
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
File: 3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier: 5Jd8rS2p+qoLWywqVpWPPKZo8I69kcaHKzArmp19/KU=
Subject key identifier: F8:0B:23:41:FF:33:D1:98:46:C8:8D:4B:FC:40:05:12:EF:51:E5:11
Certificate issuer: /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial: 7A9C0B334A209AEDBB47E0772F70EF662D82C04F
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
Signing time: Thu 30 Apr 2026 21:40:33 +0000
ROA not before: Thu 30 Apr 2026 21:35:33 +0000
ROA not after: Thu 29 Apr 2027 21:40:33 +0000
asID: 263750
IP address blocks: 138.99.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 16 May 2026 20:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9c:0b:33:4a:20:9a:ed:bb:47:e0:77:2f:70:ef:66:2d:82:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Validity
Not Before: Apr 30 21:35:33 2026 GMT
Not After : Apr 29 21:40:33 2027 GMT
Subject: CN=F80B2341FF33D19846C88D4BFC400512EF51E511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:e8:e5:16:50:56:e1:ab:ab:b6:42:a2:aa:
a6:ac:1f:ad:c0:ee:62:fb:68:a1:0b:2a:e5:9d:54:
1c:40:27:94:b6:af:7a:6d:b9:9a:8a:2e:77:d1:67:
90:9f:79:c2:11:09:b8:ed:7d:98:bf:1a:f8:1e:ba:
7c:12:e2:ab:eb:97:36:44:25:03:38:1c:c5:75:38:
db:6a:ea:fe:79:07:b7:5f:b6:f5:f8:89:56:0b:0c:
4b:78:2b:8c:9b:ce:a8:f5:53:f2:32:65:c7:a9:60:
5e:1e:cb:dd:81:14:ba:b8:78:ab:89:be:2b:5e:69:
78:cb:0b:61:9a:73:29:34:c2:77:b2:5d:ce:7b:a7:
e8:d3:c1:4f:b3:b0:5a:7e:a9:c5:56:12:8f:12:73:
40:5e:9c:52:25:f9:91:51:3f:d7:73:56:78:9e:5a:
5a:4e:c6:35:93:57:b2:09:77:e8:bf:49:a7:6f:bf:
71:82:6b:24:8f:4b:49:d9:26:56:71:4f:cd:f7:36:
28:e2:51:4b:6b:0f:4e:cc:27:bf:c8:4f:da:91:5d:
a9:12:4b:2e:e1:22:8e:62:54:05:0e:b2:86:a1:69:
7e:78:23:b2:a1:ce:ed:d9:1a:fa:79:c5:cc:df:e9:
c7:84:7a:05:76:a3:b0:f3:76:76:93:94:62:97:86:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:23:41:FF:33:D1:98:46:C8:8D:4B:FC:40:05:12:EF:51:E5:11
X509v3 Authority Key Identifier:
keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.102.0/23
Signature Algorithm: sha256WithRSAEncryption
34:36:f1:7b:8c:86:56:aa:56:b0:84:11:7e:84:17:1d:88:a7:
d5:0b:58:4b:77:94:29:aa:92:7a:d5:4c:ba:9b:6a:cd:46:a8:
00:56:e5:2f:30:f6:f1:d4:85:dc:2f:4f:bc:d5:20:6b:0f:b0:
15:84:7b:93:d2:36:de:44:9b:4b:22:43:27:3e:ea:0d:0c:96:
b7:68:ce:91:50:33:00:91:1c:39:ae:ad:5c:72:fb:e0:a8:d0:
9d:a3:2f:99:61:42:c0:f3:7b:dd:dd:2b:ef:ba:c6:58:6a:4f:
c3:af:19:45:8f:7e:16:c4:7b:94:7f:64:43:49:d0:c6:60:86:
dc:7d:f4:3b:1e:5b:f2:fa:16:9e:20:27:a7:95:01:29:e0:da:
d5:c5:03:21:a4:7f:f4:28:1d:50:0f:3a:d8:9a:47:6b:95:c9:
25:76:31:fd:b9:35:cc:44:28:cf:0f:47:18:42:72:ce:da:19:
ed:0b:49:5e:eb:cd:1e:e6:af:ff:fa:9b:6c:50:11:b7:ac:87:
b4:85:ab:02:53:59:6d:14:7c:31:2c:5a:d9:48:45:69:bf:5e:
93:f5:9b:67:b3:22:f8:17:9d:be:86:63:8a:03:15:7e:7c:43:
75:e9:22:4c:ca:78:3c:1e:2c:e0:e5:d7:1d:b1:11:20:2b:2d:
b3:f0:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:25 2026 by rpki-client