
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32342d3234203d3e20323637383233.roa
File: 34352e3137322e3232322e302f32342d3234203d3e20323637383233.roa (raw, json)
Hash identifier: XjS35oEchss1Wk/MCGpuf6KP1W+UvNLyY+zyyTgF1Bs=
Subject key identifier: 48:CF:01:5E:39:10:AE:68:4B:F6:A1:E3:74:FB:D5:4A:58:41:A2:8B
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 6D02105E8E1F3A367DFCCA6AAFB7235A65FA3B57
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32342d3234203d3e20323637383233.roa
Signing time: Mon 24 Aug 2026 20:15:00 +0000
ROA not before: Mon 24 Aug 2026 20:10:00 +0000
ROA not after: Mon 23 Aug 2027 20:15:00 +0000
asID: 267823
IP address blocks: 45.172.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 04 Sep 2026 19:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:02:10:5e:8e:1f:3a:36:7d:fc:ca:6a:af:b7:23:5a:65:fa:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Aug 24 20:10:00 2026 GMT
Not After : Aug 23 20:15:00 2027 GMT
Subject: CN=48CF015E3910AE684BF6A1E374FBD54A5841A28B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:b7:b8:e3:b5:9a:95:24:5c:ef:fe:49:83:
6c:1b:0a:84:1c:86:dc:ff:ce:5c:66:4a:7a:11:94:
9e:12:be:f2:c3:5b:68:01:cc:c6:ee:3d:50:79:e6:
41:12:1e:3f:b0:88:50:79:41:0f:14:28:a7:a7:48:
cf:d8:d6:60:ea:40:c8:0a:8b:5e:0f:78:db:b6:e9:
39:5e:38:ec:a9:96:80:86:4c:66:57:da:d4:06:b7:
e8:c7:3a:56:63:5a:96:c1:d8:53:52:b8:b2:21:0f:
2a:2f:60:0e:84:17:e7:7d:a5:f1:d4:fe:7c:29:4f:
b2:f5:b4:26:b8:09:6f:57:ad:88:b9:9f:7b:74:24:
5c:53:23:07:93:19:90:77:fb:64:3a:fc:06:57:74:
ee:b2:25:ab:f5:6b:c0:51:b0:7b:20:b6:a5:72:ea:
49:fa:90:91:7f:94:40:a9:79:67:a5:69:fd:98:52:
c5:b3:f7:59:f4:b2:f2:93:fc:b6:bf:48:12:db:c5:
56:7b:6a:a2:60:a8:34:bb:60:a5:ed:c2:9d:08:97:
4e:35:05:40:b5:f0:7e:77:1b:b9:a9:07:c8:77:9f:
99:3c:2c:7d:dc:2b:19:25:4c:2e:0d:81:69:bd:5a:
e1:af:78:1b:2d:37:ff:eb:df:80:bc:18:f3:0c:1f:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:01:5E:39:10:AE:68:4B:F6:A1:E3:74:FB:D5:4A:58:41:A2:8B
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32342d3234203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:37:8e:79:ae:b5:bd:1f:6a:ce:7f:bd:77:0c:ae:6a:c9:8f:
48:12:5a:2d:6c:d7:b0:d6:a1:e8:db:f9:47:7c:4d:d5:e4:ef:
da:22:3e:3e:05:c3:1a:2d:1e:31:8c:c5:89:21:85:8e:60:ab:
d0:92:50:c8:98:0f:b9:e7:37:d6:95:1b:b5:9b:ee:5e:75:4a:
d6:0d:83:f1:17:46:ac:9f:60:d4:ec:9c:30:f1:f5:6f:6c:84:
1a:72:e0:c9:d4:63:d5:fd:e8:9a:d1:46:31:98:c5:57:c6:c3:
6e:24:d0:dc:73:d8:5d:7b:d0:80:0d:cb:e8:8b:fb:f7:a0:5c:
2a:9f:f4:1e:c1:85:73:8f:7c:cc:eb:15:80:af:fc:9b:f2:e0:
19:98:aa:7b:85:a3:de:c1:b5:8a:44:e6:e8:b6:8d:f0:37:57:
6c:31:15:31:f7:c8:c8:5e:22:a8:fb:48:fb:21:50:2f:10:42:
24:5e:d9:09:ca:fa:d0:bb:9f:bd:ac:84:ab:a4:22:f8:91:44:
c5:ec:37:12:22:2b:e7:b4:1f:3f:c7:cc:c4:89:f4:6a:ae:d7:
cf:35:9e:c6:a9:0c:38:7f:b0:df:d9:35:6a:e7:91:12:7f:02:
54:b0:b4:e8:12:4d:f8:80:f3:6e:49:ce:fc:d6:6c:a8:50:53:
78:df:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:24 2026 by rpki-client