1:d8:40:83:d0:38:54:b0:03:51:37:54:e2:
a3:72:92:93:15:39:bf:e7:db:c3:cf:dd:24:4f:bf:
34:18:4c:be:82:98:52:f8:e4:ea:6b:ef:35:d4:6a:
79:f9:11:16:a2:37:51:1d:88:3e:de:7e:38:f5:7c:
f1:54:c1:15:f1:02:f6:b9:e7:f2:59:21:48:9d:98:
5a:31:bb:3a:e5:b6:a9:0f:b9:cc:9e:89:85:c3:c2:
7f:95:b8:06:d6:98:2b:89:c8:4e:22:58:e9:a7:0d:
20:6f:51:58:84:2d:05:da:99:78:31:21:74:a8:a5:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:B9:33:22:5A:23:0C:FF:05:E9:3D:B4:75:F3:5D:3D:7C:DF:E6
X509v3 Authority Key Identifier:
keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a5:c1:5b:4a:fe:5f:a9:af:e7:1e:c6:6d:67:cf:e4:3d:3b:
f4:66:21:a7:96:6b:63:b3:f5:20:75:22:8f:f0:53:c8:4b:17:
63:a8:1d:12:5a:63:21:59:d2:c9:ea:03:b7:e4:78:01:ad:aa:
c5:7b:2d:6b:34:24:e3:bd:7a:bb:6d:bb:b3:ed:4c:42:b2:c1:
68:aa:c5:51:c5:96:39:56:d2:bc:70:c6:4f:ae:88:02:e1:4b:
0d:0e:5c:c3:d1:d1:16:06:47:0f:49:f6:ca:0c:8d:18:99:30:
11:bf:3c:3e:f6:7a:2d:c8:8d:8e:2b:36:ac:af:25:f0:b7:d6:
64:03:58:c3:8f:3f:0c:13:26:9e:d0:1d:a5:00:99:75:22:5a:
13:d3:2a:af:86:3d:77:44:93:8d:5b:39:2d:18:08:ba:29:c9:
0d:19:3a:48:07:14:cf:cc:6f:85:5d:66:07:2e:88:b6:17:9a:
bb:b1:f1:85:b4:f2:e5:6b:c0:66:4b:3f:ff:76:c7:a9:9d:3f:
16:c0:da:f8:3f:bb:fe:56:b1:7f:6f:14:96:b8:a5:8d:4a:fe:
15:cc:99:22:af:67:b8:da:38:09:06:e0:64:fa:88:e0:ce:20:
23:27:4c:7c:45:ed:76:ca:ca:a1:2d:27:84:96:ce:7f:27:6a:
41:bf:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:56 2025 by rpki-client