
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa
File: 3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa (raw, json)
Hash identifier: MpKUIOgFnj2JKiwbxMqer2TMPfo5Df/Je4OwoeUVUwU=
Subject key identifier: 31:25:4F:CA:FF:85:E7:52:DB:73:16:CE:7D:9A:70:D8:5E:2D:35:C1
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 2AF0E134A2B03B8E5C518DA670D4A3A27F245D5A
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa
Signing time: Tue 06 Jan 2026 19:22:12 +0000
ROA not before: Tue 06 Jan 2026 19:17:12 +0000
ROA not after: Tue 05 Jan 2027 19:22:12 +0000
asID: 263186
IP address blocks: 170.210.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f0:e1:34:a2:b0:3b:8e:5c:51:8d:a6:70:d4:a3:a2:7f:24:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Jan 6 19:17:12 2026 GMT
Not After : Jan 5 19:22:12 2027 GMT
Subject: CN=31254FCAFF85E752DB7316CE7D9A70D85E2D35C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:af:5d:a8:d0:5d:0c:9d:6a:5c:83:f4:3b:
01:61:fc:8b:df:2c:7c:c0:e4:34:c5:26:25:35:53:
b8:68:63:c6:65:0f:ef:06:af:81:4a:42:e2:d8:a7:
f2:b3:2a:68:ac:71:d1:d7:35:62:d5:e9:d2:14:11:
98:b2:5b:3d:0a:cf:d2:c1:bd:73:ac:1f:47:06:7a:
17:4e:17:b1:4d:8e:8b:b6:90:68:57:cf:23:9e:2d:
cc:85:0b:f4:ff:f1:66:0d:d7:89:80:8d:3c:33:0f:
be:7c:94:73:b3:59:54:24:c9:37:11:d9:57:51:cc:
7c:87:88:ce:33:e9:26:ee:a9:48:81:c0:6f:5c:5e:
f3:be:04:ff:5f:6c:21:ec:e1:c8:3a:cf:35:99:2c:
30:f8:b4:ad:5b:c4:e4:d7:4e:99:5a:e1:12:e7:30:
3a:5a:71:fd:cc:8b:51:98:5f:e6:9a:71:63:29:b5:
38:ed:e2:16:7c:fe:34:e0:79:58:31:3e:c2:bb:4b:
e9:96:6f:03:21:8e:41:88:84:7c:e1:98:e4:81:1e:
f4:3d:24:50:7e:0d:0f:b1:61:f3:36:1b:be:e8:b9:
03:8e:08:b9:a1:16:0d:e7:51:9b:da:ed:6f:58:b1:
b7:85:45:8b:7f:d2:d8:44:1a:b5:eb:7a:c4:4f:2f:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:4F:CA:FF:85:E7:52:DB:73:16:CE:7D:9A:70:D8:5E:2D:35:C1
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.52.0/22
Signature Algorithm: sha256WithRSAEncryption
79:78:07:2c:58:75:2b:55:e1:25:f9:d1:a4:fd:e6:b3:ba:76:
35:ae:09:9e:28:30:95:40:d4:a5:69:50:e9:f7:f1:42:55:39:
de:66:d5:ec:16:11:63:31:f1:62:75:44:ed:a6:8e:a1:db:2e:
02:c5:b8:c4:55:3a:c6:27:11:d4:9e:c9:ed:0a:65:e0:9e:6e:
11:36:1c:04:ba:79:fc:6e:84:73:dd:b9:0d:2b:d3:32:c3:d8:
35:f8:1f:5a:78:33:48:d7:a8:a5:38:16:95:a9:01:e5:ff:ae:
04:bd:5d:b8:60:bf:50:64:76:d9:96:60:2e:2b:bc:a4:0b:c3:
ae:5f:d4:18:3c:1d:5d:e8:d3:b6:e0:d3:13:ae:a2:25:80:c7:
97:32:67:e6:29:34:81:17:d6:93:c9:75:02:02:56:14:dd:e2:
8f:e8:a4:7f:cf:9d:02:76:7f:60:ab:48:fb:ad:0a:4f:ed:66:
ac:61:19:fe:a3:c7:f2:76:1d:5f:b1:c4:29:61:3e:5b:0e:18:
69:e0:00:39:cf:90:dd:b8:68:77:8f:ae:10:c4:ba:ff:64:46:
53:ba:55:7d:05:06:d7:44:97:7b:21:4c:22:66:90:4f:af:7a:
d9:39:86:55:d1:1b:95:d2:6e:25:a6:72:dd:f5:c6:ae:fc:6a:
75:ae:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:01:22 2026 by rpki-client