
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231362e302f32322d3234203d3e203136353932.roa
File: 3136382e3234332e3231362e302f32322d3234203d3e203136353932.roa (raw, json)
Hash identifier: F/9j8tjsNGqKL+KdGy5h0F1JxKxInN7BAkzMrIKbmRg=
Subject key identifier: 72:1E:7B:FD:9A:F7:02:03:49:09:9B:5D:6A:07:92:BC:3E:46:35:86
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 0FF5CFB851D5950526FD8AD06238ED5734A7CEB9
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231362e302f32322d3234203d3e203136353932.roa
Signing time: Thu 21 May 2026 21:43:38 +0000
ROA not before: Thu 21 May 2026 21:38:38 +0000
ROA not after: Thu 20 May 2027 21:43:38 +0000
asID: 16592
IP address blocks: 168.243.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 11:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f5:cf:b8:51:d5:95:05:26:fd:8a:d0:62:38:ed:57:34:a7:ce:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: May 21 21:38:38 2026 GMT
Not After : May 20 21:43:38 2027 GMT
Subject: CN=721E7BFD9AF7020349099B5D6A0792BC3E463586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:09:ef:cb:ed:7d:47:31:d2:60:67:c9:4f:
0a:c5:7a:4b:fe:cf:03:5d:35:70:7b:fe:98:8d:b1:
44:36:9c:fe:5d:82:55:ef:6c:7d:b9:71:8f:9e:0a:
a4:63:7f:e5:f3:64:90:a0:72:97:a8:b7:28:57:9a:
8b:7c:92:f8:15:85:4e:ab:b3:19:53:0b:f1:84:0c:
e4:40:5a:7f:25:a1:25:f5:0e:a3:a9:32:88:2b:73:
1e:c7:2a:45:46:af:65:87:05:0c:b9:e0:d0:39:f6:
ec:88:ed:62:fd:ef:0a:40:fb:a8:48:06:09:83:23:
dd:07:9f:ac:08:58:9f:d8:ea:ef:d2:3e:28:47:b7:
91:b8:47:80:b7:a5:29:a6:73:b0:1c:e1:21:01:5f:
d5:8d:4b:a7:00:e6:02:e7:52:a8:e0:3b:cb:03:ed:
f8:a5:68:9e:e0:79:f8:6d:dc:8c:3f:a9:12:5e:9c:
93:37:ab:4c:f3:33:52:d5:81:31:fa:68:8a:26:0b:
af:78:2f:b4:b5:87:06:55:44:4e:b6:60:9c:4b:45:
d8:24:72:25:95:2c:2f:be:57:6e:6e:21:c2:b7:b0:
07:8d:86:d5:a5:90:90:9e:98:a3:e8:bf:84:1b:75:
43:33:30:8c:47:28:79:fc:9f:82:fd:e5:e6:ef:d8:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1E:7B:FD:9A:F7:02:03:49:09:9B:5D:6A:07:92:BC:3E:46:35:86
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231362e302f32322d3234203d3e203136353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:58:29:fd:87:10:65:59:ff:2f:b3:96:05:c3:96:31:5e:71:
9e:20:fe:89:dd:78:1d:46:24:15:b3:1a:30:cd:e1:e6:c2:36:
67:e9:0e:89:a8:7a:cf:1b:49:ad:b0:7f:86:d6:bb:fe:82:40:
4b:83:0c:6e:72:48:97:45:83:bb:41:6c:3f:bc:14:6e:14:fb:
56:f5:ec:b1:89:ae:e0:9d:d9:41:d8:6a:87:0e:70:45:8e:45:
7f:5a:b2:97:66:95:b9:18:77:bd:86:eb:24:7e:35:0a:49:39:
73:3d:52:fd:bb:92:fa:55:26:cb:62:c6:3b:df:18:dc:31:96:
42:67:a8:fb:26:8a:d9:c3:2b:41:0b:b7:04:58:19:0e:30:5e:
3f:8d:44:9b:89:91:9e:ee:f9:b3:35:e6:a4:d9:16:7e:1d:22:
d2:aa:5b:d9:59:b7:c7:0b:45:bd:50:8a:b3:a8:33:ac:d8:3b:
f3:df:f1:bb:c9:72:f9:74:ef:77:ba:01:e5:c5:fa:05:3c:87:
5c:8e:34:7a:f6:3e:49:3b:ee:41:d6:17:2e:ef:ab:79:7e:10:
01:41:c5:91:20:06:b0:88:08:30:26:db:ef:19:bd:e7:dc:f5:
9a:62:b9:37:67:56:d1:30:94:99:66:9b:7b:09:b1:22:b2:d3:
09:84:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 10:01:20 2026 by rpki-client