
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3234203d3e2036393339.roa
File: 3133382e33362e31362e302f32322d3234203d3e2036393339.roa (raw, json)
Hash identifier: bcc+tYnlOLe0mrovC6A9RPQNdv6TWiqCdg/Hzs2MAys=
Subject key identifier: F9:FC:BF:0A:67:3C:3B:64:CB:57:0C:73:F0:20:C1:5B:8A:58:1C:5E
Certificate issuer: /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial: 6E5553445E749197C5F48C75BA832D73AB436257
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3234203d3e2036393339.roa
Signing time: Thu 23 Apr 2026 02:00:00 +0000
ROA not before: Thu 23 Apr 2026 01:55:00 +0000
ROA not after: Thu 22 Apr 2027 02:00:00 +0000
asID: 6939
IP address blocks: 138.36.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 04 May 2026 10:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:55:53:44:5e:74:91:97:c5:f4:8c:75:ba:83:2d:73:ab:43:62:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Validity
Not Before: Apr 23 01:55:00 2026 GMT
Not After : Apr 22 02:00:00 2027 GMT
Subject: CN=F9FCBF0A673C3B64CB570C73F020C15B8A581C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:62:12:74:0c:6f:c6:b0:7c:cd:74:af:07:
2a:91:44:f0:66:3b:9a:26:45:22:5a:2a:a8:a4:7c:
31:f0:1b:72:56:34:84:d1:d3:46:b9:de:18:52:e1:
18:85:0f:92:5c:14:40:18:0c:71:13:51:2d:34:5c:
b0:de:90:50:e7:67:50:ba:8e:d5:3a:e0:72:ba:59:
de:01:44:52:88:2a:88:2b:16:93:48:77:f5:77:53:
c4:81:36:1f:7f:38:d5:84:1c:e0:03:59:d6:41:1f:
28:4b:6a:93:b0:21:6a:58:99:55:80:82:cf:5f:a0:
70:84:69:dc:84:26:47:c4:70:91:4c:9b:53:cd:7a:
08:26:16:e0:55:aa:e7:d3:a8:02:24:c6:90:dd:46:
35:ac:b2:cd:a3:16:f7:75:37:c7:cf:ed:09:3c:55:
82:e4:07:ca:45:8d:9c:0e:48:aa:82:c5:ee:43:44:
0d:43:90:7b:43:85:7d:ee:66:39:0d:b7:7f:28:4d:
f4:ae:06:e8:20:4a:a8:a1:00:8e:12:34:f1:21:d9:
49:18:3a:67:ce:58:33:47:fa:3d:31:66:77:47:67:
15:c1:b7:c3:75:3d:6d:62:b6:12:fa:ae:20:33:1b:
68:d7:31:22:75:92:a2:49:a7:10:aa:42:88:64:41:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:BF:0A:67:3C:3B:64:CB:57:0C:73:F0:20:C1:5B:8A:58:1C:5E
X509v3 Authority Key Identifier:
keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3234203d3e2036393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.16.0/22
Signature Algorithm: sha256WithRSAEncryption
f3:26:f6:86:86:36:3a:65:61:9f:4f:c6:13:d8:73:b8:13:17:
b4:41:1c:86:80:8e:16:fd:dc:4b:a6:a9:af:10:04:c7:c4:81:
f6:a9:62:73:20:ef:81:2b:7d:f4:f0:ba:ea:17:72:81:3d:ac:
11:d5:4d:65:68:14:08:42:23:43:80:c7:bb:76:45:15:7e:5a:
ec:2d:0c:60:d3:0f:93:56:ed:88:1b:df:dc:1e:ce:f0:49:b2:
f5:53:93:d8:21:40:bd:4d:c4:87:19:b1:1d:bd:53:d8:90:5c:
de:ce:52:e7:84:f8:88:b6:7d:b3:21:0a:b5:70:49:0d:d2:76:
f3:91:68:11:e2:b4:02:50:e6:ec:d7:89:0c:58:46:a6:6c:6c:
a3:be:08:96:2d:83:32:d5:23:84:63:57:41:74:b6:71:8e:7e:
2a:50:73:94:dc:bf:ef:36:a0:e3:c4:eb:91:69:42:41:2b:57:
88:3d:30:ed:49:60:2b:0f:20:60:b6:71:cc:d6:01:0d:00:cc:
c3:3a:3a:12:0a:6a:90:36:7a:8d:f3:d3:d3:cb:12:29:72:73:
ed:82:34:ae:d0:f5:7b:e3:2a:cf:c8:f0:09:a8:9d:14:1f:46:
c1:55:b3:fc:83:fb:20:bb:ab:2d:a8:90:3c:1f:db:85:90:0f:
fc:f2:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:22:53 2026 by rpki-client