
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e38382e302e302f31332d3234203d3e203133343839.roa
File: 3139312e38382e302e302f31332d3234203d3e203133343839.roa (raw, json)
Hash identifier: zSwgCEVfTnSguSeaP3uXqQrHn1irPVHQvxGFl+/xrXo=
Subject key identifier: F3:65:8D:AB:B0:E7:75:CF:33:52:58:12:30:52:79:B7:71:06:F9:40
Certificate issuer: /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial: 791AAA52FB143EE1272115B7A98D530F28A7B730
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e38382e302e302f31332d3234203d3e203133343839.roa
Signing time: Thu 19 Mar 2026 13:05:02 +0000
ROA not before: Thu 19 Mar 2026 13:00:02 +0000
ROA not after: Thu 18 Mar 2027 13:05:02 +0000
asID: 13489
IP address blocks: 191.88.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1a:aa:52:fb:14:3e:e1:27:21:15:b7:a9:8d:53:0f:28:a7:b7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Validity
Not Before: Mar 19 13:00:02 2026 GMT
Not After : Mar 18 13:05:02 2027 GMT
Subject: CN=F3658DABB0E775CF33525812305279B77106F940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:12:3a:4f:e9:1f:42:0a:ea:ff:69:ff:bc:
d2:a4:db:a9:ed:69:d1:f3:57:a0:96:fe:1b:8a:b9:
be:ec:6c:4a:b3:f9:16:0f:fb:d9:37:bf:7f:ea:95:
4d:d4:f1:b9:2d:22:d4:44:af:3c:e9:ab:b7:8e:7e:
d2:71:b7:39:f0:39:57:c6:8b:74:c2:7e:82:ae:19:
a2:63:d6:ba:19:da:6a:cb:20:74:9a:70:e8:e9:6a:
30:6e:41:f9:59:6c:cc:ba:9f:d4:a3:b9:5c:3d:78:
d6:61:0a:86:d7:9c:10:19:f5:6c:a3:b4:0b:75:09:
b3:f3:ac:cb:58:94:99:5a:ca:49:85:7b:e0:ef:b1:
ad:69:d6:7c:da:a6:41:bf:f6:17:7f:5e:e3:8f:49:
a1:92:6a:65:5c:24:e8:24:33:a2:f2:e8:37:09:13:
7b:43:5e:14:be:b2:6b:00:92:eb:94:20:50:71:63:
57:e5:2a:e2:f4:62:f5:c3:b4:61:09:f8:df:17:4f:
80:68:b8:77:e5:85:34:66:b5:50:6d:f6:a4:e6:05:
9c:26:39:fd:a2:d7:a7:73:80:66:54:02:9b:11:c0:
73:10:08:52:fe:b2:61:09:dd:ab:37:66:7c:5d:5a:
a9:e6:ab:e4:e0:c0:2e:6c:d8:ee:67:b6:ff:f9:fb:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:8D:AB:B0:E7:75:CF:33:52:58:12:30:52:79:B7:71:06:F9:40
X509v3 Authority Key Identifier:
keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e38382e302e302f31332d3234203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
de:7d:d8:da:fa:15:89:f7:eb:1d:28:a7:d9:3e:97:bc:86:18:
e3:06:24:07:30:26:5f:e0:ae:5e:59:3f:51:bc:75:f8:88:17:
fd:22:75:f7:d4:6e:4a:a5:97:80:5a:25:bd:85:87:c2:12:88:
ea:09:29:d3:c6:4f:02:e9:ba:62:ae:7d:d0:2f:de:4e:27:21:
e1:aa:5d:79:ae:61:84:31:53:8d:b8:df:ac:95:2b:2b:f0:89:
7c:aa:a7:67:38:a9:34:44:25:cf:ba:34:18:94:c0:50:9f:6e:
bd:13:74:e9:44:1c:db:58:c8:50:d1:03:e1:ea:02:c6:ee:1b:
f3:47:32:cc:fc:d9:c7:77:48:6c:88:1e:4c:dc:46:9c:13:10:
31:c1:03:f4:46:09:9c:da:30:78:90:70:4d:48:4d:1b:47:ca:
0b:a8:26:8f:30:f9:b3:b8:cc:48:64:6a:fb:19:d7:be:b4:0b:
28:94:c1:d9:72:57:1a:af:17:f5:bb:2a:ac:ed:96:56:7a:55:
6a:e2:53:bb:1b:d8:69:b1:4b:d3:06:c7:9b:8e:e5:64:64:ed:
6c:16:53:59:af:0a:2a:37:38:65:6a:eb:1f:9a:2d:5d:15:9f:
d4:f8:b1:95:9d:10:b6:50:de:be:5d:9c:f9:e8:e4:49:c7:92:
1d:22:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:25 2026 by rpki-client