
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/34352e36382e39362e302f32322d3234203d3e20323734313036.roa
File: 34352e36382e39362e302f32322d3234203d3e20323734313036.roa (raw, json)
Hash identifier: Ar8xyallE6WITv/9OZOHzEcjL5+Is+9fiw+d4R3i9f0=
Subject key identifier: 32:8D:92:42:08:16:44:97:51:DA:40:AA:58:FE:4E:C7:BC:DC:DC:9E
Certificate issuer: /CN=8612029153DBFCAA43F5B4FA40AA77D90C9D98F5
Certificate serial: 49B404E74A00081A97D5AF369AD0806B1475D276
Authority key identifier: 86:12:02:91:53:DB:FC:AA:43:F5:B4:FA:40:AA:77:D9:0C:9D:98:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/34352e36382e39362e302f32322d3234203d3e20323734313036.roa
Signing time: Wed 22 Jul 2026 00:40:00 +0000
ROA not before: Wed 22 Jul 2026 00:35:00 +0000
ROA not after: Wed 21 Jul 2027 00:40:00 +0000
asID: 274106
IP address blocks: 45.68.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.crl
rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b4:04:e7:4a:00:08:1a:97:d5:af:36:9a:d0:80:6b:14:75:d2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8612029153DBFCAA43F5B4FA40AA77D90C9D98F5
Validity
Not Before: Jul 22 00:35:00 2026 GMT
Not After : Jul 21 00:40:00 2027 GMT
Subject: CN=328D92420816449751DA40AA58FE4EC7BCDCDC9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:28:b1:03:85:28:db:8f:6c:0e:33:e7:de:
4c:0a:c7:da:a9:24:ba:43:19:b6:bd:94:41:78:fa:
3c:42:97:2a:e5:cd:ec:ed:3f:63:0a:59:41:d9:81:
16:c5:84:35:59:02:46:e9:79:9f:b2:f1:d3:0d:11:
25:4b:31:91:cf:9f:b1:3f:ef:24:9b:d8:6a:b4:a0:
99:4f:82:ca:ad:00:0c:ce:ca:70:64:e7:53:eb:f7:
f9:b4:0e:11:d8:11:33:0d:a0:03:ea:a3:dd:c7:01:
fa:c6:62:21:b4:a5:45:8d:b6:97:2d:b3:10:cd:75:
55:52:67:97:50:a6:de:b2:9d:f8:20:fe:30:19:32:
2c:f7:b2:aa:91:b4:26:27:d2:9b:e9:12:08:16:5c:
a5:c8:5b:32:31:fd:25:32:c2:40:88:f7:d4:90:e8:
d3:02:eb:0c:86:d9:23:70:f9:a8:b3:89:c7:d3:21:
f3:ff:db:ec:58:27:4a:a8:e6:88:65:4c:6e:aa:85:
8c:e5:b8:70:d8:d4:95:68:c9:59:89:f7:f3:ef:eb:
fd:3d:c9:97:36:d3:f9:21:8a:b0:80:c1:1b:8e:97:
e4:21:c4:ea:fd:f9:51:0e:32:77:cf:74:64:06:ea:
13:e4:70:7f:c1:8e:0e:c1:59:e8:8c:ac:30:03:84:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:92:42:08:16:44:97:51:DA:40:AA:58:FE:4E:C7:BC:DC:DC:9E
X509v3 Authority Key Identifier:
keyid:86:12:02:91:53:DB:FC:AA:43:F5:B4:FA:40:AA:77:D9:0C:9D:98:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/34352e36382e39362e302f32322d3234203d3e20323734313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.96.0/22
Signature Algorithm: sha256WithRSAEncryption
75:a6:21:0d:f2:f6:1a:99:8c:7f:99:de:39:3b:22:7f:4b:0c:
2b:cd:8b:e9:e7:1d:72:29:9d:86:16:2c:e0:3c:54:27:09:97:
cd:2c:6a:aa:2a:30:eb:a0:d6:53:b1:35:c1:6b:a4:ba:c4:5b:
2a:f4:1c:bd:79:8a:2a:3c:99:53:8a:78:7f:29:66:2d:de:d3:
8a:46:8a:de:10:82:29:da:46:d2:71:34:1b:91:01:40:e4:55:
31:75:1f:d4:5b:42:94:af:be:38:c7:94:ac:c3:19:15:a2:bd:
69:c1:e3:d7:15:4c:c8:bc:87:10:ff:0e:42:54:34:8b:25:71:
16:30:68:8e:73:fc:e2:9c:33:b0:ee:c6:2b:41:cc:7b:07:de:
86:03:43:0b:01:12:63:bf:35:e8:a5:e0:eb:a1:c3:86:73:45:
6b:51:b8:bc:a5:4f:53:9e:05:7d:c0:e4:07:28:c7:28:e3:3f:
39:fc:c4:ff:cd:d4:1f:84:dc:00:e1:4e:b5:82:a4:60:1d:90:
4c:5a:bb:c1:f7:27:af:05:13:63:e3:95:9b:68:a0:c6:28:cd:
f9:7e:e9:18:ef:be:c8:24:9e:33:75:e5:70:9a:2b:17:c6:cd:
e8:7f:6b:15:05:83:e5:26:19:0e:55:12:fa:a6:7f:99:f2:26:
9f:76:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:17 2026 by rpki-client