
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa
File: 34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa (raw, json)
Hash identifier: EuTwyuRwxqoE94+WJ7D7PHbX3BAQ6sXkCVdaMMvxTy4=
Subject key identifier: 0B:1D:84:90:D8:4A:2E:8A:D8:B3:0A:17:03:A3:C7:EF:23:CE:AD:38
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 65F57E4FD33FED5FF77404D22C748EED1016C66C
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa
Signing time: Mon 24 Aug 2026 20:15:00 +0000
ROA not before: Mon 24 Aug 2026 20:10:00 +0000
ROA not after: Mon 23 Aug 2027 20:15:00 +0000
asID: 267823
IP address blocks: 45.172.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 04 Sep 2026 19:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f5:7e:4f:d3:3f:ed:5f:f7:74:04:d2:2c:74:8e:ed:10:16:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Aug 24 20:10:00 2026 GMT
Not After : Aug 23 20:15:00 2027 GMT
Subject: CN=0B1D8490D84A2E8AD8B30A1703A3C7EF23CEAD38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:c4:a2:a0:1b:83:41:ea:9e:75:11:cd:27:
91:a5:fb:45:1d:81:72:fd:05:9d:f8:8a:bf:d1:ae:
a3:3e:b4:ef:45:41:6c:5c:3a:29:d8:29:c0:6e:7c:
85:eb:b3:be:f0:cc:15:5a:4d:3d:f0:68:1f:95:c4:
4b:26:4d:93:38:9a:8a:06:09:7d:45:68:05:ed:c7:
90:17:9c:be:2a:99:35:50:8d:fa:34:e2:ff:b8:a0:
73:c7:fe:a7:1d:7b:64:47:56:2d:28:77:66:fc:27:
75:9f:83:22:ed:a4:71:10:07:cf:cd:df:6c:66:e2:
55:42:76:60:d5:a6:0a:5d:f2:69:33:5a:b4:c7:1a:
a1:b8:c8:ef:aa:12:29:58:a4:bf:4f:7a:6e:f9:2f:
cd:25:6a:5c:15:92:b4:d6:eb:92:69:a9:8b:5a:6d:
16:c9:3b:dd:25:48:9d:ca:3a:da:b9:cc:67:97:8f:
e7:c0:00:67:5a:85:70:5b:45:5a:08:17:b7:13:07:
97:47:49:fe:56:44:70:33:b4:bf:ec:1b:3e:7b:c1:
38:cf:f3:0a:8a:b7:d0:f7:5b:fc:53:56:4e:f4:52:
79:c0:11:fb:2d:65:67:1f:da:c9:4f:49:00:27:d4:
a0:77:06:80:00:d9:24:7b:9b:0a:7b:dd:c0:ba:c2:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1D:84:90:D8:4A:2E:8A:D8:B3:0A:17:03:A3:C7:EF:23:CE:AD:38
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:51:bc:f2:32:b3:1b:c8:5b:60:19:4a:c2:36:8d:49:24:7c:
be:89:94:d3:8d:7f:d0:08:bb:3a:5b:95:ed:9f:81:74:9a:2f:
15:83:fd:48:1f:e6:5b:d2:01:82:f2:25:69:0f:0b:0d:c9:93:
19:f1:b5:38:78:1c:d7:53:f2:ce:f2:fc:4a:54:f9:0c:b8:2a:
34:58:cc:7d:10:88:22:c3:d1:00:5f:c5:72:df:58:4f:04:83:
5b:e8:a9:96:cd:36:d0:3a:00:2b:be:63:89:ac:5f:4a:49:18:
c1:1c:e8:80:36:70:bb:a6:04:48:e7:5e:f8:e4:1f:e9:23:d5:
8f:27:f2:82:80:ad:03:fb:53:93:80:77:14:38:66:ec:9d:67:
fc:7b:c0:5e:90:3c:8e:b1:73:18:c2:e1:96:0a:92:ed:31:f8:
9c:7e:66:74:99:d5:3f:d1:88:d1:9d:70:6e:4c:dc:39:1d:c1:
64:78:c9:d6:c7:d4:8b:9f:1e:d8:4f:38:e6:1a:8d:2b:8b:4b:
f4:36:2a:3c:75:29:8f:ee:ea:27:b4:80:d2:91:b9:2d:31:63:
17:f4:db:82:b6:a2:92:25:2d:c8:94:a7:61:8b:73:31:de:52:
6e:17:8e:9d:03:bf:b3:fa:50:d2:fa:70:49:4b:76:97:2d:2e:
6f:9f:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:25 2026 by rpki-client