
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203133343839.roa
File: 3133382e39372e35362e302f32322d3232203d3e203133343839.roa (raw, json)
Hash identifier: AdslncP6mLK8BuGWFfIlSp0RxW19EcYK4Xp111Qm0XI=
Subject key identifier: 76:F5:B3:F2:34:F8:AF:94:DC:43:0C:B6:5C:3E:3A:C3:D7:7D:B8:AF
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 4BB3CD973B7466CE44B814682E54DD036FBAEFFF
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203133343839.roa
Signing time: Thu 19 Mar 2026 20:35:10 +0000
ROA not before: Thu 19 Mar 2026 20:30:10 +0000
ROA not after: Thu 18 Mar 2027 20:35:10 +0000
asID: 13489
IP address blocks: 138.97.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b3:cd:97:3b:74:66:ce:44:b8:14:68:2e:54:dd:03:6f:ba:ef:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Mar 19 20:30:10 2026 GMT
Not After : Mar 18 20:35:10 2027 GMT
Subject: CN=76F5B3F234F8AF94DC430CB65C3E3AC3D77DB8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:31:7f:70:c6:3b:86:bc:bd:42:53:b6:6c:
3a:7e:b9:bb:d0:3c:bb:df:99:c5:58:ae:1f:9a:b1:
87:8b:c9:84:51:f6:e5:96:4c:40:89:c8:32:38:b0:
28:f9:81:08:5c:d6:bf:49:ac:b6:a6:6d:2b:04:05:
9b:bc:2c:25:78:95:d5:5a:27:ae:40:c0:f7:64:e9:
0c:c1:1f:be:4d:d1:61:83:66:52:8a:6c:0e:8f:61:
ba:00:68:29:fa:ba:db:16:d9:48:f6:32:19:53:d3:
f6:e0:71:cc:1c:88:2a:80:cd:c6:fd:bb:f3:2b:10:
3d:ea:e9:f9:29:0e:6b:d3:a9:4e:b1:c5:f6:1b:60:
89:ae:70:db:96:ed:60:ea:d5:5e:b7:ab:a6:71:72:
ce:e1:41:22:d7:91:ce:44:23:ee:51:f4:00:1c:17:
47:81:6c:fe:1d:16:2f:fd:d3:c6:d9:93:f6:1c:3d:
cb:ce:75:ab:c9:a3:47:f9:27:4d:39:4b:27:61:43:
26:d6:a0:48:a6:44:4b:ca:19:84:bf:c2:d6:cd:91:
79:b4:0b:8f:87:cd:1b:34:61:dc:38:2d:12:26:4a:
0f:53:f0:a1:2a:0f:d7:f7:f1:7e:ae:fd:fc:97:c1:
22:02:13:01:84:4c:47:e5:e3:6c:1c:44:c2:ed:28:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:B3:F2:34:F8:AF:94:DC:43:0C:B6:5C:3E:3A:C3:D7:7D:B8:AF
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
83:1f:8f:d9:9c:42:18:a7:dc:23:41:a8:1c:c1:5d:57:86:ab:
36:93:35:85:e4:ec:10:2d:07:72:f8:81:1e:a3:6a:4a:b5:42:
f1:44:55:b1:13:d1:ec:1c:e1:86:59:37:16:e2:40:f8:d8:b1:
c0:ab:2c:f1:fb:a4:ef:33:c3:db:9d:cc:14:33:6a:03:e6:7c:
f5:59:26:dd:b4:3d:ed:82:65:51:17:81:f1:42:5f:c7:a7:14:
fb:7c:c4:0e:f9:2b:64:ce:4a:81:11:22:98:83:b4:78:21:f6:
b6:65:94:5a:ae:06:67:94:c5:b8:cf:85:64:37:f3:05:07:ad:
a3:15:f8:d1:c0:41:54:32:d1:e9:9b:10:24:26:fe:65:47:5b:
7e:6a:60:a4:e3:7f:f3:1d:ba:76:b2:6c:b1:73:9c:04:a2:89:
ec:c2:71:5d:48:f2:7a:c6:57:0c:cf:19:a9:0b:ef:53:22:18:
35:2a:48:15:27:b1:86:1b:18:10:cd:2e:af:81:43:57:2d:39:
4b:5d:70:35:bc:89:33:de:60:67:db:d1:90:e7:bf:72:bf:32:
21:cc:74:29:56:cc:b8:2e:f3:c0:6a:25:6c:c6:53:d5:f1:d5:
85:aa:cf:16:cd:20:69:86:59:53:26:3a:f9:07:a9:9f:25:18:
e1:dc:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:21 2026 by rpki-client