
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa
File: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier: TpcaeL6skmysWmxFBrYKN2U0wVzG/cfdRq15VQ+yTiU=
Subject key identifier: 8D:D7:02:B6:3C:6A:33:99:F5:2F:C9:27:D1:38:6B:61:1E:6A:DC:3A
Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial: 2A3619FF89BDC8D5304511531A34776EA4AF3145
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa
Signing time: Mon 17 Aug 2026 20:25:44 +0000
ROA not before: Mon 17 Aug 2026 20:20:44 +0000
ROA not after: Mon 16 Aug 2027 20:25:44 +0000
asID: 3356
IP address blocks: 143.255.140.0/22 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 09 Sep 2026 19:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:36:19:ff:89:bd:c8:d5:30:45:11:53:1a:34:77:6e:a4:af:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Validity
Not Before: Aug 17 20:20:44 2026 GMT
Not After : Aug 16 20:25:44 2027 GMT
Subject: CN=8DD702B63C6A3399F52FC927D1386B611E6ADC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:d8:17:57:c5:85:b6:ef:ff:37:80:4e:0c:
b1:1c:c2:23:8e:ab:5b:44:3b:a9:9d:b7:03:21:2f:
db:0d:16:16:64:3f:f6:6c:a2:74:fe:b6:8d:82:f4:
fe:9c:45:03:10:86:f3:ed:f9:af:8c:6b:0b:eb:00:
b6:5a:b4:fe:a8:d2:0e:e5:0d:71:e3:8d:35:a2:ee:
13:45:86:85:64:7c:67:2b:0a:a7:11:88:9b:46:7a:
11:ed:d1:1a:b4:6e:52:2a:9a:bc:9b:b0:20:67:9d:
c2:79:a1:7b:c3:22:9f:c7:e6:c2:63:21:d8:b1:c7:
d8:0a:3f:86:ea:95:9b:78:d0:19:1a:f8:b4:ba:6c:
9d:10:78:fa:af:85:c0:8e:56:3e:a3:9f:73:5f:8f:
5e:a3:5a:69:9f:f1:33:4f:58:22:50:ed:c7:03:bf:
eb:18:e4:5e:97:9b:81:b2:dd:fd:4c:57:ef:1f:97:
c9:09:0b:54:96:34:8c:a1:5d:ff:f5:de:d8:1c:d5:
c8:db:b7:fa:a7:d0:97:81:67:c4:cf:f5:b8:10:ac:
1d:45:ec:f2:80:dd:11:8a:28:67:b4:f7:b6:51:b3:
59:27:c5:bf:17:8a:c4:6d:13:49:f8:13:a7:5c:b4:
c6:8f:09:a4:95:28:99:da:d2:ed:f9:e4:13:8a:9a:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D7:02:B6:3C:6A:33:99:F5:2F:C9:27:D1:38:6B:61:1E:6A:DC:3A
X509v3 Authority Key Identifier:
keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:28:5b:ca:d5:1d:de:fe:be:6e:32:d4:33:75:38:85:ce:2f:
aa:d7:cc:a8:b6:ee:75:1a:da:8d:ec:e6:b7:73:90:73:46:56:
b4:ef:ea:95:a1:2f:03:32:81:0f:9d:01:84:92:df:95:bb:da:
ed:11:fc:e7:f3:02:8b:95:38:b4:cd:91:06:f7:84:6b:dc:1c:
17:20:41:89:2e:f1:b3:28:96:3b:3d:c2:48:48:31:16:a9:3b:
24:ce:55:0d:36:98:4f:b0:31:8e:e4:2a:91:56:cd:f6:a4:ac:
4a:8a:43:f3:14:4b:c4:d9:9d:e9:27:a5:d9:70:3b:97:6d:8a:
b0:89:10:00:68:6e:be:39:b9:60:cb:d5:1f:05:d0:23:20:23:
30:cb:5e:91:de:5a:ba:95:de:07:c1:24:67:6e:54:5a:41:86:
ec:11:5a:7c:c8:f2:f7:d4:70:97:f0:c6:84:0e:3e:16:5c:e5:
1e:94:c1:55:a6:83:cc:9f:b9:04:e8:f8:32:5e:f9:1b:bc:1e:
57:b7:73:d2:c9:b4:3d:52:85:29:ac:ac:d9:ad:99:9c:4a:ba:
d6:cf:ff:a5:cd:18:45:c2:fb:60:f3:14:8f:4b:38:56:2f:4c:
a0:d4:91:99:fe:33:89:96:2d:8b:11:f9:95:dc:37:59:c0:37:
c8:c4:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:49:35 2026 by rpki-client