
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/3230382e38382e36382e302f32342d3234203d3e203238343539.roa
File: 3230382e38382e36382e302f32342d3234203d3e203238343539.roa (raw, json)
Hash identifier: L4OwFLhJM14iQSwXw2BO01+WRLTwMRV1lCAJfK1Ur+w=
Subject key identifier: B6:4B:7D:67:CA:25:26:4C:F4:32:95:3A:54:85:B1:57:43:5B:E4:82
Certificate issuer: /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial: 21AFE362BFBF4F38FF49A59A5138C52A0DB89AAC
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/3230382e38382e36382e302f32342d3234203d3e203238343539.roa
Signing time: Tue 03 Mar 2026 15:55:00 +0000
ROA not before: Tue 03 Mar 2026 15:50:00 +0000
ROA not after: Tue 02 Mar 2027 15:55:00 +0000
asID: 28459
IP address blocks: 208.88.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 18 Mar 2026 04:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:e3:62:bf:bf:4f:38:ff:49:a5:9a:51:38:c5:2a:0d:b8:9a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Validity
Not Before: Mar 3 15:50:00 2026 GMT
Not After : Mar 2 15:55:00 2027 GMT
Subject: CN=B64B7D67CA25264CF432953A5485B157435BE482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:c1:ab:0d:41:b0:01:e9:32:84:35:a3:db:
51:ee:48:cb:70:2c:2e:b4:e4:c6:e3:85:4d:e3:66:
5b:fb:f3:82:5f:54:9f:b6:09:d8:11:41:ae:8a:9e:
f9:28:1b:80:5b:b3:51:5e:6c:68:4d:84:1d:ea:b5:
4c:02:1f:a5:52:6f:e5:12:36:59:3a:d0:1d:cb:bd:
89:f0:bb:e4:1c:85:40:6c:af:a6:aa:19:73:c0:f8:
7d:6e:8f:5e:04:7a:9e:d1:f4:d3:3a:07:af:43:4d:
e9:25:42:f8:38:b8:ed:10:7e:a8:c5:7c:4c:d6:21:
33:ea:f1:99:89:e5:2a:22:18:7e:b1:d5:52:9e:85:
d4:1c:1b:97:1b:dd:5d:45:e8:16:2a:05:4e:c7:75:
a7:18:4d:64:09:94:2c:d1:61:6c:59:92:e8:4b:ff:
08:73:86:d6:be:75:f5:b8:13:bc:7f:d9:36:73:a8:
71:3f:96:9c:be:a0:83:75:54:8b:a1:07:55:12:3a:
72:63:cb:70:58:50:61:e9:42:be:c5:95:b0:73:a0:
5b:d3:ea:8b:dc:3c:25:b8:31:fe:9b:f9:92:7a:69:
14:c5:ed:3e:94:41:98:79:f2:df:1d:15:34:59:4a:
2d:df:2d:f7:ee:cb:39:9f:28:a1:d7:73:82:91:68:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:7D:67:CA:25:26:4C:F4:32:95:3A:54:85:B1:57:43:5B:E4:82
X509v3 Authority Key Identifier:
keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/3230382e38382e36382e302f32342d3234203d3e203238343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.88.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a7:b9:8b:1c:c7:6b:33:d9:0e:68:48:e2:26:b2:66:63:db:
6f:83:b3:da:6f:53:10:72:d8:c2:14:21:1a:af:cf:3c:1e:67:
30:78:c4:c2:83:16:e0:bb:c1:a3:76:9d:82:01:c8:38:d5:ce:
bf:de:0c:36:43:38:62:d6:3a:01:02:6c:ba:12:3d:00:cd:f0:
7d:92:40:ed:b4:cc:fa:37:0c:10:fc:a3:a3:fb:8f:8c:22:15:
0a:67:3d:a4:8f:d7:c8:80:51:34:ed:73:fd:6d:ed:7d:5c:4c:
a5:9a:92:6c:5a:eb:4c:fe:14:e9:57:03:4b:69:6f:f7:90:51:
0c:76:5e:64:39:16:0e:f2:4a:b6:9b:43:8a:b1:c9:d5:07:b0:
19:95:a3:07:92:eb:01:fb:1d:1f:d1:db:a3:5b:14:4c:bf:6e:
53:b5:14:60:69:c4:3a:c1:9b:b3:bd:c4:17:fd:65:e6:fb:44:
e2:16:43:8e:9a:af:fe:99:d6:2b:32:11:c4:82:0a:b5:0b:e8:
2e:f9:d5:51:60:a9:d8:28:c7:1b:3c:50:0e:79:3e:90:c7:6e:
4a:5d:9a:22:65:b1:f0:6f:81:c6:bb:b0:b4:98:3f:8e:11:6d:
07:ef:f6:a8:d6:31:1f:33:2e:37:ed:c4:94:8c:ff:c1:1a:f2:
0b:a7:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:37:01 2026 by rpki-client