
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3233203d3e203532323636.roa
File: 3230312e3231392e3235322e302f32322d3233203d3e203532323636.roa (raw, json)
Hash identifier: 55Ii0R8zbDWX5rgUtbGyytsZ/O89wI5G31YajDw8+94=
Subject key identifier: 7E:A3:8D:F7:6E:0C:33:7F:88:9F:A9:EE:85:66:F0:F4:D3:E3:0A:67
Certificate issuer: /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial: 1675A98AC52C20832715C7A3F16286F832CA4CAD
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3233203d3e203532323636.roa
Signing time: Tue 15 Sep 2026 13:30:12 +0000
ROA not before: Tue 15 Sep 2026 13:25:12 +0000
ROA not after: Tue 14 Sep 2027 13:30:12 +0000
asID: 52266
IP address blocks: 201.219.252.0/22 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:75:a9:8a:c5:2c:20:83:27:15:c7:a3:f1:62:86:f8:32:ca:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Validity
Not Before: Sep 15 13:25:12 2026 GMT
Not After : Sep 14 13:30:12 2027 GMT
Subject: CN=7EA38DF76E0C337F889FA9EE8566F0F4D3E30A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:8d:cb:8c:a9:db:1c:06:39:5f:21:7e:82:
e3:81:3d:7d:a4:2b:a4:05:46:5f:6e:db:f1:7e:19:
82:5b:d0:2a:b4:83:6f:bc:26:3c:d5:ef:84:61:b9:
4d:b7:53:86:8d:92:ce:58:95:1a:26:e9:28:5a:0f:
f4:88:b1:d1:89:28:b7:32:c1:d6:9c:79:cd:4e:60:
4d:9c:77:d6:0a:04:50:d2:6c:39:24:c3:98:ee:d4:
91:ca:57:c0:68:4f:9b:1a:ca:e1:8f:3f:75:da:de:
c0:d6:58:f5:f0:87:fe:ac:58:8d:20:03:e5:f6:75:
82:f1:70:74:9d:17:2e:ef:d1:04:a1:1a:53:86:4a:
65:85:e7:68:2b:e9:9f:3e:be:b9:f3:e9:b2:08:6f:
f3:d4:ce:91:d1:d3:d5:9c:d8:db:ac:98:4c:af:f2:
67:81:76:2a:a5:41:fb:4a:96:ba:a5:aa:d9:7c:58:
87:41:7d:07:d1:a1:62:68:7a:6e:cc:54:d8:00:85:
84:f9:ab:ff:1c:89:29:2c:45:f5:11:e4:23:b1:93:
93:2f:33:12:5a:58:50:ae:6d:2d:6a:7e:42:e6:ca:
ba:4d:57:23:6a:6f:8c:4a:c6:f3:a2:07:d9:b4:a0:
e2:e1:43:37:31:80:f4:34:aa:1f:a8:c8:c9:85:91:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:8D:F7:6E:0C:33:7F:88:9F:A9:EE:85:66:F0:F4:D3:E3:0A:67
X509v3 Authority Key Identifier:
keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3233203d3e203532323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
09:73:06:a8:f8:d1:45:8c:51:db:d1:a2:41:ef:74:1c:35:4a:
dc:ed:13:9b:a4:03:5e:32:5d:d6:8e:68:78:9c:84:9f:90:2f:
b7:06:9d:a3:75:21:38:a9:10:ce:73:6d:f3:ad:52:94:b6:ab:
b4:9b:25:c3:c9:ad:05:de:1d:e6:39:0d:09:a0:c5:0a:9e:79:
b1:56:55:b9:51:81:d9:50:2f:47:d3:29:ff:21:00:d6:9d:81:
6d:a9:ad:91:70:dd:99:d5:f5:ff:a9:9a:8a:df:86:34:ea:77:
93:35:d4:82:e0:6c:2f:84:69:21:ae:68:7b:5d:98:32:b8:16:
f0:5b:51:f0:6a:ea:01:8f:0b:de:d9:a4:e6:d1:d7:01:89:2b:
3d:ce:ee:d0:d7:be:c4:42:9a:71:30:b9:15:c3:9b:db:df:4f:
6f:78:2b:a1:b0:4a:2a:c6:40:94:bf:16:dd:7b:bf:4e:c0:0d:
9b:76:bf:bd:6e:27:f9:16:b8:ff:bb:4c:1a:0b:fa:27:24:95:
6f:0b:ef:f9:71:61:31:46:6a:d8:02:4e:3f:5b:2c:1b:ad:ea:
a4:f5:bf:60:55:c1:07:f0:79:21:1e:b6:9b:55:9b:60:86:50:
19:59:b8:7c:a0:51:c5:d9:a6:6d:b3:fe:ab:6d:38:71:cc:d9:
53:97:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:06:53 2026 by rpki-client