
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e362e302f32342d3234203d3e203138363738.roa
File: 3230302e32342e362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: kusJ2qOjFBenVLKkUnrt0KGR21Y7z6JHrl9GdpawfB0=
Subject key identifier: 3D:DE:99:11:8F:4C:77:24:8C:13:FC:1C:8D:62:A4:8D:1B:B2:FE:7A
Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial: 69D02E860C9B4F05153963922174948026D47DFA
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e362e302f32342d3234203d3e203138363738.roa
Signing time: Wed 22 Apr 2026 19:55:02 +0000
ROA not before: Wed 22 Apr 2026 19:50:02 +0000
ROA not after: Wed 21 Apr 2027 19:55:02 +0000
asID: 18678
IP address blocks: 200.24.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 03 May 2026 13:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d0:2e:86:0c:9b:4f:05:15:39:63:92:21:74:94:80:26:d4:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Validity
Not Before: Apr 22 19:50:02 2026 GMT
Not After : Apr 21 19:55:02 2027 GMT
Subject: CN=3DDE99118F4C77248C13FC1C8D62A48D1BB2FE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:2d:aa:11:b4:e3:b0:a7:f3:17:eb:22:e9:
e0:01:65:ef:dc:82:44:55:4d:7f:60:de:5f:13:7f:
59:bb:29:b4:80:eb:fc:a5:9e:71:49:c4:9f:96:36:
3e:10:af:25:56:96:da:b4:cb:e3:a3:46:c2:bb:71:
66:4b:91:d1:43:72:6f:84:c2:b2:64:f8:86:b0:38:
a6:b7:fb:4a:0b:e2:ad:5e:86:c5:2a:43:5a:2a:85:
51:a9:64:aa:71:a5:43:34:6d:ea:a3:6c:64:b8:9e:
0e:7d:b4:37:bf:2d:2f:af:b0:fd:4f:20:ed:fa:da:
18:4b:09:b9:42:53:10:85:b1:17:e2:0f:32:07:fc:
64:91:f0:22:d6:80:39:96:0e:ce:03:9f:c8:5c:0c:
b3:6a:81:9d:a0:08:37:2f:30:8f:8a:d9:2a:f3:52:
65:2f:6f:2e:ee:76:ce:e5:13:bc:56:92:53:cc:15:
a6:bb:99:a8:2e:08:86:4d:2b:b4:52:06:cd:31:59:
12:51:5c:5d:eb:c9:e4:58:6d:9c:d0:e3:aa:e3:e0:
5d:99:fc:3f:a9:be:45:03:30:85:66:fe:3d:44:e9:
ce:43:76:78:41:51:58:a7:b4:7f:46:b2:1c:17:4d:
37:64:d7:e5:dc:5a:68:b3:4c:cc:07:ad:6e:c2:b1:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:99:11:8F:4C:77:24:8C:13:FC:1C:8D:62:A4:8D:1B:B2:FE:7A
X509v3 Authority Key Identifier:
keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e362e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.6.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9d:d1:c3:5e:34:0b:0b:ba:e9:7a:ba:b6:95:5e:ee:d0:f8:
db:6f:20:d3:d1:a3:e4:54:c2:4d:27:b9:5e:95:5f:6c:5b:8e:
46:15:3a:62:6b:a3:18:73:3b:c4:4b:28:f9:ea:94:90:1b:d7:
9f:e2:db:ed:ac:28:ef:25:65:c0:2a:5d:44:58:b7:2d:66:c7:
91:cc:07:7f:88:f2:13:cf:ce:fc:e2:2c:f4:49:16:d4:0a:1e:
65:ca:c6:e6:44:84:02:6e:b1:26:9e:b8:5b:4b:d1:89:4d:b3:
6f:a9:91:06:ab:8e:7a:8a:e9:a4:36:67:91:ae:fa:75:ad:0b:
6a:27:90:d0:6b:ec:58:b0:14:6c:10:cf:77:88:71:e0:4c:98:
c8:3d:a1:db:87:5f:fe:66:4c:35:bb:5d:d0:90:4a:96:12:1c:
c3:9a:c3:90:d6:76:b4:9b:f7:a3:9b:73:6b:26:97:df:19:25:
f7:8d:35:b8:63:2e:6e:f4:6c:64:00:56:aa:20:25:8b:ff:da:
5c:a5:bd:f6:e6:56:e7:aa:cf:68:36:ae:96:b9:b3:30:7b:3b:
ad:75:f5:d4:e4:fa:2e:f4:78:c3:d2:64:20:a3:90:86:85:1b:
36:12:8d:19:8e:c2:c3:bb:51:0a:67:4b:17:25:eb:07:22:5a:
3e:8b:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client