
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e203634313238.roa
File: 3230392e34352e32302e302f32342d3234203d3e203634313238.roa (raw, json)
Hash identifier: 1i14xNxL48xRjmICnSlgKfWTneTJ/orcNgS3pCX2Pv0=
Subject key identifier: 78:1A:0B:DC:A9:A9:44:15:C6:7C:86:CD:29:2D:1B:86:03:7F:0D:D8
Certificate issuer: /CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20
Certificate serial: 7747497A292E0B6D65208781A48BD98DAE15C183
Authority key identifier: 86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e203634313238.roa
Signing time: Fri 24 Jul 2026 14:10:00 +0000
ROA not before: Fri 24 Jul 2026 14:05:00 +0000
ROA not after: Fri 23 Jul 2027 14:10:00 +0000
asID: 64128
IP address blocks: 209.45.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.crl
rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:47:49:7a:29:2e:0b:6d:65:20:87:81:a4:8b:d9:8d:ae:15:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20
Validity
Not Before: Jul 24 14:05:00 2026 GMT
Not After : Jul 23 14:10:00 2027 GMT
Subject: CN=781A0BDCA9A94415C67C86CD292D1B86037F0DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:b8:25:2a:17:26:25:be:30:8b:f7:38:1d:
4f:0d:94:f3:f7:bb:4e:17:e1:e4:b2:2d:1e:8d:07:
d1:3a:1e:1e:46:5d:82:6f:c2:b9:e3:a3:04:b7:f8:
3c:7c:e9:60:8d:88:6f:b1:63:17:4a:33:a0:b7:65:
9f:39:d6:28:05:73:74:30:c2:1b:08:d0:c5:69:b2:
ea:f6:a6:22:a6:22:8b:a8:96:f6:3f:c9:b5:b8:6a:
15:15:77:71:89:a9:45:3c:b4:b7:c6:a0:ff:a8:7a:
95:53:c0:14:10:0b:10:91:83:68:5f:7b:12:63:08:
2a:c9:4e:5e:23:be:72:22:7f:bb:03:49:d6:e9:63:
00:5c:08:71:68:c3:58:b4:5f:0b:ba:5d:1c:1f:15:
ea:b3:a8:55:4a:55:0f:82:7c:b8:49:12:1e:9b:76:
03:04:8b:10:3a:1a:f3:ff:43:1c:7b:aa:fc:e0:ac:
e8:16:a2:4f:ab:00:4f:40:00:f8:6d:c9:7c:96:0a:
31:13:41:1d:82:57:25:41:f2:de:49:3f:5d:b1:78:
b6:d2:e4:9c:9c:e5:e4:bf:b1:8e:97:be:37:01:84:
0a:17:61:25:b9:6e:5f:b3:f9:59:b0:4d:8c:27:a3:
29:2c:56:28:1f:98:cf:a4:c6:4e:a3:9a:a4:8b:f4:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1A:0B:DC:A9:A9:44:15:C6:7C:86:CD:29:2D:1B:86:03:7F:0D:D8
X509v3 Authority Key Identifier:
keyid:86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e203634313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.45.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:96:be:33:ae:d2:f7:3e:38:66:ea:5b:92:d1:34:f8:27:17:
75:36:56:8a:65:ad:4e:83:db:5d:f9:81:cc:58:d5:eb:71:e3:
f5:d8:88:72:16:e0:a6:37:5d:2f:87:9d:14:de:75:0d:c2:07:
79:52:58:ee:43:05:42:d7:80:32:0b:12:22:61:71:aa:7b:7b:
51:b5:35:a4:29:df:fa:1c:52:7e:0e:a6:82:c2:85:fa:1e:32:
cf:d0:1d:b0:6c:65:6a:62:63:4b:06:e3:eb:a7:62:ba:10:b2:
89:30:eb:a4:79:b9:2c:b0:88:33:c9:45:8a:f0:e7:8f:c0:d1:
2f:34:1b:ab:d9:0d:9a:78:37:66:2a:84:2f:de:d3:c2:fe:38:
b9:ac:1f:87:d0:2c:85:2b:78:02:ad:13:1b:68:63:26:1e:46:
95:1e:65:20:9c:88:da:77:71:3e:91:7b:f2:88:86:73:41:59:
29:46:f9:e0:43:da:b2:03:0a:11:7a:36:70:a9:31:8b:8c:9c:
a9:90:5c:89:f8:54:c9:e1:95:86:0a:77:a6:21:29:24:a2:c1:
ca:fa:ba:5c:08:df:bb:76:d2:57:8f:81:02:a1:74:88:ec:6c:
bc:c5:2c:23:07:cd:cb:94:4e:1f:db:f0:77:38:71:b7:57:39:
fd:28:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:56 2026 by rpki-client