
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa
File: 3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa (raw, json)
Hash identifier: SZ9wg/8gwnZfMyf8uO4zmQYlYaYHQZUera44c38MHUc=
Subject key identifier: 24:48:41:76:6D:CB:22:F4:1B:A5:8A:E0:35:12:16:BD:C1:D2:22:66
Certificate issuer: /CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Certificate serial: 297533B8275F7F02B50D9E55753E23CE7093B30A
Authority key identifier: DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa
Signing time: Fri 10 Jul 2026 21:30:00 +0000
ROA not before: Fri 10 Jul 2026 21:25:00 +0000
ROA not after: Fri 09 Jul 2027 21:30:00 +0000
asID: 28466
IP address blocks: 189.201.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:75:33:b8:27:5f:7f:02:b5:0d:9e:55:75:3e:23:ce:70:93:b3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Validity
Not Before: Jul 10 21:25:00 2026 GMT
Not After : Jul 9 21:30:00 2027 GMT
Subject: CN=244841766DCB22F41BA58AE0351216BDC1D22266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:37:2f:0e:96:6a:6f:95:ad:06:29:9f:88:
f8:59:58:16:f0:c3:65:b4:8c:76:55:5a:f6:51:83:
c7:6f:66:ec:44:a1:64:8c:1c:78:49:ec:50:19:c0:
db:15:09:c1:33:f9:ef:ad:18:d0:81:74:e7:f5:a9:
49:6c:9b:e4:5f:32:5c:87:a1:01:18:d1:67:56:3e:
bd:9b:ae:71:7c:5d:b5:66:a9:30:39:b9:42:67:f1:
73:5a:1c:98:69:95:71:7a:24:b0:97:8a:a0:77:c3:
bc:b4:06:51:83:19:20:fe:17:35:b4:8b:c6:c1:f1:
af:94:e7:1a:c0:8d:f2:c2:84:5b:4e:6e:06:f2:ef:
e1:c5:9c:f1:0e:b0:f7:0b:e7:c4:c0:bf:3f:78:5b:
8c:70:5b:d4:67:1d:ed:28:3b:a6:58:d9:57:28:c2:
a1:47:3e:5e:95:d8:b9:2b:82:e2:df:48:8d:b1:4c:
6a:31:86:91:3e:ae:34:4b:7f:10:64:e4:42:1b:8c:
f7:8d:a4:cb:c0:6a:4f:40:3b:6a:c0:fc:6c:c8:19:
27:45:57:7f:fe:e3:60:f2:aa:94:20:7c:0d:64:34:
bb:cd:80:9b:22:ef:0d:9c:33:66:41:cc:f6:c7:85:
e8:b5:e8:9f:b6:49:09:28:d6:c3:79:99:bd:c3:6f:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:48:41:76:6D:CB:22:F4:1B:A5:8A:E0:35:12:16:BD:C1:D2:22:66
X509v3 Authority Key Identifier:
keyid:DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32322d3232203d3e203238343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:65:13:16:c3:9c:8a:9d:dd:d6:ff:9a:3c:26:96:5b:b7:c3:
da:45:34:55:23:b4:9c:39:75:4f:83:72:b8:f3:4e:47:61:a4:
d8:a6:ac:33:5e:46:1b:a5:94:e8:c5:a4:77:f3:f5:5d:c6:55:
dd:23:14:c7:50:62:4d:db:c1:6f:7e:f3:2a:74:43:8b:f2:00:
0e:4b:a7:08:11:d1:ee:20:d0:9d:db:6a:c1:7c:8b:49:91:ff:
b6:d2:f5:e2:5d:14:1e:03:89:c5:5e:c1:13:18:13:d0:73:b8:
1e:5a:86:49:bb:e1:41:a9:17:02:4f:6d:86:51:4d:1a:14:f5:
9b:75:35:d7:e5:e4:c8:eb:2a:be:38:94:7d:6e:de:d5:60:8f:
52:8f:bb:5c:e1:fe:ee:a5:78:c2:ba:f2:ee:c8:ce:e3:ed:94:
38:90:d4:97:3b:55:45:25:51:15:c3:8d:fa:0b:a2:90:41:7d:
c2:94:e6:30:c9:da:16:0a:97:8e:49:a7:4f:e8:1e:73:a1:b4:
de:25:8d:16:8c:64:0b:29:58:0d:20:3a:7b:7d:3b:65:d1:40:
b7:00:45:14:81:54:a6:3d:0b:9d:81:49:bc:a9:eb:d4:38:52:
01:05:e6:62:fa:b7:f8:e8:1d:7c:f9:d1:be:9b:8b:a8:4c:c7:
9e:83:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:19 2026 by rpki-client