
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137322e302f32322d3234203d3e203236363137.roa
File: 3136382e3234332e3137322e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier: cBLrODl3jSJ86TY6C2cpTwVixww1kGO37+5a9e0MxG8=
Subject key identifier: 12:7C:80:1A:D5:68:92:53:EB:DA:26:BC:00:E4:1A:38:9F:FC:CA:F3
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 131AA7AAF1102204576B010BB51B4A5578CB1776
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137322e302f32322d3234203d3e203236363137.roa
Signing time: Fri 22 May 2026 17:43:46 +0000
ROA not before: Fri 22 May 2026 17:38:46 +0000
ROA not after: Fri 21 May 2027 17:43:46 +0000
asID: 26617
IP address blocks: 168.243.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 11:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1a:a7:aa:f1:10:22:04:57:6b:01:0b:b5:1b:4a:55:78:cb:17:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: May 22 17:38:46 2026 GMT
Not After : May 21 17:43:46 2027 GMT
Subject: CN=127C801AD5689253EBDA26BC00E41A389FFCCAF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:93:20:ff:d1:5b:12:b0:84:0d:d4:bc:67:
8d:03:89:80:22:fe:f0:56:6e:b5:e4:a3:0d:1c:c8:
96:44:18:4f:45:74:4d:ba:99:2c:82:cf:d2:16:40:
f5:ef:ee:dd:26:1b:22:71:1a:b9:ff:c6:fb:af:e3:
bd:c4:3a:12:d4:6d:bf:54:a3:52:c2:63:ce:28:79:
88:0c:a1:f0:f6:03:cc:03:cc:ee:cf:f3:69:f3:8f:
c3:31:0f:76:8a:e7:8e:39:1c:4c:1e:e9:d8:a9:ef:
1e:3a:6d:8d:ee:9b:eb:9b:20:56:22:95:46:b3:d4:
1b:6e:f8:a8:00:f4:1f:3e:c5:57:c1:4a:9b:66:c2:
d1:4d:a8:4d:a1:cf:7f:63:01:76:45:8a:0f:3b:46:
78:a1:34:ee:21:39:c2:ac:bc:7f:58:b2:ab:07:82:
1d:a1:06:be:ab:b2:58:d6:b0:9d:91:c1:8b:a5:3a:
39:6b:86:9b:94:6a:c8:05:63:f3:0f:4f:2e:03:82:
c6:b5:19:80:bc:ca:53:24:76:5d:b3:c7:e0:d3:f5:
9c:f7:05:fd:20:2d:94:bd:18:03:8f:e5:6a:dd:32:
31:2a:78:57:d9:c4:45:9d:a9:b6:6a:47:b9:71:00:
48:7d:4b:e9:9d:2f:6e:61:c4:51:d8:b3:a1:b7:74:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7C:80:1A:D5:68:92:53:EB:DA:26:BC:00:E4:1A:38:9F:FC:CA:F3
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137322e302f32322d3234203d3e203236363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.172.0/22
Signature Algorithm: sha256WithRSAEncryption
48:cf:59:63:79:b5:e2:39:37:66:1f:9b:96:ee:a2:49:bc:80:
40:3f:37:b8:75:cd:66:bc:5b:b4:78:35:48:b6:b2:74:99:7a:
94:89:46:3e:88:00:a9:51:87:0d:97:ac:01:d7:6c:36:6d:45:
99:d0:22:80:58:16:aa:5a:be:49:8e:56:cc:fc:3e:d7:14:59:
c0:6f:e6:be:09:f4:a9:e6:5d:90:57:40:4f:fe:61:96:fb:62:
8e:3e:83:72:51:e5:bd:e5:c0:07:a7:08:a9:f5:fa:4a:c7:39:
28:5b:ab:ba:35:f8:1a:33:7f:87:d4:41:c7:2b:31:62:a1:d1:
55:4d:f3:3a:ed:27:ad:90:2c:a7:1a:9c:34:27:22:0c:38:80:
8b:cd:ef:86:bc:fd:6d:2a:b8:0a:1d:79:35:80:b8:66:a2:02:
c9:7d:87:34:6d:5c:98:de:39:14:15:95:6b:94:12:d0:08:f6:
bf:cc:3e:dc:e3:ca:10:ce:78:7b:df:47:56:39:62:33:d4:a6:
bf:b1:fa:0f:77:3d:15:5b:6f:de:cf:7e:ab:ba:3f:41:15:40:
75:e8:9a:de:83:fd:79:8d:9a:9e:51:51:65:36:24:e7:b8:5c:
69:31:a2:e1:27:0a:00:ef:64:73:28:5d:81:fa:f0:52:29:ad:
83:3a:b2:0d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUExqnqvEQIgRXawELtRtKVXjLF3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNjA1MjIxNzM4NDZaFw0yNzA1MjExNzQzNDZaMDMxMTAvBgNV
BAMTKDEyN0M4MDFBRDU2ODkyNTNFQkRBMjZCQzAwRTQxQTM4OUZGQ0NBRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqJMg/9FbErCEDdS8Z40DiYAi
/vBWbrXkow0cyJZEGE9FdE26mSyCz9IWQPXv7t0mGyJxGrn/xvuv473EOhLUbb9U
o1LCY84oeYgMofD2A8wDzO7P82nzj8MxD3aK5445HEwe6dip7x46bY3um+ubIFYi
lUaz1Btu+KgA9B8+xVfBSptmwtFNqE2hz39jAXZFig87RnihNO4hOcKsvH9YsqsH
gh2hBr6rsljWsJ2RwYulOjlrhpuUasgFY/MPTy4Dgsa1GYC8ylMkdl2zx+DT9Zz3
Bf0gLZS9GAOP5WrdMjEqeFfZxEWdqbZqR7lxAEh9S+mdL25hxFHYs6G3dIQFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEnyAGtVoklPr2ia8AOQaOJ/8yvMwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMTM3MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPOs
MA0GCSqGSIb3DQEBCwUAA4IBAQBIz1ljebXiOTdmH5uW7qJJvIBAPze4dc1mvFu0
eDVItrJ0mXqUiUY+iACpUYcNl6wB12w2bUWZ0CKAWBaqWr5JjlbM/D7XFFnAb+a+
CfSp5l2QV0BP/mGW+2KOPoNyUeW95cAHpwip9fpKxzkoW6u6NfgaM3+H1EHHKzFi
odFVTfM67SetkCynGpw0JyIMOICLze+GvP1tKrgKHXk1gLhmogLJfYc0bVyY3jkU
FZVrlBLQCPa/zD7c48oQznh730dWOWIz1Ka/sfoPdz0VW2/ez36ruj9BFUB16Jre
g/15jZqeUVFlNiTnuFxpMaLhJwoA72RzKF2B+vBSKa2DOrIN
-----END CERTIFICATE-----
Generated at Thu Jun 11 10:01:58 2026 by rpki-client