
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32302e302f32342d3234203d3e203238343233.roa
File: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: n2Np3ZSzs9Qry+n/QcWI/XVwI4Adzscpv34w6aLelEs=
Subject key identifier: A0:22:F0:40:3B:8C:31:B8:D8:28:FC:28:06:C8:CD:0C:04:70:C2:79
Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial: 0A1F98DEC79B694AD56B97E8AF48F565D728DDB7
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32302e302f32342d3234203d3e203238343233.roa
Signing time: Thu 30 Apr 2026 08:40:23 +0000
ROA not before: Thu 30 Apr 2026 08:35:23 +0000
ROA not after: Thu 29 Apr 2027 08:40:23 +0000
asID: 28423
IP address blocks: 45.164.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 17 May 2026 07:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1f:98:de:c7:9b:69:4a:d5:6b:97:e8:af:48:f5:65:d7:28:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Validity
Not Before: Apr 30 08:35:23 2026 GMT
Not After : Apr 29 08:40:23 2027 GMT
Subject: CN=A022F0403B8C31B8D828FC2806C8CD0C0470C279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:09:09:0e:99:18:16:cb:61:46:93:ed:98:
09:66:dd:63:21:98:45:f4:70:0f:d2:08:da:dd:26:
de:d3:57:77:8f:83:46:a2:3b:6d:d1:2a:2b:f7:f0:
ea:d7:6b:10:a8:cb:6b:ff:22:bd:4c:73:5e:3b:40:
f4:64:89:70:2d:53:42:db:de:0f:b6:0f:54:04:1c:
61:3f:7f:39:ba:bc:38:ab:de:9c:f3:f8:4b:cc:60:
b1:d5:ce:1d:dd:55:76:1b:19:53:f5:32:f2:4c:bf:
3c:f8:fd:e2:e9:f1:e8:03:ee:5d:ac:66:39:43:61:
09:f7:c4:d1:2d:56:c8:33:2b:b3:11:93:79:56:44:
ef:f9:2e:fd:3e:92:74:05:4a:10:71:d9:f3:9b:8b:
9f:e4:12:ca:15:7b:92:73:f5:88:b8:6c:70:99:fe:
45:4c:7a:44:d7:5a:d5:d7:5d:4e:a0:90:ca:42:ac:
7b:13:a0:7d:04:da:4f:d3:27:f3:01:f5:cb:ce:de:
03:6c:64:4b:8f:85:ad:91:8f:a7:44:35:95:75:c7:
fb:a2:28:26:3b:03:c2:d3:42:3f:8b:68:9d:47:19:
43:7e:a8:b3:10:a1:1f:ba:3f:75:dc:76:00:21:f1:
0e:66:11:44:2e:ae:c9:44:8d:a9:32:46:b7:46:c0:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:F0:40:3B:8C:31:B8:D8:28:FC:28:06:C8:CD:0C:04:70:C2:79
X509v3 Authority Key Identifier:
keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32302e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.20.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ca:49:90:1b:99:7a:ce:40:c8:3e:1b:ca:1d:19:c5:f9:43:
37:66:b1:e3:62:ff:52:0f:72:e2:bd:8b:48:2f:4b:48:80:02:
a4:5d:57:4b:8b:34:9b:91:cc:f1:24:0b:ad:6e:ec:bd:67:95:
31:45:26:82:45:c8:ad:1e:de:3c:e0:10:d0:29:9f:4c:3d:8e:
2c:9c:6b:f8:a9:8a:43:a9:6c:de:de:76:71:d5:0b:67:0f:61:
ef:e4:f8:bb:b6:40:e0:e5:bd:44:16:a9:db:b8:2c:2c:88:4d:
e0:eb:ed:d5:8b:7a:99:77:67:ee:47:97:5d:2f:ca:fd:7f:83:
b1:37:f8:af:69:0c:03:90:3b:7b:88:ea:b0:3b:a9:51:1e:78:
a0:0b:a7:d8:c7:ab:73:05:a2:5c:bd:90:3c:0c:0c:2e:2e:5e:
e1:89:12:e7:ca:95:6c:34:25:f2:a9:44:fa:ed:6a:b3:39:83:
1d:0d:1c:4a:ce:91:e1:18:8a:40:81:be:39:ed:85:4f:5b:63:
b4:45:02:5d:02:02:ba:55:a4:b6:47:6a:f0:39:62:d3:eb:d8:
cd:1b:f9:25:5f:70:3f:66:e0:3a:d3:15:43:08:1c:a2:35:4a:
46:30:09:44:ab:9a:e1:f4:31:95:0f:0b:b6:bb:4e:8a:cb:0c:
de:f1:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:22:37 2026 by rpki-client