
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e203138363738.roa
File: 3230302e32342e322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: CL8GNI8/dh71xZRvxha2d6q6UvYNKqGdUvrKW1QLnyw=
Subject key identifier: 24:D0:9A:41:B8:75:E1:C4:2C:3D:4A:25:23:7E:37:89:82:20:7D:CF
Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial: 7B69E274DB94704D90191E853C523DD0EF88C29E
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e203138363738.roa
Signing time: Thu 16 Apr 2026 16:05:00 +0000
ROA not before: Thu 16 Apr 2026 16:00:00 +0000
ROA not after: Thu 15 Apr 2027 16:05:00 +0000
asID: 18678
IP address blocks: 200.24.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 12:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:69:e2:74:db:94:70:4d:90:19:1e:85:3c:52:3d:d0:ef:88:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Validity
Not Before: Apr 16 16:00:00 2026 GMT
Not After : Apr 15 16:05:00 2027 GMT
Subject: CN=24D09A41B875E1C42C3D4A25237E378982207DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:d0:90:15:c7:f1:75:6b:9e:3e:ee:96:8b:
ed:d8:d7:62:dc:60:3d:82:39:6f:56:fd:ff:b1:c1:
ea:08:9b:ef:2c:e9:63:db:e8:eb:6f:7c:03:4d:22:
4b:c2:48:74:95:48:6c:7e:63:da:3e:77:f6:fc:ec:
07:4d:13:fc:ef:d5:0a:92:9c:86:93:23:dd:27:1f:
16:1d:1d:b8:51:46:a5:df:1b:59:a2:c6:d7:c5:c6:
be:0f:5a:2d:74:29:58:25:e8:83:1a:90:4d:89:8e:
00:b8:27:44:c9:85:07:ce:2c:bf:25:41:f4:d5:23:
3c:d5:0a:bd:0d:12:5c:de:21:2d:cf:ff:94:a9:83:
25:2f:3c:b3:5a:5f:d9:d4:d9:98:79:af:35:bc:e1:
0b:45:13:51:18:b7:be:60:2a:46:d7:1c:b0:47:e2:
56:1c:59:ef:98:89:d4:21:9a:84:c3:5a:9b:87:a5:
cb:5f:ff:6f:f8:80:83:b4:28:a1:99:d9:02:d7:b4:
a5:3d:0b:07:ea:2d:3f:24:94:55:07:08:67:a9:fc:
8a:33:6b:0f:79:57:5c:95:d1:0f:35:3f:c5:c7:3e:
67:81:d9:c0:ad:ca:87:5e:87:81:16:c1:55:50:cc:
87:4e:42:30:7a:7c:b2:d7:02:1e:fb:1f:bb:2d:bc:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:9A:41:B8:75:E1:C4:2C:3D:4A:25:23:7E:37:89:82:20:7D:CF
X509v3 Authority Key Identifier:
keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.2.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:70:70:37:5b:24:ea:b1:2e:b7:98:34:6f:43:09:96:55:d0:
43:2d:91:1f:cb:6e:47:a1:1f:34:f8:0f:3d:e7:2f:37:38:e5:
ae:c5:f3:30:0b:eb:f5:26:dc:b7:ce:b5:65:5d:df:27:34:0c:
fc:3a:5f:b2:5a:93:59:ba:bd:7b:1e:a4:ac:69:e6:1f:74:19:
85:83:fa:c3:87:7c:6c:87:27:91:b9:7a:f8:b2:d6:34:ff:a7:
02:9f:5a:1a:d0:7c:22:67:9b:ea:c3:dc:5a:59:53:9a:e7:b4:
18:a5:27:62:f3:1f:dd:5e:3f:1d:ba:e7:1b:7e:a4:64:4b:71:
e2:e4:dd:42:d3:d6:d0:86:ee:fa:e1:fd:b3:95:e2:1d:4f:ab:
48:58:be:2b:f8:65:da:fc:e3:a9:1a:2a:3e:47:34:14:84:b5:
6f:eb:b8:24:80:c6:50:1b:57:ad:7c:16:f1:44:ab:6e:90:f1:
b6:78:37:70:cd:61:54:f9:3d:c5:85:38:a8:cc:c2:25:3e:5a:
e6:e8:5b:da:96:60:45:10:dc:1c:f9:34:4d:1f:1c:5d:ad:ba:
57:d0:25:34:70:80:c2:7c:46:ce:6c:90:24:67:03:d2:55:f3:
9f:1b:a6:43:c0:02:83:0d:a6:6d:df:bf:a8:14:12:8b:b8:c3:
1d:d2:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:55 2026 by rpki-client