
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e203237303237.roa
File: 3137302e38342e3233342e302f32342d3234203d3e203237303237.roa (raw, json)
Hash identifier: yb7aZwHUMgsntFv3dgL4EeY4c02xd9CXAKUlq5G8/dM=
Subject key identifier: 4B:1A:E7:27:57:21:C8:9D:5C:F8:EA:D1:8B:EF:A8:12:A8:33:16:63
Certificate issuer: /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Certificate serial: 35DAC643230DC82DE9C424A11BF9704E77B64F26
Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e203237303237.roa
Signing time: Tue 10 Mar 2026 16:20:00 +0000
ROA not before: Tue 10 Mar 2026 16:15:00 +0000
ROA not after: Tue 09 Mar 2027 16:20:00 +0000
asID: 27027
IP address blocks: 170.84.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 22:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:da:c6:43:23:0d:c8:2d:e9:c4:24:a1:1b:f9:70:4e:77:b6:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Validity
Not Before: Mar 10 16:15:00 2026 GMT
Not After : Mar 9 16:20:00 2027 GMT
Subject: CN=4B1AE7275721C89D5CF8EAD18BEFA812A8331663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:9f:65:4c:db:47:94:7b:b0:e8:6c:41:ff:
af:a0:45:ee:f5:63:d7:d3:f7:ea:27:5d:cb:53:7f:
12:04:0b:15:b0:e7:36:fc:5f:5c:14:e0:a6:2f:17:
b6:c2:c3:73:5b:8d:52:e2:7a:96:b8:22:98:80:4c:
03:6a:64:49:55:2d:f1:48:0e:fd:07:75:68:6e:20:
3d:35:a4:f1:cc:9b:f7:8c:13:d4:38:cd:6b:a5:33:
28:37:49:ac:46:e0:84:56:57:e9:ab:f1:a3:8b:f5:
6e:2a:77:cb:92:7b:7a:39:0d:fc:cd:8c:eb:85:be:
c1:f5:96:78:f4:94:8a:d4:7a:46:9d:85:71:f0:f9:
c7:76:64:07:9c:bf:cb:13:35:7f:4a:df:98:d1:4d:
f2:1a:37:8a:ab:13:9a:b4:6f:84:f7:0c:37:68:61:
50:35:68:dd:02:50:bd:7f:4e:61:d8:f5:02:fa:00:
74:6c:36:36:0b:7e:03:5f:25:b2:99:8b:e0:a6:e2:
53:17:1e:b8:b2:73:c8:74:65:a0:1a:1f:46:7b:f6:
d3:40:08:9e:d3:b6:64:20:77:de:33:2c:6b:41:b9:
5c:c5:ad:7d:ba:c7:12:a6:a2:9c:1c:2a:ec:dc:46:
f8:ea:dc:24:4f:c3:bf:6f:91:93:ac:7e:43:de:90:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:E7:27:57:21:C8:9D:5C:F8:EA:D1:8B:EF:A8:12:A8:33:16:63
X509v3 Authority Key Identifier:
keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e203237303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.234.0/24
Signature Algorithm: sha256WithRSAEncryption
36:32:72:c9:47:27:77:15:c7:25:84:17:33:8e:94:b9:40:dc:
61:4d:d9:c0:e3:39:1f:63:85:33:14:3a:08:ce:bb:b7:ae:11:
4d:6d:52:ae:45:a5:ab:d3:19:30:a2:88:8d:bf:37:cd:a1:74:
a9:89:60:ea:cf:5f:89:c4:c2:97:46:58:45:dd:31:8f:54:a5:
3c:22:a1:c6:02:77:30:e6:94:60:66:c6:a3:b9:b7:79:4a:42:
cf:e0:05:02:ee:c4:e2:08:56:9e:40:4d:af:71:86:45:44:95:
54:51:c3:2b:9b:8f:c6:3c:f1:ec:de:c7:64:12:f0:10:4e:65:
ea:81:02:89:b8:3c:7e:d5:ba:26:37:ef:a3:c7:b1:94:4b:59:
6a:db:6c:70:86:04:9c:0e:fb:fd:d1:2c:2f:31:0b:83:1f:2c:
2a:23:8d:27:fd:de:ac:6e:16:b5:4a:16:1a:24:3b:e7:b1:aa:
56:e6:ff:fa:20:64:70:ad:ee:d9:99:77:19:e3:3f:32:da:2a:
96:ab:7d:6e:b3:a0:ac:89:70:9e:c3:7c:bc:52:ac:8f:70:dd:
60:39:11:da:d6:c9:44:1c:4e:d4:5f:69:1f:0c:a1:8d:5b:47:
75:58:6a:e5:eb:69:cb:e7:52:a7:22:c0:5e:b6:d6:b0:56:a5:
c5:9f:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:03 2026 by rpki-client