
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
File: 3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa (raw, json)
Hash identifier: Jg2wd6yQDl8BHhjmD4ZSaszPFZ2YSalPpjjyHXKx2OE=
Subject key identifier: D8:62:CC:5F:C1:68:2B:83:42:33:CD:FB:DA:D9:40:06:14:FC:58:E8
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 2A9BB822402E64161807341DB5414B13BA573953
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
Signing time: Fri 25 Sep 2026 14:36:50 +0000
ROA not before: Fri 25 Sep 2026 14:31:50 +0000
ROA not after: Fri 24 Sep 2027 14:36:50 +0000
asID: 14709
IP address blocks: 181.197.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9b:b8:22:40:2e:64:16:18:07:34:1d:b5:41:4b:13:ba:57:39:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Sep 25 14:31:50 2026 GMT
Not After : Sep 24 14:36:50 2027 GMT
Subject: CN=D862CC5FC1682B834233CDFBDAD9400614FC58E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:a9:88:9e:e6:ad:91:fa:d0:67:65:10:c9:
2a:f0:22:41:da:79:66:b9:ba:20:57:d2:5e:f9:51:
63:c2:a8:71:cb:89:5a:26:e5:d9:ca:d2:52:87:c5:
3d:b4:54:01:2f:dc:59:6c:11:65:cb:6c:18:7a:bf:
60:63:4c:ae:df:37:ec:b6:4c:d8:75:71:8c:0f:f0:
e7:5a:50:80:4a:18:44:15:fa:49:78:d0:5f:93:11:
5d:31:c6:45:06:ef:47:81:64:6b:29:e2:0d:ba:b6:
19:f0:5e:f0:dd:7b:ce:04:ad:59:92:ac:e9:e4:69:
82:c6:bc:e7:4e:68:b7:6b:d8:e6:3c:5e:24:bf:30:
4c:d7:0a:2b:37:0c:84:c1:eb:b0:f2:48:48:bc:57:
a3:74:db:df:53:0d:cb:f6:14:94:d2:a6:69:14:aa:
db:ee:bd:79:0e:22:4e:fb:d2:5c:59:78:f1:3a:95:
94:f9:85:79:50:dd:29:2d:d6:7a:0a:0f:52:de:4c:
30:b1:52:22:72:40:af:09:a6:b5:b0:98:45:f6:db:
8a:85:7b:95:f3:74:8d:e1:74:af:27:c0:ae:85:2a:
1b:15:de:3f:20:36:0c:5b:e8:d1:92:45:b8:53:2f:
69:02:c3:6d:a2:fb:fb:7a:2d:7a:74:58:74:98:cc:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:CC:5F:C1:68:2B:83:42:33:CD:FB:DA:D9:40:06:14:FC:58:E8
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.197.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:91:78:70:72:c4:e2:ac:02:3c:75:d6:6c:0f:13:81:74:c6:
c8:e4:90:b1:ce:72:bb:b6:d6:70:53:6c:90:9b:34:06:8d:5c:
79:fa:e4:e8:d3:4d:aa:e9:4a:91:a6:d2:f2:77:c0:be:0c:2f:
19:67:2b:7e:07:f4:a7:0e:35:99:80:e4:4b:d9:72:24:56:ba:
90:d0:a8:02:a1:be:fa:00:69:29:10:69:61:06:1e:42:10:c6:
9e:dd:73:fd:49:6a:10:73:ac:00:b6:9c:5a:4a:14:0d:4c:aa:
c8:e7:09:5d:da:7f:c7:0a:18:08:e0:96:2c:f2:79:bb:17:36:
8e:0c:61:37:c5:57:83:a5:6c:57:30:4e:97:5d:8d:24:e9:f3:
d2:3d:6b:6f:7d:86:19:8f:48:fd:67:ce:7e:aa:f8:34:43:60:
b0:39:95:5b:3b:d2:25:cb:e5:10:db:4d:0c:1e:5f:dd:5e:4e:
1c:75:c6:b0:a1:57:d5:23:b2:95:94:0a:1b:55:24:3b:87:db:
22:7d:48:65:4b:8c:93:98:2b:a0:30:b0:8b:75:3a:92:e9:9c:
d7:3a:da:ad:c2:78:03:68:a7:10:63:c5:d7:d4:f4:d5:27:33:
4f:58:87:0f:28:c3:ff:1a:6d:fa:f4:4c:59:6f:74:8a:d7:86:
bb:57:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:38:15 2026 by rpki-client