
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
File: 34352e3233342e38382e302f32322d3234203d3e20323636373632.roa (raw, json)
Hash identifier: HklnkmYn4f3rA095ZoC1nUW/dwLMLj4KAR5O/DS7iOY=
Subject key identifier: 53:FA:F3:3D:98:AF:6E:97:74:E7:E7:D7:B9:AC:B6:01:06:D2:40:FF
Certificate issuer: /CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Certificate serial: 1353FBDC424FD51F41236F9C9370EFCEC46B6AC0
Authority key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
Signing time: Tue 06 Jan 2026 19:21:56 +0000
ROA not before: Tue 06 Jan 2026 19:16:56 +0000
ROA not after: Tue 05 Jan 2027 19:21:56 +0000
asID: 266762
IP address blocks: 45.234.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl
rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:53:fb:dc:42:4f:d5:1f:41:23:6f:9c:93:70:ef:ce:c4:6b:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Validity
Not Before: Jan 6 19:16:56 2026 GMT
Not After : Jan 5 19:21:56 2027 GMT
Subject: CN=53FAF33D98AF6E9774E7E7D7B9ACB60106D240FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:0d:10:69:e8:a2:fb:24:28:01:0a:80:6e:
01:c9:b8:b2:7d:fc:b0:b4:e1:63:c9:60:fc:2e:6d:
9f:d9:de:1d:87:f9:9b:05:e4:f6:8f:17:50:64:e6:
4b:e7:78:c8:64:b4:a8:76:cc:ee:78:ee:83:b1:b0:
c6:6f:3f:46:fb:35:0c:ef:c4:6b:0c:c9:f7:15:ed:
52:82:22:15:ef:db:e4:50:d5:09:f0:60:b2:39:f4:
3b:0e:39:9d:4d:3f:9d:15:50:13:94:a8:ce:b7:3a:
05:1a:e8:99:d5:84:01:af:d6:a2:0d:d5:bd:77:b9:
77:9f:b4:83:dc:1c:11:83:9f:8f:4f:ff:56:18:6a:
77:c3:a6:41:b4:dc:01:39:c5:7e:e9:14:d2:73:70:
04:e7:5c:86:fe:75:23:25:0a:40:e1:17:2b:3b:83:
c7:40:5d:55:26:4a:cc:1a:90:ae:f7:e3:e3:2f:6c:
cc:30:7a:81:d2:e8:d1:f1:18:10:ed:e3:ad:d9:ef:
1e:5c:f7:71:d0:88:2c:b5:bd:0f:26:ac:ce:da:80:
62:fd:70:55:20:14:a2:f7:d2:90:34:f4:54:34:c9:
8a:28:5f:a8:91:76:0c:5d:7b:89:ee:df:cb:17:6e:
40:bc:31:31:15:bb:87:cc:20:9d:87:7f:4c:75:ae:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:F3:3D:98:AF:6E:97:74:E7:E7:D7:B9:AC:B6:01:06:D2:40:FF
X509v3 Authority Key Identifier:
keyid:D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.88.0/22
Signature Algorithm: sha256WithRSAEncryption
82:8c:db:56:4c:5d:b1:37:19:ca:80:a8:cd:6f:27:60:3d:c2:
b1:06:c3:98:ff:72:c1:a3:35:64:f0:6e:1f:b6:b0:64:8a:2f:
0a:00:43:71:0f:31:e1:80:86:a0:e9:54:c0:b7:60:65:21:19:
f3:a6:c0:93:ea:ac:69:d6:13:11:3e:24:b9:37:d6:9a:13:64:
cb:a3:1c:df:b4:4f:0d:c2:45:7b:8c:93:aa:52:33:fa:e5:fb:
78:36:c5:47:4a:c7:00:b5:ff:1c:f8:f9:ca:2a:a7:c4:fd:ea:
03:d7:9a:3a:d6:aa:0c:a7:70:25:a4:a8:ef:c3:c8:28:29:c6:
7b:6c:43:b6:29:28:35:46:10:84:fa:a4:1b:1a:26:68:e9:ab:
c2:33:34:c0:3b:7f:2c:68:0c:1c:24:d1:b6:f5:5d:25:2b:55:
53:50:e6:62:68:f7:19:b5:a5:f0:e9:4d:1b:89:ca:a6:78:92:
95:01:65:39:3e:22:9d:ee:fc:f1:fc:51:6b:92:be:1b:c8:97:
93:30:f9:52:a0:23:55:0e:01:03:f7:04:a3:ee:82:01:16:e8:
50:a4:3f:dd:5b:e5:d6:76:31:5b:f8:99:f4:3e:11:a0:36:99:
70:2c:05:04:5b:4a:0c:ee:7d:a3:9b:02:22:b8:fc:36:9f:7b:
fa:03:90:78
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUE1P73EJP1R9BI2+ck3DvzsRrasAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5NDE4NTIxRUE1M0E3RDc1RjhGREYwMUYwNzNCNDk1
NUIwQjI1OTAeFw0yNjAxMDYxOTE2NTZaFw0yNzAxMDUxOTIxNTZaMDMxMTAvBgNV
BAMTKDUzRkFGMzNEOThBRjZFOTc3NEU3RTdEN0I5QUNCNjAxMDZEMjQwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPw0Qaeii+yQoAQqAbgHJuLJ9
/LC04WPJYPwubZ/Z3h2H+ZsF5PaPF1Bk5kvneMhktKh2zO547oOxsMZvP0b7NQzv
xGsMyfcV7VKCIhXv2+RQ1QnwYLI59DsOOZ1NP50VUBOUqM63OgUa6JnVhAGv1qIN
1b13uXeftIPcHBGDn49P/1YYanfDpkG03AE5xX7pFNJzcATnXIb+dSMlCkDhFys7
g8dAXVUmSswakK734+MvbMwweoHS6NHxGBDt463Z7x5c93HQiCy1vQ8mrM7agGL9
cFUgFKL30pA09FQ0yYooX6iRdgxde4nu38sXbkC8MTEVu4fMIJ2Hf0x1rsNbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU/rzPZivbpd05+fXuay2AQbSQP8wHwYDVR0j
BBgwFoAU0JQYUh6lOn11+P3wHwc7SVWwslkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRjlDRUE5QTBGMDcwQzlBOTUyQjdCOEJDQTJCQjUxOUVF
MDAxMjg1RUMyREY0MTM5NDExODk4MUJGQkI1Mzg5LzAvRDA5NDE4NTIxRUE1M0E3
RDc1RjhGREYwMUYwNzNCNDk1NUIwQjI1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk0MTg1MjFFQTUzQTdENzVG
OEZERjAxRjA3M0I0OTU1QjBCMjU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkY5Q0VBOUEwRjA3MEM5QTk1MkI3QjhCQ0EyQkI1MTlFRTAwMTI4NUVD
MkRGNDEzOTQxMTg5ODFCRkJCNTM4OS8wLzM0MzUyZTMyMzMzNDJlMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3qWDAN
BgkqhkiG9w0BAQsFAAOCAQEAgozbVkxdsTcZyoCozW8nYD3CsQbDmP9ywaM1ZPBu
H7awZIovCgBDcQ8x4YCGoOlUwLdgZSEZ86bAk+qsadYTET4kuTfWmhNky6Mc37RP
DcJFe4yTqlIz+uX7eDbFR0rHALX/HPj5yiqnxP3qA9eaOtaqDKdwJaSo78PIKCnG
e2xDtikoNUYQhPqkGxomaOmrwjM0wDt/LGgMHCTRtvVdJStVU1DmYmj3GbWl8OlN
G4nKpniSlQFlOT4ine788fxRa5K+G8iXkzD5UqAjVQ4BA/cEo+6CARboUKQ/3Vvl
1nYxW/iZ9D4RoDaZcCwFBFtKDO59o5sCIrj8Np97+gOQeA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:15 2026 by rpki-client