
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e20323732303037.roa
File: 3230302e332e3135322e302f32322d3233203d3e20323732303037.roa (raw, json)
Hash identifier: g0bOQ/MnZEsy6yWUf2XUN/riObet8wz/k+ZOx/WPuR4=
Subject key identifier: DD:3F:20:8B:90:3C:E8:C6:8B:D7:30:DA:2E:F9:F1:6F:14:84:18:A6
Certificate issuer: /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial: 22C9885177B220B8F405744DA4048555A80AAFC8
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e20323732303037.roa
Signing time: Fri 28 Aug 2026 15:32:52 +0000
ROA not before: Fri 28 Aug 2026 15:27:52 +0000
ROA not after: Fri 27 Aug 2027 15:32:52 +0000
asID: 272007
IP address blocks: 200.3.152.0/22 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 17 Sep 2026 03:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c9:88:51:77:b2:20:b8:f4:05:74:4d:a4:04:85:55:a8:0a:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Validity
Not Before: Aug 28 15:27:52 2026 GMT
Not After : Aug 27 15:32:52 2027 GMT
Subject: CN=DD3F208B903CE8C68BD730DA2EF9F16F148418A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:a7:ea:d6:eb:2c:0d:a4:83:97:b7:f3:d3:
df:cb:79:7e:17:57:5e:fd:58:51:21:52:0f:d2:c4:
e1:32:4a:da:7b:62:8b:55:c5:b3:bf:ab:3c:ea:f3:
52:2f:df:8f:72:cb:da:62:94:a8:b4:6c:94:f6:d7:
c0:fb:56:20:21:ad:e5:0c:35:be:6b:12:5e:9e:39:
8d:95:9c:5e:1f:68:3e:ba:aa:9e:47:58:87:d6:75:
57:26:6b:05:7d:f1:00:e4:13:c2:d1:41:04:b1:ff:
35:91:1b:05:4c:bd:2a:35:b9:81:6f:3c:fc:26:25:
c7:10:59:cf:f2:9d:7a:32:a3:1d:9d:8d:9b:b8:49:
40:57:2d:41:66:94:6b:50:6a:b3:e5:e6:47:07:fc:
16:22:6c:59:bc:0b:65:1b:16:10:57:ba:fb:65:ae:
de:33:02:f3:2c:2b:7e:ed:93:78:26:30:2f:57:fa:
c2:0c:af:ef:08:de:1e:62:a0:49:87:6a:5f:9d:ff:
0d:cf:ff:ce:60:80:6b:c5:a1:11:19:a4:67:14:f5:
78:c7:77:f1:7a:24:9f:d3:db:59:ce:5e:28:db:00:
15:2a:13:ec:02:63:b7:7d:14:9a:31:fa:09:7d:66:
d6:a5:30:86:10:37:dc:79:dc:b4:f5:70:15:79:f2:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:20:8B:90:3C:E8:C6:8B:D7:30:DA:2E:F9:F1:6F:14:84:18:A6
X509v3 Authority Key Identifier:
keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e20323732303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:70:f0:74:4b:4a:d1:5a:65:7b:87:05:87:11:06:6a:6f:58:
1c:9e:6a:03:e0:4c:e3:7e:31:0a:a8:0b:14:a9:d0:2b:d8:b8:
d1:6a:0a:48:ce:2a:7f:ec:fc:0b:87:f8:a8:c6:54:40:6b:a6:
da:7c:3a:80:19:bb:88:69:a4:09:27:17:e8:8f:a8:c7:0a:27:
95:5d:b6:aa:f0:55:b8:8f:69:d8:71:2c:a1:ff:b0:09:46:a7:
45:06:7f:bc:b7:64:2a:50:9c:84:89:50:60:2f:f9:51:6f:79:
87:90:c0:b4:56:22:1e:2f:9d:56:a4:67:7b:95:63:cd:e4:60:
cb:c3:04:5d:19:f2:56:ea:4c:67:28:26:48:ba:1d:c0:c4:86:
98:d6:09:2d:17:bc:45:85:2f:9a:91:d2:b9:6e:14:b5:d4:b5:
db:47:4c:b7:d4:8d:41:ce:14:67:05:8a:00:30:fb:62:17:50:
08:d6:f6:cb:7a:b6:08:85:c0:11:8e:d7:32:92:03:78:71:73:
8e:18:1e:c9:59:b0:37:34:1d:63:9c:80:e8:be:b7:d5:1e:9e:
af:60:12:92:0c:8a:b1:4f:7c:f5:ca:2e:bd:19:cf:22:2c:39:
a1:ce:26:b0:f0:6f:ea:6e:91:95:ec:fd:a4:b5:7e:35:d8:61:
ab:cf:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:54:57 2026 by rpki-client