
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3137362e302f32312d3234203d3e203532343638.roa
File: 3136382e3137362e3137362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier: mkBQv/r6qqTM4ArTyHidFouaY31SMi26lQdfC5gmZ7c=
Subject key identifier: 28:5E:13:03:F4:A8:13:77:80:F2:CB:CE:55:49:40:D9:81:5B:84:0B
Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial: 76EF98955AB60F48ED77A7BD36FE6D9A5BE45EC5
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3137362e302f32312d3234203d3e203532343638.roa
Signing time: Thu 24 Sep 2026 13:00:00 +0000
ROA not before: Thu 24 Sep 2026 12:55:00 +0000
ROA not after: Thu 23 Sep 2027 13:00:00 +0000
asID: 52468
IP address blocks: 168.176.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 01 Oct 2026 18:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ef:98:95:5a:b6:0f:48:ed:77:a7:bd:36:fe:6d:9a:5b:e4:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Validity
Not Before: Sep 24 12:55:00 2026 GMT
Not After : Sep 23 13:00:00 2027 GMT
Subject: CN=285E1303F4A8137780F2CBCE554940D9815B840B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:d5:3f:12:4c:0b:ea:5b:db:ab:89:19:77:
fa:8d:24:d6:43:ac:cd:10:bb:74:31:93:da:9d:c8:
7e:e2:44:41:10:c7:bb:b1:1d:53:ec:1a:77:4b:eb:
5a:5b:2e:fd:28:58:df:25:9a:cf:1e:88:79:ca:6b:
f7:41:36:0b:d7:ad:3c:d1:43:25:a1:2f:f8:22:c4:
2c:f2:e3:0b:79:45:29:96:10:a3:73:e6:f1:74:ad:
d3:71:6e:18:71:1a:6c:e4:32:9a:09:a2:08:4d:43:
b9:56:2b:80:a0:4e:d0:ba:93:d2:b8:fe:46:09:8b:
27:f9:e3:24:45:20:be:ad:6d:27:7b:d6:e8:4c:14:
22:da:3d:f6:7f:d1:be:5e:83:16:0d:59:93:11:0b:
72:09:ee:46:91:b6:4a:18:bc:db:46:e9:d7:9d:4e:
67:d6:50:46:87:37:19:dc:dc:7b:ad:cd:4c:b9:2d:
85:f1:84:9d:09:3c:02:93:4e:75:1c:f6:7c:fa:3b:
52:a6:b8:fd:1f:69:fa:5d:ad:a6:9c:47:ea:33:10:
d8:18:bb:68:70:96:24:59:cb:4e:99:03:1c:80:3f:
a6:70:74:a8:92:54:db:36:fb:d3:63:f9:4f:c0:fe:
97:9b:a5:a1:58:89:24:8c:a4:c8:40:e9:d9:55:56:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:13:03:F4:A8:13:77:80:F2:CB:CE:55:49:40:D9:81:5B:84:0B
X509v3 Authority Key Identifier:
keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/3136382e3137362e3137362e302f32312d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:4e:a6:23:57:25:22:4a:b9:13:c7:3a:d4:cf:dd:82:54:e0:
61:4a:44:73:d3:1e:b7:14:00:ab:f6:89:61:d7:4d:f1:c5:20:
4a:3b:5e:0f:f1:52:01:ab:4f:e0:35:25:f6:c5:30:65:8b:fd:
d5:46:07:a1:1f:99:05:de:83:fd:68:ff:0a:42:a0:bf:27:a9:
52:1a:0e:ea:53:67:71:f5:73:aa:05:b5:ce:08:fb:e1:a9:d3:
aa:28:e6:43:64:29:25:12:69:ba:96:4d:13:08:d3:78:4e:8f:
5f:5d:25:ed:df:99:da:65:f0:4c:d9:96:c5:61:11:24:84:14:
4b:ef:76:1e:bf:12:cb:33:cd:96:eb:da:32:43:35:c1:2c:7f:
d4:47:ce:10:31:e6:56:f7:f3:5c:24:2f:d5:83:fc:db:d3:79:
22:86:b2:3e:26:26:3c:72:32:c5:b7:5d:cf:47:67:39:8c:6b:
98:0b:6d:9e:f0:e3:ee:ef:ad:59:ee:c4:93:ba:64:a2:5b:65:
77:ca:af:86:c6:2f:f9:d4:11:59:d2:80:e7:d7:b4:e5:af:4c:
58:3a:ed:b0:3f:d2:b4:99:5b:7b:1f:fa:da:f4:2b:f1:e7:dc:
98:d8:71:65:2c:3d:1f:dd:d8:a6:f8:28:34:9d:2d:18:cf:a8:
af:f2:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:41:38 2026 by rpki-client