
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3234203d3e203238353339.roa
File: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier: vD5vaxQsXe2Vj9y5gbLUcmxrCwOFDtHw8FdOo0SyPdY=
Subject key identifier: 71:ED:8C:D9:43:9A:E9:70:C2:38:FA:E5:C3:58:38:6D:F1:E9:2F:CF
Certificate issuer: /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Certificate serial: 44B5394EB7D16B4DCCFC20AE84F7EF8FB82C5AED
Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3234203d3e203238353339.roa
Signing time: Thu 06 Aug 2026 17:20:05 +0000
ROA not before: Thu 06 Aug 2026 17:15:05 +0000
ROA not after: Thu 05 Aug 2027 17:20:05 +0000
asID: 28539
IP address blocks: 45.239.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 17 Aug 2026 06:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b5:39:4e:b7:d1:6b:4d:cc:fc:20:ae:84:f7:ef:8f:b8:2c:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Validity
Not Before: Aug 6 17:15:05 2026 GMT
Not After : Aug 5 17:20:05 2027 GMT
Subject: CN=71ED8CD9439AE970C238FAE5C358386DF1E92FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:ae:bf:60:28:92:3b:0b:22:21:ba:01:db:
2e:5c:1d:a6:55:30:37:20:45:43:72:ca:7b:7d:88:
74:3d:d3:55:da:d9:4c:db:41:b9:e0:c3:c0:ba:4c:
e5:b0:77:7e:23:24:5b:e8:9a:a3:b2:f6:39:49:22:
f9:8b:09:7a:7a:e2:68:3e:7e:9b:11:36:02:bb:a6:
79:32:3c:3b:51:0e:74:35:cd:8b:8e:02:7b:c5:06:
07:0f:e2:ac:42:8a:1f:13:f8:46:7f:fd:dd:16:c6:
32:34:74:57:2e:e3:7e:f4:f6:13:7f:8a:88:d4:71:
9c:46:30:8e:8c:4c:be:10:c6:e3:d5:71:a1:c0:f4:
47:2c:bd:ad:87:08:b0:b3:cb:a4:a6:25:b6:44:b6:
43:d5:a7:b9:b8:9e:bb:8d:79:a0:21:f7:76:aa:80:
eb:69:a9:e7:63:c5:05:70:82:64:f8:04:a7:2b:d8:
90:aa:f8:fc:fc:17:6e:35:ff:23:39:22:92:5c:2b:
c5:40:6f:d5:8d:24:ac:b6:7d:83:78:34:2e:19:e7:
de:b5:3b:9d:02:0e:23:01:69:28:7b:5b:c0:da:3b:
f9:90:6e:22:c3:dc:38:19:54:66:69:b7:32:66:19:
22:6e:de:45:34:7e:54:6c:b6:fe:83:42:03:20:2c:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:ED:8C:D9:43:9A:E9:70:C2:38:FA:E5:C3:58:38:6D:F1:E9:2F:CF
X509v3 Authority Key Identifier:
keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3234203d3e203238353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:60:d2:a6:46:f7:69:31:f7:4a:91:58:e8:e5:69:37:25:15:
7f:0b:7a:dc:98:0e:73:45:97:66:af:87:b7:d7:94:17:bb:0a:
a6:1e:2c:d1:23:f6:b2:89:7e:5a:56:e3:a5:53:f3:2c:cb:ec:
76:65:7c:be:ac:80:ae:c8:99:52:46:64:64:47:04:82:e8:75:
49:f2:59:91:09:85:a9:03:e3:e9:f5:d2:9f:cf:22:21:51:70:
3b:4d:df:cc:8a:10:59:ef:b1:36:4b:73:6e:9a:fa:ea:f4:4d:
2c:9c:04:62:f4:53:0e:32:46:4b:35:76:6c:96:fc:61:db:f3:
bf:42:54:15:a2:c7:42:99:47:e5:69:2e:67:cc:39:7a:fb:30:
bb:4c:42:77:0a:d5:43:34:99:9f:1e:f5:0f:fb:39:0d:0d:25:
02:83:b4:4d:6d:70:ec:24:c2:d4:29:f9:4e:62:3a:b0:5c:16:
07:ff:6e:36:27:de:6b:bc:66:a8:b5:37:af:7f:c2:9c:16:cf:
85:8e:18:fe:f5:d5:6d:77:69:1b:01:f6:62:bc:a1:9d:0b:5b:
98:5d:58:1e:71:d7:3b:c8:f2:14:28:56:69:a6:89:e6:9b:1c:
ea:61:82:b6:66:a3:9f:76:6a:ed:46:5b:98:41:25:f4:10:0a:
e0:ac:09:cd
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURLU5TrfRa03M/CCuhPfvj7gsWu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4RDhDM0ZGMEMyM0M3RTExRTg5NkNCRkY4QjRFQzYy
REVBNkRBQzAeFw0yNjA4MDYxNzE1MDVaFw0yNzA4MDUxNzIwMDVaMDMxMTAvBgNV
BAMTKDcxRUQ4Q0Q5NDM5QUU5NzBDMjM4RkFFNUMzNTgzODZERjFFOTJGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDe66/YCiSOwsiIboB2y5cHaZV
MDcgRUNyynt9iHQ901Xa2UzbQbngw8C6TOWwd34jJFvomqOy9jlJIvmLCXp64mg+
fpsRNgK7pnkyPDtRDnQ1zYuOAnvFBgcP4qxCih8T+EZ//d0WxjI0dFcu43709hN/
iojUcZxGMI6MTL4QxuPVcaHA9Ecsva2HCLCzy6SmJbZEtkPVp7m4nruNeaAh93aq
gOtpqedjxQVwgmT4BKcr2JCq+Pz8F241/yM5IpJcK8VAb9WNJKy2fYN4NC4Z5961
O50CDiMBaSh7W8DaO/mQbiLD3DgZVGZptzJmGSJu3kU0flRstv6DQgMgLJ4VAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUce2M2UOa6XDCOPrlw1g4bfHpL88wHwYDVR0j
BBgwFoAUO42MP/DCPH4R6JbL/4tOxi3qbawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjZCQUI0MTJBOTBCQTUzQTBGQzFGM0M1NEIyQjE1NDBG
QzJEMTBERTgyMkExOEZERTVFQjA4NkZBOUE4QTg5LzAvM0I4RDhDM0ZGMEMyM0M3
RTExRTg5NkNCRkY4QjRFQzYyREVBNkRBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjhEOEMzRkYwQzIzQzdFMTFF
ODk2Q0JGRjhCNEVDNjJERUE2REFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY2QkFCNDEyQTkwQkE1M0EwRkMxRjNDNTRCMkIxNTQwRkMyRDEwREU4
MjJBMThGREU1RUIwODZGQTlBOEE4OS8wLzM0MzUyZTMyMzMzOTJlMzYzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt70QwDQYJ
KoZIhvcNAQELBQADggEBALNg0qZG92kx90qRWOjlaTclFX8LetyYDnNFl2avh7fX
lBe7CqYeLNEj9rKJflpW46VT8yzL7HZlfL6sgK7ImVJGZGRHBILodUnyWZEJhakD
4+n10p/PIiFRcDtN38yKEFnvsTZLc26a+ur0TSycBGL0Uw4yRks1dmyW/GHb879C
VBWix0KZR+VpLmfMOXr7MLtMQncK1UM0mZ8e9Q/7OQ0NJQKDtE1tcOwkwtQp+U5i
OrBcFgf/bjYn3mu8Zqi1N69/wpwWz4WOGP711W13aRsB9mK8oZ0LW5hdWB5x1zvI
8hQoVmmmieabHOphgrZmo592au1GW5hBJfQQCuCsCc0=
-----END CERTIFICATE-----
Generated at Wed Aug 12 16:20:34 2026 by rpki-client