
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/34352e352e302e302f32322d3234203d3e20323635363837.roa
File: 34352e352e302e302f32322d3234203d3e20323635363837.roa (raw, json)
Hash identifier: 3hoDfdeeC31YOikr0EP2oJFGRdJtg3T27fOUb4jXnDw=
Subject key identifier: 33:84:6D:01:DC:5B:2D:F3:EE:3F:97:62:C5:93:7C:EB:EE:5A:60:E9
Certificate issuer: /CN=6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1
Certificate serial: 1BE14E6D8019567BB9C8797B74777FDF097C111E
Authority key identifier: 68:53:E1:5E:31:06:DD:BC:2E:82:BF:3D:87:68:DF:53:9A:E3:FC:D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/34352e352e302e302f32322d3234203d3e20323635363837.roa
Signing time: Wed 11 Feb 2026 16:50:00 +0000
ROA not before: Wed 11 Feb 2026 16:45:00 +0000
ROA not after: Wed 10 Feb 2027 16:50:00 +0000
asID: 265687
IP address blocks: 45.5.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.crl
rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e1:4e:6d:80:19:56:7b:b9:c8:79:7b:74:77:7f:df:09:7c:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1
Validity
Not Before: Feb 11 16:45:00 2026 GMT
Not After : Feb 10 16:50:00 2027 GMT
Subject: CN=33846D01DC5B2DF3EE3F9762C5937CEBEE5A60E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:30:9f:64:92:59:fd:01:b3:77:73:d6:6a:
21:cf:c3:a4:6a:55:5d:78:ae:55:6f:e9:ae:79:87:
55:d3:ad:7f:b5:cc:ac:e7:35:27:aa:57:1c:be:59:
4f:51:17:d3:cd:98:7c:6b:ee:ba:27:b0:f8:14:2c:
07:58:a4:78:f8:78:68:03:c2:45:62:05:76:8a:f3:
59:a4:41:86:43:1b:bf:3b:18:fe:d5:22:37:e2:52:
01:83:4f:dc:41:27:44:b6:86:a4:65:a3:23:6a:58:
79:70:25:b9:e4:35:9e:05:6c:8d:f8:e2:f1:93:1b:
5f:20:3c:f9:5b:21:1a:19:48:e1:f5:8f:06:ef:d0:
f1:26:8e:df:99:7c:7a:ba:be:88:65:2e:b4:67:4d:
3d:01:a8:63:86:48:48:9a:37:89:67:4d:21:7d:39:
87:b1:a2:c0:1e:2a:fc:24:b3:29:a0:dd:50:ef:f7:
75:87:bc:c3:60:9c:9f:fb:41:47:ae:db:1f:7a:bb:
fd:de:57:4f:5b:06:28:b5:5e:e8:0a:6c:08:cb:2a:
88:57:f4:84:9c:7d:ee:15:70:64:7b:79:1a:3a:b9:
4a:44:cc:a5:de:80:f4:c0:4f:bd:22:b4:fb:91:de:
66:f1:a2:97:6a:6e:7d:bc:4e:bc:8c:1b:c9:31:9b:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:6D:01:DC:5B:2D:F3:EE:3F:97:62:C5:93:7C:EB:EE:5A:60:E9
X509v3 Authority Key Identifier:
keyid:68:53:E1:5E:31:06:DD:BC:2E:82:BF:3D:87:68:DF:53:9A:E3:FC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/34352e352e302e302f32322d3234203d3e20323635363837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a4:da:0f:6e:fe:04:fb:1e:c7:e6:55:bd:f1:de:80:2c:20:
f8:17:0d:3f:c8:bd:0e:9a:bc:08:87:fa:e7:43:db:58:0f:3b:
4e:f4:83:11:40:d0:cf:8b:4b:09:a0:6a:58:03:76:83:33:eb:
03:89:f0:43:74:55:8c:f3:f4:74:75:85:3a:d6:5e:08:67:f8:
36:5f:95:b0:e5:c4:31:59:fd:d8:d7:42:a2:58:f7:d2:d0:e9:
b9:f0:d2:5e:58:85:2f:99:52:65:e2:a9:8a:1a:43:5f:da:3e:
a1:39:e5:2a:2c:af:99:06:4c:1d:57:4c:a7:1c:cd:4a:4e:a8:
da:73:63:be:3d:f6:2b:e0:59:32:09:51:34:a8:34:a0:f9:3c:
24:00:51:3f:1a:b2:3e:6d:69:2f:7f:70:16:58:bb:70:88:35:
82:3d:73:f9:32:b0:12:c8:3f:4b:d2:6d:b9:61:08:83:dc:ea:
d0:af:92:8f:8c:c5:ce:e9:38:24:ce:9b:f2:9f:61:b7:bc:02:
b0:e9:a5:dd:2c:80:1d:9a:29:0b:42:cc:e3:bd:53:6f:3b:e9:
99:92:92:b5:55:3a:19:8e:66:cd:e2:7d:17:c6:d1:63:d0:68:
b4:a0:a1:76:1c:d9:0e:fd:d8:bd:db:7a:32:91:dc:28:0f:24:
87:9b:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:52 2026 by rpki-client