
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
File: 3230312e3232302e33372e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier: Hgbxu5BSSnzzms6Dsmxkuwbe4Hs+3/33dNnzn1UdtGI=
Subject key identifier: 0C:FA:96:83:F4:FC:89:C4:13:33:49:6F:E0:F2:C2:4B:2B:68:28:41
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 0629A8F8D497445E8E39BCCB285DD786E9D20A76
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
Signing time: Mon 23 Mar 2026 17:35:40 +0000
ROA not before: Mon 23 Mar 2026 17:30:40 +0000
ROA not after: Mon 22 Mar 2027 17:35:40 +0000
asID: 19551
IP address blocks: 201.220.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:29:a8:f8:d4:97:44:5e:8e:39:bc:cb:28:5d:d7:86:e9:d2:0a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Mar 23 17:30:40 2026 GMT
Not After : Mar 22 17:35:40 2027 GMT
Subject: CN=0CFA9683F4FC89C41333496FE0F2C24B2B682841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:96:42:15:1d:38:3f:8f:b7:10:ae:fa:c1:
bd:2c:12:5d:bf:dc:ec:95:08:51:e0:4c:c6:85:60:
11:b9:2c:2f:3d:9e:fa:f4:0d:54:df:e2:3b:b9:d0:
f3:02:db:51:53:3d:60:d3:2d:17:21:5a:0e:1c:a4:
f1:34:ac:9d:33:a4:1a:8f:7b:ce:d9:b0:3f:f6:d7:
52:a6:21:63:d1:e7:3d:9d:e0:ed:74:52:a4:a2:2e:
1c:f2:fc:41:ae:b5:1e:2a:96:1c:fa:40:01:34:78:
04:9e:a0:56:7b:ff:68:1e:55:65:87:94:2b:dd:8b:
3d:2f:ff:1e:e7:c1:4a:2b:b5:3f:fc:37:10:b1:b6:
0d:d2:7b:6e:b2:2a:a7:5c:4e:d6:0c:1a:e4:51:af:
d0:95:c8:d7:64:e7:8e:c5:03:02:a0:b5:fc:86:2a:
37:3e:d6:8b:d5:d5:0f:61:fd:3b:4f:c7:75:ef:48:
19:40:91:20:9c:0d:6b:a9:3a:1f:34:39:0d:36:01:
ab:1b:08:70:e9:b8:ff:19:76:9f:72:6d:ed:5a:5c:
e3:ad:5d:53:4b:b5:5e:9b:b3:e0:b3:59:c9:f6:f9:
30:fe:de:3e:e1:9a:23:bc:6b:c6:07:ff:b1:8c:c8:
a2:78:ee:58:a6:58:f3:28:7c:cf:45:ef:11:29:a9:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:96:83:F4:FC:89:C4:13:33:49:6F:E0:F2:C2:4B:2B:68:28:41
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.37.0/24
Signature Algorithm: sha256WithRSAEncryption
25:80:d9:fa:5e:82:c6:0a:e8:4b:2e:7b:f1:8c:44:3a:62:bc:
a8:e4:29:f1:1d:7e:26:8d:9f:dd:15:e7:36:17:aa:4d:40:c6:
c8:c3:16:36:7d:e5:32:7a:72:3d:45:da:ef:1c:f3:40:68:7e:
33:71:f5:39:ee:50:93:77:7d:de:15:35:dc:88:5f:db:74:8e:
86:84:2e:f5:c8:6c:3b:e6:56:12:f1:ad:f7:92:81:1a:db:a5:
bb:09:38:a9:85:bc:f0:42:75:89:14:27:d1:2f:a9:a6:c9:db:
3f:43:b8:71:44:fd:e3:80:56:e5:5a:01:62:5e:63:24:8a:99:
0c:83:a9:99:d8:46:8c:c6:30:78:14:14:2a:63:49:28:64:a4:
54:71:7e:5e:68:a1:97:f4:65:3f:b4:71:bd:4b:79:71:ca:e6:
ac:ba:4a:61:36:d7:eb:0b:d4:95:56:16:64:ba:c1:bb:e0:e1:
19:63:e8:5b:08:ee:70:1b:55:6c:95:88:a3:ae:d5:d0:36:4b:
0c:37:4f:0e:2d:8c:bc:3d:b4:f4:e0:fa:0d:f4:4c:65:ba:23:
8e:42:f8:62:2a:b9:14:3f:3e:0a:96:d6:57:8b:03:5f:b5:57:
c6:1b:4c:7e:dc:10:8e:a6:aa:41:68:fa:dc:09:4d:d6:45:3c:
49:e5:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:19 2026 by rpki-client