
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e342e302f32342d3234203d3e203138363738.roa
File: 3230302e32342e342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: UsZIIGmiZKQ+ULkT9CT3N/m1wcc6LpjPV4tpn6qaaB8=
Subject key identifier: EE:AC:E0:68:BA:28:B5:CF:EE:8E:5A:E3:8A:7B:A9:0B:E3:FF:0E:01
Certificate issuer: /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial: 54B7BA21D68667DF68B2960D7D0561A50351A2DD
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e342e302f32342d3234203d3e203138363738.roa
Signing time: Thu 16 Apr 2026 16:05:00 +0000
ROA not before: Thu 16 Apr 2026 16:00:00 +0000
ROA not after: Thu 15 Apr 2027 16:05:00 +0000
asID: 18678
IP address blocks: 200.24.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 12:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b7:ba:21:d6:86:67:df:68:b2:96:0d:7d:05:61:a5:03:51:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Validity
Not Before: Apr 16 16:00:00 2026 GMT
Not After : Apr 15 16:05:00 2027 GMT
Subject: CN=EEACE068BA28B5CFEE8E5AE38A7BA90BE3FF0E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:d1:82:90:64:8a:3f:77:1f:0b:22:4d:cd:
4e:e3:64:f2:a9:64:89:71:a5:7b:74:e8:95:a2:22:
bf:94:7d:f4:57:12:71:96:5c:9d:6b:82:b9:15:fc:
ca:09:2d:30:ba:2e:63:d4:41:97:93:e3:98:df:ee:
e0:01:a2:eb:24:5f:c1:88:81:23:0c:b5:dc:41:b5:
3d:f3:a6:fa:8b:a6:86:17:24:34:6d:1f:4c:52:f9:
3c:d8:36:4c:32:32:43:57:15:33:5c:47:09:b2:53:
67:9f:e9:23:cc:e8:48:7c:0a:a6:e8:29:0a:f3:b6:
16:6b:6f:7a:24:39:af:8c:98:a3:41:48:6d:1b:c8:
80:d7:93:36:02:30:0c:64:03:63:b0:62:11:b0:0c:
96:79:82:e7:ac:00:65:80:50:a7:26:66:51:17:22:
6a:9f:17:53:3d:81:50:3b:03:2c:b8:6e:35:8c:91:
a9:cf:77:8e:b8:57:eb:86:64:b4:7e:0c:22:bb:12:
a9:f5:7d:20:d2:ba:2c:ab:3a:6c:2e:3c:7a:04:70:
a7:4d:b3:5b:c2:77:9a:ff:5c:db:7a:3f:5c:f1:8d:
5a:88:15:61:8b:27:7b:8a:ff:26:62:a1:7f:d4:b2:
88:3b:ee:ac:f4:a6:de:9c:1e:64:58:09:0c:11:1c:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:E0:68:BA:28:B5:CF:EE:8E:5A:E3:8A:7B:A9:0B:E3:FF:0E:01
X509v3 Authority Key Identifier:
keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e342e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.4.0/24
Signature Algorithm: sha256WithRSAEncryption
32:78:35:64:01:ad:85:78:d8:99:5c:eb:bb:4d:ab:d7:ca:96:
01:79:8b:e1:c9:da:dc:e7:56:58:41:8a:96:41:30:2d:35:64:
b6:61:98:8e:79:55:8c:a5:a8:ed:c1:f9:05:cf:d6:97:68:c2:
17:8b:eb:ec:b3:6b:83:fd:f2:7c:5b:4e:7d:93:63:1e:4a:24:
6a:b2:b4:d0:d7:f7:4d:0d:f3:76:9e:55:5f:54:98:bc:46:8c:
99:b8:5c:87:de:3c:20:4e:28:3e:3b:3f:9d:11:e8:7e:5e:00:
d9:f5:ea:dd:04:9d:de:c9:28:81:d2:da:60:d2:e2:03:e0:7c:
6f:6b:e6:7b:cc:a3:f5:dc:33:ca:dc:7d:8b:90:25:08:13:40:
7f:4c:ca:2f:22:26:40:23:be:57:19:a9:cd:5a:d2:5c:7b:5d:
74:86:59:79:be:6f:9a:b9:1d:32:01:6a:83:3f:f2:3b:cc:84:
66:88:9d:b8:90:11:8c:9f:81:73:8e:37:57:33:c6:f7:be:e2:
b5:b5:d8:f4:86:d5:c1:36:a5:02:2f:d5:b7:4c:d1:18:10:87:
95:33:3e:29:11:f9:e5:c3:03:84:90:1a:e8:2d:bc:bb:50:23:
90:5d:44:0a:80:a3:d3:1a:ca:83:2f:e1:77:f8:a4:74:5f:aa:
67:fc:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:25:54 2026 by rpki-client