
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3133312e302e3137322e302f32322d3232203d3e203134313137.roa
File: 3133312e302e3137322e302f32322d3232203d3e203134313137.roa (raw, json)
Hash identifier: WvQCvnScCE/uRYSQ5Okt6F9VeeQwiJ2iu4UEIU6CObg=
Subject key identifier: 4B:7C:0E:88:48:B6:68:0A:6D:79:F6:66:3F:3F:39:E5:4F:05:B8:D1
Certificate issuer: /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial: 21D7D929AFC511E4748E3C7B4D361142ED9AC113
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3133312e302e3137322e302f32322d3232203d3e203134313137.roa
Signing time: Tue 01 Jul 2025 19:15:02 +0000
ROA not before: Tue 01 Jul 2025 19:10:02 +0000
ROA not after: Tue 30 Jun 2026 19:15:02 +0000
asID: 14117
IP address blocks: 131.0.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d7:d9:29:af:c5:11:e4:74:8e:3c:7b:4d:36:11:42:ed:9a:c1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Validity
Not Before: Jul 1 19:10:02 2025 GMT
Not After : Jun 30 19:15:02 2026 GMT
Subject: CN=4B7C0E8848B6680A6D79F6663F3F39E54F05B8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:68:5d:56:db:d6:b3:60:80:8b:43:45:eb:
5a:39:ef:6a:84:c5:a3:26:17:c6:24:a8:eb:2e:73:
21:42:fc:d6:7e:d7:e2:70:91:f3:22:99:14:7b:b8:
af:47:39:1e:2f:b1:60:fd:49:ab:db:9b:71:1c:72:
ff:58:93:b5:3c:30:75:3d:77:29:46:cc:c7:da:a5:
ae:c9:79:a6:5f:b8:ea:37:05:90:62:ef:c8:76:20:
14:97:47:c4:f3:26:86:ab:51:4f:25:e4:f6:6e:64:
be:37:59:e4:09:63:0f:86:ee:f1:66:bb:73:40:bf:
49:26:25:a9:71:f2:9e:06:09:1a:eb:18:fd:0a:ad:
ce:68:70:bf:1c:a9:f4:27:b7:0f:fc:58:df:6b:d2:
cf:85:13:8b:96:13:0f:49:38:71:eb:5e:d7:b6:95:
c4:ae:ae:4b:9a:d1:d2:9c:31:19:63:a8:02:ab:54:
6a:0a:c5:92:f9:99:a2:f4:57:0f:9f:dc:77:e1:30:
b3:2e:ba:9a:d3:89:f2:0c:77:77:4b:17:d4:74:ca:
02:54:a0:8a:35:f0:6f:c4:a7:65:32:93:da:c5:3a:
ac:9b:54:b4:b3:74:73:2c:cd:e7:a8:cf:d4:46:5c:
54:74:d9:bc:f0:87:1d:ea:69:58:e2:71:a4:2b:ad:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:0E:88:48:B6:68:0A:6D:79:F6:66:3F:3F:39:E5:4F:05:B8:D1
X509v3 Authority Key Identifier:
keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3133312e302e3137322e302f32322d3232203d3e203134313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:0a:47:94:54:70:ef:6e:f5:ba:da:58:60:c9:f6:47:71:e3:
81:33:69:da:9f:46:60:22:a2:33:f8:a2:29:3f:d5:f9:7a:0f:
f1:c8:79:98:6e:59:96:26:d6:73:52:be:12:d2:db:8f:c7:01:
4e:5d:64:68:f9:46:9b:27:7e:3a:cc:60:d7:99:e1:8c:4f:bc:
69:51:1d:b8:71:3b:8e:69:82:54:ec:8c:d1:87:8b:46:f4:1e:
40:6e:28:8d:d6:90:37:7d:c9:8d:16:0b:ef:a4:5a:a0:27:c2:
b1:09:3c:69:8d:9e:eb:f8:fb:32:73:ea:d9:53:f8:a7:85:03:
8c:c0:28:ca:4c:d4:b9:4b:6c:ab:68:1e:a3:fa:cf:37:15:7e:
05:6c:39:f1:a4:2d:6c:d4:81:ca:fd:ef:c5:80:34:19:dd:e1:
5d:46:57:a4:fd:2c:00:72:9e:30:45:66:b2:c3:39:1e:c0:9f:
9a:e2:14:15:62:b1:fc:82:af:cb:b9:09:e8:28:de:14:a0:b7:
c8:2b:01:2e:dc:bd:51:6d:72:d6:34:f8:e8:cc:7b:27:fd:d4:
9f:99:af:1f:2d:a8:30:2c:01:a2:b8:22:cd:c9:2d:8c:0e:22:
21:35:a9:36:e4:08:98:f4:cd:9c:10:17:57:27:3e:43:df:12:
19:38:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:51 2025 by rpki-client