
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33382e302f32342d3234203d3e203237393437.roa
File: 34352e37312e33382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: HGJ14TgY4mvjGHzE4IHemmEmV/8V9/vn0zMRtksjVYg=
Subject key identifier: 81:DB:8C:CD:83:36:74:F5:76:70:E4:2D:1A:E0:E8:47:74:FB:1A:92
Certificate issuer: /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial: 0BC5E69013673EBBF46E8F4AAC202C253D831E9B
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33382e302f32342d3234203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:31:30 +0000
ROA not before: Tue 06 Jan 2026 19:26:30 +0000
ROA not after: Tue 05 Jan 2027 19:31:30 +0000
asID: 27947
IP address blocks: 45.71.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 20:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c5:e6:90:13:67:3e:bb:f4:6e:8f:4a:ac:20:2c:25:3d:83:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Validity
Not Before: Jan 6 19:26:30 2026 GMT
Not After : Jan 5 19:31:30 2027 GMT
Subject: CN=81DB8CCD833674F57670E42D1AE0E84774FB1A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:c9:5b:8c:80:54:3a:c6:8b:d5:5d:60:d6:
e4:28:af:cc:d9:ce:76:dd:4e:5b:04:bd:1b:32:93:
b2:b9:58:01:e7:20:90:65:85:48:43:f4:50:34:09:
ca:5f:c1:c0:6c:ed:ae:59:71:85:c6:d7:cb:26:56:
65:43:07:68:cc:5c:b5:c1:c0:5a:4f:06:c3:91:76:
c1:e0:85:35:72:3b:f9:ba:d8:e4:c3:bd:d2:7b:53:
02:8e:9d:9e:a1:ac:e1:f4:2c:b4:16:78:5e:7d:44:
4f:82:b9:0e:a1:c5:85:6d:90:10:8e:bf:08:d7:ea:
8e:52:cb:1e:dc:07:70:83:c8:9b:2a:c6:aa:4f:0f:
23:df:95:46:73:d3:92:5a:72:fe:68:9b:ca:84:90:
63:45:0d:4f:17:18:62:96:3b:e7:9f:6a:ac:37:2a:
69:70:12:e3:20:5d:db:a5:58:7e:b6:0e:2a:fa:ab:
12:d7:ac:10:96:de:a1:88:31:ea:c3:1b:d2:04:1c:
64:16:10:20:70:69:34:db:c2:d2:54:11:d4:3a:6e:
4c:24:e0:03:a8:85:3c:6e:0b:32:06:ca:30:16:40:
db:23:af:f2:b3:ff:e4:e8:74:1a:4f:bd:11:48:ee:
bd:34:73:8b:1d:94:18:86:ed:59:01:8c:db:72:dc:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:8C:CD:83:36:74:F5:76:70:E4:2D:1A:E0:E8:47:74:FB:1A:92
X509v3 Authority Key Identifier:
keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33382e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.38.0/24
Signature Algorithm: sha256WithRSAEncryption
99:38:9a:19:b4:08:0b:20:91:cf:7e:5d:28:8b:71:89:f5:fb:
c6:99:2f:26:6b:22:7a:1a:58:10:32:0c:e5:e5:da:b2:28:43:
f0:f7:e9:7e:18:1b:6a:58:08:ad:08:75:55:59:a4:a8:57:89:
97:cd:9a:d8:b9:a7:a1:74:08:e2:31:35:10:58:ff:41:18:4d:
d2:2a:68:cd:e8:c2:c8:de:41:82:5a:d4:74:02:07:df:07:c2:
60:01:31:40:55:55:07:77:4b:8d:7d:e2:46:d4:0b:3d:a5:8d:
b0:ae:6f:af:7f:d2:04:94:a8:0e:88:eb:37:56:8f:dd:93:43:
e4:cf:5e:cf:d0:76:78:7d:75:9e:ff:cd:08:9a:19:f4:97:e2:
76:7f:5d:12:5e:af:50:35:68:2d:c5:3d:dd:9e:49:1a:d1:fd:
7b:11:f9:75:69:e0:51:79:b0:e6:49:7f:81:7b:f0:73:a6:3a:
7c:7c:9c:65:f0:83:73:c9:9b:ea:31:46:d3:48:32:d3:a0:bb:
40:44:4e:58:0f:6d:43:60:c4:96:10:2c:c1:8d:88:e1:e8:4d:
60:bc:5a:8b:6d:ec:67:e9:89:a0:47:7e:53:df:8a:cd:2a:74:
f3:89:c4:1e:b9:55:8c:7e:34:2e:12:95:01:eb:30:5f:5d:63:
e8:25:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:48 2026 by rpki-client