
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/3137302e37382e3235322e302f32322d3234203d3e20323733383334.roa
File: 3137302e37382e3235322e302f32322d3234203d3e20323733383334.roa (raw, json)
Hash identifier: 1CoY4LGr35S83Mo6TOXJD31qQBRNQeVJScn2qE2UFTI=
Subject key identifier: 77:A8:1B:6E:96:75:FF:45:12:1D:5B:01:11:84:50:CD:F0:C3:D8:36
Certificate issuer: /CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D
Certificate serial: 0CC32DC5B7FC445709962DBE9B8B4A28AC4EEA57
Authority key identifier: E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/3137302e37382e3235322e302f32322d3234203d3e20323733383334.roa
Signing time: Thu 26 Mar 2026 23:36:11 +0000
ROA not before: Thu 26 Mar 2026 23:31:11 +0000
ROA not after: Thu 25 Mar 2027 23:36:11 +0000
asID: 273834
IP address blocks: 170.78.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl
rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c3:2d:c5:b7:fc:44:57:09:96:2d:be:9b:8b:4a:28:ac:4e:ea:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D
Validity
Not Before: Mar 26 23:31:11 2026 GMT
Not After : Mar 25 23:36:11 2027 GMT
Subject: CN=77A81B6E9675FF45121D5B01118450CDF0C3D836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:cf:dd:c4:98:9d:2f:31:88:e5:ec:84:c5:
a1:5a:87:8a:f9:c4:40:4f:25:67:43:3f:6a:95:7b:
c2:2d:84:b0:bb:b9:5a:04:bf:f6:54:b4:d2:51:ed:
36:69:e0:d4:25:0e:52:a5:24:ce:a0:ab:06:86:4f:
4a:d1:5f:93:e9:44:88:0a:6a:ca:79:20:18:a7:e1:
4f:4f:ec:2d:07:73:3f:ad:a3:b4:19:e7:a7:b7:ef:
ad:41:44:cc:56:ed:25:9a:83:fe:3c:73:ce:d0:bd:
31:bf:1f:fd:4d:cb:98:2a:ad:6a:01:65:fc:67:00:
46:c4:cb:b0:fd:16:33:40:29:c9:69:01:67:08:ab:
24:71:44:48:2d:ed:43:21:34:31:c4:14:be:27:d7:
a0:c5:e4:5c:2d:75:dc:a3:6f:5c:59:c1:bc:1c:81:
1d:93:b6:43:09:25:02:88:fa:e3:0d:fd:f0:b9:2f:
5e:b3:6f:10:1c:06:17:55:f3:88:43:4e:a4:8d:ae:
5c:1f:dc:f8:ea:bb:f5:81:34:ec:14:a4:2c:dd:ab:
9d:77:45:22:fc:73:0d:b8:ee:6a:a9:18:65:a4:dd:
1f:bc:de:df:9b:48:b1:53:9d:bf:9d:ab:fa:4c:75:
33:35:ca:77:65:f2:2e:ef:f9:9c:30:78:12:45:07:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:1B:6E:96:75:FF:45:12:1D:5B:01:11:84:50:CD:F0:C3:D8:36
X509v3 Authority Key Identifier:
keyid:E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/3137302e37382e3235322e302f32322d3234203d3e20323733383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:f1:42:02:36:03:c2:52:dc:b7:41:c8:40:78:64:60:9c:62:
32:c2:1b:5b:cf:09:47:c6:24:10:08:f0:b2:05:73:90:af:8a:
84:98:44:51:e6:5e:f4:33:34:e1:51:17:ae:c9:10:c1:f6:b1:
38:79:23:ab:2c:40:b4:2c:d4:1d:2b:68:1c:e0:31:da:b8:36:
45:4f:35:4d:b0:82:af:78:fe:6f:3a:07:33:5e:d6:6e:de:8d:
17:e4:06:d2:57:39:ba:ec:b0:bc:8c:85:63:5f:0e:70:c2:04:
73:20:01:ff:16:03:cf:3b:cf:1f:ed:81:e0:97:21:81:53:83:
e7:7a:9b:16:08:16:c6:19:f7:1e:bd:81:25:4e:51:86:31:1f:
91:7e:7c:02:ae:dc:ed:57:79:70:a1:d1:0e:07:35:d3:32:73:
83:bc:5d:e9:15:a6:51:01:cd:33:ad:43:1d:9c:be:69:73:b3:
3a:e4:e2:c4:d6:a1:16:d3:80:73:7b:ee:a0:51:5a:6e:68:6a:
de:41:b0:ad:ed:1a:2e:70:0c:89:b5:d2:48:78:04:3c:6c:f2:
9c:91:f8:dd:57:99:e9:ca:5b:a6:87:33:af:45:8d:56:19:04:
fd:38:76:e7:cb:8b:8d:65:5e:29:62:22:7e:6e:b5:3d:f8:2b:
ff:64:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:48:58 2026 by rpki-client