
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
File: 3230302e302e39302e302f32332d3234203d3e203238333934.roa (raw, json)
Hash identifier: gGcKd72NzTLd81UJyiAKoXiBf3bzacRe2+pC7Z6so5s=
Subject key identifier: 32:EA:49:AB:29:B5:0B:88:CB:C2:9D:D1:CF:DB:52:A9:27:19:D6:3F
Certificate issuer: /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial: 5DC2DB2CFD7BB7C3DEC43B7CA4B16D48B3A48075
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
Signing time: Mon 22 Jun 2026 19:48:48 +0000
ROA not before: Mon 22 Jun 2026 19:43:48 +0000
ROA not after: Mon 21 Jun 2027 19:48:48 +0000
asID: 28394
IP address blocks: 200.0.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c2:db:2c:fd:7b:b7:c3:de:c4:3b:7c:a4:b1:6d:48:b3:a4:80:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Validity
Not Before: Jun 22 19:43:48 2026 GMT
Not After : Jun 21 19:48:48 2027 GMT
Subject: CN=32EA49AB29B50B88CBC29DD1CFDB52A92719D63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:10:f6:59:3e:39:e8:24:36:8e:4a:a9:a5:
5f:01:ae:c7:0d:38:7a:66:f1:a1:9b:89:78:c3:20:
c9:6f:65:8c:16:02:dc:36:08:82:7f:37:f5:ae:d1:
f7:3f:b8:83:c0:3d:69:06:97:72:14:0f:7a:df:f3:
af:d9:61:3f:0d:0d:16:ba:40:c5:49:3e:a8:af:aa:
a4:fd:ef:04:61:aa:58:50:25:24:cc:03:16:5f:3c:
56:76:30:29:f6:f1:b1:29:87:84:6c:72:d2:83:c6:
53:fb:69:70:e5:ea:ac:72:49:b2:74:ed:5e:ae:83:
66:4e:1e:c9:7b:b5:f8:68:b6:0c:41:d2:68:d8:f0:
9d:5d:75:c8:d1:fd:b4:77:7a:d3:55:76:73:30:1a:
b7:c4:56:10:2c:05:2f:6d:d1:1e:88:06:dd:84:e2:
52:a4:14:90:dc:11:ef:cd:72:17:97:a1:4c:aa:5a:
d6:8e:b7:fe:e8:4e:1d:21:d0:7d:d9:15:69:68:b2:
f0:a1:bb:7b:76:2c:d5:ca:d8:3c:01:f6:d1:3c:69:
f6:fc:d1:79:63:54:8f:6c:a4:24:7f:9e:91:15:9c:
c9:f6:d7:5e:48:e1:f9:52:0b:f0:4a:b5:3e:69:da:
de:41:e3:b9:6c:a6:0a:98:52:18:a6:6e:5f:cc:c0:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:49:AB:29:B5:0B:88:CB:C2:9D:D1:CF:DB:52:A9:27:19:D6:3F
X509v3 Authority Key Identifier:
keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.90.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:ef:c7:0b:5f:53:ca:3a:6e:26:81:db:27:72:b1:10:01:af:
71:3f:ef:14:fe:16:ea:aa:67:7e:10:a6:85:9f:78:f7:78:2a:
bf:2f:2e:27:1c:89:05:39:f5:ac:a6:b1:a3:18:0c:32:88:f3:
aa:9d:bc:af:f8:e0:4c:34:00:b3:70:10:3e:a9:6c:cc:e7:9e:
0e:fb:75:3f:3a:38:11:82:4a:62:f1:c8:9d:be:f6:3f:97:00:
b6:1d:5e:19:75:4f:46:0d:26:69:f7:57:8b:d3:9d:02:6f:a8:
2b:9c:d7:b9:1f:8d:60:b6:05:cd:2a:3f:ad:e6:48:19:7b:dc:
e7:b2:93:fc:62:2b:a2:36:dd:49:b6:6c:fd:b0:ac:df:28:f3:
85:64:30:ac:f2:26:01:c9:31:d7:22:6a:5a:b2:19:bd:c5:d8:
6a:34:82:1d:a5:b5:7f:d8:b3:22:a8:4b:38:4e:7c:4e:9e:f5:
f5:6d:d2:08:3e:dd:f0:32:35:ab:62:75:4e:d8:cb:ab:d0:90:
3d:ea:65:c0:84:bd:e4:bb:1a:7d:c2:07:2b:45:1e:91:58:07:
b2:61:62:62:20:7c:8b:96:c3:42:f1:f0:ee:78:cf:65:0e:17:
8f:77:b7:03:90:d5:a9:b5:10:e8:20:57:45:28:d9:f0:df:42:
80:de:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:44 2026 by rpki-client