
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
File: 3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa (raw, json)
Hash identifier: 6hHm6ED0vj395HcrDmXZ3IOJDIRsNQTkt53p6UCufd0=
Subject key identifier: 67:B0:45:72:08:DF:5C:51:80:20:7D:29:25:B5:AD:96:0F:A6:52:30
Certificate issuer: /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial: 7BB87161225B55D09903E6C837BC54155BBD197B
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
Signing time: Tue 29 Sep 2026 12:37:18 +0000
ROA not before: Tue 29 Sep 2026 12:32:18 +0000
ROA not after: Tue 28 Sep 2027 12:37:18 +0000
asID: 273065
IP address blocks: 143.208.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 19:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b8:71:61:22:5b:55:d0:99:03:e6:c8:37:bc:54:15:5b:bd:19:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Validity
Not Before: Sep 29 12:32:18 2026 GMT
Not After : Sep 28 12:37:18 2027 GMT
Subject: CN=67B0457208DF5C5180207D2925B5AD960FA65230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:53:50:f3:aa:46:6b:ce:76:0e:1a:34:28:
fb:e5:a8:5b:c7:c0:9a:ff:6e:57:1f:33:97:39:e9:
96:12:7b:5d:66:b0:6a:57:0d:99:d6:82:d4:9e:d5:
74:d5:9c:0b:60:7a:7c:48:5d:7b:19:d1:cb:9b:87:
ff:f6:d3:47:2e:be:20:40:96:cc:e9:51:e7:35:41:
83:46:05:f4:df:d6:83:4b:0a:cc:32:ec:a0:18:ba:
6e:4d:98:97:0b:1a:7a:5e:dc:c7:d8:87:52:2e:b5:
75:6c:fe:ef:5d:31:06:84:1a:d4:1b:ed:b7:85:ec:
6e:08:b8:95:a2:6e:ea:72:ae:15:bc:8d:79:00:50:
08:e4:e3:d4:a0:55:11:86:1e:eb:d2:13:f8:55:ca:
ca:55:b3:29:21:81:48:8d:23:a5:c6:a2:d2:fd:ca:
a3:b8:1b:79:0f:0a:38:93:91:db:b8:90:6e:44:e4:
71:d2:3c:9b:f3:35:62:31:41:6f:45:6e:eb:4e:a7:
c1:88:93:ca:68:f2:9f:84:8a:12:1b:ae:12:c9:7b:
46:49:0e:9d:b8:a8:32:8c:4b:81:e4:2e:46:c3:25:
0c:73:cc:86:2d:2d:de:f2:67:af:ae:6f:df:8b:b2:
9a:f6:42:c5:df:4d:59:4b:51:cc:c0:fb:51:01:31:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:45:72:08:DF:5C:51:80:20:7D:29:25:B5:AD:96:0F:A6:52:30
X509v3 Authority Key Identifier:
keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c3:4c:80:1b:aa:c1:45:d8:49:29:7f:b9:9e:46:80:b4:9d:
4a:ab:ba:60:bf:db:06:ee:29:46:bd:1c:5e:b8:e5:1c:99:ac:
ea:9b:7e:5b:57:e6:44:4e:a3:f1:38:5a:5e:16:82:e6:a4:1a:
bb:0e:07:d9:b3:1b:1c:f3:1f:ae:81:60:ae:1c:27:94:ec:76:
e0:92:66:8a:b4:76:2a:b9:4f:77:be:fa:b7:f1:be:76:47:36:
ee:0d:20:b2:b5:fa:9b:6f:08:5a:d5:1b:ca:ae:75:e8:22:50:
06:63:c6:c3:93:a5:b4:d8:ba:b7:08:33:93:6d:2a:77:a0:6e:
37:38:d7:58:e1:36:07:64:79:27:0c:ca:b5:19:08:47:17:66:
bd:13:b0:a1:18:ec:b0:af:f8:78:42:a5:b0:91:9e:f7:9e:bc:
b9:7c:2f:97:81:18:22:86:9b:8d:d1:b4:aa:17:d2:dd:6d:c0:
2d:d2:11:5c:ab:de:88:ef:dc:71:72:ef:b8:dd:24:92:0a:61:
52:8a:54:d4:c7:f9:2d:5e:09:0c:4f:38:57:7f:34:1f:12:66:
c7:a7:7a:ce:7a:1e:0d:6a:94:a5:82:20:fa:36:3a:34:5e:69:
1a:40:9d:bc:b1:56:c1:d3:ba:56:02:5a:76:97:76:b2:67:f1:
58:01:4e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:33:11 2026 by rpki-client