
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234302e302f32302d3234203d3e203238303336.roa
File: 3139302e3134332e3234302e302f32302d3234203d3e203238303336.roa (raw, json)
Hash identifier: ogHI2MPjQxlNCr/qSlbGiRhQYeWHiC2vDqH+CXdf7XA=
Subject key identifier: 8E:8E:99:DD:E0:AB:7C:AB:B4:B3:F8:95:DD:8E:D5:27:37:39:5B:48
Certificate issuer: /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial: 1BB87028190E2A1A1E0D705CD5D8DD52CDB7158D
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234302e302f32302d3234203d3e203238303336.roa
Signing time: Wed 21 Oct 2026 18:42:14 +0000
ROA not before: Wed 21 Oct 2026 18:37:14 +0000
ROA not after: Wed 20 Oct 2027 18:42:14 +0000
asID: 28036
IP address blocks: 190.143.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b8:70:28:19:0e:2a:1a:1e:0d:70:5c:d5:d8:dd:52:cd:b7:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Validity
Not Before: Oct 21 18:37:14 2026 GMT
Not After : Oct 20 18:42:14 2027 GMT
Subject: CN=8E8E99DDE0AB7CABB4B3F895DD8ED52737395B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:88:48:1c:fa:1a:d9:15:da:d3:b6:17:50:
87:c4:65:56:c6:90:44:e0:7e:04:4d:8c:e7:e6:d3:
72:bb:f2:de:52:b2:b0:40:e3:11:ee:1e:5b:c6:5a:
f5:41:e6:6b:23:d2:ac:2c:62:08:3b:23:2f:b0:89:
45:95:8b:e9:2f:3f:6d:79:e9:e2:c9:94:ba:cf:ba:
56:e8:74:2f:c1:bb:f5:38:a0:9c:61:02:6c:35:05:
b4:41:98:5f:50:a2:84:17:ba:3a:96:da:0c:e8:ba:
c5:6e:a2:03:42:10:6d:b3:0a:ee:b2:54:93:17:5c:
20:a9:2b:3a:72:89:8c:97:d0:55:9c:20:d4:58:47:
8a:ff:e5:5b:87:f7:31:ab:4a:b2:88:4d:81:2a:4c:
21:e4:45:23:d8:d4:9e:ff:2f:61:0e:64:69:68:c0:
c4:3d:c2:ca:37:30:2b:f5:f0:05:32:3a:87:a0:cc:
86:25:87:85:69:3e:1f:0a:c6:67:3e:1d:82:e0:79:
54:d6:22:77:71:2d:e3:6d:69:bf:da:78:4e:56:9a:
ab:c3:e9:f1:c6:69:9a:71:be:e9:90:ed:b9:56:2c:
93:c0:33:f4:d9:50:a6:7c:71:d2:7d:44:34:84:9a:
c8:ab:3d:7b:ca:9e:ae:9b:54:6b:35:a3:78:45:4a:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:99:DD:E0:AB:7C:AB:B4:B3:F8:95:DD:8E:D5:27:37:39:5B:48
X509v3 Authority Key Identifier:
keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234302e302f32302d3234203d3e203238303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.240.0/20
Signature Algorithm: sha256WithRSAEncryption
22:84:b1:8b:2e:1b:42:04:de:a9:cd:e8:1a:57:7a:22:3f:a2:
10:c8:bd:f7:fc:5a:cb:4e:02:e0:f1:69:3d:24:55:af:31:36:
2a:64:ad:6e:b0:91:13:f4:78:17:f5:1e:b6:a8:95:44:83:70:
94:18:1c:d4:42:7e:38:d7:f8:f1:2b:36:d4:b1:3d:5c:97:f2:
74:31:0e:fd:5f:a8:00:ac:b4:8c:48:d5:e8:00:da:6c:88:64:
8f:19:ac:8c:31:75:74:85:fc:dc:0d:c9:6c:52:3f:65:39:5a:
b7:1a:22:68:0f:73:12:a0:20:8d:fe:d5:f6:53:7e:aa:f1:50:
45:08:9a:47:20:79:f9:7b:56:4e:24:7f:9e:6c:52:d3:4e:94:
5e:10:07:39:33:33:1e:c5:ac:a2:7a:41:3e:29:82:33:05:cb:
01:0d:65:4d:75:c5:7c:31:d0:cb:41:fe:78:ba:a8:b5:04:cf:
65:e1:4f:26:78:ba:2b:e0:13:66:32:9a:fb:70:f9:f8:08:6c:
a3:d0:30:91:be:77:a0:c6:c0:db:54:0d:af:9f:0f:82:30:5d:
bf:3f:eb:49:f4:2f:4c:94:88:b5:81:7e:5a:f7:75:f2:31:e2:
0b:9f:01:c4:a9:bb:6a:cb:cb:1a:ae:c7:1f:6e:32:ef:35:1a:
9f:cb:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:53:55 2026 by rpki-client