
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
File: 3135382e39372e36342e302f32332d3233203d3e2033363430.roa (raw, json)
Hash identifier: nMx3MThU/6U4jMg7cGNVDx9hwWSVtUHgJf+I8TEQnXI=
Subject key identifier: 26:52:91:3A:0A:6F:34:F8:FC:0B:8F:D0:50:F2:B5:A7:40:0B:92:53
Certificate issuer: /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial: 11ED6FBF57592E0E117AE3B2EE5D979732A578BF
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
Signing time: Tue 06 Jan 2026 20:54:09 +0000
ROA not before: Tue 06 Jan 2026 20:49:09 +0000
ROA not after: Tue 05 Jan 2027 20:54:09 +0000
asID: 3640
IP address blocks: 158.97.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ed:6f:bf:57:59:2e:0e:11:7a:e3:b2:ee:5d:97:97:32:a5:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Validity
Not Before: Jan 6 20:49:09 2026 GMT
Not After : Jan 5 20:54:09 2027 GMT
Subject: CN=2652913A0A6F34F8FC0B8FD050F2B5A7400B9253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:26:5b:74:8b:18:d1:b9:2e:f3:d8:22:ec:
fb:ac:b5:af:98:f0:22:81:a7:6c:89:05:39:a7:ff:
97:b6:91:08:2c:5b:40:e6:b9:3b:fc:78:0d:c0:c4:
1e:5a:db:20:77:10:47:eb:17:64:1f:e6:6f:24:4b:
8a:7f:50:7a:c6:0f:48:6f:99:b7:e9:2d:79:aa:e3:
b4:b7:15:91:28:f7:40:85:2c:ab:04:42:b1:22:51:
91:96:17:ae:18:ad:d6:4e:a9:d3:bc:da:5d:90:71:
22:a6:18:f3:9b:96:6a:04:39:bc:2e:6c:ff:de:6f:
43:95:98:4a:31:bb:a9:1e:59:34:65:b7:b9:a8:49:
b0:e8:d5:82:73:db:74:b8:90:f2:88:42:c0:34:ff:
2c:c7:9f:99:ed:29:31:92:17:e7:7e:d0:40:a2:90:
0e:5a:14:d0:00:b2:2e:c2:55:ed:ba:fd:11:da:ee:
2f:b2:ec:84:31:75:55:c4:35:b3:41:3c:11:5e:59:
4a:22:2a:4d:05:b9:7e:7b:bd:8a:93:1d:27:e7:f9:
ca:36:4d:73:6a:7b:23:51:6f:3a:1c:01:ee:e8:49:
14:41:d3:7e:dc:08:3e:31:0a:93:f3:f4:4c:8e:25:
01:9a:b5:65:74:ea:b2:6f:d8:65:c1:00:d1:1f:b1:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:91:3A:0A:6F:34:F8:FC:0B:8F:D0:50:F2:B5:A7:40:0B:92:53
X509v3 Authority Key Identifier:
keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.97.64.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:3f:67:a0:e6:c1:70:62:6f:e9:42:cb:66:d3:63:ec:f2:ef:
dd:31:7d:fd:d8:61:27:ab:45:46:c0:d5:d0:b8:f0:9f:51:5f:
ff:18:6a:d4:5a:8e:f3:b5:ef:75:98:a4:95:b5:df:38:77:1f:
1f:69:99:3e:6a:82:04:c0:f0:67:5b:f7:57:15:d3:91:b3:95:
5b:90:72:27:82:f4:63:fd:42:c8:a3:8e:3c:25:8d:e3:9a:6a:
d5:4f:89:29:e3:11:34:b7:98:f9:4f:95:5a:bb:93:1d:94:e5:
b9:2b:0a:67:39:0b:4e:05:4c:7e:9f:c5:76:2f:63:6a:0c:0d:
3a:5e:64:29:94:a2:bb:18:dd:7c:d1:26:2e:98:e7:d4:86:ff:
7c:a7:9c:49:ca:19:72:cd:77:3e:42:73:e9:d0:35:6d:99:ab:
3b:95:fc:c4:db:06:b5:22:dc:8e:2f:bc:1b:91:03:76:22:a3:
03:a2:e0:27:a9:db:33:9f:d6:0c:ff:f9:b1:f9:69:e3:46:a7:
aa:81:63:d8:60:16:a8:10:28:88:01:47:0b:13:a5:12:e8:68:
6e:65:6c:7e:cb:76:05:ba:6c:ed:56:b4:52:6c:34:e3:40:e1:
73:e3:02:c3:87:ac:b8:ad:7b:0f:f0:1b:7a:b2:b2:6c:6f:5e:
e1:be:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:06:53 2026 by rpki-client