
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132343a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a3132343a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: N6bN4Y95x6CfBRlJ4IIXQSyYjFK7ozgBFPxlSC5QbZ0=
Subject key identifier: D0:D3:2D:9B:53:95:17:D7:CF:D2:20:16:2B:5D:69:71:E4:1F:C9:3F
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 568D9C563A450BD1E19C4627E11587582F26EDE9
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132343a3a2f34382d3438203d3e20323632323439.roa
Signing time: Mon 19 Oct 2026 12:41:54 +0000
ROA not before: Mon 19 Oct 2026 12:36:54 +0000
ROA not after: Mon 18 Oct 2027 12:41:54 +0000
asID: 262249
IP address blocks: 2801:140:124::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 23 Oct 2026 22:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8d:9c:56:3a:45:0b:d1:e1:9c:46:27:e1:15:87:58:2f:26:ed:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Oct 19 12:36:54 2026 GMT
Not After : Oct 18 12:41:54 2027 GMT
Subject: CN=D0D32D9B539517D7CFD220162B5D6971E41FC93F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:42:6f:f2:31:c3:c3:62:f8:61:5c:04:10:
32:d5:f0:25:49:71:7c:5b:7c:75:37:83:44:b5:b0:
aa:74:34:73:a7:22:9f:6d:bc:a3:15:d3:1c:1f:c1:
db:a3:e9:6c:72:c1:c0:61:8f:32:ac:c5:6b:da:92:
6b:71:92:e8:7c:47:81:be:4d:f1:ab:99:6c:0a:07:
18:b3:a9:10:3d:3a:bb:33:06:b5:5b:96:55:84:88:
3d:5f:27:dc:01:d1:2c:d4:6d:3b:c9:6a:cf:ce:b9:
f3:a2:5c:f9:ba:94:44:a2:e9:be:42:c6:23:cd:0e:
67:bb:15:d8:ed:bc:51:6e:6e:32:94:ab:0f:8f:3d:
a9:4d:83:20:71:3f:bc:16:0a:fc:f6:a6:54:70:b8:
27:83:61:33:7c:e8:2b:fb:bb:11:4e:39:d1:41:a8:
b0:69:30:3c:6d:e0:df:f1:a7:4e:11:31:d2:64:b0:
6c:f0:8e:be:a3:bf:ea:fa:f8:17:5f:bb:f2:e1:15:
a6:e8:a9:9e:93:c7:54:47:54:bf:55:48:2b:92:90:
32:e7:ca:fe:73:2a:31:0c:00:39:88:a0:ac:cf:da:
d8:46:40:db:99:a7:76:5b:ac:63:b2:d0:7b:68:51:
04:86:64:f1:33:82:c0:e3:94:f2:ca:66:ed:e3:5b:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:2D:9B:53:95:17:D7:CF:D2:20:16:2B:5D:69:71:E4:1F:C9:3F
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132343a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:124::/48
Signature Algorithm: sha256WithRSAEncryption
21:6a:15:aa:e7:69:61:d0:31:29:01:61:02:6b:eb:c7:c6:db:
22:e1:70:89:2e:a6:7b:af:2a:31:c2:20:96:54:d5:56:97:d5:
68:7f:4f:f2:06:0d:99:49:62:47:83:b0:27:a3:7c:1d:32:87:
6c:3a:88:d1:c4:3f:f6:34:e8:b2:6b:58:e2:38:aa:ab:3e:d0:
e3:b3:8c:c3:89:3a:62:cd:b9:ff:f3:83:ca:c9:e0:42:f7:4b:
c5:cb:48:97:25:e6:1f:09:c8:33:d1:f6:21:31:3a:44:f7:db:
64:3f:94:f3:5f:53:17:b2:0e:e8:1f:d2:9b:82:fc:be:a7:47:
01:51:f9:df:6c:00:d1:f7:01:f3:cf:b6:af:0d:c6:ac:3d:61:
1b:15:68:33:6f:05:9b:ec:47:f2:22:1d:6c:8a:0c:9c:86:29:
75:8d:2e:3a:93:e8:76:4e:84:1c:3b:94:73:37:c9:94:33:58:
a6:75:54:3c:b7:a3:94:bd:46:11:52:45:d7:53:6e:22:aa:a9:
d2:0f:70:9a:1a:39:c6:39:f6:cb:72:84:28:17:dc:55:5c:d6:
c1:87:9f:10:59:0e:2a:31:a7:4e:cf:84:01:3f:20:2e:d7:9a:
23:86:9f:6e:a8:c9:b9:fc:35:fe:6e:b9:77:da:5c:e6:9b:f6:
d7:e4:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:38:19 2026 by rpki-client