
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: vmw3bMCmrW65QYnayFNeRIbHIt+e5cC+fFnhqPDePj8=
Subject key identifier: BA:CE:2A:DC:3D:94:BE:E4:95:16:99:21:AF:F3:F6:EC:43:30:A0:D3
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 32CA0589974C78EEDE837E71CAE2E28731C4B01F
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
Signing time: Mon 19 Oct 2026 12:41:54 +0000
ROA not before: Mon 19 Oct 2026 12:36:54 +0000
ROA not after: Mon 18 Oct 2027 12:41:54 +0000
asID: 262249
IP address blocks: 2801:140:bfa::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 18:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ca:05:89:97:4c:78:ee:de:83:7e:71:ca:e2:e2:87:31:c4:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Oct 19 12:36:54 2026 GMT
Not After : Oct 18 12:41:54 2027 GMT
Subject: CN=BACE2ADC3D94BEE495169921AFF3F6EC4330A0D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:13:05:5b:5c:45:60:55:a8:f0:68:15:77:
6b:59:a6:2d:04:46:a2:e3:53:02:6c:ec:dc:f8:ad:
77:4c:c6:53:f3:f3:b1:5f:06:01:c4:d4:f7:93:46:
c5:b5:b0:4a:54:27:17:8a:3f:b6:95:eb:6b:95:af:
8e:b6:05:2a:7e:5b:6a:d8:ba:05:95:59:fc:c7:e1:
49:16:1d:6e:88:32:39:66:06:07:45:c7:b3:dd:33:
6f:b4:0c:d6:f5:31:cc:1a:71:82:70:f0:53:88:e9:
aa:e5:a7:2a:a0:3d:38:36:d3:d3:3a:d9:26:67:96:
e8:82:59:5f:ee:31:8e:ad:c8:c3:03:14:94:2a:6b:
b1:d3:3c:58:21:e8:a2:6d:4e:96:9e:c5:e3:e3:0e:
69:01:bc:38:4e:29:81:4c:1b:fe:8a:32:fd:b9:55:
a9:08:b5:2d:88:2a:76:86:41:b1:ca:7e:78:de:96:
95:a2:33:b5:7f:72:c9:db:1e:d4:0d:03:20:2a:30:
5b:96:2d:16:13:ea:b8:e7:44:6d:e1:ac:63:d3:45:
d7:a6:6f:3e:2e:2b:e2:2d:2f:f6:97:46:7d:8d:1f:
05:9e:00:bb:a1:7c:71:6f:05:5c:82:c2:75:ae:3d:
2f:12:55:0f:c8:ef:13:56:eb:c3:60:c7:48:52:41:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CE:2A:DC:3D:94:BE:E4:95:16:99:21:AF:F3:F6:EC:43:30:A0:D3
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:bfa::/48
Signature Algorithm: sha256WithRSAEncryption
0c:47:9f:fa:7a:81:86:df:cf:d4:c4:77:fe:ba:e1:8a:27:96:
d3:f0:0d:40:07:2c:a2:dc:37:93:8f:dc:b9:99:13:95:40:de:
d3:cb:9d:5e:04:95:26:34:fa:92:f8:c0:3d:af:5a:ec:97:c0:
18:18:8f:f0:67:93:83:d7:b1:4b:2a:4d:03:5a:b0:0a:fe:72:
17:e7:a9:32:8a:8a:44:60:5c:80:a8:b4:be:05:c5:92:a0:2c:
dc:3d:02:33:3f:91:79:17:dc:1d:3b:f5:1a:d2:af:91:e7:43:
63:a1:30:e2:25:84:f3:f2:b5:e3:e0:9f:b7:71:fc:88:51:49:
13:49:78:8d:91:c5:95:62:3b:86:f4:b0:92:3d:29:92:5e:84:
98:75:df:44:6e:0b:5f:f1:f1:ba:e3:d9:2d:03:09:7a:3d:a3:
e1:56:d3:e6:59:4b:95:df:4f:e1:e6:91:7c:29:c3:b5:fd:1b:
d0:9c:71:4c:7c:0e:94:17:35:4a:df:69:cc:e0:e8:32:1d:90:
ad:e6:51:a5:59:c5:84:bf:6b:f0:80:d8:6f:d3:b3:2f:6b:61:
3e:ae:6b:c3:9d:9c:c2:e5:10:56:cd:e0:dd:fd:a4:85:1e:ed:
22:f3:3c:58:59:e9:d7:de:59:8b:83:39:cb:be:30:2d:15:7d:
87:06:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:56:15 2026 by rpki-client