
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa
File: 3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa (raw, json)
Hash identifier: F/zhd7mmRjViEVzQV+BVLmYAu1YXMzmwEVeucT1BlKw=
Subject key identifier: 81:80:62:80:43:3A:68:61:18:2E:34:AE:CC:5E:04:B7:04:C8:43:32
Certificate issuer: /CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Certificate serial: 71F1D7BC1BAB966EA2F2340BFCD34781E24FFC78
Authority key identifier: DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa
Signing time: Fri 10 Jul 2026 21:30:00 +0000
ROA not before: Fri 10 Jul 2026 21:25:00 +0000
ROA not after: Fri 09 Jul 2027 21:30:00 +0000
asID: 28466
IP address blocks: 189.201.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f1:d7:bc:1b:ab:96:6e:a2:f2:34:0b:fc:d3:47:81:e2:4f:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7BF8CF88926B1690350CA1477C3431E7A6CC7E
Validity
Not Before: Jul 10 21:25:00 2026 GMT
Not After : Jul 9 21:30:00 2027 GMT
Subject: CN=81806280433A6861182E34AECC5E04B704C84332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:4b:52:3c:68:12:b3:66:db:8f:09:0b:8d:
94:72:94:03:5d:4a:10:06:e4:3b:fb:3a:17:9d:61:
5d:66:aa:88:33:8a:d9:9e:d8:e7:d9:fc:74:3f:0e:
d8:57:90:9e:48:b7:02:62:13:4c:46:0f:3d:58:37:
7f:21:c0:3f:71:f1:8d:20:d7:39:c5:12:f3:cd:98:
b1:ad:30:44:4f:3e:eb:05:c8:9a:81:26:47:4f:09:
a9:f9:68:24:f6:63:ae:4e:3d:bc:32:e9:7d:b9:f5:
a4:9c:b0:57:02:de:21:1a:88:b1:a7:a2:ff:ab:7c:
27:6d:5f:11:55:42:3d:d4:89:1c:48:00:54:01:4d:
4a:7f:db:91:91:33:4c:7e:d3:eb:29:90:7b:67:e6:
f4:c5:f7:47:97:ee:b6:40:cc:71:d8:50:c3:e7:37:
d3:2c:74:e3:aa:69:d7:7a:2f:30:27:64:d1:fa:a2:
5c:8a:4f:0a:87:d5:ae:8d:a7:17:0a:d9:be:16:73:
3b:87:87:87:21:23:47:e1:61:52:5d:78:64:28:9b:
87:90:6d:09:49:3b:9b:69:1c:ee:63:60:a8:73:d9:
bb:21:49:12:50:ec:26:51:cb:83:4c:e6:bb:69:c6:
9f:90:3c:fd:43:90:67:b6:c6:d0:cd:80:ac:68:00:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:62:80:43:3A:68:61:18:2E:34:AE:CC:5E:04:B7:04:C8:43:32
X509v3 Authority Key Identifier:
keyid:DF:7B:F8:CF:88:92:6B:16:90:35:0C:A1:47:7C:34:31:E7:A6:CC:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BF8CF88926B1690350CA1477C3431E7A6CC7E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3925D2C5A7012116032AA4EA90BAE66AB5FCD500A9A2F16E2ABBC2831049A1E9/0/3138392e3230312e3235322e302f32332d3233203d3e203238343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.252.0/23
Signature Algorithm: sha256WithRSAEncryption
92:16:c9:49:cc:fe:13:8f:a9:4b:9b:c6:65:a6:5b:18:ef:e1:
aa:97:ed:23:20:b1:66:b3:47:6b:b0:6d:27:64:39:54:60:0c:
fa:a9:3e:71:01:a8:ef:17:2f:6d:15:81:06:15:dd:fb:88:74:
75:5d:7a:1a:9e:66:57:6a:94:40:04:26:61:ec:7d:73:cf:88:
02:1a:b4:8b:58:aa:5e:e9:9c:9b:7b:74:58:ed:0b:2d:d5:a0:
e4:53:4c:4f:5f:34:38:dd:60:14:a4:f3:4a:83:cf:67:bf:1a:
56:8c:51:fd:f8:6f:a5:4e:6f:cd:b7:52:cc:26:ad:52:e7:7c:
89:26:29:a1:78:63:e4:fc:96:2f:98:25:d1:19:60:a9:0a:94:
62:93:03:a3:31:9d:a8:c3:27:d5:6a:51:97:db:f9:08:24:1f:
b0:94:9f:70:10:f8:a9:bf:b3:c5:9f:9b:1f:2d:69:49:24:86:
34:4d:df:c1:ac:05:b3:6f:29:1b:2c:53:c2:59:3b:88:f8:dd:
54:e8:c6:18:2e:19:29:b7:e9:39:5c:d4:e4:65:ef:85:b9:45:
f0:94:d0:73:a9:e4:98:d0:4d:b7:2e:2f:62:85:b4:aa:a5:33:
4b:3c:6e:9f:d3:72:d2:38:43:7a:bb:47:ad:d4:59:0e:ad:d7:
06:5b:6f:b6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcfHXvBurlm6i8jQL/NNHgeJP/HgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3QkY4Q0Y4ODkyNkIxNjkwMzUwQ0ExNDc3QzM0MzFF
N0E2Q0M3RTAeFw0yNjA3MTAyMTI1MDBaFw0yNzA3MDkyMTMwMDBaMDMxMTAvBgNV
BAMTKDgxODA2MjgwNDMzQTY4NjExODJFMzRBRUNDNUUwNEI3MDRDODQzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAUtSPGgSs2bbjwkLjZRylANd
ShAG5Dv7OhedYV1mqogzitme2OfZ/HQ/DthXkJ5ItwJiE0xGDz1YN38hwD9x8Y0g
1znFEvPNmLGtMERPPusFyJqBJkdPCan5aCT2Y65OPbwy6X259aScsFcC3iEaiLGn
ov+rfCdtXxFVQj3UiRxIAFQBTUp/25GRM0x+0+spkHtn5vTF90eX7rZAzHHYUMPn
N9MsdOOqadd6LzAnZNH6olyKTwqH1a6NpxcK2b4WczuHh4chI0fhYVJdeGQom4eQ
bQlJO5tpHO5jYKhz2bshSRJQ7CZRy4NM5rtpxp+QPP1DkGe2xtDNgKxoAA85AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgYBigEM6aGEYLjSuzF4EtwTIQzIwHwYDVR0j
BBgwFoAU33v4z4iSaxaQNQyhR3w0MeemzH4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTI1RDJDNUE3MDEyMTE2MDMyQUE0RUE5MEJBRTY2QUI1
RkNENTAwQTlBMkYxNkUyQUJCQzI4MzEwNDlBMUU5LzAvREY3QkY4Q0Y4ODkyNkIx
NjkwMzUwQ0ExNDc3QzM0MzFFN0E2Q0M3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjdCRjhDRjg4OTI2QjE2OTAz
NTBDQTE0NzdDMzQzMUU3QTZDQzdFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkyNUQyQzVBNzAxMjExNjAzMkFBNEVBOTBCQUU2NkFCNUZDRDUwMEE5
QTJGMTZFMkFCQkMyODMxMDQ5QTFFOS8wLzMxMzgzOTJlMzIzMDMxMmUzMjM1MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4MzQzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvcn8
MA0GCSqGSIb3DQEBCwUAA4IBAQCSFslJzP4Tj6lLm8ZlplsY7+Gql+0jILFms0dr
sG0nZDlUYAz6qT5xAajvFy9tFYEGFd37iHR1XXoanmZXapRABCZh7H1zz4gCGrSL
WKpe6Zybe3RY7Qst1aDkU0xPXzQ43WAUpPNKg89nvxpWjFH9+G+lTm/Nt1LMJq1S
53yJJimheGPk/JYvmCXRGWCpCpRikwOjMZ2owyfValGX2/kIJB+wlJ9wEPipv7PF
n5sfLWlJJIY0Td/BrAWzbykbLFPCWTuI+N1U6MYYLhkpt+k5XNTkZe+FuUXwlNBz
qeSY0E23Li9ihbSqpTNLPG6f03LSOEN6u0et1FkOrdcGW2+2
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:49 2026 by rpki-client