
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e37352e39362e302f31392d3234203d3e203231383236.roa
File: 3230302e37352e39362e302f31392d3234203d3e203231383236.roa (raw, json)
Hash identifier: KxGeLZC/1ANq+xfH32/LuARf4XcQCWdommeisHh0s1M=
Subject key identifier: CA:DE:FC:35:CF:49:16:FC:80:4E:85:8A:B8:B8:F9:98:52:66:7E:F2
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 28A7DA9196ADE303F496BC360126311084C76F71
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e37352e39362e302f31392d3234203d3e203231383236.roa
Signing time: Tue 06 Jan 2026 19:37:43 +0000
ROA not before: Tue 06 Jan 2026 19:32:43 +0000
ROA not after: Tue 05 Jan 2027 19:37:43 +0000
asID: 21826
IP address blocks: 200.75.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a7:da:91:96:ad:e3:03:f4:96:bc:36:01:26:31:10:84:c7:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Jan 6 19:32:43 2026 GMT
Not After : Jan 5 19:37:43 2027 GMT
Subject: CN=CADEFC35CF4916FC804E858AB8B8F99852667EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:38:0f:40:eb:5f:ff:75:c7:98:99:17:6d:
3d:31:f0:61:1c:8f:e5:1c:dd:31:20:85:f8:4d:b8:
06:f4:f7:d4:15:77:e9:c5:4d:a3:3f:b3:b5:90:91:
b9:a4:44:18:ce:14:e8:f1:82:e4:90:dc:2d:fd:85:
93:7d:6d:39:fe:22:18:20:98:aa:4d:ea:7f:7b:d5:
7c:21:39:80:aa:f5:24:6d:7f:ab:25:72:52:f8:79:
73:08:b0:df:10:24:16:ee:b7:9f:22:9d:ba:67:72:
22:b4:f5:60:3b:5f:be:4b:92:4e:fc:dc:35:a2:b8:
cf:8e:6d:63:0a:c5:23:12:1a:7e:4b:5b:3d:ab:b2:
47:ec:f0:f6:f0:17:75:09:79:1c:92:b4:cc:e0:df:
53:87:6d:15:cb:7f:20:f9:80:78:8a:33:3c:1b:2e:
46:e7:66:2d:08:d4:43:9f:3c:c4:94:8b:37:ae:96:
e6:4a:9b:bc:bf:24:fb:0c:ae:8b:aa:08:94:b5:87:
44:56:ea:26:86:25:6e:cc:65:ed:5b:98:39:04:d8:
3d:5f:65:f6:c6:12:ae:28:3a:60:ea:d0:fb:fc:30:
27:c8:e9:7d:6d:f4:3b:05:03:da:1e:8d:b4:45:f2:
33:8b:3a:3e:96:3b:99:6e:95:b8:bf:ad:dd:8a:80:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DE:FC:35:CF:49:16:FC:80:4E:85:8A:B8:B8:F9:98:52:66:7E:F2
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e37352e39362e302f31392d3234203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.75.96.0/19
Signature Algorithm: sha256WithRSAEncryption
12:a0:96:18:ba:51:48:c3:8e:17:5c:fb:44:d3:7f:30:99:b2:
30:f5:3f:69:86:f5:a9:73:92:49:b1:af:0b:9d:9c:42:6c:b7:
20:15:08:dd:f1:c8:ce:43:88:cc:cb:06:ae:fa:1a:38:54:73:
dd:ad:a9:cd:5f:62:cf:fc:a1:ce:81:86:be:93:64:8f:c2:53:
c1:9e:7e:9d:7e:9c:83:56:a7:7a:6c:2b:ba:46:e0:c3:43:6e:
3f:ac:3c:7d:f3:7b:ff:7c:4e:2f:d1:02:76:0f:09:a6:3e:38:
31:c3:ae:d2:9a:8b:34:d1:20:3e:fd:de:6b:da:dc:53:af:05:
72:54:15:d9:80:81:15:99:c5:df:f3:e2:4e:86:62:97:03:28:
41:8b:14:22:ff:ff:d8:46:03:09:62:a1:15:62:aa:1f:a1:8e:
fb:2f:c5:44:35:58:33:fe:ed:b9:8c:f8:90:b9:11:fd:11:e3:
29:d3:41:18:f8:0f:2c:45:de:03:2c:cf:e0:b2:c7:89:ce:e0:
24:6c:11:d4:cf:22:ba:6a:fc:fc:91:c9:ed:ab:c5:fc:64:42:
19:40:5a:26:8e:07:c1:40:d0:d6:e9:e8:1a:be:8c:37:61:7c:
c2:a1:7b:95:a3:ff:5b:7c:bb:2a:ec:1f:7b:e7:59:6b:c4:b6:
97:03:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:57:15 2026 by rpki-client