
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e20323732303237.roa
File: 3137302e38342e3233342e302f32342d3234203d3e20323732303237.roa (raw, json)
Hash identifier: KqoH5UqkDGlmBYJPmyXQ6wZNwqCHGq8spnjZG2CvQLo=
Subject key identifier: 99:64:9A:0A:D6:F3:AD:15:A9:C8:B1:25:87:3A:54:B6:43:60:AE:C2
Certificate issuer: /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Certificate serial: 1D16154DB5CA6127826064662450636B692A5E6E
Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e20323732303237.roa
Signing time: Tue 31 Mar 2026 10:10:00 +0000
ROA not before: Tue 31 Mar 2026 10:05:00 +0000
ROA not after: Tue 30 Mar 2027 10:10:00 +0000
asID: 272027
IP address blocks: 170.84.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 22:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:16:15:4d:b5:ca:61:27:82:60:64:66:24:50:63:6b:69:2a:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Validity
Not Before: Mar 31 10:05:00 2026 GMT
Not After : Mar 30 10:10:00 2027 GMT
Subject: CN=99649A0AD6F3AD15A9C8B125873A54B64360AEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:76:ff:4e:45:9c:72:67:47:19:63:2e:0d:e9:
15:59:19:ee:a8:ba:f1:60:b1:4f:4c:de:9f:85:78:
95:03:8f:5b:38:5e:a2:de:14:0c:71:93:76:77:b9:
29:d4:4d:6d:30:6a:cd:35:63:35:2f:3d:c6:59:d3:
6f:f0:b5:bb:87:ee:37:50:1b:dc:1e:26:e8:32:a1:
5b:b6:f1:eb:8c:e1:76:41:27:9b:8e:cc:a7:35:c5:
24:d5:f2:07:58:33:f5:a3:ea:4b:21:fc:59:91:18:
e4:22:64:57:95:77:af:7b:e3:19:64:91:aa:6e:89:
8b:c8:1e:8a:5e:78:38:c9:d0:22:b3:eb:df:f1:66:
a0:3b:89:7e:6b:7a:11:e6:7a:77:54:71:00:b8:f7:
b2:99:bd:33:90:81:31:71:28:89:56:6a:53:f3:e3:
da:7f:23:f6:04:3e:9c:1d:33:f0:44:4e:16:1e:14:
2d:18:7d:52:d3:20:b1:4b:12:49:b5:30:80:46:be:
9b:1a:9b:78:ff:fa:b1:43:e6:21:19:19:19:99:64:
6c:f9:04:01:d7:ab:e3:64:db:f9:d1:7c:b6:ae:8e:
fb:a7:ce:b9:ae:86:4b:d4:6a:2a:01:9a:c1:94:31:
23:90:a8:08:9a:1a:5a:0b:15:f5:db:c2:06:41:ab:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:9A:0A:D6:F3:AD:15:A9:C8:B1:25:87:3A:54:B6:43:60:AE:C2
X509v3 Authority Key Identifier:
keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e20323732303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.234.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f2:29:4d:bb:a4:f3:7c:17:2b:e2:41:4c:88:00:e2:95:fe:
db:50:4a:d5:60:fa:9c:09:3b:15:8e:25:91:45:ef:c8:a3:d6:
f1:98:9e:20:46:be:03:1b:3d:4e:c5:ad:0c:60:63:f0:fd:f4:
f8:f6:a1:3e:74:0b:cd:92:91:60:19:10:93:8c:0c:92:6a:4d:
77:75:5d:cd:a5:b0:11:56:76:dd:e1:53:eb:bf:d1:ea:fe:86:
44:bc:49:33:60:0a:71:71:72:b6:cb:22:7d:b3:d2:77:cf:50:
b9:61:02:28:ef:d5:c0:a0:98:a4:72:29:14:ee:12:34:7b:26:
7d:cd:c2:ad:6e:48:71:04:23:52:c4:3f:75:04:58:36:8e:1f:
ff:52:8d:bd:08:f1:6e:d9:18:bf:f1:36:06:b8:ce:92:81:ca:
81:63:48:eb:d3:83:cd:6f:77:91:f7:30:19:e8:7e:aa:52:8a:
dc:5d:3f:66:7a:46:2c:38:98:80:4e:47:f8:73:58:f5:e4:d0:
86:a1:cd:59:0c:5a:fc:a7:90:6d:4a:d3:91:b2:d6:85:bc:df:
db:13:1c:ba:12:58:f9:a0:a1:a4:90:d6:d1:34:d8:fe:dc:91:
c4:f7:19:2b:48:1b:c2:b6:08:84:f2:66:a8:21:05:a1:93:97:
86:23:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:04:52 2026 by rpki-client