
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/34352e3137322e3231392e302f32342d3234203d3e203431333437.roa
File: 34352e3137322e3231392e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier: qA/zJXFycPwMB050EXrmYBQLxA+/UBeN29Er2AcIJa8=
Subject key identifier: 42:0E:1D:37:E5:E4:29:F4:71:EE:6F:48:DE:B6:5E:81:ED:53:DA:26
Certificate issuer: /CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Certificate serial: 3D2F0C9EEF9BFA87597EEAD700C7F27DDE3849DF
Authority key identifier: 29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/34352e3137322e3231392e302f32342d3234203d3e203431333437.roa
Signing time: Sat 28 Feb 2026 16:35:00 +0000
ROA not before: Sat 28 Feb 2026 16:30:00 +0000
ROA not after: Sat 27 Feb 2027 16:35:00 +0000
asID: 41347
IP address blocks: 45.172.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2f:0c:9e:ef:9b:fa:87:59:7e:ea:d7:00:c7:f2:7d:de:38:49:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Validity
Not Before: Feb 28 16:30:00 2026 GMT
Not After : Feb 27 16:35:00 2027 GMT
Subject: CN=420E1D37E5E429F471EE6F48DEB65E81ED53DA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:60:49:18:c7:ca:96:f0:0b:ef:11:31:45:
07:64:14:f2:41:c6:da:8d:7d:f2:2c:86:ab:91:9e:
b2:db:94:ea:92:9b:b6:07:b7:4f:f7:cb:47:76:1d:
6f:0b:f9:d0:0c:64:22:bb:3c:b4:87:64:d2:46:87:
2c:29:e1:c0:09:84:44:af:f0:76:55:95:5b:94:f6:
6c:f0:a5:9a:66:b2:48:b7:6e:c5:08:ac:40:18:8e:
bb:92:c4:0b:03:b5:63:3a:a8:30:8c:2e:6e:1e:65:
e5:7e:1a:dc:47:65:47:05:f0:a8:6a:e5:9b:7c:33:
26:33:71:e3:29:a1:b9:39:7f:d0:d4:18:02:7c:a9:
77:a3:f2:11:47:15:df:09:4f:f5:2a:54:13:7e:ce:
ca:f9:10:63:dc:28:da:4d:b6:9c:13:a4:44:c0:7c:
33:c8:d5:aa:e9:1e:15:12:74:44:0a:f0:f6:d1:bd:
fc:22:5b:cc:4b:39:fe:9a:99:12:49:7f:98:5d:a7:
f9:a5:bb:52:d3:75:6c:b1:7c:43:5f:dd:99:33:76:
65:37:48:3f:c5:37:33:58:dc:21:9f:3a:01:ef:6f:
73:0a:f5:23:0e:98:9c:0b:f9:2a:56:33:75:4b:e2:
1e:16:6b:ad:42:e0:03:9d:a7:4c:5a:7d:7a:57:49:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:1D:37:E5:E4:29:F4:71:EE:6F:48:DE:B6:5E:81:ED:53:DA:26
X509v3 Authority Key Identifier:
keyid:29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/34352e3137322e3231392e302f32342d3234203d3e203431333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:df:14:d4:94:5b:d9:d7:14:3a:52:1c:4d:c1:88:52:a9:de:
d6:7e:55:7a:f7:1d:d2:d8:4a:c5:d7:eb:74:2b:ae:50:d9:72:
8c:da:23:e6:cd:1d:4e:e6:d5:45:16:25:93:c7:14:61:32:06:
f9:6f:ad:6e:2d:5f:6f:0a:6b:a9:14:12:a5:af:da:5e:02:db:
18:9a:02:63:40:0a:91:1d:45:b8:ac:be:bc:9f:70:8c:40:81:
38:d7:dd:6f:ad:f4:fa:a9:6a:98:bc:cf:3e:34:9a:35:ff:33:
c3:17:99:59:40:08:e7:fb:df:08:98:ee:8b:60:8d:62:f4:b1:
ea:ca:f6:b6:b5:8d:e4:2e:67:bd:7e:87:63:9f:1a:ce:5b:8c:
e5:ef:3b:b1:67:c7:ac:ac:39:b7:fc:38:eb:24:0d:13:e3:bb:
e6:5c:81:e5:b7:0b:72:90:ee:a1:b1:99:24:14:c3:34:a5:d1:
48:81:f1:27:38:5f:44:f5:10:b2:aa:78:05:43:10:82:4e:68:
66:ea:0e:d0:c4:44:1a:d5:dc:d9:69:16:59:a8:46:8c:95:de:
fd:f4:c5:f5:b4:ab:84:da:07:b2:71:2b:e8:85:65:49:4a:b1:
b5:29:a5:d4:7c:b4:6d:07:2e:e9:33:35:48:81:aa:17:35:11:
0b:83:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:34:32 2026 by rpki-client