
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233382e302f32342d3234203d3e203138363738.roa
File: 3137302e3233382e3233382e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: s0VEjIGhnHhXZRFgnm2oFhycjJZPjvOLG+E+0Ts/gmc=
Subject key identifier: 28:7C:61:71:3E:39:8A:64:1A:86:1B:90:54:E2:09:B3:85:2F:DA:F0
Certificate issuer: /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial: 2142D73E9C952A9866D70A7F6A7B68D24850606F
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233382e302f32342d3234203d3e203138363738.roa
Signing time: Wed 01 Apr 2026 01:15:00 +0000
ROA not before: Wed 01 Apr 2026 01:10:00 +0000
ROA not after: Wed 31 Mar 2027 01:15:00 +0000
asID: 18678
IP address blocks: 170.238.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 21:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:42:d7:3e:9c:95:2a:98:66:d7:0a:7f:6a:7b:68:d2:48:50:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Validity
Not Before: Apr 1 01:10:00 2026 GMT
Not After : Mar 31 01:15:00 2027 GMT
Subject: CN=287C61713E398A641A861B9054E209B3852FDAF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:0c:f2:24:79:01:ac:d3:5c:3b:a7:a4:d3:
25:2e:0c:60:b0:14:8c:c8:f3:4e:ab:30:2a:fd:f6:
9c:42:f0:e2:b5:e7:1b:64:86:f8:9a:1b:f4:f3:cd:
40:c7:89:cd:2d:e1:a7:d6:ea:9a:b2:d3:9a:2d:84:
f6:0b:a5:d5:5f:8b:17:da:33:dd:b8:ad:b8:47:54:
7f:3b:d1:09:48:03:be:7c:b0:ae:81:81:d8:f9:35:
32:ae:6b:93:36:d5:01:64:fb:dd:d2:5b:8b:51:eb:
20:c0:b5:6d:53:a6:16:c0:af:14:43:44:8f:70:cf:
2f:ba:e3:a3:8e:f1:2a:77:a9:9f:e2:d6:41:65:f3:
81:b3:e9:b9:49:1a:24:97:7f:cc:0d:b0:62:a9:0d:
45:e5:98:f4:50:9a:a8:3c:2a:37:10:60:56:0b:43:
0b:cd:85:cf:85:0d:fd:46:16:ac:77:9d:6c:b7:57:
9e:67:d9:3d:47:ce:7a:43:fa:8c:0b:ff:63:4e:0d:
54:07:4f:0f:16:a5:44:9b:27:d9:f1:6a:65:77:c4:
5c:31:e3:55:35:30:e0:92:b1:5d:f9:b7:a5:c1:bc:
4a:b6:3d:02:0c:ea:03:33:78:12:35:a6:e2:2c:a6:
10:6c:22:60:90:e1:cb:7f:bb:02:fc:12:bb:00:fa:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7C:61:71:3E:39:8A:64:1A:86:1B:90:54:E2:09:B3:85:2F:DA:F0
X509v3 Authority Key Identifier:
keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233382e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d5:77:5c:10:32:db:b9:00:21:fd:4e:63:af:73:75:b9:18:
68:0f:62:51:33:0b:d0:ef:21:50:4c:6e:bc:2a:09:0c:fe:6f:
9c:84:10:01:9b:c3:26:af:79:77:09:8a:b1:31:95:3b:9d:98:
a0:0b:ea:a6:86:b1:ad:83:28:50:01:77:94:02:dd:67:76:5a:
98:98:ae:d8:97:5f:d3:d3:ff:db:93:d4:76:d4:72:74:51:10:
cb:6f:24:8a:78:eb:32:7d:e9:72:5f:05:75:4b:fa:20:34:6a:
52:dd:be:b6:af:e1:75:d8:09:f2:cd:3e:3a:f7:c4:c5:62:c5:
85:44:82:10:35:3b:c2:fa:8e:29:09:30:9d:22:6d:3f:b5:45:
b7:8a:15:23:10:5c:47:05:15:49:d9:ec:d4:36:29:5e:ab:35:
2c:14:1e:93:78:59:36:ba:b5:06:41:8d:dd:85:b6:c7:77:4c:
1c:95:1c:f2:a6:a6:71:06:b1:ac:3d:13:e0:b7:38:23:12:db:
f9:6a:4c:38:60:89:8e:de:c4:60:4d:5f:06:fb:3b:d4:cd:d2:
36:5f:13:cd:06:57:52:b6:1a:41:c2:aa:f5:c9:fe:d4:23:78:
5b:3e:3c:fc:03:b5:af:d5:3a:ff:56:1a:39:26:54:fa:fe:e5:
6d:27:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:56:14 2026 by rpki-client