
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32302d3234203d3e203138363738.roa
File: 3139312e39372e34382e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier: lqzS06kO6yAoL5xxptuKyY1KMq3UBWbG5wZbQ6AOY0k=
Subject key identifier: 08:47:A3:38:88:D0:5A:47:C0:C3:C6:67:15:2B:13:CF:5E:13:6A:6B
Certificate issuer: /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial: 2D7E1BC144E75E6F083618020258E7453E8B4B67
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32302d3234203d3e203138363738.roa
Signing time: Wed 08 Jul 2026 17:35:00 +0000
ROA not before: Wed 08 Jul 2026 17:30:00 +0000
ROA not after: Wed 07 Jul 2027 17:35:00 +0000
asID: 18678
IP address blocks: 191.97.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:7e:1b:c1:44:e7:5e:6f:08:36:18:02:02:58:e7:45:3e:8b:4b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
Validity
Not Before: Jul 8 17:30:00 2026 GMT
Not After : Jul 7 17:35:00 2027 GMT
Subject: CN=0847A33888D05A47C0C3C667152B13CF5E136A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:8c:df:05:d9:f9:c5:ea:6d:35:d1:58:84:
4f:a3:35:fb:18:04:4d:8a:a0:22:cc:70:6c:e9:e3:
70:5e:3b:e1:5e:89:4b:37:73:a1:d7:dc:ab:e3:05:
40:f0:25:b4:1b:0f:28:23:bf:d9:bd:b9:10:bd:1d:
38:6c:b3:70:50:be:88:c5:58:9c:3a:73:71:82:93:
e5:ac:0e:81:c1:f7:06:e3:4f:c0:a9:be:5b:2d:ee:
8a:6b:b2:8b:73:02:1f:62:ad:8f:7e:2a:a8:32:88:
a1:0c:f3:85:f0:fd:d4:92:a8:21:6d:b8:92:a0:71:
2f:73:d1:23:92:1b:2f:38:18:3c:29:cf:e5:76:45:
7e:c6:be:79:44:2e:a9:ae:07:d7:f6:80:6c:ff:6f:
2f:85:5c:e9:07:55:58:1d:e9:24:fd:7f:11:fe:ee:
bf:0a:27:83:e4:b6:8e:57:99:3d:16:30:fc:4a:07:
86:09:2c:eb:89:00:9e:e5:b5:72:89:c1:ee:0e:a3:
9b:03:ce:bb:8a:e8:2c:63:e0:90:6c:9d:45:13:60:
23:c1:e3:12:b5:3b:a5:31:32:7b:35:29:06:20:36:
69:a6:58:27:b0:16:f7:87:db:25:cc:c2:c7:a5:25:
e7:df:ba:2c:e7:ea:af:37:51:60:aa:85:fc:35:15:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:A3:38:88:D0:5A:47:C0:C3:C6:67:15:2B:13:CF:5E:13:6A:6B
X509v3 Authority Key Identifier:
keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e34382e302f32302d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:9b:0d:3a:56:c2:da:98:a8:85:e4:32:70:90:ba:e1:89:73:
40:bf:d1:be:f4:a8:88:86:8e:37:33:f9:cd:dd:34:dc:5b:f0:
f0:d0:12:b9:63:6d:34:40:a6:4c:40:d2:cd:35:8f:1d:06:55:
74:5b:aa:bb:b6:dd:1b:55:d5:91:ff:3d:7a:2a:42:23:90:02:
6d:3d:2e:97:32:4d:1b:52:96:ea:28:02:b3:ad:1e:53:7a:5e:
0d:6c:9c:f8:2a:7c:f7:06:88:1c:1d:34:56:b2:91:e7:05:e7:
70:32:bb:87:82:b7:e2:76:1d:06:17:e0:f3:b9:26:b7:29:43:
c4:85:b5:5d:df:a7:11:d6:c1:4a:b6:74:e3:e9:5d:b5:0a:73:
2f:61:47:61:03:85:15:81:63:43:9a:d9:50:db:8e:b2:a2:e0:
1a:37:7d:52:35:31:6b:6a:16:b6:12:7b:a5:79:df:2b:29:2c:
67:80:9e:a7:10:e5:d1:f0:ed:b8:43:a5:a9:2e:aa:f4:49:ef:
ca:0c:23:a7:48:21:84:5e:44:f7:ac:37:75:3e:88:7e:67:c3:
b4:35:4b:05:3c:b2:79:01:75:b9:cb:93:1e:68:a0:8c:21:63:
50:cd:6e:06:41:94:03:24:44:19:9a:08:3a:92:fd:a8:76:10:
1e:66:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:37 2026 by rpki-client