
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/323830333a343064303a3a2f33322d3332203d3e20323733383739.roa
File: 323830333a343064303a3a2f33322d3332203d3e20323733383739.roa (raw, json)
Hash identifier: O2KlFHpZ5Kz5TpjYBxXr5soCCj84xYeZ9tRxnldWAkM=
Subject key identifier: BA:1D:01:10:F8:B3:F3:D1:2F:86:3E:2D:80:95:17:67:14:CA:7B:76
Certificate issuer: /CN=1D2C016FE4F874EDFEEAC13022606926426A0F2E
Certificate serial: 2AAD7848C7BEB1828B897B0BB8DFBC4728228FD9
Authority key identifier: 1D:2C:01:6F:E4:F8:74:ED:FE:EA:C1:30:22:60:69:26:42:6A:0F:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/323830333a343064303a3a2f33322d3332203d3e20323733383739.roa
Signing time: Tue 24 Mar 2026 20:50:00 +0000
ROA not before: Tue 24 Mar 2026 20:45:00 +0000
ROA not after: Tue 23 Mar 2027 20:50:00 +0000
asID: 273879
IP address blocks: 2803:40d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.crl
rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ad:78:48:c7:be:b1:82:8b:89:7b:0b:b8:df:bc:47:28:22:8f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D2C016FE4F874EDFEEAC13022606926426A0F2E
Validity
Not Before: Mar 24 20:45:00 2026 GMT
Not After : Mar 23 20:50:00 2027 GMT
Subject: CN=BA1D0110F8B3F3D12F863E2D8095176714CA7B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:be:2e:ff:91:23:1c:bf:b6:61:b5:e0:ef:
1b:6a:f6:7c:8a:11:2d:f2:71:89:28:89:26:8c:7c:
15:c1:5e:1e:ea:08:9b:4e:d7:a5:38:9e:c0:74:e5:
74:8f:7d:8d:22:b4:76:54:d4:cd:26:18:17:d2:e4:
40:b1:5e:09:ef:64:62:e0:bf:a3:a6:a9:5a:22:15:
78:1b:ce:da:22:ec:cd:27:e8:bb:c5:ba:e2:17:d7:
07:82:b9:35:b4:33:07:d4:b7:76:2e:56:69:cf:c9:
4d:36:7d:00:20:4d:89:e5:56:65:4c:86:62:bc:5e:
ee:90:75:6b:c9:eb:a5:8a:e3:8a:10:11:44:22:e4:
4c:12:63:58:aa:60:18:da:84:b2:3a:48:b1:57:f9:
50:90:b4:56:08:81:ed:32:c4:71:8c:91:bf:87:f1:
32:8c:04:82:13:42:18:f6:af:31:69:cc:c0:a7:01:
bc:38:41:39:c9:10:96:d5:07:21:8e:a0:1f:2d:ce:
73:97:f4:6e:75:27:cd:36:2b:f3:6b:90:b0:5f:f1:
f9:42:28:77:3c:8c:a6:58:11:5b:3c:99:ef:30:e7:
1b:15:ef:90:12:f0:39:ff:5f:80:8b:5d:4f:fc:a3:
59:d2:d2:31:bc:6e:ef:22:a8:56:71:36:1f:e9:90:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:01:10:F8:B3:F3:D1:2F:86:3E:2D:80:95:17:67:14:CA:7B:76
X509v3 Authority Key Identifier:
keyid:1D:2C:01:6F:E4:F8:74:ED:FE:EA:C1:30:22:60:69:26:42:6A:0F:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/323830333a343064303a3a2f33322d3332203d3e20323733383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:40d0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:d6:e6:b7:37:6f:34:7a:cf:37:a0:dd:ba:ee:28:74:72:ca:
ee:3f:68:74:fb:0a:45:61:27:68:bc:ef:3a:aa:bc:8b:a0:41:
53:aa:c3:38:57:a5:4d:1e:fa:34:81:50:a7:b8:b8:ec:b5:85:
be:ed:7a:de:49:f6:d6:fc:20:75:e4:e7:72:3a:d9:42:55:13:
57:ec:fb:37:ac:42:7c:72:e2:41:79:86:1d:68:5e:ff:09:6b:
be:24:de:c9:6d:93:8e:1b:69:f2:23:c4:f9:85:cb:50:1e:ae:
1b:dc:f0:ce:f8:ea:ae:a1:f4:5e:ce:f2:f0:ad:9f:59:5a:21:
45:77:d7:0b:0a:40:4c:78:91:18:fd:81:91:c1:56:89:e2:55:
3b:fa:6a:09:cb:81:68:56:9c:fe:a2:35:9f:73:38:ad:2e:ac:
53:38:22:a8:59:1f:e6:5a:7d:19:3c:4c:d4:e9:31:68:8c:12:
88:93:dc:2d:8c:f1:66:e6:7f:a4:96:dc:2a:3a:ac:8b:bd:f5:
7e:2f:e1:bc:27:f0:12:4c:c6:1b:33:d1:27:53:1a:42:db:3a:
59:b1:3a:7c:10:91:5b:e3:d9:cc:78:68:9b:6d:e9:5b:6a:b1:
9a:49:11:2f:a4:e4:0b:f1:f2:e1:25:10:07:42:08:fe:c4:0d:
ef:8e:e4:a9
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKq14SMe+sYKLiXsLuN+8Rygij9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyQzAxNkZFNEY4NzRFREZFRUFDMTMwMjI2MDY5MjY0
MjZBMEYyRTAeFw0yNjAzMjQyMDQ1MDBaFw0yNzAzMjMyMDUwMDBaMDMxMTAvBgNV
BAMTKEJBMUQwMTEwRjhCM0YzRDEyRjg2M0UyRDgwOTUxNzY3MTRDQTdCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaL4u/5EjHL+2YbXg7xtq9nyK
ES3ycYkoiSaMfBXBXh7qCJtO16U4nsB05XSPfY0itHZU1M0mGBfS5ECxXgnvZGLg
v6OmqVoiFXgbztoi7M0n6LvFuuIX1weCuTW0MwfUt3YuVmnPyU02fQAgTYnlVmVM
hmK8Xu6QdWvJ66WK44oQEUQi5EwSY1iqYBjahLI6SLFX+VCQtFYIge0yxHGMkb+H
8TKMBIITQhj2rzFpzMCnAbw4QTnJEJbVByGOoB8tznOX9G51J802K/NrkLBf8flC
KHc8jKZYEVs8me8w5xsV75AS8Dn/X4CLXU/8o1nS0jG8bu8iqFZxNh/pkHE7AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuh0BEPiz89Evhj4tgJUXZxTKe3YwHwYDVR0j
BBgwFoAUHSwBb+T4dO3+6sEwImBpJkJqDy4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDNGMDUxRDY4RUFDN0NFNUJENjdBQTkwRTk3Q0JGNTM0
QjgyNjU4MUUwODBGMDc0ODZENjlGOUNEMEI3NDlCLzAvMUQyQzAxNkZFNEY4NzRF
REZFRUFDMTMwMjI2MDY5MjY0MjZBMEYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDJDMDE2RkU0Rjg3NEVERkVF
QUMxMzAyMjYwNjkyNjQyNkEwRjJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAzRjA1MUQ2OEVBQzdDRTVCRDY3QUE5MEU5N0NCRjUzNEI4MjY1ODFF
MDgwRjA3NDg2RDY5RjlDRDBCNzQ5Qi8wLzMyMzgzMDMzM2EzNDMwNjQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM4MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDQNAw
DQYJKoZIhvcNAQELBQADggEBAKbW5rc3bzR6zzeg3bruKHRyyu4/aHT7CkVhJ2i8
7zqqvIugQVOqwzhXpU0e+jSBUKe4uOy1hb7tet5J9tb8IHXk53I62UJVE1fs+zes
Qnxy4kF5hh1oXv8Ja74k3sltk44bafIjxPmFy1Aerhvc8M746q6h9F7O8vCtn1la
IUV31wsKQEx4kRj9gZHBVoniVTv6agnLgWhWnP6iNZ9zOK0urFM4IqhZH+ZafRk8
TNTpMWiMEoiT3C2M8Wbmf6SW3Co6rIu99X4v4bwn8BJMxhsz0SdTGkLbOlmxOnwQ
kVvj2cx4aJtt6VtqsZpJES+k5Avx8uElEAdCCP7EDe+O5Kk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:13 2026 by rpki-client