
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
File: 3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier: /aqQ3ISGb6pm0IM4mjnciWN1gMmE+eotrfFQ+7jPS58=
Subject key identifier: 16:F0:3C:15:18:D4:F4:FC:D8:DD:98:CD:A7:2B:97:81:86:52:B4:0A
Certificate issuer: /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial: 68F67BFE997845593AD28ED6D95E063B4E1FB029
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
Signing time: Mon 22 Jun 2026 19:48:49 +0000
ROA not before: Mon 22 Jun 2026 19:43:49 +0000
ROA not after: Mon 21 Jun 2027 19:48:49 +0000
asID: 28394
IP address blocks: 138.255.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f6:7b:fe:99:78:45:59:3a:d2:8e:d6:d9:5e:06:3b:4e:1f:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Validity
Not Before: Jun 22 19:43:49 2026 GMT
Not After : Jun 21 19:48:49 2027 GMT
Subject: CN=16F03C1518D4F4FCD8DD98CDA72B97818652B40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:73:c0:1a:c4:73:3c:02:3e:ae:9d:5d:39:
a6:9e:19:7b:23:dc:23:b2:6a:b8:24:e3:96:d9:f0:
64:c4:5a:87:69:86:97:bf:91:3b:83:4a:e5:91:3b:
fd:c1:48:e1:93:ea:d2:f5:82:62:e5:67:d6:ba:4f:
05:08:ce:f1:dc:e7:5b:47:b2:9c:bd:d2:0c:cd:57:
67:23:6b:08:ff:de:2e:43:55:f2:23:5e:55:6b:92:
7e:82:88:ce:b2:63:d7:f7:c2:a4:18:6f:79:b6:ee:
5b:13:83:59:82:de:00:a4:fc:55:f6:da:87:28:52:
71:90:bf:2e:f7:97:a5:39:ab:f6:bc:a2:e8:35:e2:
0e:5e:ab:61:41:d7:17:fa:49:43:52:10:de:1b:b6:
28:b1:76:3f:20:5b:26:98:b1:a0:15:f1:23:75:d5:
f6:30:ed:c3:e8:c1:d5:97:ae:fa:07:7d:61:68:10:
91:f8:eb:21:cf:12:66:27:45:c1:e2:a8:62:cd:67:
f6:b9:ca:99:58:8e:2f:4b:31:96:aa:67:6d:84:2c:
cb:a6:32:b5:78:77:c9:5c:da:6b:a7:54:23:64:1b:
12:14:9c:06:8f:c7:b3:87:a5:a1:17:0b:58:18:c5:
a2:88:4f:8b:f4:01:26:71:04:29:bd:ff:19:20:d7:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F0:3C:15:18:D4:F4:FC:D8:DD:98:CD:A7:2B:97:81:86:52:B4:0A
X509v3 Authority Key Identifier:
keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.60.0/22
Signature Algorithm: sha256WithRSAEncryption
62:e9:dc:d5:ab:27:fe:33:3f:ee:fc:7f:69:5b:1d:06:88:cd:
86:14:38:f6:92:29:b6:62:1e:f3:3c:9b:53:af:c1:03:f0:83:
a3:cf:05:4e:46:4b:31:42:d3:83:2f:af:b7:9a:1d:0b:37:dd:
27:5c:6c:8a:92:67:2e:1b:30:6e:e9:80:24:a3:0a:ac:dc:3b:
da:59:09:2d:39:bd:0d:0d:4e:e6:67:df:36:32:e8:92:ae:51:
74:10:3e:96:6b:26:d9:3a:fa:81:17:61:c8:f7:65:98:ed:af:
e8:f7:ec:5e:e3:bb:aa:12:a8:0b:f5:b2:69:ea:0d:a4:7f:70:
24:0f:41:51:17:f2:d6:e3:6e:ea:68:eb:a6:07:2b:7c:d4:f9:
08:e0:6b:72:1d:a8:2a:fa:fd:07:24:08:23:41:4f:03:10:4e:
54:ae:6e:ec:b7:69:15:36:a9:f1:1b:c6:b8:83:fb:e6:a2:b2:
f7:2e:e7:7c:17:ec:05:8e:79:77:59:a8:c2:ee:67:dc:3c:39:
36:e3:25:8f:07:b6:84:af:5c:e8:08:59:1b:77:9d:38:22:41:
26:59:75:58:5c:72:8a:2c:37:03:51:f7:22:37:d5:e0:40:75:
f8:1b:1c:7e:66:63:25:2a:87:b1:76:12:63:fe:66:bc:76:2a:
a6:a7:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:28:20 2026 by rpki-client