
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa
File: 3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa (raw, json)
Hash identifier: /Unc9aSpSjiDCFNf7psu7+Wrq9UejPo9o97aT/ZG9g4=
Subject key identifier: 8B:AD:DF:77:BF:7B:12:A0:A0:AB:90:37:8A:0C:C2:50:BA:1D:6A:69
Certificate issuer: /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial: 6226064F72C2E6FCD5200DFC77CDA7671F132CF4
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa
Signing time: Tue 06 Jan 2026 19:18:50 +0000
ROA not before: Tue 06 Jan 2026 19:13:50 +0000
ROA not after: Tue 05 Jan 2027 19:18:50 +0000
asID: 265762
IP address blocks: 128.201.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 21 Feb 2026 22:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:26:06:4f:72:c2:e6:fc:d5:20:0d:fc:77:cd:a7:67:1f:13:2c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
Validity
Not Before: Jan 6 19:13:50 2026 GMT
Not After : Jan 5 19:18:50 2027 GMT
Subject: CN=8BADDF77BF7B12A0A0AB90378A0CC250BA1D6A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:ac:f9:dd:71:00:c5:f9:c5:77:04:0b:a8:
84:32:bf:1b:df:b8:3c:4d:0b:6b:ae:8d:c7:38:41:
fc:55:5d:1c:4c:00:13:24:d6:d2:47:b2:18:26:55:
b0:91:8a:2f:5c:31:83:12:75:7d:b0:d3:b2:f9:aa:
90:f9:4e:89:f4:4b:27:54:0b:d2:05:38:73:6d:30:
8a:bc:cb:6b:17:2f:79:b0:47:fa:53:02:ef:2b:9f:
9d:72:fb:59:af:30:86:bf:b3:a5:00:5a:ab:76:14:
a4:f7:7f:c3:e9:33:d4:30:e3:89:75:c7:44:e6:90:
53:29:60:5d:62:24:dc:fb:3f:d1:7f:c8:62:35:7e:
78:33:7d:60:ba:93:3e:9f:04:25:99:2a:87:a4:73:
c7:33:e6:a4:31:91:55:01:f2:38:08:0a:96:43:69:
99:67:8f:34:e3:ba:a6:27:c7:bc:b5:19:ed:7c:07:
96:10:33:7c:a7:69:56:e5:e6:35:9a:12:f4:1c:46:
98:08:a5:a0:4a:e3:aa:f2:2a:88:70:37:13:9e:f1:
4a:aa:77:db:0b:d9:3b:5b:6b:9a:e4:2b:c3:4a:b3:
21:00:2c:79:46:59:fd:41:3f:fb:fd:a0:23:e0:c9:
fa:cd:63:c3:87:b1:2e:31:c1:2b:5e:d2:03:f1:f1:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:DF:77:BF:7B:12:A0:A0:AB:90:37:8A:0C:C2:50:BA:1D:6A:69
X509v3 Authority Key Identifier:
keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136302e302f32322d3234203d3e20323635373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.160.0/22
Signature Algorithm: sha256WithRSAEncryption
03:9e:77:9e:60:3b:3c:82:0b:c4:ff:36:de:12:b7:5a:c8:f3:
9f:aa:98:12:40:ed:71:c2:65:c5:96:1e:60:94:eb:7a:22:70:
80:be:e8:e8:c4:c5:ee:47:41:7b:fb:b9:3b:79:30:f2:55:f0:
3d:fa:32:92:d6:b4:02:61:7a:05:e6:9e:f4:e4:64:31:37:65:
ad:12:cd:21:0c:86:e2:be:5f:cd:3e:16:b6:71:f0:bc:31:ba:
8a:b4:78:44:67:4a:90:33:94:e9:71:e7:43:9b:48:bb:67:84:
2e:cd:49:50:a7:56:68:68:86:e4:c0:83:fa:75:c0:ec:97:52:
dd:b4:e7:a7:b1:9c:75:a4:67:1c:f5:d5:37:f0:8e:b3:47:43:
66:eb:95:87:64:ef:cf:4d:f9:4a:81:f1:a7:b8:9f:10:d1:c8:
a1:f0:20:04:ac:06:ce:e4:84:3a:37:ed:8f:82:ca:61:d0:63:
e9:87:37:6e:88:bd:f3:45:08:c8:7b:ed:56:fd:01:d1:47:0d:
b2:56:5b:c0:2c:b0:3b:20:51:03:7a:d9:5b:8b:5f:96:88:03:
91:f2:aa:3a:d9:ae:93:af:08:af:9b:a7:b7:87:df:8c:e8:7c:
2a:0b:9e:ff:d7:a9:dc:d6:6e:82:6f:2b:d8:11:a2:6f:0b:ed:
59:11:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:41 2026 by rpki-client