
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: KCKLOlmrq2lSLoX5fRCRdQNVx6X8bq8xlC6tKNXH/Is=
Subject key identifier: 23:A7:5E:91:F7:91:6A:10:C8:CC:D4:16:2A:B3:6C:27:D7:B1:42:2E
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 5D619FB572EF9F75369B3AEE702D8ACF96076BD0
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
Signing time: Mon 19 Oct 2026 12:41:52 +0000
ROA not before: Mon 19 Oct 2026 12:36:52 +0000
ROA not after: Mon 18 Oct 2027 12:41:52 +0000
asID: 262249
IP address blocks: 2801:140:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 23:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:61:9f:b5:72:ef:9f:75:36:9b:3a:ee:70:2d:8a:cf:96:07:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Oct 19 12:36:52 2026 GMT
Not After : Oct 18 12:41:52 2027 GMT
Subject: CN=23A75E91F7916A10C8CCD4162AB36C27D7B1422E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:61:ce:3f:f0:85:76:99:e2:fc:a9:6d:c1:
f8:20:50:d3:d9:34:bd:7e:13:89:2c:65:fd:5b:02:
7b:df:7e:fe:f4:04:1d:0b:cd:51:86:37:7b:94:cf:
5e:a2:05:72:c4:e9:b6:64:5e:fb:b9:b9:96:fa:2a:
25:32:c2:aa:52:88:17:44:cf:d1:96:26:c8:8d:05:
11:82:7b:b4:05:c5:f5:e1:c4:cf:bc:af:dc:f6:70:
dd:fc:6f:d3:5e:55:35:e0:36:f8:a9:f6:d5:cc:d0:
56:54:fc:dc:47:32:27:56:cf:55:13:0b:0f:a3:08:
59:93:8e:28:c6:4a:0b:0d:3b:d8:73:51:bc:95:89:
57:4e:af:4c:b9:a0:18:fe:a2:56:7f:e0:9b:50:3f:
d9:15:e5:bd:1f:7b:f7:20:92:26:e3:ec:77:4e:ba:
ef:50:13:7e:fd:71:69:a5:96:d0:10:78:a9:d3:16:
8d:d7:24:95:55:14:16:79:76:45:0e:55:ab:01:3d:
f7:9f:a0:f7:cf:d6:5d:54:84:e0:9f:8c:c2:79:19:
9f:ea:45:f7:f7:60:46:36:07:f1:3e:24:a0:39:0c:
ee:b4:f5:2a:82:18:65:e4:0d:2d:97:70:80:1f:42:
62:a6:1b:00:21:d5:ed:e7:f1:b4:5c:a5:58:d1:6d:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:5E:91:F7:91:6A:10:C8:CC:D4:16:2A:B3:6C:27:D7:B1:42:2E
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132323a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:122::/48
Signature Algorithm: sha256WithRSAEncryption
28:d6:0d:95:6f:d6:dc:7f:b0:35:7c:29:d7:cd:57:a7:f1:53:
65:66:dd:fa:48:6f:9e:5b:54:79:39:a6:dd:c9:5a:3d:46:5a:
b2:96:3c:ef:35:1d:dc:f1:5d:00:4c:e6:53:c7:de:a6:f6:a8:
51:6d:12:e2:9d:ea:01:f8:2c:f5:98:13:9e:c8:18:c1:83:d1:
18:84:3a:5b:c8:ee:29:5f:d2:ad:9a:68:a8:62:c4:9f:cc:26:
10:74:74:ea:64:87:f0:54:9d:6a:5a:6f:69:25:d4:57:47:10:
9f:f3:d0:23:51:58:e5:03:68:7f:3e:92:4b:01:e8:3c:67:dc:
8f:d7:69:61:fd:d6:81:8e:09:0c:31:e7:a6:0c:23:28:0f:78:
b8:2d:b4:08:84:50:3d:80:4f:34:55:5a:39:99:ec:b5:34:fa:
67:93:0f:b3:43:a5:30:98:df:d1:2c:3f:25:51:c4:89:cd:88:
b6:a9:24:2c:72:eb:61:1e:50:88:01:f6:85:ea:8e:77:f8:e2:
f5:66:9d:d2:bd:9b:c8:20:f5:ae:5d:a1:7e:03:d4:a3:67:54:
9f:60:4f:38:e7:29:d8:6d:49:1d:de:bb:d7:85:01:20:74:06:
6b:f9:ba:9e:f9:65:a7:eb:53:46:65:86:66:55:f7:e2:22:e2:
1d:ee:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:05:58 2026 by rpki-client