
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e203138363738.roa
File: 3230302e32342e322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: +W+C9LEDHXz5oYJEuRZo37N/ALOEHrR52VzFe1rE4Q0=
Subject key identifier: 33:E4:BB:CF:78:EA:B5:0D:24:44:0F:2D:63:3D:B4:86:77:6B:C6:5D
Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial: 58F0C45045D71AF7A9880ADE5F8056B5B31B2B2B
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e203138363738.roa
Signing time: Wed 22 Apr 2026 19:55:00 +0000
ROA not before: Wed 22 Apr 2026 19:50:00 +0000
ROA not after: Wed 21 Apr 2027 19:55:00 +0000
asID: 18678
IP address blocks: 200.24.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 03 May 2026 13:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f0:c4:50:45:d7:1a:f7:a9:88:0a:de:5f:80:56:b5:b3:1b:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Validity
Not Before: Apr 22 19:50:00 2026 GMT
Not After : Apr 21 19:55:00 2027 GMT
Subject: CN=33E4BBCF78EAB50D24440F2D633DB486776BC65D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:02:30:a5:96:ff:d5:9f:4d:0b:b6:c0:5d:
34:8d:43:a0:ea:ee:26:e5:95:53:52:48:55:84:66:
7d:62:8e:60:3e:61:6a:f8:f7:ff:ac:ec:04:41:82:
81:aa:fc:66:c6:3f:e1:23:4a:af:ce:e7:ee:9d:a7:
aa:a1:6b:d4:74:a4:9b:d9:2a:2a:4a:94:22:0e:4d:
38:1f:31:9c:8c:7b:1c:c6:06:db:e1:5b:e1:7c:86:
74:15:07:09:f4:c3:17:90:09:15:13:c3:94:bb:9b:
5d:2a:0b:22:f4:99:37:a8:dc:93:d6:ef:15:4f:5a:
34:c2:72:31:92:c3:35:e3:80:9d:02:02:bf:b9:9e:
ec:0b:47:55:21:9e:b2:84:64:23:29:11:6d:70:e1:
8c:00:2c:7a:98:dc:e3:3b:0a:fa:8d:8d:16:07:06:
80:ca:a2:29:be:a5:f1:6c:2f:f5:8a:d9:6c:ca:55:
6f:f5:2c:ce:4d:b2:0a:37:89:58:03:5d:54:92:62:
27:fb:fa:83:91:ed:fc:bc:ca:82:a6:6a:5e:a8:45:
b5:71:54:1a:c6:9e:a2:24:ab:cc:ef:0f:89:fb:0e:
7d:c4:2c:b4:87:e8:e7:6d:e4:2e:f2:13:ab:22:72:
83:ba:36:94:06:3c:23:34:c8:58:99:45:a7:2e:c9:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:BB:CF:78:EA:B5:0D:24:44:0F:2D:63:3D:B4:86:77:6B:C6:5D
X509v3 Authority Key Identifier:
keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:82:d8:87:30:b9:ea:34:7c:87:83:9e:ef:b7:15:01:5a:6b:
71:02:f0:e8:0f:cd:12:97:b0:8d:11:65:25:89:3a:ec:7e:8e:
ea:35:57:94:f8:5f:97:0b:57:5d:ee:70:59:0a:ed:f4:67:4f:
47:36:01:c4:69:cc:8a:da:d1:de:5e:ae:61:e7:6f:a4:fe:38:
8b:a5:07:80:8a:60:8f:e1:2b:6b:fd:44:a2:88:59:07:70:ff:
00:59:0c:f0:b6:d5:b6:ac:7f:31:3e:03:4d:94:5b:4f:53:c2:
a2:5b:3d:73:35:35:d7:77:30:9f:26:f3:52:69:a6:95:fd:ae:
0a:cd:11:b0:af:a7:a6:4f:03:ec:06:65:86:e8:30:c9:1d:76:
fb:01:78:a5:84:21:40:c9:e6:59:03:42:67:da:b9:09:43:cc:
1d:b4:b2:55:ec:a3:67:7e:93:6b:9c:e8:d8:4d:95:2c:1f:78:
ab:48:96:dd:d6:cf:c5:48:96:ae:80:9b:8e:6f:fc:e1:6a:74:
3c:06:61:a6:3b:05:4f:ff:da:b9:06:95:1e:bc:53:a5:1e:c7:
1e:bc:de:fd:ac:23:0d:b2:3d:42:7a:c9:ab:ff:96:1b:8c:14:
d1:04:55:31:47:48:8f:d5:6d:c2:01:a4:3f:db:2f:d2:b0:3b:
d9:dd:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client