
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa
File: 3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: dkiJ67b2apTwPAMupblUkfd5XfI2XxxPJXcysPIOggU=
Subject key identifier: BE:08:50:AC:6A:42:D6:A1:29:B5:59:2D:F3:85:43:DF:5C:E1:0F:B9
Certificate issuer: /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial: 2348BF95E9048661224F84B3C580975324D98987
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa
Signing time: Wed 01 Apr 2026 01:15:01 +0000
ROA not before: Wed 01 Apr 2026 01:10:01 +0000
ROA not after: Wed 31 Mar 2027 01:15:01 +0000
asID: 18678
IP address blocks: 170.238.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 21:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:48:bf:95:e9:04:86:61:22:4f:84:b3:c5:80:97:53:24:d9:89:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Validity
Not Before: Apr 1 01:10:01 2026 GMT
Not After : Mar 31 01:15:01 2027 GMT
Subject: CN=BE0850AC6A42D6A129B5592DF38543DF5CE10FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:9b:a6:17:bb:4d:6e:af:8e:72:64:93:4c:
ed:74:f6:78:02:03:5f:b9:cc:05:7e:b3:9c:e2:77:
5c:8d:f0:8a:dc:70:d5:ea:56:e3:5c:cb:8c:c7:0b:
48:19:3d:ca:ce:e7:08:a5:1a:b4:77:e0:d3:99:d0:
c9:31:91:93:e8:b9:cc:2f:ed:18:ea:c3:03:53:f8:
d9:d4:ce:b0:10:7c:ba:bb:f4:bb:ff:f1:1f:64:bd:
1b:20:29:16:f3:60:69:9c:ff:71:cc:df:91:20:7a:
f9:35:99:92:1d:af:17:72:01:ad:ff:c4:39:4e:f5:
f0:1e:44:df:71:9f:61:3e:82:5b:fc:c6:de:34:86:
3a:a0:f2:35:7e:93:67:f3:5f:2a:84:78:b2:b7:a5:
c5:a8:97:ef:3f:f9:69:26:8a:fb:73:23:43:d5:0b:
85:75:db:81:c9:49:c1:5e:85:92:b9:cc:86:c2:23:
d1:d6:be:cd:33:c0:27:e3:ac:a3:93:0d:c8:98:b6:
17:79:96:61:6a:23:8c:6b:9f:b9:76:97:b8:ac:1c:
bc:47:16:4f:8e:a9:e4:11:3e:7c:2f:2d:c9:ae:24:
fa:72:48:0d:83:34:fa:af:0d:37:d7:43:e6:d4:ce:
a9:21:2e:7e:5c:89:d8:69:e8:ca:a6:b5:5a:ae:ef:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:50:AC:6A:42:D6:A1:29:B5:59:2D:F3:85:43:DF:5C:E1:0F:B9
X509v3 Authority Key Identifier:
keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233372e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.237.0/24
Signature Algorithm: sha256WithRSAEncryption
01:49:e5:1f:e3:a5:eb:10:87:f9:84:97:24:69:78:68:44:1e:
14:c1:c7:ea:3b:46:e0:cc:aa:af:28:7e:9b:68:7f:e5:cc:3d:
03:c5:f5:21:5b:26:2b:13:8c:d2:ea:5c:27:2e:8c:49:0e:49:
95:4f:ed:90:60:71:5b:a7:36:a7:52:56:f3:e0:49:92:45:98:
08:5b:3b:c4:97:ac:92:ba:d2:b7:4b:9f:c0:3f:36:81:ed:11:
50:82:34:74:d1:54:7a:bc:89:1d:8a:11:12:c3:fb:fe:21:48:
b7:4e:80:f3:e2:fc:31:cb:1f:c7:4e:82:95:82:77:18:fe:68:
44:c2:2b:dd:ef:c2:44:dc:71:2a:29:f4:99:bc:07:bc:2d:0c:
cc:79:72:3b:fd:f9:de:5d:88:3b:6a:63:38:84:98:e5:96:26:
9c:1e:f1:30:7d:f3:4e:7a:ba:0d:73:b3:99:cc:39:86:a6:b4:
a7:e9:cf:05:38:48:47:eb:44:41:1a:ed:73:cf:7b:a0:63:c6:
be:04:d0:9e:1a:f5:fc:9e:8a:75:44:39:39:1c:0d:77:5f:8b:
d1:80:af:aa:97:56:ef:5a:11:f9:ac:ac:0b:96:5a:fa:3c:9f:
f5:7a:54:3e:63:bc:2f:f2:18:84:ca:e8:cd:f0:86:02:8e:aa:
1b:b6:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:56:12 2026 by rpki-client