
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233392e302f32342d3234203d3e203138363738.roa
File: 3137302e3233382e3233392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: D9IOsduc5NMa0NGjexcoikh7ck67pT2AYb2g+RrZ5Ec=
Subject key identifier: 89:A0:6D:86:00:CD:5A:5E:77:14:14:84:47:97:94:21:1B:91:12:3B
Certificate issuer: /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial: 6A5094766E4C8CC6AD2F4F5EAAF7BB8C32103E2B
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233392e302f32342d3234203d3e203138363738.roa
Signing time: Wed 01 Apr 2026 00:35:00 +0000
ROA not before: Wed 01 Apr 2026 00:30:00 +0000
ROA not after: Wed 31 Mar 2027 00:35:00 +0000
asID: 18678
IP address blocks: 170.238.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 21:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:50:94:76:6e:4c:8c:c6:ad:2f:4f:5e:aa:f7:bb:8c:32:10:3e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Validity
Not Before: Apr 1 00:30:00 2026 GMT
Not After : Mar 31 00:35:00 2027 GMT
Subject: CN=89A06D8600CD5A5E77141484479794211B91123B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:27:2e:ec:6c:35:bf:82:ad:1e:53:cd:a0:
86:8d:4a:bb:87:46:79:da:8b:33:61:3c:bb:27:20:
c8:30:3d:f6:a4:ad:52:3a:76:bd:2e:00:58:f8:ff:
0f:b5:d1:8a:c2:2e:af:e8:f5:1f:94:37:cf:bd:7c:
13:3b:53:c5:d8:83:90:06:e0:be:35:df:94:2f:2a:
b4:17:fe:9e:e6:a5:21:29:04:e2:2b:12:a8:2d:24:
fc:0b:02:05:2c:a4:dd:9e:89:04:3d:6b:ec:ad:c0:
54:38:f5:d3:2c:47:e1:96:10:a2:c6:31:ee:e7:01:
ab:47:8b:85:8d:ce:3e:ea:8f:ad:2a:9e:7b:d0:b8:
44:e3:c7:f7:37:b6:b3:94:41:a3:77:79:09:32:d2:
1f:77:a5:9c:08:ab:93:62:3c:aa:09:16:67:fd:94:
38:16:db:eb:f8:a3:ea:37:33:85:24:06:26:d5:b0:
82:6a:82:22:ac:1a:9c:d6:f4:5d:aa:e4:8e:96:13:
91:a5:41:45:f3:b3:d8:9a:38:93:53:7e:16:0a:26:
40:ff:fa:e4:25:64:25:d9:0e:55:fb:e7:04:ca:28:
fc:51:f5:55:a7:22:e7:fa:5c:0c:93:1e:79:85:3d:
ce:63:8d:81:4d:4c:aa:1d:b3:37:83:e7:2d:2c:aa:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:6D:86:00:CD:5A:5E:77:14:14:84:47:97:94:21:1B:91:12:3B
X509v3 Authority Key Identifier:
keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233392e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cf:c0:b2:bf:c3:61:0e:21:91:64:ea:1f:f3:60:c7:f6:01:
8f:1a:83:a8:8a:7e:0d:62:76:3c:2e:92:9b:c1:00:b8:7c:fa:
86:a0:31:c3:4c:8a:d5:20:eb:10:7a:3c:c2:d0:d9:fd:87:ca:
d1:b7:20:34:75:85:33:95:ba:85:67:c4:a7:cb:5d:24:98:30:
c0:b7:46:c6:79:bd:80:30:d4:c8:0d:62:35:0d:b9:39:64:be:
72:6b:74:4c:0f:87:98:ee:e6:d8:3e:75:93:1a:34:22:d1:e7:
5b:87:19:b5:15:b9:fc:79:5f:85:be:17:62:e8:1a:a3:6a:43:
4a:af:4b:36:1a:5e:62:e1:f1:22:31:7c:75:b1:d4:bc:ee:6d:
6f:8f:19:ef:ef:e7:ef:d2:f3:7c:16:ef:9e:86:c0:22:15:5a:
b3:26:56:fb:ed:08:75:2c:39:cc:56:d0:06:ba:e3:c3:74:f2:
38:26:73:74:1b:64:d0:b6:62:fd:66:96:81:db:7d:3a:d2:1e:
fe:0c:36:7a:02:39:e0:a3:fa:9f:4d:8d:ba:d9:fd:f4:15:d7:
fd:bc:15:cd:ba:6c:65:14:89:05:05:20:96:fd:8d:32:24:cf:
f6:3e:94:51:32:f7:2c:40:bd:30:3e:32:15:a9:80:54:b6:39:
0f:ed:b4:53
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUalCUdm5MjMatL09eqve7jDIQPiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE5RkNCQTlGRkVBNDcxN0FCRjZBOUVGODVCN0M2MzZE
OUQyM0JFQTAeFw0yNjA0MDEwMDMwMDBaFw0yNzAzMzEwMDM1MDBaMDMxMTAvBgNV
BAMTKDg5QTA2RDg2MDBDRDVBNUU3NzE0MTQ4NDQ3OTc5NDIxMUI5MTEyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+Scu7Gw1v4KtHlPNoIaNSruH
RnnaizNhPLsnIMgwPfakrVI6dr0uAFj4/w+10YrCLq/o9R+UN8+9fBM7U8XYg5AG
4L4135QvKrQX/p7mpSEpBOIrEqgtJPwLAgUspN2eiQQ9a+ytwFQ49dMsR+GWEKLG
Me7nAatHi4WNzj7qj60qnnvQuETjx/c3trOUQaN3eQky0h93pZwIq5NiPKoJFmf9
lDgW2+v4o+o3M4UkBibVsIJqgiKsGpzW9F2q5I6WE5GlQUXzs9iaOJNTfhYKJkD/
+uQlZCXZDlX75wTKKPxR9VWnIuf6XAyTHnmFPc5jjYFNTKodszeD5y0sqp5PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiaBthgDNWl53FBSER5eUIRuREjswHwYDVR0j
BBgwFoAUIZ/Lqf/qRxer9qnvhbfGNtnSO+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjNFNDQxOTVCMTU2MTgyMjZGOTNBRjQyQTJENkNCNTJB
NkU3M0JDMUQwMjdDOTY0RUNEOTJBMDIxNkZGNkQ3LzAvMjE5RkNCQTlGRkVBNDcx
N0FCRjZBOUVGODVCN0M2MzZEOUQyM0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTlGQ0JBOUZGRUE0NzE3QUJG
NkE5RUY4NUI3QzYzNkQ5RDIzQkVBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYzRTQ0MTk1QjE1NjE4MjI2RjkzQUY0MkEyRDZDQjUyQTZFNzNCQzFE
MDI3Qzk2NEVDRDkyQTAyMTZGRjZENy8wLzMxMzczMDJlMzIzMzM4MmUzMjMzMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqu7v
MA0GCSqGSIb3DQEBCwUAA4IBAQB9z8Cyv8NhDiGRZOof82DH9gGPGoOoin4NYnY8
LpKbwQC4fPqGoDHDTIrVIOsQejzC0Nn9h8rRtyA0dYUzlbqFZ8Sny10kmDDAt0bG
eb2AMNTIDWI1Dbk5ZL5ya3RMD4eY7ubYPnWTGjQi0edbhxm1Fbn8eV+Fvhdi6Bqj
akNKr0s2Gl5i4fEiMXx1sdS87m1vjxnv7+fv0vN8Fu+ehsAiFVqzJlb77Qh1LDnM
VtAGuuPDdPI4JnN0G2TQtmL9ZpaB23060h7+DDZ6Ajngo/qfTY262f30Fdf9vBXN
umxlFIkFBSCW/Y0yJM/2PpRRMvcsQL0wPjIVqYBUtjkP7bRT
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:56:13 2026 by rpki-client