
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa
File: 3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier: e7m2I4zGMiSSZlb3Rgr0tedUDBB2kV3KDivdaYDL7+0=
Subject key identifier: D5:55:F0:C1:4D:16:02:E0:34:51:F0:E5:F4:7C:D5:0A:7F:3F:2D:1B
Certificate issuer: /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial: 601A212B09266C5C617F13D8E33F6D3FA3426AE4
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa
Signing time: Tue 15 Sep 2026 13:30:07 +0000
ROA not before: Tue 15 Sep 2026 13:25:07 +0000
ROA not after: Tue 14 Sep 2027 13:30:07 +0000
asID: 52266
IP address blocks: 201.219.252.0/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1a:21:2b:09:26:6c:5c:61:7f:13:d8:e3:3f:6d:3f:a3:42:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Validity
Not Before: Sep 15 13:25:07 2026 GMT
Not After : Sep 14 13:30:07 2027 GMT
Subject: CN=D555F0C14D1602E03451F0E5F47CD50A7F3F2D1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:50:37:a3:6a:f9:b7:4f:df:83:1e:d5:d7:
b0:ba:53:e4:5f:a6:b1:e5:c7:ca:5b:6d:2a:c4:9f:
10:29:d1:56:5f:0b:99:59:f7:d1:e0:32:61:30:77:
23:56:9c:d6:47:95:27:14:a8:cd:6f:af:4e:a3:ca:
18:1a:dc:db:ac:f5:62:a0:8a:e3:be:f3:c7:8a:49:
13:16:bf:7f:b7:0f:69:87:9c:3f:54:63:27:91:80:
4f:27:14:31:4f:85:82:28:be:bd:bc:c0:49:d1:87:
de:cb:f3:96:e5:17:df:3b:84:0d:79:fd:91:36:56:
d9:22:27:fc:4a:7e:c7:58:7d:82:30:f6:2a:d8:a9:
7a:23:c1:28:47:94:59:89:23:64:14:44:d4:e4:9a:
90:15:c5:9c:4f:ee:7b:62:7b:32:d9:7b:76:45:80:
af:f2:29:3c:15:9a:88:c9:8c:55:b7:61:30:1b:a1:
b1:7b:35:ea:cc:52:05:e1:73:5d:43:d4:33:63:2f:
62:20:c3:e0:69:c8:3c:2a:03:9e:1b:d6:de:75:05:
bd:94:70:cf:83:e1:d1:17:31:26:96:8f:9d:e1:db:
4a:ca:a3:e1:5d:7e:aa:d4:8c:2b:7c:2f:2d:07:62:
b0:24:56:54:4d:c7:1c:73:3a:7e:0a:0b:e2:00:1d:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:F0:C1:4D:16:02:E0:34:51:F0:E5:F4:7C:D5:0A:7F:3F:2D:1B
X509v3 Authority Key Identifier:
keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/32
Signature Algorithm: sha256WithRSAEncryption
b5:09:a1:72:6a:4e:0e:2a:f4:d8:81:29:47:85:61:45:5d:31:
21:29:03:ee:f9:af:9a:a8:96:6e:e6:93:6c:1a:ea:fb:bd:b8:
3a:8a:4c:e0:6b:cd:8e:01:4e:46:05:ef:5f:31:42:4c:3c:56:
ab:93:a0:7c:97:4d:4c:98:e0:02:91:4c:ef:b4:16:8e:c9:9a:
6f:90:09:bf:7d:05:3a:4c:fc:cd:8b:09:31:e9:f5:bb:e5:46:
c2:97:63:eb:63:f1:17:85:9a:cd:ad:85:dc:20:8d:c5:fe:5a:
f6:e7:d6:73:fb:d9:7c:cc:c1:b5:c4:13:4d:33:e2:a8:73:fd:
68:5c:6b:fc:b8:39:3f:f8:bc:d5:e5:a3:db:92:b3:ee:39:8a:
7e:7d:d4:5e:cc:64:b1:fb:22:f9:58:0b:7b:cc:99:64:00:49:
48:57:24:91:58:fc:17:b5:97:df:f0:e0:1e:6c:33:c0:31:1f:
bb:df:af:1d:16:75:0d:66:8b:16:28:7b:dc:ba:67:dd:21:9a:
74:7e:82:12:ef:66:ad:e5:28:9d:47:a7:f0:e9:38:ae:e7:f0:
96:30:43:d8:85:d0:b0:f0:c0:ff:4d:b5:29:47:c2:e1:c9:78:
22:47:90:11:0e:ac:a6:d6:fc:72:74:24:95:75:ef:97:b1:c6:
98:d7:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:07:24 2026 by rpki-client