
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa
File: 34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa (raw, json)
Hash identifier: tMZ0cPFtOYZDdMZw5V3NdR32ruSvzQBfetUpu/xSinU=
Subject key identifier: 82:E7:BC:1B:8D:73:67:E6:7F:1D:3C:4A:EC:E2:84:EE:FB:A6:C9:40
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 2F10150DCA5D8FF6A401BE105DFCA1939086A0AD
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa
Signing time: Mon 24 Aug 2026 20:15:00 +0000
ROA not before: Mon 24 Aug 2026 20:10:00 +0000
ROA not after: Mon 23 Aug 2027 20:15:00 +0000
asID: 267823
IP address blocks: 45.172.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 04 Sep 2026 19:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:10:15:0d:ca:5d:8f:f6:a4:01:be:10:5d:fc:a1:93:90:86:a0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Aug 24 20:10:00 2026 GMT
Not After : Aug 23 20:15:00 2027 GMT
Subject: CN=82E7BC1B8D7367E67F1D3C4AECE284EEFBA6C940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:9c:ac:eb:43:1d:84:30:01:8d:59:7d:63:
a9:bd:0d:db:b9:db:9f:3c:c5:95:4a:96:5b:c4:80:
1f:7a:1e:54:79:f3:30:33:cf:8f:85:91:5d:e2:5c:
24:99:3c:ee:09:5e:cb:d9:ab:8f:46:c3:96:c9:c5:
1d:74:4b:84:bf:6c:3e:04:f9:d1:2b:5e:8b:f8:92:
35:91:d5:86:47:f9:d5:d7:d0:e2:df:5d:c1:46:0f:
42:e0:a9:ae:44:0c:88:ce:26:33:35:05:87:ba:68:
54:c8:83:f3:41:82:d2:d1:40:4e:10:9f:dc:b9:f0:
c5:3d:4d:8c:af:23:e3:5c:93:7c:ff:41:7e:d2:ec:
b7:ab:f3:2a:77:e8:a0:99:eb:a2:5f:e8:35:8c:48:
10:26:6e:64:e0:b2:f0:49:fc:1c:c7:7f:2b:a9:93:
46:fe:58:97:09:06:ab:00:3c:42:17:17:42:b8:49:
32:0e:88:de:67:0e:99:07:ee:0b:89:06:11:35:04:
28:e5:50:8a:31:85:11:23:5a:68:30:c6:74:83:48:
d1:8b:67:cb:68:93:c7:95:91:1d:73:c2:56:88:95:
1b:2c:dc:dd:32:6f:3f:1f:cd:05:e4:71:6b:f2:02:
51:41:7b:66:a1:0c:e7:35:0d:49:f2:84:e2:42:76:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:BC:1B:8D:73:67:E6:7F:1D:3C:4A:EC:E2:84:EE:FB:A6:C9:40
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.222.0/23
Signature Algorithm: sha256WithRSAEncryption
16:bc:11:aa:26:fd:f6:a8:d7:d1:fe:a9:93:f1:43:c2:fc:6c:
f4:f0:9a:c6:32:00:f4:fb:9d:a7:4b:6c:e3:a0:82:bf:b0:a1:
0d:bd:8b:3e:47:97:fd:a5:47:4d:b4:0f:6a:b8:73:41:94:c8:
d2:19:61:7b:de:a0:09:6d:b2:cc:1a:c0:3d:9d:bf:b3:22:f0:
e4:8f:cd:1b:8e:6d:ee:cb:2a:0e:1a:ea:bd:58:5d:ac:0f:08:
65:3c:c0:36:e2:f7:1c:4e:81:cd:56:42:87:b4:d9:11:7f:2b:
c5:c7:6a:4d:4c:8d:49:fd:d3:ef:75:af:4c:ae:6d:d4:7b:0e:
85:dc:4e:75:e1:0c:ba:5a:7f:ee:7e:51:0c:b5:b7:3d:24:61:
9c:f1:a3:8d:85:eb:4e:70:8e:14:6c:6d:c2:63:16:2a:7e:41:
5e:fc:1e:57:3b:74:91:57:72:61:fe:66:1b:6c:89:5e:2e:60:
86:46:2e:00:c0:a0:ca:0d:77:fb:7f:da:68:90:0b:4f:41:3a:
b8:0f:43:40:16:5f:22:76:99:bb:a6:e7:28:ba:a0:4d:78:93:
5f:27:64:67:12:82:ff:73:c6:b6:80:09:06:38:97:e8:9e:47:
f3:78:4a:ca:02:90:76:91:7c:3d:4a:5d:9e:6a:04:13:5b:f2:
69:d4:de:b8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULxAVDcpdj/akAb4QXfyhk5CGoK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjA4MjQyMDEwMDBaFw0yNzA4MjMyMDE1MDBaMDMxMTAvBgNV
BAMTKDgyRTdCQzFCOEQ3MzY3RTY3RjFEM0M0QUVDRTI4NEVFRkJBNkM5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lpys60MdhDABjVl9Y6m9Ddu5
2588xZVKllvEgB96HlR58zAzz4+FkV3iXCSZPO4JXsvZq49Gw5bJxR10S4S/bD4E
+dErXov4kjWR1YZH+dXX0OLfXcFGD0Lgqa5EDIjOJjM1BYe6aFTIg/NBgtLRQE4Q
n9y58MU9TYyvI+Nck3z/QX7S7Ler8yp36KCZ66Jf6DWMSBAmbmTgsvBJ/BzHfyup
k0b+WJcJBqsAPEIXF0K4STIOiN5nDpkH7guJBhE1BCjlUIoxhREjWmgwxnSDSNGL
Z8tok8eVkR1zwlaIlRss3N0ybz8fzQXkcWvyAlFBe2ahDOc1DUnyhOJCdm+PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgue8G41zZ+Z/HTxK7OKE7vumyUAwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzM0MzUyZTMxMzczMjJlMzIzMjMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3MzgzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLaze
MA0GCSqGSIb3DQEBCwUAA4IBAQAWvBGqJv32qNfR/qmT8UPC/Gz08JrGMgD0+52n
S2zjoIK/sKENvYs+R5f9pUdNtA9quHNBlMjSGWF73qAJbbLMGsA9nb+zIvDkj80b
jm3uyyoOGuq9WF2sDwhlPMA24vccToHNVkKHtNkRfyvFx2pNTI1J/dPvda9Mrm3U
ew6F3E514Qy6Wn/uflEMtbc9JGGc8aONhetOcI4UbG3CYxYqfkFe/B5XO3SRV3Jh
/mYbbIleLmCGRi4AwKDKDXf7f9pokAtPQTq4D0NAFl8idpm7pucouqBNeJNfJ2Rn
EoL/c8a2gAkGOJfonkfzeErKApB2kXw9Sl2eagQTW/Jp1N64
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:24 2026 by rpki-client