
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32322d3234203d3e203332303938.roa
File: 3133312e302e3233362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier: CX9B8cjYIDPPNT4aMoiuuCKxlOAxLxMeW06X0TMsp80=
Subject key identifier: 60:7E:F0:C8:89:57:17:03:6C:92:BC:4F:04:CB:D3:3F:11:C8:2B:45
Certificate issuer: /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial: 2373AA7A0D13BA4020E2F79372F7DF0858A03A32
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32322d3234203d3e203332303938.roa
Signing time: Wed 02 Sep 2026 01:25:00 +0000
ROA not before: Wed 02 Sep 2026 01:20:00 +0000
ROA not after: Wed 01 Sep 2027 01:25:00 +0000
asID: 32098
IP address blocks: 131.0.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 08 Sep 2026 22:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:73:aa:7a:0d:13:ba:40:20:e2:f7:93:72:f7:df:08:58:a0:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Validity
Not Before: Sep 2 01:20:00 2026 GMT
Not After : Sep 1 01:25:00 2027 GMT
Subject: CN=607EF0C8895717036C92BC4F04CBD33F11C82B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:d4:28:17:9a:2b:76:ef:c7:35:ce:0b:16:
af:7b:64:b5:9d:2e:63:c8:e9:10:18:6f:eb:b4:9e:
e2:4d:2d:c4:a4:b7:47:f9:45:4a:a9:a2:3a:fc:d5:
6c:a8:1f:05:52:05:0f:cd:4d:6a:0d:84:d0:74:e9:
74:ce:fd:cc:4b:5e:a3:19:2d:cd:38:18:2a:88:a9:
0b:65:a0:f9:be:c0:b7:e4:66:94:ba:2d:c9:60:6c:
e9:4d:bf:4d:a6:f8:52:f5:76:4e:a3:06:1b:24:6c:
4c:f5:c9:83:14:0c:ce:64:69:dd:b1:43:12:43:36:
81:f3:1b:e0:41:d9:92:f9:44:e1:ff:37:86:7c:3a:
2b:9a:60:3b:ff:0a:c2:7c:f6:2b:c0:e5:57:ef:10:
cc:e5:ae:47:53:27:51:b4:e8:a2:7d:f5:a7:83:4b:
b3:c3:70:b8:3e:1e:7e:0f:57:56:7b:98:7d:0a:fc:
23:83:60:f7:f6:f8:db:50:52:bb:a7:a4:ba:89:d4:
88:56:c3:4d:43:7b:70:19:29:e9:52:b4:dd:6a:4d:
ca:e0:1c:4f:b6:a5:be:f3:90:f4:7e:7d:65:84:4b:
96:f3:c0:b1:ff:e3:9e:54:2b:d3:df:43:a0:82:28:
0f:d2:a7:eb:d0:f2:6c:c6:45:5c:b2:34:7c:f5:f3:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:F0:C8:89:57:17:03:6C:92:BC:4F:04:CB:D3:3F:11:C8:2B:45
X509v3 Authority Key Identifier:
keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32322d3234203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:39:75:1b:c0:80:b9:17:a7:1d:e2:e2:10:a9:ae:9c:f6:ec:
b0:89:d0:c3:84:36:08:bd:a7:fa:5e:35:a7:e3:97:a6:fe:b9:
55:2b:98:d7:c1:42:68:ff:45:bb:6c:f8:e1:e7:93:b1:ae:86:
d7:a4:8f:1f:32:43:76:03:b4:71:20:bc:0c:39:03:4f:e5:4e:
fe:e4:70:9a:7a:da:1c:20:5a:0c:21:39:08:af:a2:9b:4a:5f:
38:6a:e1:13:4c:00:dc:24:32:d0:be:2e:40:02:77:8e:19:8c:
09:87:af:ae:c0:fc:58:03:e1:6f:16:b7:9e:f6:d2:ad:41:67:
6f:73:07:35:96:44:c7:ee:5d:5a:46:3f:10:97:88:57:d0:7a:
83:d2:9e:74:c6:67:1b:58:22:6a:b8:df:99:0e:55:1f:f1:bf:
a5:38:5d:0a:1f:51:cb:19:9b:93:5e:54:bc:f2:99:70:8e:a2:
e4:45:f2:ea:35:cc:80:22:96:37:4d:e7:68:42:20:80:54:c3:
6b:f2:c9:3a:ab:92:92:10:a8:3e:6c:2d:1b:5b:f5:08:5a:84:
d9:48:4c:a3:6f:04:2a:83:8c:5a:81:91:d8:c2:6a:a2:9b:48:
56:f6:72:02:76:02:8e:ea:c8:67:28:a1:d4:ed:7c:ce:36:a9:
aa:f1:b7:d3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUI3Oqeg0TukAg4veTcvffCFigOjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5MDUyNzIyRTEyRjMxNTVGQUM0QTlFQkRFN0Q0ODcz
NTVDRjBCRTAeFw0yNjA5MDIwMTIwMDBaFw0yNzA5MDEwMTI1MDBaMDMxMTAvBgNV
BAMTKDYwN0VGMEM4ODk1NzE3MDM2QzkyQkM0RjA0Q0JEMzNGMTFDODJCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtdQoF5ordu/HNc4LFq97ZLWd
LmPI6RAYb+u0nuJNLcSkt0f5RUqpojr81WyoHwVSBQ/NTWoNhNB06XTO/cxLXqMZ
Lc04GCqIqQtloPm+wLfkZpS6LclgbOlNv02m+FL1dk6jBhskbEz1yYMUDM5kad2x
QxJDNoHzG+BB2ZL5ROH/N4Z8OiuaYDv/CsJ89ivA5VfvEMzlrkdTJ1G06KJ99aeD
S7PDcLg+Hn4PV1Z7mH0K/CODYPf2+NtQUrunpLqJ1IhWw01De3AZKelStN1qTcrg
HE+2pb7zkPR+fWWES5bzwLH/455UK9PfQ6CCKA/Sp+vQ8mzGRVyyNHz18+ajAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUYH7wyIlXFwNskrxPBMvTPxHIK0UwHwYDVR0j
BBgwFoAUnZBSci4S8xVfrEqevefUhzVc8L4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNjNDRkZDQjY5RUQ3MTZCMUQ3RTYyQ0I1NjhCOTc2RDY0
NTlFOEFFRDQ4OUM1QjIzN0YxMTEwODNBNDIyMDA1LzAvOUQ5MDUyNzIyRTEyRjMx
NTVGQUM0QTlFQkRFN0Q0ODczNTVDRjBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDkwNTI3MjJFMTJGMzE1NUZB
QzRBOUVCREU3RDQ4NzM1NUNGMEJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjYzQ0ZGQ0I2OUVENzE2QjFEN0U2MkNCNTY4Qjk3NkQ2NDU5RThBRUQ0
ODlDNUIyMzdGMTExMDgzQTQyMjAwNS8wLzMxMzMzMTJlMzAyZTMyMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzIzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKDAOwwDQYJ
KoZIhvcNAQELBQADggEBACo5dRvAgLkXpx3i4hCprpz27LCJ0MOENgi9p/peNafj
l6b+uVUrmNfBQmj/Rbts+OHnk7Guhtekjx8yQ3YDtHEgvAw5A0/lTv7kcJp62hwg
WgwhOQivoptKXzhq4RNMANwkMtC+LkACd44ZjAmHr67A/FgD4W8Wt5720q1BZ29z
BzWWRMfuXVpGPxCXiFfQeoPSnnTGZxtYImq435kOVR/xv6U4XQofUcsZm5NeVLzy
mXCOouRF8uo1zIAiljdN52hCIIBUw2vyyTqrkpIQqD5sLRtb9QhahNlITKNvBCqD
jFqBkdjCaqKbSFb2cgJ2Ao7qyGcoodTtfM42qarxt9M=
-----END CERTIFICATE-----
Generated at Sat Sep 5 19:33:15 2026 by rpki-client