
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa
File: 3136382e3234332e37322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: zjR4gPLBW8SRPN3I1Q3QhYwZxwnJqucC96tfhlED4Ig=
Subject key identifier: 43:D1:A4:F0:D6:2F:BC:47:C2:5A:1C:59:F0:52:28:A0:9C:E0:F3:63
Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial: 7CCC6151C64E9E47BF8785C70324058E6A9811CA
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa
Signing time: Tue 03 Mar 2026 14:32:35 +0000
ROA not before: Tue 03 Mar 2026 14:27:35 +0000
ROA not after: Tue 02 Mar 2027 14:32:35 +0000
asID: 834
IP address blocks: 168.243.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 13 Mar 2026 23:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cc:61:51:c6:4e:9e:47:bf:87:85:c7:03:24:05:8e:6a:98:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Validity
Not Before: Mar 3 14:27:35 2026 GMT
Not After : Mar 2 14:32:35 2027 GMT
Subject: CN=43D1A4F0D62FBC47C25A1C59F05228A09CE0F363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:0a:b6:c5:2a:e6:6c:e9:63:42:17:f3:cc:
4d:57:e3:20:2a:12:90:c1:61:9b:e9:02:dc:86:0c:
25:3d:63:c6:f8:e0:1a:44:f0:05:a2:cf:48:b9:c9:
26:e2:aa:10:38:2e:bf:69:f5:2e:be:76:92:bf:ed:
24:88:1a:e4:67:ce:2d:d2:7f:62:66:37:f1:06:31:
75:73:61:24:23:26:17:93:77:69:9c:68:00:ad:7c:
a4:2b:32:18:30:d1:0d:b3:c4:3f:be:ec:6b:c2:71:
0a:ff:18:46:41:c6:6c:07:9f:5a:06:5e:53:82:40:
64:a9:f3:0f:2d:8f:d6:5e:8f:ef:8c:58:b9:47:d6:
95:7f:c4:7f:ec:a8:97:16:cd:f8:f7:5b:17:95:9a:
c1:93:55:e3:97:80:87:d8:0b:2b:a9:00:ac:2c:8e:
64:4a:91:53:0c:66:f9:12:ab:a3:4d:e5:03:40:40:
5d:08:ef:7c:b4:24:e5:c6:8c:77:15:a4:2a:cd:ec:
8b:1a:b0:7c:27:ff:4f:1c:2c:22:e9:e5:73:15:de:
64:ee:05:17:ba:1d:a5:a0:54:33:3e:52:03:51:97:
3c:7f:ba:3e:11:2d:68:9c:7b:fd:c6:3e:49:84:5b:
9e:b2:cb:15:52:11:64:44:40:bb:ae:ce:2e:09:63:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:A4:F0:D6:2F:BC:47:C2:5A:1C:59:F0:52:28:A0:9C:E0:F3:63
X509v3 Authority Key Identifier:
keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:ad:7f:3f:3b:43:b4:8d:4b:cd:5d:42:9c:b7:20:76:d6:1e:
ce:8b:4b:1e:35:09:30:5e:2f:b8:bd:99:1f:ff:e3:bf:b0:83:
9e:f1:47:4a:e6:c4:c4:3e:e8:92:14:f3:f0:9e:4c:71:c8:17:
da:01:11:a7:d9:a5:f5:bd:8b:9a:e0:c4:ae:6d:17:5a:50:34:
ab:f3:a1:1a:6f:eb:5f:ba:b4:c7:7b:1f:41:b4:b8:51:9a:51:
64:8d:7a:55:e1:15:68:67:64:65:d9:d3:66:76:d0:dd:aa:da:
23:f0:45:ea:04:08:f1:ea:08:f8:82:cc:84:9c:8d:db:34:d4:
d4:da:dc:ad:58:21:d5:aa:d2:ca:7b:f4:a1:bd:28:37:99:f7:
d4:16:7c:39:e1:b1:73:a5:61:44:ad:3a:67:2d:70:1d:dd:eb:
58:12:2f:e0:03:fa:b4:3a:99:32:d6:49:ff:9f:54:0f:69:e6:
85:ef:80:14:c1:e3:d4:89:e2:9c:a0:8c:5e:0e:9e:00:de:da:
4c:ea:7e:e6:51:b9:5d:fa:0c:83:66:03:a6:1c:9f:8c:b5:6c:
59:2f:05:9e:8a:6e:48:a8:1a:06:c5:1f:10:61:5f:a6:9e:6c:
82:b9:49:a3:8e:94:6a:57:a7:0e:7f:51:78:da:d6:43:25:9f:
0d:58:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 13:24:34 2026 by rpki-client