
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e203532343638.roa
File: 34352e3233392e34342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: bFn7jBbuYEjsKRYlOCLP6LKFYp5OYiRm1SjQuvGMGO0=
Subject key identifier: C1:87:9B:70:91:58:AD:4D:5E:33:D2:7F:72:0E:2C:41:BE:75:AC:5A
Certificate issuer: /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial: 619C981C5107142ABC4242421C0B26BD0F8264CE
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e203532343638.roa
Signing time: Thu 05 Mar 2026 17:32:53 +0000
ROA not before: Thu 05 Mar 2026 17:27:53 +0000
ROA not after: Thu 04 Mar 2027 17:32:53 +0000
asID: 52468
IP address blocks: 45.239.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 24 Mar 2026 00:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9c:98:1c:51:07:14:2a:bc:42:42:42:1c:0b:26:bd:0f:82:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Validity
Not Before: Mar 5 17:27:53 2026 GMT
Not After : Mar 4 17:32:53 2027 GMT
Subject: CN=C1879B709158AD4D5E33D27F720E2C41BE75AC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:a0:da:8e:01:a8:98:c8:1a:e4:e4:be:79:
2e:b1:25:9a:26:63:e7:5e:d6:aa:12:eb:f7:0b:79:
ac:98:61:e0:2a:79:54:6c:af:15:d4:e3:b8:42:87:
42:ce:ca:9f:bf:96:86:07:ca:d3:75:7d:17:54:6e:
51:91:9b:e6:b3:89:d2:c3:ae:e9:52:8d:27:df:72:
66:40:88:15:fa:76:a6:b0:42:05:a9:3b:50:50:68:
d6:1e:ba:1c:29:83:35:54:0d:ec:13:44:84:92:ba:
88:64:6a:b4:2a:b7:75:4f:b0:99:8a:b1:6c:d4:6d:
20:55:4d:19:23:8b:03:d7:9a:7d:5c:6e:6b:03:16:
bf:fa:fd:fd:55:48:f7:0c:bb:4b:44:7e:35:1b:1c:
ff:64:9b:37:9a:0c:54:f8:f2:0d:3f:c2:67:a7:30:
2e:65:27:d7:a7:73:ef:27:e8:f2:67:ad:da:7e:ac:
3a:d8:d6:c0:12:f6:bc:28:0e:64:56:d6:94:28:fc:
eb:e6:38:cf:4b:c1:fc:ab:e5:50:c9:96:50:77:f9:
ec:19:80:81:d6:d9:aa:19:0b:47:89:dd:f4:a8:59:
6d:9d:08:63:e1:c4:5b:24:2f:20:81:65:17:1f:55:
6a:01:25:c3:0b:15:9d:b7:4f:49:67:41:d1:21:bb:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:9B:70:91:58:AD:4D:5E:33:D2:7F:72:0E:2C:41:BE:75:AC:5A
X509v3 Authority Key Identifier:
keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
24:de:89:5c:1a:53:cb:2d:2f:bb:3a:46:b7:4a:e6:c1:c8:3a:
a8:27:ec:22:73:14:61:6d:76:ac:42:a2:8e:60:4e:7f:6e:4b:
36:06:0f:24:10:0a:de:ff:61:48:9b:c2:e8:a1:1f:c6:b0:54:
54:a0:cd:79:e3:23:11:41:d2:e8:cd:2e:2f:6f:ce:b3:e4:15:
83:c5:ff:f7:f8:58:6a:70:3e:85:7d:3b:7b:b0:b5:63:22:92:
c9:00:00:14:66:5f:34:b1:9e:51:a3:cc:49:65:74:e3:d5:fb:
7d:ee:06:99:d7:5d:22:82:08:8b:cb:14:0a:51:e3:48:27:75:
0d:23:c2:2d:89:89:79:06:8b:80:d8:31:fc:52:0d:d0:85:38:
a2:9e:ac:4b:c4:28:af:e6:41:89:ca:85:d1:fb:83:9c:7e:b6:
49:07:97:aa:2f:28:04:79:4b:3b:7b:63:06:2c:87:c1:72:cf:
37:f2:5e:80:a6:18:b7:bc:65:4a:d2:d7:4e:d6:61:37:f2:68:
91:36:13:70:c7:57:f8:c8:16:8a:f2:e4:4b:01:f5:88:e4:7d:
74:ef:2a:ea:71:e5:f5:62:35:e6:f6:50:66:9b:59:40:53:df:
8e:8d:9d:75:4f:01:3c:aa:2c:52:f9:73:9f:79:a7:96:7a:ce:
86:c3:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 20:15:44 2026 by rpki-client