
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e203130373533.roa
File: 3230302e332e3135322e302f32322d3233203d3e203130373533.roa (raw, json)
Hash identifier: bwCAAh8J6fg5CVTffHC5NJPjNdc4FnONvIt78uv5r9U=
Subject key identifier: 71:D9:63:FE:7A:E0:C5:E8:F2:92:17:2A:56:0A:F2:18:F0:4F:A9:C0
Certificate issuer: /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial: 7F4A3A8941C40C291967B6536485F84B0095D025
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e203130373533.roa
Signing time: Fri 28 Aug 2026 15:32:53 +0000
ROA not before: Fri 28 Aug 2026 15:27:53 +0000
ROA not after: Fri 27 Aug 2027 15:32:53 +0000
asID: 10753
IP address blocks: 200.3.152.0/22 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Sep 2026 03:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4a:3a:89:41:c4:0c:29:19:67:b6:53:64:85:f8:4b:00:95:d0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Validity
Not Before: Aug 28 15:27:53 2026 GMT
Not After : Aug 27 15:32:53 2027 GMT
Subject: CN=71D963FE7AE0C5E8F292172A560AF218F04FA9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:59:18:29:91:c0:6f:fe:43:a2:f9:98:fe:
7d:3d:d8:1c:ba:70:b2:2e:d9:a8:a4:2f:f8:40:77:
d7:d0:c0:bb:32:08:8a:87:0e:98:2f:f5:4b:4b:78:
90:c0:11:03:e6:e4:32:69:3a:12:de:79:10:1d:73:
17:85:ff:ef:2e:ad:82:25:52:6e:2b:ac:60:cb:ae:
4a:a4:4c:38:58:07:75:ef:52:8c:d4:43:ba:11:e2:
be:39:e9:0f:9d:eb:8d:ea:b3:42:bb:10:3a:ac:9e:
fd:13:de:0b:4b:a1:8a:74:ee:f1:ef:69:44:e2:a9:
74:74:37:a3:c5:44:1e:67:4f:f0:a9:d8:8a:25:3d:
90:ee:12:84:53:65:a0:47:41:ef:0c:27:5c:8a:2f:
6e:3e:a8:4d:11:f1:78:dd:11:0b:e8:4e:2a:42:a6:
82:db:37:14:e5:e6:7a:c4:9b:a3:19:2c:ae:be:c7:
2e:dc:37:e5:44:df:53:db:0a:78:ea:64:9b:59:86:
6c:42:ca:5f:3e:1f:1f:95:eb:ef:f6:6d:a1:b8:b4:
69:83:f2:50:18:3f:07:37:41:db:07:0a:7e:1a:3e:
94:9e:5a:a6:66:20:0c:42:69:85:96:33:49:38:00:
b2:82:af:c8:96:32:05:44:0a:d5:89:27:f8:1b:74:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:63:FE:7A:E0:C5:E8:F2:92:17:2A:56:0A:F2:18:F0:4F:A9:C0
X509v3 Authority Key Identifier:
keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e203130373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.152.0/22
Signature Algorithm: sha256WithRSAEncryption
23:5f:86:86:0c:0a:40:80:da:2a:5e:0e:0d:c0:2e:9b:1c:55:
95:02:f8:dd:d6:c3:ae:10:ab:97:f9:a2:91:91:7d:36:0f:31:
30:97:ee:03:73:af:cb:69:02:10:9f:e6:d6:88:d8:d6:38:ac:
05:73:dd:47:93:f5:3a:4f:ba:2e:53:ee:7c:3a:9f:38:f9:e1:
b3:1f:6f:18:cc:2c:ad:17:8f:17:74:76:1f:9e:c6:13:ff:2c:
29:36:02:85:5b:73:41:7a:e6:a4:7f:cf:68:df:21:80:e3:8b:
d5:2b:0b:3f:d1:ec:95:c3:0f:92:fd:bd:3e:0a:0e:4b:52:94:
6e:02:b1:62:f2:fe:60:2c:0d:22:85:a5:68:77:78:84:c9:bb:
12:1e:0a:df:ea:ea:1f:db:c8:d0:12:a9:41:f3:65:bb:39:aa:
42:21:f3:3a:84:af:c8:f8:0e:88:de:35:28:cb:b2:0d:83:b3:
8a:cc:70:7f:19:13:8e:6a:07:61:c5:bd:e8:8b:04:65:99:3f:
37:7c:62:4e:fc:f9:b3:32:de:d3:50:da:dd:00:6c:7c:f3:77:
8c:43:f6:93:5d:eb:35:39:03:d7:b7:69:48:5b:de:f8:c1:e7:
11:83:6e:7c:38:e8:69:7f:65:f3:dd:28:ea:10:14:99:1a:e5:
20:dc:7f:fc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUf0o6iUHEDCkZZ7ZTZIX4SwCV0CUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2MDkwM0I4Mzc1RkM1QzJDQjg5MTYzNUUwRUE4N0I1
MERBMzU5NTAeFw0yNjA4MjgxNTI3NTNaFw0yNzA4MjcxNTMyNTNaMDMxMTAvBgNV
BAMTKDcxRDk2M0ZFN0FFMEM1RThGMjkyMTcyQTU2MEFGMjE4RjA0RkE5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwr1kYKZHAb/5DovmY/n092By6
cLIu2aikL/hAd9fQwLsyCIqHDpgv9UtLeJDAEQPm5DJpOhLeeRAdcxeF/+8urYIl
Um4rrGDLrkqkTDhYB3XvUozUQ7oR4r456Q+d643qs0K7EDqsnv0T3gtLoYp07vHv
aUTiqXR0N6PFRB5nT/Cp2IolPZDuEoRTZaBHQe8MJ1yKL24+qE0R8XjdEQvoTipC
poLbNxTl5nrEm6MZLK6+xy7cN+VE31PbCnjqZJtZhmxCyl8+Hx+V6+/2baG4tGmD
8lAYPwc3QdsHCn4aPpSeWqZmIAxCaYWWM0k4ALKCr8iWMgVECtWJJ/gbdIiJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcdlj/nrgxejykhcqVgryGPBPqcAwHwYDVR0j
BBgwFoAUDWCQO4N1/FwsuJFjXg6oe1DaNZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0U1Q0Q5RTQyRjk4QUM3OTdENjVFOTZBOUQwOUUzMUY1
RkJDNTg4NEQxRjgwMkZBRTgwQ0Y4RkQ1MEZERjlELzAvMEQ2MDkwM0I4Mzc1RkM1
QzJDQjg5MTYzNUUwRUE4N0I1MERBMzU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDYwOTAzQjgzNzVGQzVDMkNC
ODkxNjM1RTBFQTg3QjUwREEzNTk1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNFNUNEOUU0MkY5OEFDNzk3RDY1RTk2QTlEMDlFMzFGNUZCQzU4ODRE
MUY4MDJGQUU4MENGOEZENTBGREY5RC8wLzMyMzAzMDJlMzMyZTMxMzUzMjJlMzAy
ZjMyMzIyZDMyMzMyMDNkM2UyMDMxMzAzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIA5gwDQYJ
KoZIhvcNAQELBQADggEBACNfhoYMCkCA2ipeDg3ALpscVZUC+N3Ww64Qq5f5opGR
fTYPMTCX7gNzr8tpAhCf5taI2NY4rAVz3UeT9TpPui5T7nw6nzj54bMfbxjMLK0X
jxd0dh+exhP/LCk2AoVbc0F65qR/z2jfIYDji9UrCz/R7JXDD5L9vT4KDktSlG4C
sWLy/mAsDSKFpWh3eITJuxIeCt/q6h/byNASqUHzZbs5qkIh8zqEr8j4DojeNSjL
sg2Ds4rMcH8ZE45qB2HFveiLBGWZPzd8Yk78+bMy3tNQ2t0AbHzzd4xD9pNd6zU5
A9e3aUhb3vjB5xGDbnw46Gl/ZfPdKOoQFJka5SDcf/w=
-----END CERTIFICATE-----
Generated at Sun Sep 13 14:54:37 2026 by rpki-client