
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
File: 323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa (raw, json)
Hash identifier: qkyZxltVVFUxcd48BM3ODxVwLPXAJM95O5CCVBZvOSU=
Subject key identifier: 0D:DA:1F:18:49:65:D9:E3:49:D0:73:AE:17:2E:6E:D8:BD:FF:21:56
Certificate issuer: /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial: 5D51EFE6AE3ADECFEE209EFBD754EC6DA8E0F4F8
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
Signing time: Tue 03 Jun 2025 01:20:53 +0000
ROA not before: Tue 03 Jun 2025 01:15:53 +0000
ROA not after: Tue 02 Jun 2026 01:20:53 +0000
asID: 28459
IP address blocks: 2001:1207:ffc0::/42 maxlen: 42
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:51:ef:e6:ae:3a:de:cf:ee:20:9e:fb:d7:54:ec:6d:a8:e0:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Validity
Not Before: Jun 3 01:15:53 2025 GMT
Not After : Jun 2 01:20:53 2026 GMT
Subject: CN=0DDA1F184965D9E349D073AE172E6ED8BDFF2156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:ca:ae:e8:db:61:04:b4:af:88:06:36:cf:
4f:5c:25:b9:a2:33:70:a8:15:19:ed:95:bb:18:d1:
35:8b:c5:a0:d5:70:b2:51:bf:11:df:80:7b:cf:96:
e6:bf:9d:79:ea:a7:b6:f7:60:03:09:0f:f6:a9:11:
04:05:d4:b4:23:1a:92:4b:08:09:ff:f7:04:7b:8b:
94:12:65:20:40:2c:86:34:e2:ce:b1:24:30:34:9a:
98:10:d3:ae:6d:61:a6:2a:e5:9f:11:13:19:19:5f:
25:50:27:92:a6:10:9f:d5:94:20:f2:21:77:68:f8:
ab:52:36:d4:0f:49:e5:1b:7d:84:03:6d:3d:90:bf:
ce:64:26:94:ee:46:83:a9:97:ac:0c:0c:7c:5d:07:
0c:6a:1a:ad:d8:26:90:61:ff:e4:ac:1e:a8:7f:b5:
04:ea:76:c6:bd:5a:97:0b:df:84:4d:76:2b:5d:56:
a4:0c:d5:c1:55:51:52:44:00:8a:e1:2d:fc:7e:0e:
1e:a0:1a:03:18:2e:94:ca:b8:d9:12:53:bd:a8:c8:
13:7d:12:cb:0c:2e:ee:6d:8f:27:42:96:ea:a3:1f:
f7:9a:98:8a:3f:46:18:fc:f3:eb:f5:c3:f2:23:2f:
05:6f:9a:be:1e:1d:98:b8:0c:ff:4c:da:64:a1:67:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:1F:18:49:65:D9:E3:49:D0:73:AE:17:2E:6E:D8:BD:FF:21:56
X509v3 Authority Key Identifier:
keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1207:ffc0::/42
Signature Algorithm: sha256WithRSAEncryption
6c:86:a2:a3:01:39:80:43:9d:3c:55:40:65:28:29:e1:ff:7e:
3a:4b:1b:84:14:66:bc:c2:3e:3b:64:ca:52:d1:d5:28:1d:e4:
af:25:6b:ec:d8:71:95:98:cb:2a:65:01:c7:91:e8:bc:22:83:
e9:0a:3e:e7:53:59:b8:99:d2:26:9b:56:ca:f3:1c:82:58:b2:
17:af:e1:dd:6b:8d:e9:ea:39:8c:a4:73:70:46:64:60:2c:c5:
2b:a8:77:b1:6f:e5:f5:3b:d2:df:3a:d3:c1:12:ef:08:a3:e3:
74:0b:5a:af:e4:f1:e7:b5:57:ad:f3:e9:ab:54:5b:1e:0c:85:
c9:8e:b9:b3:05:d7:5d:8a:56:b5:d3:1e:91:16:a2:7c:26:d7:
71:86:25:12:80:96:af:e0:08:f2:b2:4e:d1:c7:10:9f:e5:9f:
76:4a:5c:15:52:e0:c1:0a:4a:06:b9:a1:09:74:a3:4c:10:95:
96:ae:02:55:33:a2:c1:37:4e:3f:2c:ac:9e:90:25:1a:b0:e7:
87:c4:ff:21:3f:b5:0c:dd:95:5b:a2:95:5c:2a:db:a9:c7:03:
64:40:74:8d:b9:ba:d8:72:c5:23:9d:f8:43:0b:9d:f2:ce:90:
98:ff:bd:c9:d5:1e:d8:15:f0:d6:ef:7c:75:2e:34:ec:b0:4c:
f9:a0:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:05 2025 by rpki-client