
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3138362e3132312e3132382e302f32312d3234203d3e203532323633.roa
File: 3138362e3132312e3132382e302f32312d3234203d3e203532323633.roa (raw, json)
Hash identifier: UTKuUSmrtWUjk7sCCiPUgWp7Qj3IUIyftl7e3fJ8OPI=
Subject key identifier: 73:8B:76:EC:58:4F:54:95:FE:9E:74:0B:15:E3:AA:1A:9E:08:57:2E
Certificate issuer: /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial: 7FE8A155A292A915810FF4B9C2CF62C2F4CD21ED
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3138362e3132312e3132382e302f32312d3234203d3e203532323633.roa
Signing time: Thu 26 Mar 2026 21:40:00 +0000
ROA not before: Thu 26 Mar 2026 21:35:00 +0000
ROA not after: Thu 25 Mar 2027 21:40:00 +0000
asID: 52263
IP address blocks: 186.121.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e8:a1:55:a2:92:a9:15:81:0f:f4:b9:c2:cf:62:c2:f4:cd:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Validity
Not Before: Mar 26 21:35:00 2026 GMT
Not After : Mar 25 21:40:00 2027 GMT
Subject: CN=738B76EC584F5495FE9E740B15E3AA1A9E08572E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:14:36:b5:76:05:72:10:b1:08:c8:5e:16:
20:31:82:c1:06:4e:70:dd:28:dd:45:b2:de:7d:b9:
7e:32:82:2b:a7:21:30:53:21:03:f2:71:3a:1e:e4:
42:ed:19:3f:fa:f5:00:16:11:45:f4:66:ac:e3:6e:
a2:8e:15:29:89:3c:c3:f9:e4:d7:42:54:91:1c:6c:
bb:06:1f:1a:21:d9:15:db:69:33:6a:40:2d:aa:a4:
8b:ed:08:7a:e5:85:b3:1e:eb:53:d3:02:8a:58:59:
36:db:95:84:d9:25:78:f3:ec:b2:fd:9d:58:ef:4b:
df:31:6c:27:be:e3:88:3f:3b:bf:40:55:11:8e:41:
b7:10:07:d7:d0:1b:55:20:86:b3:7d:22:fe:df:c5:
0d:fd:12:31:65:e4:c8:d1:f6:2b:0b:2f:91:91:12:
81:ce:bb:c8:21:92:eb:59:1d:19:a1:36:14:77:08:
7f:8e:54:12:dd:ce:a6:f1:3f:f3:72:65:b3:75:64:
0c:f0:d3:85:7c:02:f4:b4:5a:e7:8a:52:43:69:38:
7a:77:62:51:c3:11:f2:67:0b:46:d4:4b:df:51:5e:
97:24:2e:a6:3b:fd:9c:e6:1a:0a:65:6f:a0:6d:36:
5f:74:ed:e5:a8:d3:be:ab:4d:05:b8:14:d9:d5:d3:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:76:EC:58:4F:54:95:FE:9E:74:0B:15:E3:AA:1A:9E:08:57:2E
X509v3 Authority Key Identifier:
keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3138362e3132312e3132382e302f32312d3234203d3e203532323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.121.128.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:a1:d3:c3:a1:d8:80:a3:b7:5a:54:cd:ea:eb:cf:76:62:8e:
2e:16:f9:e8:49:88:8a:0e:21:9f:f2:4f:ab:8f:63:78:ca:50:
7c:61:1a:01:4a:6c:19:4f:2b:b3:66:e4:48:58:7b:09:70:13:
ea:03:cc:6f:13:80:6c:87:9c:29:74:a8:68:b9:92:79:e6:b3:
9a:00:94:1d:35:bd:e6:f9:c7:2f:9e:a8:96:9b:b6:c3:08:e9:
28:9d:01:6b:ff:9d:2a:96:79:d0:7f:20:30:7e:3f:2e:af:a1:
1a:06:a7:af:60:b9:3d:2f:f9:82:15:07:77:44:99:61:55:82:
f9:1c:b6:9c:6a:36:14:ce:ca:73:5f:a1:56:b1:f2:44:9d:1f:
69:5c:35:d2:8b:3b:98:69:4e:54:69:e8:11:11:83:5f:b9:7d:
18:d9:98:ef:57:17:b4:81:9e:2c:f4:86:f4:f6:88:c7:bd:03:
25:4a:06:3c:62:0a:9c:8e:ef:8f:b4:75:1c:d7:c4:d4:22:cc:
95:2b:bc:28:9b:66:a4:ca:f8:dd:e4:f5:8c:a8:37:25:6f:f5:
25:6e:be:78:96:5f:c6:fa:1a:2f:e1:88:9a:b0:af:24:4f:b2:
48:a5:e1:36:6d:7d:57:ba:ef:31:9c:6a:97:57:d3:5b:dd:43:
2d:f8:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:20 2026 by rpki-client