
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e302e302f31372d3234203d3e2038303438.roa
File: 3230302e38342e302e302f31372d3234203d3e2038303438.roa (raw, json)
Hash identifier: UURgouQqr6kIXSn05Gw2HJKxce92O5Z9VzeBojRqJCc=
Subject key identifier: 1A:90:61:BF:4D:75:9E:13:F7:F6:A0:84:B5:76:C8:A4:4B:F4:8D:6C
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 2FA805504645BBF83900B921434957011DA1D29F
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e302e302f31372d3234203d3e2038303438.roa
Signing time: Tue 14 Apr 2026 14:38:48 +0000
ROA not before: Tue 14 Apr 2026 14:33:48 +0000
ROA not after: Tue 13 Apr 2027 14:38:48 +0000
asID: 8048
IP address blocks: 200.84.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 08:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a8:05:50:46:45:bb:f8:39:00:b9:21:43:49:57:01:1d:a1:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Apr 14 14:33:48 2026 GMT
Not After : Apr 13 14:38:48 2027 GMT
Subject: CN=1A9061BF4D759E13F7F6A084B576C8A44BF48D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:60:f4:81:cd:58:16:55:6c:09:00:d2:cd:
cf:55:c2:25:11:44:1b:de:5e:09:44:09:8e:a3:ff:
fe:97:f4:5d:79:8e:c2:43:34:39:da:7a:e2:13:72:
5b:fe:1d:39:35:21:3f:76:2b:fd:3c:c9:73:38:09:
77:ba:c8:59:59:11:17:a9:af:a1:6c:a2:3b:fc:da:
f4:05:f6:fd:90:86:c5:6c:bc:4f:c4:07:28:d0:d1:
2c:83:f0:87:0d:76:47:2b:f6:10:b0:b4:5f:f6:44:
4b:04:50:54:d7:04:96:2f:89:13:36:59:c4:4f:15:
61:82:09:db:85:a6:ee:30:9c:21:17:2c:24:5d:ea:
20:e0:df:06:f6:0d:3f:45:d1:65:71:17:85:61:87:
c9:49:f7:5f:ed:1e:b0:c1:fe:2b:89:83:6b:9c:2f:
9f:d9:a0:97:62:36:7a:58:4c:9d:1b:d6:79:c5:55:
50:1e:b8:c5:5a:63:88:b7:b4:8a:c5:49:9c:71:9c:
7d:b9:14:07:e8:d3:ce:35:31:b2:9c:00:d9:ac:f2:
58:ea:3f:d1:98:67:34:7c:79:c6:ec:1b:fd:fe:2d:
12:74:98:f5:ae:97:50:34:23:d2:4f:20:3f:74:b6:
7d:2e:35:99:49:f9:5d:8b:58:d1:15:e4:26:39:91:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:61:BF:4D:75:9E:13:F7:F6:A0:84:B5:76:C8:A4:4B:F4:8D:6C
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e302e302f31372d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.84.0.0/17
Signature Algorithm: sha256WithRSAEncryption
91:27:9b:68:84:0f:d0:2c:bf:09:b7:39:49:6b:29:9b:29:20:
e2:46:20:ef:91:65:a2:ce:75:0e:b6:cd:bb:4c:89:ac:ae:fa:
ff:09:02:09:b0:fd:de:96:64:65:b8:66:e9:24:12:5d:e4:df:
32:6a:4f:a9:5f:df:6a:17:51:7e:3b:d5:38:78:ae:39:cc:22:
84:e1:04:52:08:04:19:81:03:e5:05:55:bf:14:69:7d:32:f2:
ea:53:2d:d0:c2:0c:0e:32:ad:22:d8:5f:77:0c:ac:94:28:b6:
47:f3:ea:73:4c:57:1e:64:f8:34:a9:cc:f3:f0:ad:2b:a9:81:
9f:aa:b5:e1:85:60:d1:11:4c:3c:43:c2:17:16:81:ba:c9:14:
63:be:a4:cc:ce:82:b6:e2:ae:b7:63:b1:86:cd:c9:4b:09:a4:
28:c2:70:47:0f:72:0a:6d:aa:31:4d:5d:ac:84:70:38:2e:e2:
69:dd:1c:8c:61:e0:b9:02:d7:1b:7b:84:f6:fc:e8:0a:f3:88:
93:e5:98:84:96:67:58:73:0e:25:41:15:4f:92:b2:84:65:b4:
00:2d:70:a0:b0:d5:ee:8e:cf:22:5d:7e:bb:55:3d:1e:bd:87:
24:d1:15:de:bd:80:d9:73:78:0d:64:89:56:d7:02:83:a4:40:
b9:d0:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:01 2026 by rpki-client