
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130312e302f32342d3234203d3e20323633373530.roa
File: 3133382e39392e3130312e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier: ryE/1dma7zt0Lx3SNYmniWEE4qXfiRukjUy+5QaNrA4=
Subject key identifier: C9:CD:91:5D:5D:A5:F6:20:23:AD:F7:E1:E2:82:EB:04:88:98:9C:42
Certificate issuer: /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial: 7747EF57D17491BE093EFA5F1E9AA213D9CA1A2F
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130312e302f32342d3234203d3e20323633373530.roa
Signing time: Thu 30 Apr 2026 21:40:33 +0000
ROA not before: Thu 30 Apr 2026 21:35:33 +0000
ROA not after: Thu 29 Apr 2027 21:40:33 +0000
asID: 263750
IP address blocks: 138.99.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 16 May 2026 20:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:47:ef:57:d1:74:91:be:09:3e:fa:5f:1e:9a:a2:13:d9:ca:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Validity
Not Before: Apr 30 21:35:33 2026 GMT
Not After : Apr 29 21:40:33 2027 GMT
Subject: CN=C9CD915D5DA5F62023ADF7E1E282EB0488989C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:5f:9b:63:17:1d:d9:60:a8:7b:37:ad:32:
73:f4:10:43:96:5b:e2:6b:e0:fd:b7:7c:7b:30:75:
ef:ad:bd:4b:df:65:b9:d5:fb:53:6f:ec:2a:3c:21:
46:73:81:fc:e2:ff:0e:9c:a2:93:f3:3d:b9:ac:f7:
d5:e2:1a:77:63:2b:23:1f:0c:46:16:5c:74:1f:b0:
10:c7:4c:18:99:da:df:79:55:76:fe:70:96:12:5d:
27:bd:80:6f:a9:3d:dc:5a:b4:b1:47:20:31:3d:8d:
24:ef:57:fa:f1:9b:00:a0:c4:06:c0:66:64:99:9e:
3f:4d:61:b8:78:ae:28:b4:68:ca:65:6b:05:fe:f3:
6f:77:e1:fc:4c:71:72:d6:32:22:97:44:bf:d3:c6:
86:95:b5:e1:b5:92:8e:78:bb:5b:59:15:47:f0:7e:
71:02:fd:d9:64:f3:d1:84:8d:49:ed:fd:77:e6:78:
aa:4d:31:f7:27:ac:cb:48:ce:56:f8:f0:10:0c:72:
c4:a7:4b:97:16:fc:e9:0e:f1:b5:81:f2:08:dd:56:
40:60:d3:80:2d:e2:75:b8:fd:2e:01:3d:0f:d6:76:
fe:ff:18:01:08:e0:7c:c7:2f:f6:0e:12:26:09:7b:
32:8f:3e:6e:59:be:d7:b0:7a:9e:e7:21:4e:3d:51:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:91:5D:5D:A5:F6:20:23:AD:F7:E1:E2:82:EB:04:88:98:9C:42
X509v3 Authority Key Identifier:
keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130312e302f32342d3234203d3e20323633373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ae:1b:eb:b2:75:00:55:69:1d:a8:4d:17:57:62:90:bc:c3:
78:3b:77:2f:b7:3f:1f:3f:7c:b4:ba:af:31:95:4e:70:3c:0e:
f6:90:49:46:8a:5d:45:17:50:77:73:2d:b9:35:09:01:f7:6b:
ab:63:df:1a:ad:bf:81:d7:ca:a4:96:0d:5d:fd:0b:bd:d5:90:
b9:99:77:5c:24:a8:bd:fd:cb:5b:31:59:3c:85:cb:2c:1c:d0:
58:38:91:2d:cd:bb:b7:e5:f8:1e:e7:b8:14:ce:c1:17:9b:a2:
6c:23:82:87:6a:2d:44:2c:00:71:7f:41:99:b2:4f:35:a8:1a:
75:0f:d0:56:b1:da:b2:33:05:54:e4:64:94:cd:dc:85:30:fb:
d1:fc:1d:d9:8c:9a:21:ab:f7:a5:4c:7d:00:ba:43:25:0f:9a:
9b:73:a1:eb:ab:ac:8a:00:33:bb:d2:1c:2c:5a:45:ad:df:90:
f0:d1:04:62:d8:07:a1:e1:af:29:b7:f6:27:09:42:96:5d:fb:
12:76:ac:41:3a:5d:83:45:fc:86:9e:92:46:17:b2:17:e4:23:
4b:4d:44:e6:2b:ee:2a:df:7c:22:82:04:ca:78:aa:4a:5b:10:
eb:64:f1:1c:90:d8:f4:ed:0d:ce:00:a7:30:7d:e9:f6:0c:69:
ac:1d:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:04 2026 by rpki-client