
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3234203d3e203133343839.roa
File: 3138312e3132382e302e302f31322d3234203d3e203133343839.roa (raw, json)
Hash identifier: mFrKJ+YOVIp3U84EZIKNBU+o4hOieg6A8wc7G5UL0Jw=
Subject key identifier: 5D:95:66:50:BE:FB:6A:EC:2B:B4:22:3E:97:FC:58:36:E5:F7:11:30
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 3A650A787836FDCFF31C318E4959ECDB3069D568
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3234203d3e203133343839.roa
Signing time: Thu 19 Mar 2026 20:35:10 +0000
ROA not before: Thu 19 Mar 2026 20:30:10 +0000
ROA not after: Thu 18 Mar 2027 20:35:10 +0000
asID: 13489
IP address blocks: 181.128.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:65:0a:78:78:36:fd:cf:f3:1c:31:8e:49:59:ec:db:30:69:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Mar 19 20:30:10 2026 GMT
Not After : Mar 18 20:35:10 2027 GMT
Subject: CN=5D956650BEFB6AEC2BB4223E97FC5836E5F71130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:7a:77:8b:c7:ca:26:f9:20:a3:6d:02:3f:
6a:c1:d8:23:4a:53:1c:7d:b0:ed:ce:74:55:3b:a6:
91:54:5d:f7:b6:57:09:02:14:4d:61:83:57:41:0d:
e2:79:0f:4d:31:5d:61:cc:cd:28:48:b6:a1:8d:11:
12:5b:6f:2f:7e:6d:61:f4:1d:63:dc:4b:9e:6e:65:
25:c1:c2:3c:52:28:34:ef:ef:a7:b2:cd:ce:15:a8:
3d:ff:f8:02:93:b5:bb:30:f2:1a:2f:e1:11:52:bb:
98:ce:64:99:8a:d7:1d:26:62:c9:1d:6c:10:32:b5:
df:d0:ac:0e:81:36:5c:14:a1:c2:72:8d:68:64:5d:
fc:9b:ae:85:88:8c:d2:1c:33:d0:ce:0d:1d:bd:5f:
d8:d9:b9:bb:e0:5d:b7:3f:ce:6c:75:94:3c:ba:63:
b3:58:2b:7b:9a:7e:d5:e7:e0:74:02:d1:73:a8:e1:
89:80:d9:94:48:60:be:3b:ae:70:e1:9e:74:14:2a:
3e:09:be:f4:4e:e4:b8:0d:66:46:bc:20:91:96:64:
43:02:95:36:af:f0:c2:af:0a:7d:03:42:b6:8b:af:
36:32:1e:f8:9d:bb:84:e4:c7:9f:c7:37:b4:30:92:
75:d5:b4:aa:63:28:f5:f9:44:c2:0a:cd:a3:ab:dd:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:66:50:BE:FB:6A:EC:2B:B4:22:3E:97:FC:58:36:E5:F7:11:30
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3234203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.128.0.0/12
Signature Algorithm: sha256WithRSAEncryption
1a:f5:d4:9d:30:22:1d:a7:03:95:a4:a2:ba:7a:58:90:0e:3a:
c5:f2:e2:f6:44:74:60:22:a6:94:9b:13:ec:a9:cd:af:9e:79:
2f:2c:b7:e2:0c:d8:98:c6:e9:87:00:94:da:d4:35:6e:b7:58:
17:63:4e:21:75:3c:8a:fb:6c:61:85:15:56:15:dc:12:64:9c:
78:1f:91:44:e8:c1:84:b1:3f:14:f4:7e:56:29:db:6e:e4:c7:
4e:2c:0f:4d:9d:4b:a0:03:fb:88:4a:a2:24:ca:2b:57:81:db:
2c:c4:02:20:96:ea:17:88:23:94:e5:02:4b:81:e2:da:b7:ee:
77:0b:aa:52:9d:1f:3e:ec:db:0c:88:55:e3:40:71:e1:a4:a4:
69:75:ac:8a:c6:4a:73:96:9a:c6:b9:68:f5:3c:82:31:3d:50:
18:e3:24:3d:c6:10:1d:11:59:68:45:3c:3e:c2:1e:69:d5:bf:
18:57:83:ba:5a:65:73:fd:ff:44:16:58:14:b9:d3:63:ad:dc:
ca:f7:78:6e:ed:ce:63:60:b6:87:3e:86:36:d5:a2:63:b2:a7:
73:db:2b:8e:a3:12:7e:c2:17:68:3a:7b:89:a7:e3:6c:29:61:
de:2f:d1:0d:ff:82:28:7f:40:ac:ea:2e:85:b3:e6:cf:8b:a1:
17:1f:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:16 2026 by rpki-client