
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
File: 3137302e38342e3137322e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier: VpzZQstYmiD+Majy6ROLC0UGt/M4GNHh0rXmJLvP0y0=
Subject key identifier: DF:1C:9C:37:17:F0:60:49:77:91:AE:36:74:55:D1:66:30:A9:B6:EC
Certificate issuer: /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial: 2D3F78399BC61ED3D5FDF0A6CDB719E389AC6893
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
Signing time: Thu 05 Mar 2026 17:32:58 +0000
ROA not before: Thu 05 Mar 2026 17:27:58 +0000
ROA not after: Thu 04 Mar 2027 17:32:58 +0000
asID: 61512
IP address blocks: 170.84.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 14 Mar 2026 20:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3f:78:39:9b:c6:1e:d3:d5:fd:f0:a6:cd:b7:19:e3:89:ac:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Validity
Not Before: Mar 5 17:27:58 2026 GMT
Not After : Mar 4 17:32:58 2027 GMT
Subject: CN=DF1C9C3717F060497791AE367455D16630A9B6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:44:23:34:3f:e5:7e:eb:e0:0b:50:df:01:
15:93:30:5e:6a:ef:78:8b:4f:97:6a:95:59:bf:54:
95:cd:08:82:b8:38:88:63:0c:c4:e0:fa:90:6a:ff:
5f:31:8f:be:af:f8:5e:a9:66:f9:49:fb:c1:74:58:
48:2e:0b:b7:76:5e:bb:25:6b:12:66:f0:60:d7:f6:
f5:30:de:af:50:3f:40:51:9d:77:e1:4a:70:63:3e:
9f:91:e1:2e:df:69:77:0d:ad:be:d9:15:ca:c2:d3:
27:86:43:45:a8:cf:50:7b:43:05:a8:d4:5f:28:1c:
aa:43:f6:44:01:98:84:43:b3:b3:8b:4f:26:1f:1c:
ad:6a:89:ef:3a:97:8b:0d:96:68:4d:e1:ef:d4:0c:
25:91:f3:d6:41:0f:1d:25:b5:7e:52:f0:70:30:96:
0b:35:9f:f4:f1:a8:e0:12:9c:34:62:cf:1a:38:0a:
40:5a:ab:29:1a:4d:3e:8f:b9:65:fe:ed:1d:dc:9c:
65:64:15:6a:ba:2b:b4:21:3e:5b:90:62:e5:8e:b0:
8b:37:96:e4:5b:a9:b1:50:bc:b5:c8:1d:f8:ec:17:
5f:93:ac:5c:f9:8c:a6:7a:8a:ae:9f:ca:ce:09:52:
69:d2:52:bd:e5:7b:70:e2:cf:22:88:8d:bc:99:e2:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:9C:37:17:F0:60:49:77:91:AE:36:74:55:D1:66:30:A9:B6:EC
X509v3 Authority Key Identifier:
keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:1b:ae:f7:ff:13:f3:e1:4b:25:d2:47:5b:47:6b:37:e7:ab:
54:7d:d5:a6:75:1b:f5:0d:d8:47:d2:45:fb:73:72:de:5d:02:
2c:c2:49:d9:b7:19:bc:9c:3e:9a:70:9c:e5:98:69:d5:f9:e6:
d7:bc:dc:34:a6:9c:4c:5c:37:4e:4b:bd:d0:b8:0e:e6:98:a5:
44:e6:8d:13:75:03:5f:53:a8:60:75:17:a4:23:5c:eb:52:0e:
25:00:ec:fb:9d:21:b8:e4:3f:93:c5:db:f1:ba:45:ee:b0:14:
5f:1c:ab:6b:37:2e:bd:2d:30:c0:d1:71:fc:a4:7a:1a:58:29:
0d:1e:10:2a:bc:d5:35:5d:19:03:d4:9f:0f:5d:cb:f0:0c:70:
33:21:6a:56:12:8a:0a:ab:fb:76:01:47:4d:16:60:92:98:65:
e2:ef:24:98:e0:54:14:01:67:c1:d4:44:8e:35:53:77:01:7b:
55:68:f8:47:18:03:85:c4:6f:da:a7:ec:73:4d:6e:ae:d0:99:
26:ee:3e:aa:b3:83:e2:bf:9e:f3:4b:74:c1:de:36:9b:b0:64:
91:76:81:5f:16:3c:d7:68:29:12:3c:16:59:00:80:0c:4e:6c:
70:7d:84:ff:26:f8:a2:26:96:6c:fe:c8:98:90:01:7d:4f:27:
43:10:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:02:59 2026 by rpki-client