
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31312e302f32342d3234203d3e20323730303838.roa
File: 3137302e302e31312e302f32342d3234203d3e20323730303838.roa (raw, json)
Hash identifier: ZNqv2XQeMTjdGfjl3FCvqvIAH3zxvRE0zzYSygVZjz0=
Subject key identifier: AB:7D:77:5A:D0:32:08:17:A3:7C:BF:8F:FB:F6:88:33:B6:06:65:CE
Certificate issuer: /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial: 411AAC1953B5B6A1CA8B7DBCBD6C785E1B6BBFD2
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31312e302f32342d3234203d3e20323730303838.roa
Signing time: Sat 02 May 2026 14:40:48 +0000
ROA not before: Sat 02 May 2026 14:35:48 +0000
ROA not after: Sat 01 May 2027 14:40:48 +0000
asID: 270088
IP address blocks: 170.0.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 16 May 2026 19:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1a:ac:19:53:b5:b6:a1:ca:8b:7d:bc:bd:6c:78:5e:1b:6b:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Validity
Not Before: May 2 14:35:48 2026 GMT
Not After : May 1 14:40:48 2027 GMT
Subject: CN=AB7D775AD0320817A37CBF8FFBF68833B60665CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:94:5b:9e:28:2e:80:87:88:15:8a:b3:90:
31:07:b7:ca:c0:c6:6c:33:d5:0e:48:38:fc:14:60:
2e:62:59:55:0c:af:eb:74:8d:90:3f:40:dc:7b:31:
03:b9:2a:8a:a0:f6:c6:14:33:d1:6e:01:84:07:4c:
84:9a:7d:71:7b:c4:74:eb:36:fb:fc:66:ee:a4:f9:
56:6b:64:90:38:1b:96:72:60:90:95:aa:4d:43:53:
9b:10:f0:1d:2b:c0:bc:2a:88:cb:09:87:c0:17:90:
6c:72:c8:08:35:32:10:5e:2a:d3:cc:19:63:6d:27:
3b:88:e1:ce:42:6d:9c:7b:f2:e6:c0:74:03:c2:41:
ed:56:4d:bf:9a:b5:fd:76:10:8e:44:21:8a:16:7f:
17:44:50:8d:9c:62:f3:59:dd:4f:12:56:d5:40:1b:
f1:80:5f:40:ec:00:15:68:75:9f:02:8f:e3:fa:d2:
6d:b9:0a:3b:17:5d:0f:b9:11:6f:33:e7:5a:b1:bb:
33:b3:41:d9:7f:3b:ee:b3:5c:cc:19:a0:76:2a:7a:
df:35:f5:09:3b:4d:d7:62:31:24:34:ae:9e:26:27:
ee:e4:a0:6f:28:56:76:88:f4:8c:7b:20:bb:11:08:
5d:d5:87:3d:9c:df:d8:0c:a8:07:b2:fa:8e:96:7d:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:77:5A:D0:32:08:17:A3:7C:BF:8F:FB:F6:88:33:B6:06:65:CE
X509v3 Authority Key Identifier:
keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31312e302f32342d3234203d3e20323730303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3b:fa:89:9f:32:27:99:37:a2:46:c2:39:3a:4d:97:9f:0b:
d4:4c:ae:12:cc:4c:e8:56:b4:7f:bc:54:92:cf:c6:f3:26:07:
4b:dc:0a:61:bb:9e:ba:ad:64:a9:97:ed:a8:2d:0f:ca:1d:e3:
99:b5:e4:46:ec:8b:82:82:8c:af:98:b4:51:08:8c:c6:72:c8:
82:1e:13:e3:61:7f:ad:91:79:64:8f:9d:01:16:0d:bd:fb:68:
d4:da:55:9c:6a:3c:3f:a2:c7:3c:84:bc:86:25:ad:a9:e4:ac:
f2:e3:a7:27:0d:fe:d8:5e:47:e3:75:c4:a5:42:b2:e1:c9:66:
c5:21:73:fd:d7:60:e4:da:f2:97:f4:89:67:a7:c0:39:c2:22:
7a:88:12:56:82:52:f7:9a:a2:c0:56:ef:b5:b5:aa:8c:87:ea:
b8:d7:b4:77:4f:07:bc:c2:0b:6f:9e:63:18:5b:8f:d2:2a:22:
71:e9:03:31:56:24:bd:9e:9b:5b:77:d6:57:97:5b:11:c9:6e:
95:cf:60:5e:53:06:c6:0e:40:24:19:c9:bf:28:9c:39:47:c1:
c1:e5:70:ca:0f:55:16:b0:75:7e:66:b2:89:aa:78:04:8b:83:
fd:d3:3d:cd:e5:f6:09:e2:03:af:5c:1a:89:3b:ab:a4:20:f5:
03:02:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:06:23 2026 by rpki-client