
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3438203d3e203133343839.roa
File: 323830333a6438303a3a2f32392d3438203d3e203133343839.roa (raw, json)
Hash identifier: rPVmHalZgCzLHP9VzxU3z7s3T+Nrje7xG+2NWyYBeMQ=
Subject key identifier: 37:4E:40:7D:CE:B6:D0:BD:DD:95:00:3F:FF:1A:43:E0:71:A2:11:BF
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 1630588B907ADF734155B80C3DC58605E4D77D71
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3438203d3e203133343839.roa
Signing time: Thu 19 Mar 2026 20:35:06 +0000
ROA not before: Thu 19 Mar 2026 20:30:06 +0000
ROA not after: Thu 18 Mar 2027 20:35:06 +0000
asID: 13489
IP address blocks: 2803:d80::/29 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:30:58:8b:90:7a:df:73:41:55:b8:0c:3d:c5:86:05:e4:d7:7d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Mar 19 20:30:06 2026 GMT
Not After : Mar 18 20:35:06 2027 GMT
Subject: CN=374E407DCEB6D0BDDD95003FFF1A43E071A211BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:46:ee:1c:8e:ac:3b:80:76:31:04:7f:0c:
96:9d:85:3b:72:ee:7f:ad:e2:28:9f:af:40:83:f0:
df:ca:5d:43:89:ae:08:80:47:a6:96:9a:d1:3a:ae:
e1:54:21:89:ad:79:2f:35:75:84:bf:02:60:d6:69:
f1:74:fb:97:95:fd:76:16:b4:91:f7:42:ca:c6:0c:
aa:b9:43:90:8f:2c:e7:28:28:8d:a8:70:2c:b7:49:
1f:68:88:ac:83:ff:a0:8e:ac:89:bb:05:54:cc:41:
7b:43:ec:fa:a8:7c:e0:36:8d:a8:12:a6:8f:f2:68:
fe:46:71:8a:8a:05:89:57:13:cd:20:af:42:48:06:
bb:41:93:67:0c:81:d3:16:88:e0:f5:59:c0:a5:3f:
f2:4f:6f:37:6d:fe:f6:c4:39:a9:c1:b9:49:85:16:
71:a0:95:43:71:57:bc:05:fc:0c:53:2c:d0:3b:b6:
9f:4f:67:19:15:14:bf:f3:c6:a7:85:47:9f:59:02:
5e:a5:0a:19:79:02:17:fb:21:16:9c:fe:77:d9:b7:
fd:c5:b6:70:0d:08:99:85:89:6e:42:89:65:c8:df:
dc:6e:b6:49:f7:83:fc:6d:96:77:1b:d9:84:b6:97:
d0:48:87:eb:f8:aa:cf:ea:6f:57:f0:23:1b:67:28:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:40:7D:CE:B6:D0:BD:DD:95:00:3F:FF:1A:43:E0:71:A2:11:BF
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d80::/29
Signature Algorithm: sha256WithRSAEncryption
3b:e9:ba:20:63:e2:95:a8:05:ca:51:00:54:6a:ed:35:50:7f:
08:1f:97:dd:b3:a4:41:ed:07:3b:89:a1:a7:53:aa:fd:16:c9:
df:3b:53:3c:93:15:ff:ef:a8:ec:ff:34:45:49:81:70:d1:76:
42:90:91:90:71:7f:dd:14:6a:99:e1:c5:a2:59:6b:a3:69:2a:
43:fd:5c:b8:72:41:e6:d7:cd:9f:45:42:5a:53:21:7b:d3:29:
8e:95:97:4f:ed:ef:de:66:4c:18:19:bf:be:0c:a8:8f:e8:52:
d7:05:17:3f:7d:6b:d8:34:47:0f:ec:c4:5b:23:52:3b:84:38:
4e:63:9c:58:66:a6:6e:76:ad:cd:96:6d:12:72:5c:0c:9a:b7:
7c:c4:1b:1d:81:48:bc:69:d2:10:22:f7:af:70:5c:ba:0d:43:
73:54:12:cc:a5:11:20:23:d0:01:38:ee:a6:11:f3:f1:ba:d3:
47:94:1b:ac:c0:2c:52:f1:07:eb:db:3b:53:78:e1:b0:0e:d5:
60:a2:9b:64:76:d6:45:a7:f5:ad:24:15:9a:80:ee:57:ed:da:
c0:cf:4a:18:e9:57:89:39:75:5b:6c:10:30:3e:b6:87:4c:8f:
d4:ac:d8:48:78:1a:92:39:16:80:42:c1:22:da:48:11:fb:c4:
12:4a:25:d9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFjBYi5B633NBVbgMPcWGBeTXfXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjAzMTkyMDMwMDZaFw0yNzAzMTgyMDM1MDZaMDMxMTAvBgNV
BAMTKDM3NEU0MDdEQ0VCNkQwQkRERDk1MDAzRkZGMUE0M0UwNzFBMjExQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmEbuHI6sO4B2MQR/DJadhTty
7n+t4iifr0CD8N/KXUOJrgiAR6aWmtE6ruFUIYmteS81dYS/AmDWafF0+5eV/XYW
tJH3QsrGDKq5Q5CPLOcoKI2ocCy3SR9oiKyD/6COrIm7BVTMQXtD7PqofOA2jagS
po/yaP5GcYqKBYlXE80gr0JIBrtBk2cMgdMWiOD1WcClP/JPbzdt/vbEOanBuUmF
FnGglUNxV7wF/AxTLNA7tp9PZxkVFL/zxqeFR59ZAl6lChl5Ahf7IRac/nfZt/3F
tnANCJmFiW5CiWXI39xutkn3g/xtlncb2YS2l9BIh+v4qs/qb1fwIxtnKMwnAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUN05Afc620L3dlQA//xpD4HGiEb8wHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzgzMDMzM2E2NDM4MzAzYTNhMmYz
MjM5MmQzNDM4MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKAMNgDANBgkq
hkiG9w0BAQsFAAOCAQEAO+m6IGPilagFylEAVGrtNVB/CB+X3bOkQe0HO4mhp1Oq
/RbJ3ztTPJMV/++o7P80RUmBcNF2QpCRkHF/3RRqmeHFollro2kqQ/1cuHJB5tfN
n0VCWlMhe9MpjpWXT+3v3mZMGBm/vgyoj+hS1wUXP31r2DRHD+zEWyNSO4Q4TmOc
WGambnatzZZtEnJcDJq3fMQbHYFIvGnSECL3r3Bcug1Dc1QSzKURICPQATjuphHz
8brTR5QbrMAsUvEH69s7U3jhsA7VYKKbZHbWRaf1rSQVmoDuV+3awM9KGOlXiTl1
W2wQMD62h0yP1KzYSHgakjkWgELBItpIEfvEEkol2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:11:31 2026 by rpki-client