
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa
File: 3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa (raw, json)
Hash identifier: aeSgneqolg5DnvvNKRD6cwLKfkqRBKvKEmyHNCj1dc8=
Subject key identifier: C2:A7:5A:0F:E6:CA:1F:E6:A9:8C:A2:29:17:D0:20:61:A6:01:37:A9
Certificate issuer: /CN=4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC
Certificate serial: 74B31AB0BFC23E17CF032C950F46E3020646D109
Authority key identifier: 4F:3C:DC:59:71:3B:A7:8E:CE:BE:5D:1D:61:6E:DE:AA:81:6A:00:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa
Signing time: Tue 10 Feb 2026 01:15:00 +0000
ROA not before: Tue 10 Feb 2026 01:10:00 +0000
ROA not after: Tue 09 Feb 2027 01:15:00 +0000
asID: 271851
IP address blocks: 138.117.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.crl
rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 23:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b3:1a:b0:bf:c2:3e:17:cf:03:2c:95:0f:46:e3:02:06:46:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC
Validity
Not Before: Feb 10 01:10:00 2026 GMT
Not After : Feb 9 01:15:00 2027 GMT
Subject: CN=C2A75A0FE6CA1FE6A98CA22917D02061A60137A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:be:c9:5f:4e:76:1d:bf:d8:72:6b:77:83:
00:0e:4f:15:38:10:46:a0:e5:63:45:f4:d4:aa:0a:
05:33:92:47:e8:91:ec:33:fd:4b:df:0f:d8:ff:e1:
9e:3b:e0:7b:b2:85:f5:22:d2:37:a1:fb:12:fa:cb:
da:37:cb:54:41:21:82:62:e0:2f:7a:c4:41:37:5e:
a6:24:08:f0:23:89:9c:bb:1a:3a:e6:91:8f:2f:9d:
d2:9b:88:a4:28:c4:eb:13:09:9f:9e:33:3c:2b:d3:
0f:f4:6b:10:8f:32:f4:a6:9a:d1:02:7b:3f:22:5a:
df:31:ce:17:cb:2f:37:ab:ed:f2:c3:0b:96:7f:eb:
7c:42:3d:3d:95:10:ab:4b:08:51:05:16:00:bb:97:
1d:25:1d:c8:7f:ff:a4:31:48:50:8a:89:d2:6f:52:
39:5f:33:5c:c5:68:00:a8:69:ed:c6:31:0b:48:db:
71:07:c4:81:09:ed:5c:44:51:56:40:6b:7c:a8:5d:
19:06:53:1c:1d:1e:d6:32:62:d2:a2:fb:96:e5:3f:
02:44:12:5f:d5:d7:71:38:7f:f8:4b:cb:6d:da:3e:
67:89:4d:4a:6e:9b:d1:b2:ee:1e:21:be:30:a3:6b:
92:5b:3c:37:e9:1b:df:ed:9b:6c:5c:9d:5d:fa:30:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:5A:0F:E6:CA:1F:E6:A9:8C:A2:29:17:D0:20:61:A6:01:37:A9
X509v3 Authority Key Identifier:
keyid:4F:3C:DC:59:71:3B:A7:8E:CE:BE:5D:1D:61:6E:DE:AA:81:6A:00:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:11:c2:2a:d1:a3:62:66:df:1d:89:6c:59:17:69:cf:14:6d:
8c:14:a2:e8:87:a9:6d:de:a7:17:6e:4f:0e:7d:34:fc:3e:c8:
f7:df:f5:ea:c2:7c:43:17:e0:13:a6:e0:e4:ff:f7:e9:46:f0:
92:76:8c:6b:2b:1d:63:fa:ec:a6:b0:9f:34:15:68:bb:c1:27:
cc:88:21:5b:28:0f:3e:1d:9f:3d:55:c8:27:91:2c:1e:e6:fc:
b6:1c:55:46:b5:e8:6a:c6:e6:1c:89:6b:6e:7e:bf:a0:bd:9e:
45:e6:34:44:cd:92:01:06:ae:72:3a:6c:b9:a0:cb:70:68:0a:
a6:7d:76:d6:5c:0d:6f:c4:01:6e:28:9a:04:55:96:48:ad:48:
e7:db:a5:a4:b8:3d:8c:d4:7c:1e:66:78:fe:67:33:f7:55:7c:
48:27:d8:66:11:13:38:9a:38:1f:69:41:3f:79:0d:43:8f:60:
15:c8:64:9d:b8:93:4c:6e:e4:24:3e:8c:1e:2f:e8:c3:2e:09:
1c:6c:3d:43:1e:a5:4d:33:1e:04:08:2c:92:85:08:d7:80:48:
88:1c:f7:7e:7c:58:f7:e7:af:42:87:fb:d4:9b:61:b8:cf:6a:
d0:25:ba:8a:fd:eb:cc:36:ea:88:ed:b6:71:86:8e:f4:07:18:
c3:9f:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:38:39 2026 by rpki-client