
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
File: 3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa (raw, json)
Hash identifier: 3QhjBqdTIZobI9mIuNsSOwqRRtSwFy8T2LRMj2WzgFE=
Subject key identifier: DE:87:97:E3:34:35:83:B7:19:7A:06:20:7B:CF:2F:F1:23:54:C6:E0
Certificate issuer: /CN=F120FD76709C67C88845B1BB9132720E6262A870
Certificate serial: 593547972EB3CB2B7250C5851FCFAAEE18FAA79B
Authority key identifier: F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
Signing time: Mon 09 Mar 2026 15:33:19 +0000
ROA not before: Mon 09 Mar 2026 15:28:19 +0000
ROA not after: Mon 08 Mar 2027 15:33:19 +0000
asID: 28387
IP address blocks: 201.131.200.0/22 maxlen: 25
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl
rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:35:47:97:2e:b3:cb:2b:72:50:c5:85:1f:cf:aa:ee:18:fa:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F120FD76709C67C88845B1BB9132720E6262A870
Validity
Not Before: Mar 9 15:28:19 2026 GMT
Not After : Mar 8 15:33:19 2027 GMT
Subject: CN=DE8797E3343583B7197A06207BCF2FF12354C6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:d1:ef:57:99:b6:5f:66:a2:06:31:4e:14:
3b:6f:9d:77:1f:a3:aa:4d:47:05:e8:9a:96:e2:63:
4e:5e:e2:30:37:f2:95:a2:eb:55:72:89:6b:e5:a2:
d9:76:6b:cd:c3:aa:61:f9:a3:09:08:e4:70:76:75:
b8:74:11:c3:18:10:83:60:d5:8d:db:ae:46:40:81:
6a:43:35:5c:fb:85:9d:1c:47:19:ae:fb:a8:88:91:
28:58:b0:db:b6:51:01:67:22:b3:83:6b:ec:d0:17:
53:cb:13:4d:bf:2f:37:67:74:5a:95:4e:e7:4c:e8:
67:a6:15:f6:13:7e:04:84:72:0f:ca:82:1b:27:2d:
8d:1c:de:5b:0a:50:2d:8c:6a:d3:70:b3:2e:07:f3:
53:c9:e0:66:d5:66:70:be:9f:1e:cc:3d:ba:4f:12:
02:71:6a:f3:a5:84:3c:4a:98:fe:50:ce:a4:26:58:
63:29:f6:4a:18:d2:49:67:de:9a:0d:6f:3c:dc:2d:
7e:1b:64:7a:19:93:c5:e7:6a:c2:fa:1b:63:a8:e7:
9e:20:17:07:f6:06:15:8b:58:2f:15:91:80:58:90:
2c:46:56:21:e1:78:2c:34:d3:18:98:0f:1d:04:0f:
ca:bd:34:a4:bf:72:06:23:6b:62:0b:6b:35:62:1a:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:97:E3:34:35:83:B7:19:7A:06:20:7B:CF:2F:F1:23:54:C6:E0
X509v3 Authority Key Identifier:
keyid:F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:b9:35:ed:a4:2c:2d:fb:4d:23:95:9e:b7:fa:62:9d:9d:74:
b9:24:1b:cc:b1:45:b1:8e:e6:63:f3:8c:3b:45:6b:24:b1:6d:
24:d5:c9:1e:4c:58:e2:90:33:bd:a4:9c:f8:9b:f0:98:54:1e:
28:3e:81:e5:af:0e:37:cc:c1:ca:ee:09:2c:12:da:49:e3:1f:
c4:5d:bc:51:0d:57:51:25:f1:24:cd:0c:f1:75:d0:7c:37:e8:
cb:19:e9:bf:d7:e1:ad:61:de:fb:f6:5e:64:8f:66:a1:19:3c:
e1:26:f5:66:d1:5b:e1:3e:c7:69:b5:b8:c0:36:e4:16:73:da:
6f:64:a0:f3:48:e2:10:97:22:35:6f:69:42:ae:aa:94:b4:62:
3c:a9:7e:cc:8d:42:30:79:86:ed:f3:94:18:f0:ca:88:7e:1b:
c2:32:33:11:69:55:b6:05:1c:e0:d0:85:6e:b7:af:7c:5b:ba:
c3:31:d6:a5:fb:cd:48:ec:92:1b:9b:84:9f:22:f1:d3:c7:09:
20:8c:a3:02:ee:4d:2f:d3:74:dd:98:f8:48:2a:b9:a3:bc:ef:
ef:0e:c1:d2:a8:5f:75:0c:f8:ca:7f:e3:d9:80:26:02:22:19:
ed:ea:77:7d:68:aa:7a:84:2a:0b:9b:7e:fb:85:96:60:5b:b3:
d2:71:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:12 2026 by rpki-client