
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233372e302f32342d3234203d3e203238333937.roa
File: 3133312e302e3233372e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier: S/rwlV7tYJ83IIKpNh6h+JpBKUOIn7cBdXy4UWbj5Nc=
Subject key identifier: AC:67:8B:35:67:96:FD:3D:25:0E:5C:57:2E:9C:FF:BF:71:04:F4:69
Certificate issuer: /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial: 4FCC0567891108D827B4F3346D35F594C841E1D5
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233372e302f32342d3234203d3e203238333937.roa
Signing time: Mon 23 Mar 2026 23:35:45 +0000
ROA not before: Mon 23 Mar 2026 23:30:45 +0000
ROA not after: Mon 22 Mar 2027 23:35:45 +0000
asID: 28397
IP address blocks: 131.0.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:cc:05:67:89:11:08:d8:27:b4:f3:34:6d:35:f5:94:c8:41:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Validity
Not Before: Mar 23 23:30:45 2026 GMT
Not After : Mar 22 23:35:45 2027 GMT
Subject: CN=AC678B356796FD3D250E5C572E9CFFBF7104F469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:22:db:07:ad:f5:2e:b1:16:9b:dd:2c:c0:
c4:1a:95:5a:32:11:e7:99:89:fb:d6:eb:11:bd:88:
c1:d1:89:58:43:5a:99:b6:9b:de:7c:16:9a:bc:64:
28:6b:c8:ff:59:e9:1b:43:1e:a6:8e:14:b7:0a:93:
56:25:0f:91:9b:b1:04:b6:0f:6f:cb:8f:1e:09:ed:
56:ee:61:d2:19:f6:b1:ea:1b:4a:e4:b8:de:28:55:
57:45:62:56:d4:dc:b5:aa:e6:24:9d:3c:51:65:60:
c2:11:66:6e:31:fb:33:25:25:01:5d:90:97:40:f8:
f8:3a:fc:0c:43:8b:e6:5f:89:dc:6a:5b:07:44:12:
57:00:96:2d:43:2b:76:69:89:c7:56:63:8c:ce:bf:
6b:8d:c7:56:8d:b9:9b:8d:77:cc:18:3c:24:7d:34:
6e:a9:f7:2c:ad:05:c4:ef:4c:60:15:ba:03:4f:c1:
f7:f2:b4:bf:08:b4:e2:e4:9a:cf:6d:bd:66:31:85:
a3:d8:6e:b8:1c:06:a4:ff:65:3c:20:1b:a4:e0:73:
a3:27:74:fb:a0:7f:17:8b:a1:2c:d2:bf:80:13:b2:
0a:1b:aa:4f:c0:4c:8c:61:b8:0d:ff:ff:60:86:0b:
8c:9c:33:95:1d:66:00:b8:7d:7a:c8:af:bc:79:68:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:8B:35:67:96:FD:3D:25:0E:5C:57:2E:9C:FF:BF:71:04:F4:69
X509v3 Authority Key Identifier:
keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233372e302f32342d3234203d3e203238333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1f:4f:42:60:96:0a:79:27:23:e7:18:03:22:41:9d:90:8a:
bc:9a:30:96:9a:bd:e5:d3:75:f0:f5:2c:f3:32:ac:63:68:6e:
9d:e8:e0:82:8f:c2:49:6e:ea:df:91:55:74:fa:68:ea:be:58:
67:b1:94:15:16:57:fc:df:71:db:29:49:24:46:94:f9:33:8c:
22:4c:ec:f7:c7:37:c0:bf:18:d6:af:0b:37:50:6f:f7:0c:43:
30:62:af:6a:b7:0d:2f:6d:fb:42:a9:24:56:bb:8a:26:73:5d:
46:aa:91:e2:e6:8c:3a:b4:68:20:0d:f0:51:54:7c:d6:28:36:
7d:40:f3:20:9b:0c:38:e0:62:d4:33:ce:fd:fb:15:c8:5f:69:
12:cc:18:b4:70:c0:d1:b3:22:54:be:5a:34:1d:b8:45:4f:12:
2e:d2:55:82:0c:58:eb:ae:5f:09:f1:0f:96:3d:1b:8d:32:4b:
5f:89:ff:e4:44:1a:a6:bc:73:22:d1:59:ac:86:21:9b:f1:64:
ca:7f:b8:48:a8:1d:db:ea:d2:a1:da:f6:70:75:74:47:e0:8f:
15:20:27:12:ee:a7:61:ab:a2:8f:46:a1:b0:e9:06:f7:3b:ad:
e8:ab:a0:19:c0:76:79:a1:21:35:69:79:43:a9:cf:f4:93:62:
74:61:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:53 2026 by rpki-client