
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232312e302f32342d3234203d3e20323634363436.roa
File: 3139302e39302e3232312e302f32342d3234203d3e20323634363436.roa (raw, json)
Hash identifier: zGE2kLtkl5lkoWQS8wbXE2XtFmZ1+bEGK97aNXTC+/M=
Subject key identifier: 84:4A:1A:30:C1:50:74:91:D8:72:53:59:64:3D:AE:FC:E3:EF:AB:73
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 5AF139C4F7060FFB1F0F989F6A4EA58A64ACE6C5
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232312e302f32342d3234203d3e20323634363436.roa
Signing time: Mon 06 Apr 2026 22:10:00 +0000
ROA not before: Mon 06 Apr 2026 22:05:00 +0000
ROA not after: Mon 05 Apr 2027 22:10:00 +0000
asID: 264646
IP address blocks: 190.90.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 20:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f1:39:c4:f7:06:0f:fb:1f:0f:98:9f:6a:4e:a5:8a:64:ac:e6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Apr 6 22:05:00 2026 GMT
Not After : Apr 5 22:10:00 2027 GMT
Subject: CN=844A1A30C1507491D8725359643DAEFCE3EFAB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:6b:e5:56:10:4a:67:5d:b3:9f:17:48:11:
62:ab:cc:ca:fb:84:76:32:ab:dd:c1:e4:26:0b:df:
50:04:3f:c8:9e:8e:ce:1a:7e:41:98:b6:f1:84:78:
4f:2b:57:f3:44:0d:6d:f2:7b:dd:6f:70:59:90:21:
04:6c:28:2c:13:9d:1b:97:26:c6:f9:f5:f2:e6:d4:
08:7d:d0:15:a5:c9:e1:ca:35:2c:6c:6e:e6:a9:49:
c2:be:a7:da:66:9c:7c:0f:8d:a7:32:f3:86:4c:96:
25:61:d4:e2:1b:5b:cc:57:58:3e:a1:d6:36:dc:0b:
5d:10:04:70:0f:b8:cb:13:e8:0b:90:ad:36:12:6e:
dd:40:0a:f8:46:50:1f:52:02:b7:fb:ac:10:60:78:
43:f5:aa:a6:27:d8:f6:1a:3c:9a:23:50:dc:36:e1:
64:b2:9f:2d:e7:c1:45:1a:be:8f:ac:95:77:5d:13:
a9:50:b8:01:7a:6c:47:f1:40:2e:cc:fa:f7:63:6e:
86:26:c8:c6:15:a7:37:98:9b:0a:5b:88:6a:67:c5:
1c:a2:c7:d3:77:a7:2e:db:9e:05:12:a1:e4:89:e2:
6d:de:3d:56:cc:da:c2:7b:b0:2f:e7:7b:63:4c:5b:
44:8a:5c:d0:04:b6:21:b9:ba:8d:78:06:81:22:a7:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4A:1A:30:C1:50:74:91:D8:72:53:59:64:3D:AE:FC:E3:EF:AB:73
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232312e302f32342d3234203d3e20323634363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d7:29:66:bb:96:71:fe:e4:e6:de:29:aa:c3:8f:9f:38:c7:
0b:e2:4f:78:f1:73:80:b6:f6:a2:62:b9:36:5d:f8:d7:c1:38:
a9:e6:aa:35:bb:44:60:95:d8:22:11:33:76:6c:79:86:0b:17:
e8:c6:9e:e5:47:b0:09:0f:53:1a:2e:45:70:78:1b:a6:0c:5e:
d9:6b:af:d4:ce:35:b2:6f:06:00:21:ab:bf:1e:d8:bf:91:44:
8c:81:cc:03:da:a7:1b:8f:19:50:11:27:4c:6b:ef:10:f5:a7:
48:5c:44:3e:ec:04:cb:09:de:bb:df:ff:61:28:11:40:4e:d7:
d2:b7:35:37:86:d3:af:6a:f8:1f:91:68:c7:50:55:ec:2f:54:
40:38:39:d1:8d:9a:0a:e5:6e:f8:25:5d:68:70:96:17:87:b6:
f4:24:8a:24:47:da:01:41:ed:b6:c0:da:d1:a2:56:0b:46:ed:
b8:fa:f6:f7:6e:c2:96:c4:d6:c0:ca:24:a3:b7:2e:03:e3:46:
8f:7b:1a:26:73:5f:ef:00:5b:d5:af:0c:10:dd:36:b8:1b:00:
95:2f:54:c7:18:d3:6b:73:fb:75:3c:ec:77:18:31:3a:da:8d:
6b:67:9b:46:5d:35:10:52:da:66:44:90:60:62:a6:61:b8:00:
b7:2d:5e:5b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWvE5xPcGD/sfD5ifak6limSs5sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjA0MDYyMjA1MDBaFw0yNzA0MDUyMjEwMDBaMDMxMTAvBgNV
BAMTKDg0NEExQTMwQzE1MDc0OTFEODcyNTM1OTY0M0RBRUZDRTNFRkFCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCGvlVhBKZ12znxdIEWKrzMr7
hHYyq93B5CYL31AEP8iejs4afkGYtvGEeE8rV/NEDW3ye91vcFmQIQRsKCwTnRuX
Jsb59fLm1Ah90BWlyeHKNSxsbuapScK+p9pmnHwPjacy84ZMliVh1OIbW8xXWD6h
1jbcC10QBHAPuMsT6AuQrTYSbt1ACvhGUB9SArf7rBBgeEP1qqYn2PYaPJojUNw2
4WSyny3nwUUavo+slXddE6lQuAF6bEfxQC7M+vdjboYmyMYVpzeYmwpbiGpnxRyi
x9N3py7bngUSoeSJ4m3ePVbM2sJ7sC/ne2NMW0SKXNAEtiG5uo14BoEip7sbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhEoaMMFQdJHYclNZZD2u/OPvq3MwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvlrd
MA0GCSqGSIb3DQEBCwUAA4IBAQA71ylmu5Zx/uTm3imqw4+fOMcL4k948XOAtvai
Yrk2XfjXwTip5qo1u0RgldgiETN2bHmGCxfoxp7lR7AJD1MaLkVweBumDF7Za6/U
zjWybwYAIau/Hti/kUSMgcwD2qcbjxlQESdMa+8Q9adIXEQ+7ATLCd673/9hKBFA
TtfStzU3htOvavgfkWjHUFXsL1RAODnRjZoK5W74JV1ocJYXh7b0JIokR9oBQe22
wNrRolYLRu24+vb3bsKWxNbAyiSjty4D40aPexomc1/vAFvVrwwQ3Ta4GwCVL1TH
GNNrc/t1POx3GDE62o1rZ5tGXTUQUtpmRJBgYqZhuAC3LV5b
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:44:26 2026 by rpki-client