
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e203532343638.roa
File: 3136372e3235302e33362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: MQlaF2JwShyhZbg36ylqkO9TV+tqnJ1H13OY7VeJaWo=
Subject key identifier: 98:9A:40:2B:AF:29:77:4C:6D:61:05:11:17:C8:A0:EB:D7:1D:43:5D
Certificate issuer: /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial: 46EE97123B6D7B37D6892EB752EB9145D6FFE0A9
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e203532343638.roa
Signing time: Thu 05 Mar 2026 17:32:59 +0000
ROA not before: Thu 05 Mar 2026 17:27:59 +0000
ROA not after: Thu 04 Mar 2027 17:32:59 +0000
asID: 52468
IP address blocks: 167.250.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 14 Mar 2026 20:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ee:97:12:3b:6d:7b:37:d6:89:2e:b7:52:eb:91:45:d6:ff:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Validity
Not Before: Mar 5 17:27:59 2026 GMT
Not After : Mar 4 17:32:59 2027 GMT
Subject: CN=989A402BAF29774C6D61051117C8A0EBD71D435D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:d9:e0:87:69:64:96:60:47:88:81:06:18:
0f:13:ec:2b:bf:92:84:72:c5:35:26:e6:f0:dd:b8:
1a:c4:75:3e:65:5a:c4:7d:40:fd:6c:41:61:bb:7a:
71:ad:96:0b:8e:20:2e:1d:45:4a:de:29:4b:dc:4e:
bc:62:53:a4:c1:47:10:04:ab:ff:f4:b5:e9:31:c5:
dc:c0:51:48:64:d7:26:f0:fe:38:51:a7:cd:93:1e:
49:9c:8b:7b:c0:d2:ed:66:8c:24:0a:d1:3b:98:2a:
c8:85:76:a5:23:5b:6b:83:27:76:73:68:54:3c:9a:
58:bd:4b:de:df:6b:00:de:52:df:d1:d2:d2:e1:53:
5d:f2:da:cd:2e:49:50:de:8d:02:0b:59:e0:96:b5:
58:d4:3a:6f:d4:fd:e2:ee:fa:2d:62:f1:46:fb:26:
d8:07:ae:27:08:71:fc:c9:a4:66:e4:87:0c:ca:ef:
bd:8b:e8:fc:c0:dc:84:f7:f8:a7:a6:57:cc:f8:68:
be:ef:41:7c:76:b5:2d:ad:87:93:ab:5a:ec:25:f5:
cc:c4:dd:c6:a6:e4:58:ae:7f:85:a4:c4:4b:01:14:
ad:dd:c8:e3:bc:cc:05:a5:28:8e:5b:44:6a:95:75:
c3:52:42:22:84:a9:db:de:c0:f0:68:b6:b5:60:83:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9A:40:2B:AF:29:77:4C:6D:61:05:11:17:C8:A0:EB:D7:1D:43:5D
X509v3 Authority Key Identifier:
keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.36.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ea:60:48:0a:07:c5:3b:e8:cc:da:04:8f:c9:26:bd:80:7b:
a7:16:78:a9:5f:3d:1d:10:b4:72:a9:b6:a0:3c:d4:44:76:39:
e5:fd:f6:3b:dd:a5:17:17:a1:1a:13:06:dd:57:4e:c3:87:c2:
0c:76:d2:cf:c4:99:4e:0b:0b:c0:05:9d:d6:39:5c:03:fb:ae:
30:59:16:91:4d:13:b5:e2:ca:14:e9:96:a9:cb:72:70:78:aa:
4d:01:05:4d:f9:bf:13:0e:f4:fc:d8:6f:e6:de:78:a2:da:af:
e1:95:50:0e:c0:b5:fc:b9:c5:09:05:bb:4d:10:a9:ad:dd:6e:
35:0b:8c:00:b4:2f:63:f7:2f:45:24:e0:70:fc:73:e9:5f:ff:
b4:ed:68:a0:05:8b:2d:0f:0e:35:8e:46:a8:9f:fc:81:64:88:
ce:7f:5f:62:ff:1c:65:20:36:a1:a6:2c:8b:ef:64:68:a9:ec:
47:96:b8:09:83:49:02:41:47:4f:0e:e9:54:83:d6:b2:96:f2:
d7:40:e6:45:94:89:2f:13:68:87:08:19:7d:b0:6e:08:b9:2b:
69:35:34:73:e7:77:27:77:76:8a:02:42:3b:e9:75:be:da:fa:
5f:dc:cc:25:72:9c:0e:41:db:88:c1:f1:57:c1:c6:36:dd:47:
7e:16:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:06:24 2026 by rpki-client