
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
File: 34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa (raw, json)
Hash identifier: u/47eDPo4nH30DJjeuaG4CL6WKcq9nU5/rxM6fLdjIs=
Subject key identifier: DE:00:19:70:6D:59:0C:9F:69:50:6F:52:51:83:9D:5C:7A:AE:55:7C
Certificate issuer: /CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Certificate serial: 79221DBAD7F1A7E82289DD12B974103184C30201
Authority key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
Signing time: Tue 04 Feb 2025 18:13:07 +0000
ROA not before: Tue 04 Feb 2025 18:08:07 +0000
ROA not after: Tue 03 Feb 2026 18:13:07 +0000
asID: 265551
IP address blocks: 45.238.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:22:1d:ba:d7:f1:a7:e8:22:89:dd:12:b9:74:10:31:84:c3:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Validity
Not Before: Feb 4 18:08:07 2025 GMT
Not After : Feb 3 18:13:07 2026 GMT
Subject: CN=DE0019706D590C9F69506F5251839D5C7AAE557C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:3b:11:e3:da:a7:00:e8:e6:47:93:28:66:
43:19:9d:70:c3:e9:64:0a:ca:cf:cf:0e:3a:b0:32:
9e:97:29:ff:74:29:c5:66:6c:8f:2a:93:03:c2:1d:
21:65:5c:f7:9a:7a:bf:f7:56:e8:25:fb:b8:f1:cf:
12:79:8a:19:ca:c8:6e:b0:b3:96:a8:6c:f4:44:7b:
80:39:13:ee:b4:9d:70:be:c2:38:67:54:c6:ef:49:
b2:d9:6e:ba:63:a6:91:44:41:2f:ae:c6:fe:5b:65:
75:e3:0c:ba:8a:50:45:9e:29:04:67:55:ad:a9:62:
68:a7:4d:1b:92:a2:cc:50:19:49:c1:45:07:57:ae:
da:33:95:ed:73:79:c6:96:70:d9:ce:7d:6c:e3:83:
83:93:72:4d:47:cf:6c:aa:86:36:0e:2f:0f:d6:45:
f3:3b:c1:2c:55:be:0f:de:89:9c:4f:3a:88:82:bf:
5c:01:b5:e7:77:5e:3d:42:9a:3a:93:2d:48:4c:aa:
22:28:b9:f0:a9:ee:b9:3c:d1:b8:4d:4e:2f:5c:ac:
a4:ad:83:84:9f:a8:54:fe:83:2b:65:28:b6:92:b8:
a3:c7:ce:63:24:d8:6b:fe:63:72:56:cf:f6:e4:d4:
a5:c8:82:59:56:4d:1a:6d:8b:b9:1c:14:a1:94:cc:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:19:70:6D:59:0C:9F:69:50:6F:52:51:83:9D:5C:7A:AE:55:7C
X509v3 Authority Key Identifier:
keyid:22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1f:75:fa:c5:2b:12:6e:5c:0f:e7:99:f3:05:2a:71:89:26:
46:7b:2b:b8:94:b4:44:37:39:d7:a7:64:ba:1e:36:4e:58:6c:
4e:92:ba:ac:4b:1f:5f:3b:50:f5:45:0d:d7:41:a5:e9:c5:c4:
15:3d:df:f1:57:b3:10:f8:8c:a8:7c:84:51:cd:83:d9:7a:0a:
10:7f:91:c5:0d:a5:28:c3:0b:7f:87:4f:9e:fd:03:73:11:75:
fa:10:f4:cc:d8:ec:b3:88:2d:0e:fe:55:81:db:58:21:c0:03:
24:77:fd:26:69:09:d0:a8:85:ab:b9:95:a6:10:8e:df:54:55:
cd:87:33:c3:9e:51:d4:7d:4e:ab:0d:24:fe:14:e8:8f:af:09:
95:de:4e:da:2a:e4:de:45:39:75:dd:f3:22:ed:50:78:77:d3:
b1:91:85:af:b7:4d:f8:dc:42:a5:f1:5b:4b:bc:62:14:d0:ff:
9f:48:f0:65:6e:e8:b7:e6:4c:75:8a:32:08:e1:80:5a:5f:de:
b5:7b:c2:b7:ac:d7:36:66:2e:4a:12:2d:59:80:67:8f:db:a5:
7a:6e:9b:8f:ae:e9:14:09:0d:4d:93:0a:03:01:61:0a:32:23:
26:1c:59:3b:5c:90:6e:9d:ac:84:a7:a7:4e:c2:49:7a:f3:0c:
ff:45:fb:c5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeSIdutfxp+giid0SuXQQMYTDAgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJFMjAzODAzMjdCMkNCNjc5MDcxRDdGRTlBQzREQkZB
MzE3QTE2NjAeFw0yNTAyMDQxODA4MDdaFw0yNjAyMDMxODEzMDdaMDMxMTAvBgNV
BAMTKERFMDAxOTcwNkQ1OTBDOUY2OTUwNkY1MjUxODM5RDVDN0FBRTU1N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhTsR49qnAOjmR5MoZkMZnXDD
6WQKys/PDjqwMp6XKf90KcVmbI8qkwPCHSFlXPeaer/3Vugl+7jxzxJ5ihnKyG6w
s5aobPREe4A5E+60nXC+wjhnVMbvSbLZbrpjppFEQS+uxv5bZXXjDLqKUEWeKQRn
Va2pYminTRuSosxQGUnBRQdXrtozle1zecaWcNnOfWzjg4OTck1Hz2yqhjYOLw/W
RfM7wSxVvg/eiZxPOoiCv1wBted3Xj1CmjqTLUhMqiIoufCp7rk80bhNTi9crKSt
g4SfqFT+gytlKLaSuKPHzmMk2Gv+Y3JWz/bk1KXIgllWTRpti7kcFKGUzLY/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3gAZcG1ZDJ9pUG9SUYOdXHquVXwwHwYDVR0j
BBgwFoAUIuIDgDJ7LLZ5Bx1/6axNv6MXoWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzU5Q0IxMTU3MDdBOTRCMkMzRTEyOEJDMDFCNDhGNUU5
NUZFOThBNkZDRDY2NTgxMjc0REZGQ0I2NDQ3QUFGLzAvMjJFMjAzODAzMjdCMkNC
Njc5MDcxRDdGRTlBQzREQkZBMzE3QTE2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkUyMDM4MDMyN0IyQ0I2Nzkw
NzFEN0ZFOUFDNERCRkEzMTdBMTY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM1OUNCMTE1NzA3QTk0QjJDM0UxMjhCQzAxQjQ4RjVFOTVGRTk4QTZG
Q0Q2NjU4MTI3NERGRkNCNjQ0N0FBRi8wLzM0MzUyZTMyMzMzODJlMzEzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe6/
MA0GCSqGSIb3DQEBCwUAA4IBAQBeH3X6xSsSblwP55nzBSpxiSZGeyu4lLRENznX
p2S6HjZOWGxOkrqsSx9fO1D1RQ3XQaXpxcQVPd/xV7MQ+IyofIRRzYPZegoQf5HF
DaUowwt/h0+e/QNzEXX6EPTM2OyziC0O/lWB21ghwAMkd/0maQnQqIWruZWmEI7f
VFXNhzPDnlHUfU6rDST+FOiPrwmV3k7aKuTeRTl13fMi7VB4d9OxkYWvt0343EKl
8VtLvGIU0P+fSPBlbui35kx1ijII4YBaX961e8K3rNc2Zi5KEi1ZgGeP26V6bpuP
rukUCQ1NkwoDAWEKMiMmHFk7XJBunayEp6dOwkl68wz/RfvF
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:05 2025 by rpki-client