
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3330203d3e203133343839.roa
File: 323830333a6438303a3a2f32392d3330203d3e203133343839.roa (raw, json)
Hash identifier: OIbyGSn9Ch6lydvRHDR0/MmIkO9KZTTiKYuPpaSq7mU=
Subject key identifier: E9:E7:F4:34:E5:F3:85:E8:E9:DC:B3:A8:53:44:CC:FD:9C:6F:EE:13
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 29B04C39AD5EFDD83BD3B4B5E4B901F4C74E8287
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3330203d3e203133343839.roa
Signing time: Mon 01 Sep 2025 23:42:35 +0000
ROA not before: Mon 01 Sep 2025 23:37:35 +0000
ROA not after: Mon 31 Aug 2026 23:42:35 +0000
asID: 13489
IP address blocks: 2803:d80::/29 maxlen: 30
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b0:4c:39:ad:5e:fd:d8:3b:d3:b4:b5:e4:b9:01:f4:c7:4e:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Sep 1 23:37:35 2025 GMT
Not After : Aug 31 23:42:35 2026 GMT
Subject: CN=E9E7F434E5F385E8E9DCB3A85344CCFD9C6FEE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:73:38:4a:5a:21:62:67:11:0e:2d:5c:05:
2c:d9:f7:b7:04:cd:91:e8:4b:53:24:1e:a6:7b:92:
23:64:1a:5d:d6:2c:df:1d:1a:13:16:cc:fe:dc:ae:
0c:2c:ce:2d:74:14:3a:35:a1:be:64:57:7c:61:6c:
bd:4f:20:17:ac:f0:bf:13:ce:0a:33:08:bf:5b:47:
93:0e:45:f8:c1:69:be:f1:b9:50:17:e3:6e:20:98:
69:df:c5:5e:ae:99:58:2a:44:f3:a7:1a:cc:17:0c:
7a:a2:da:99:ec:9e:7d:7b:27:2c:24:14:dc:91:68:
39:23:70:fd:dc:63:27:3b:40:fd:9a:ee:1f:50:94:
76:0b:0b:ce:55:6f:c1:3c:06:16:c7:9f:72:a2:bd:
04:31:f3:93:78:8c:7a:98:db:7b:df:80:57:bc:f4:
0c:1d:98:27:f3:01:30:7b:9f:d4:84:7f:2c:03:ef:
69:d2:9f:bd:6d:64:c5:4d:6f:66:e6:45:b8:a1:78:
5c:80:e3:0e:14:df:b6:d6:6b:61:5c:4c:53:c8:2f:
45:dd:aa:29:11:4d:25:79:4d:85:06:61:62:18:05:
ac:43:55:62:cf:b9:26:de:2b:02:45:5d:14:43:25:
a8:64:7d:8a:05:e0:37:65:35:ea:90:a5:44:16:64:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:F4:34:E5:F3:85:E8:E9:DC:B3:A8:53:44:CC:FD:9C:6F:EE:13
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3330203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:2f:bc:39:75:09:92:ee:08:e6:b4:e8:0e:4e:42:f3:39:00:
7b:a8:11:e7:ec:69:da:48:55:d5:fc:7b:aa:f4:45:27:e5:36:
5b:d3:a9:79:e2:04:5b:05:d5:9f:f9:50:d5:3c:9a:dc:24:9c:
e9:e7:cb:0b:aa:22:ac:bb:3f:b8:40:da:5b:77:07:e7:9b:9a:
4a:5c:42:34:1b:d2:25:1d:ab:a1:ec:85:8d:d1:62:67:94:51:
4e:b8:01:8b:58:08:2d:7e:7d:8c:dd:3f:ae:8a:8e:6e:17:34:
52:a8:b5:5f:2b:b4:f2:b3:d4:02:e6:52:35:8d:a5:5c:26:57:
45:71:de:4e:e2:29:d0:6c:4c:d9:48:ae:40:31:d0:21:4c:08:
f8:10:22:f9:48:06:bc:3b:0e:77:f0:a0:73:b9:24:e0:d8:85:
03:53:9a:f8:ee:5c:3d:53:8e:b1:7c:fe:dd:45:be:fd:7e:cb:
c0:b6:51:d3:7e:f3:2c:1e:9e:0b:27:3c:ea:5e:3c:25:4e:3e:
6b:c8:e3:b0:e4:46:40:07:28:01:e5:89:1b:f5:b1:c9:9a:29:
d5:9c:eb:e9:4f:87:33:4f:fd:9c:6c:5a:fe:57:7a:8c:08:82:
d7:41:76:9a:8a:d1:93:dc:df:fa:ac:bc:cb:48:1f:31:59:16:
5e:f2:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:28 2025 by rpki-client