
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/3138392e38352e33362e302f32342d3234203d3e20323730313339.roa
File: 3138392e38352e33362e302f32342d3234203d3e20323730313339.roa (raw, json)
Hash identifier: Zb+8O8v61pJK/i4V4Y0RV79r5CDJRq+5LcjgSAHVfJY=
Subject key identifier: F6:01:C0:64:6B:96:07:BB:8D:1A:87:19:9D:B5:50:5F:5D:AB:E0:A6
Certificate issuer: /CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0
Certificate serial: 4F7745D5418CF4D3B7F74E3E8B2C5AF9BF7851DB
Authority key identifier: AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/3138392e38352e33362e302f32342d3234203d3e20323730313339.roa
Signing time: Fri 11 Sep 2026 14:30:00 +0000
ROA not before: Fri 11 Sep 2026 14:25:00 +0000
ROA not after: Fri 10 Sep 2027 14:30:00 +0000
asID: 270139
IP address blocks: 189.85.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl
rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:77:45:d5:41:8c:f4:d3:b7:f7:4e:3e:8b:2c:5a:f9:bf:78:51:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0
Validity
Not Before: Sep 11 14:25:00 2026 GMT
Not After : Sep 10 14:30:00 2027 GMT
Subject: CN=F601C0646B9607BB8D1A87199DB5505F5DABE0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:17:00:dc:e8:2c:82:25:a9:41:59:36:89:
85:02:52:a6:b7:b3:d3:08:c3:3d:50:47:75:e2:ea:
ff:08:94:70:c9:c1:de:51:b0:b0:76:8e:a8:76:84:
c3:30:3d:d0:41:5b:5d:e4:36:2d:68:9c:2c:ab:a2:
05:5e:70:dc:73:13:00:6c:25:51:1f:de:49:d0:1e:
55:d2:b6:e5:1a:a9:a4:c6:20:c8:ae:65:b0:e2:54:
7a:2d:30:c4:cd:3e:bc:dd:54:be:af:84:f9:ab:af:
6e:e6:79:b0:a3:7d:1a:f7:d5:2e:78:65:01:f2:e9:
ec:94:c4:9e:21:ef:d3:7e:6f:51:25:27:fe:e3:4a:
8d:88:37:f3:9b:11:81:af:c7:be:1b:19:63:53:e9:
94:d7:a5:e9:33:b6:ae:db:f1:46:5e:17:ae:05:47:
7e:38:45:27:b3:5d:5a:00:49:cb:2f:4c:0d:5b:a4:
56:0e:06:2a:fd:e0:1d:8d:70:2e:0e:f3:98:f4:bb:
07:62:d6:6d:d9:56:9a:17:51:14:dc:24:44:f9:f4:
c9:0d:07:a1:49:f5:de:14:f1:bc:9c:67:4e:db:de:
c7:23:c8:13:e1:fa:22:de:7d:2f:b3:29:84:b2:42:
20:41:07:fd:6c:5c:1a:b1:d9:74:cc:eb:90:4a:e3:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:01:C0:64:6B:96:07:BB:8D:1A:87:19:9D:B5:50:5F:5D:AB:E0:A6
X509v3 Authority Key Identifier:
keyid:AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/3138392e38352e33362e302f32342d3234203d3e20323730313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.36.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4c:d5:33:b5:75:92:6a:71:9b:89:1f:94:5c:92:90:44:3f:
5f:5a:9a:28:43:18:71:07:32:f4:12:fc:3f:f4:f7:9d:6d:0b:
13:5e:e0:49:df:56:42:96:44:9d:9b:48:cf:45:7e:23:51:71:
49:25:f5:53:38:80:7e:63:3d:ac:42:da:6e:18:be:6c:2a:23:
b0:d8:1c:f2:6b:18:1e:0f:8c:62:0c:52:2e:1c:8a:b0:ac:bd:
88:ff:5d:7a:cb:a9:dc:1d:c9:5c:ba:54:46:a8:45:03:03:87:
9f:00:7b:4c:d5:5a:c9:12:d8:b6:70:69:70:13:01:55:43:09:
0c:31:f4:9f:c7:ee:43:80:a2:b8:2f:4a:9e:2f:c1:5d:e3:7f:
e6:bb:ee:e9:05:d9:ab:79:62:31:9a:be:db:04:46:72:82:86:
de:12:13:d4:6b:b7:56:6e:8d:28:97:5b:d8:f5:f8:81:12:eb:
12:5b:06:ae:7c:48:2a:f3:f7:25:50:b6:00:cb:50:24:a5:63:
29:df:fb:d2:57:d5:35:d3:75:3c:43:22:ca:23:17:79:99:55:
86:3d:ff:06:04:86:c9:0c:f6:96:4a:6b:01:1b:4e:37:47:7c:
47:1e:5f:39:c6:a2:f4:58:f0:f2:be:02:96:d2:53:ac:51:72:
7d:30:03:cd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT3dF1UGM9NO3904+iyxa+b94UdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY5Q0Y4ODJDMDcyNUI5NjEwN0RFMzNCQzVBQ0NEOTlC
RTJERTFCMDAeFw0yNjA5MTExNDI1MDBaFw0yNzA5MTAxNDMwMDBaMDMxMTAvBgNV
BAMTKEY2MDFDMDY0NkI5NjA3QkI4RDFBODcxOTlEQjU1MDVGNURBQkUwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRRcA3OgsgiWpQVk2iYUCUqa3
s9MIwz1QR3Xi6v8IlHDJwd5RsLB2jqh2hMMwPdBBW13kNi1onCyrogVecNxzEwBs
JVEf3knQHlXStuUaqaTGIMiuZbDiVHotMMTNPrzdVL6vhPmrr27mebCjfRr31S54
ZQHy6eyUxJ4h79N+b1ElJ/7jSo2IN/ObEYGvx74bGWNT6ZTXpekztq7b8UZeF64F
R344RSezXVoAScsvTA1bpFYOBir94B2NcC4O85j0uwdi1m3ZVpoXURTcJET59MkN
B6FJ9d4U8bycZ07b3scjyBPh+iLefS+zKYSyQiBBB/1sXBqx2XTM65BK433TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9gHAZGuWB7uNGocZnbVQX12r4KYwHwYDVR0j
BBgwFoAUr5z4gsByW5YQfeM7xazNmb4t4bAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNTkwNzc5QTE5MUYxNjYyNzIzQjM3NTEyMTczMjA2MDI1
NzM4N0Y3QTA2NEMyRTYzQ0ExODgyNTFCQUM3QURBLzAvQUY5Q0Y4ODJDMDcyNUI5
NjEwN0RFMzNCQzVBQ0NEOTlCRTJERTFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjlDRjg4MkMwNzI1Qjk2MTA3
REUzM0JDNUFDQ0Q5OUJFMkRFMUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTU5MDc3OUExOTFGMTY2MjcyM0IzNzUxMjE3MzIwNjAyNTczODdGN0Ew
NjRDMkU2M0NBMTg4MjUxQkFDN0FEQS8wLzMxMzgzOTJlMzgzNTJlMzMzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMxMzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1VJDAN
BgkqhkiG9w0BAQsFAAOCAQEAKEzVM7V1kmpxm4kflFySkEQ/X1qaKEMYcQcy9BL8
P/T3nW0LE17gSd9WQpZEnZtIz0V+I1FxSSX1UziAfmM9rELabhi+bCojsNgc8msY
Hg+MYgxSLhyKsKy9iP9desup3B3JXLpURqhFAwOHnwB7TNVayRLYtnBpcBMBVUMJ
DDH0n8fuQ4CiuC9Kni/BXeN/5rvu6QXZq3liMZq+2wRGcoKG3hIT1Gu3Vm6NKJdb
2PX4gRLrElsGrnxIKvP3JVC2AMtQJKVjKd/70lfVNdN1PEMiyiMXeZlVhj3/BgSG
yQz2lkprARtON0d8Rx5fOcai9Fjw8r4CltJTrFFyfTADzQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:32 2026 by rpki-client