
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
File: 3137302e38342e3137322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: glddoY8kxttMv7FWfjo9Yc9CoubEo+n3aRfojUc4Qs0=
Subject key identifier: 1C:5A:FE:B0:D5:0F:A8:CF:14:75:DE:C7:96:60:32:A2:F0:0E:8D:F8
Certificate issuer: /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial: 5A85A30889546AC7BCE97C7D4B721C9F15C2D028
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
Signing time: Thu 05 Mar 2026 17:32:57 +0000
ROA not before: Thu 05 Mar 2026 17:27:57 +0000
ROA not after: Thu 04 Mar 2027 17:32:57 +0000
asID: 52468
IP address blocks: 170.84.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 14 Mar 2026 20:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:85:a3:08:89:54:6a:c7:bc:e9:7c:7d:4b:72:1c:9f:15:c2:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Validity
Not Before: Mar 5 17:27:57 2026 GMT
Not After : Mar 4 17:32:57 2027 GMT
Subject: CN=1C5AFEB0D50FA8CF1475DEC7966032A2F00E8DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:0b:1d:11:b3:ad:1d:98:f8:5b:16:59:70:
88:82:9e:22:24:3a:13:f5:54:5e:d4:f5:26:bd:65:
7a:0f:ef:26:79:d0:85:55:4b:1a:4d:51:58:41:26:
57:bc:4e:f3:29:a8:8f:bc:ab:59:22:c9:57:89:72:
57:54:41:1e:ab:e4:ca:a7:30:a0:34:59:34:be:0d:
e5:c0:aa:4e:cf:1d:39:29:aa:fd:ed:e4:14:9d:0c:
cc:5d:23:23:45:e2:14:7b:bb:a8:2f:66:24:21:18:
11:0f:ba:9e:08:05:69:86:bb:9b:1a:d8:e9:b3:60:
18:65:dd:4b:75:d5:7d:39:34:03:bc:fc:ca:25:f7:
6a:80:c6:55:9d:cf:40:e4:9a:5e:6f:4f:a6:c6:9d:
a8:12:f2:4e:cc:92:d6:75:76:90:80:e6:f0:63:fd:
20:ee:2f:a3:7a:db:93:c0:3c:fc:df:74:bf:aa:92:
bf:80:0b:49:8d:e0:59:bf:a6:83:c5:fa:8f:4a:d3:
c8:b6:61:81:e3:a5:ca:ae:98:db:b6:c3:06:e5:a6:
64:97:03:5b:75:b1:49:25:d0:35:04:d9:95:7c:41:
98:c3:f2:69:a3:d4:69:c1:a2:ed:34:37:39:ed:d1:
1d:c0:1b:b7:1d:6d:c9:1f:11:ec:a9:c4:ac:f0:f4:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:FE:B0:D5:0F:A8:CF:14:75:DE:C7:96:60:32:A2:F0:0E:8D:F8
X509v3 Authority Key Identifier:
keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:54:fc:95:79:3f:ea:b7:d4:c7:20:ee:eb:a5:d3:0e:0f:18:
b4:ed:9b:4b:7c:e4:49:d4:a4:65:0c:92:53:14:74:9a:73:5b:
9c:c6:bd:cc:5b:4b:64:de:a2:e7:31:98:ff:b4:39:a1:f7:f1:
f2:88:b7:a8:59:7c:ee:55:2c:2c:9e:02:75:cb:a9:5c:a3:4e:
59:2f:4a:3d:08:9b:18:30:7b:be:bf:b4:c9:0f:ad:05:0c:23:
5b:48:04:5e:a0:52:46:ed:6a:94:b1:02:bd:cc:63:36:f6:75:
da:1a:94:fc:6f:ad:62:bb:59:e2:3d:24:8d:49:af:f9:2b:50:
db:4e:d7:5f:f3:fd:fe:23:15:65:d0:4a:c0:dc:30:11:a5:d8:
ff:14:3f:1c:42:a5:57:6b:d0:7c:e3:6e:dc:4a:87:3b:7d:50:
ee:eb:31:fb:59:51:54:80:cb:75:eb:a7:9f:05:ba:64:7f:d7:
63:ec:de:38:38:d4:c5:09:eb:ca:d4:e3:34:b5:ef:c9:45:ba:
ae:db:02:1c:9a:08:c9:28:70:4e:2a:82:24:a2:d8:8a:c8:ef:
7e:b6:a1:6c:79:6b:db:f4:6a:af:2f:bb:c2:e9:d8:08:9b:66:
f6:33:ff:de:f4:ba:60:c1:8c:b8:8f:cd:60:43:7d:53:92:a4:
8e:5e:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:06:24 2026 by rpki-client