
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: 4tLkdPLJgXRnxaUO2b9EjNsTmaZOCpEO/bSZkpudAI8=
Subject key identifier: 0D:B6:19:EA:76:A6:75:8E:76:60:A0:5F:7D:1A:A9:39:66:58:AA:A3
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 3042007C2939BBEBC5D6522B1A2CCCEDD06CF9E8
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa
Signing time: Wed 04 Mar 2026 15:20:00 +0000
ROA not before: Wed 04 Mar 2026 15:15:00 +0000
ROA not after: Wed 03 Mar 2027 15:20:00 +0000
asID: 267823
IP address blocks: 2803:1860:2006::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:42:00:7c:29:39:bb:eb:c5:d6:52:2b:1a:2c:cc:ed:d0:6c:f9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 4 15:15:00 2026 GMT
Not After : Mar 3 15:20:00 2027 GMT
Subject: CN=0DB619EA76A6758E7660A05F7D1AA9396658AAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:13:8e:86:83:c1:c0:a6:2c:e0:41:1c:54:
0e:5b:f0:02:7f:c3:97:10:af:18:fb:fa:bd:58:ca:
eb:86:70:51:d5:60:85:0f:67:ff:8e:c2:c3:55:81:
b4:85:12:96:52:73:83:e3:62:28:73:86:a8:26:24:
06:f2:a3:f2:4e:ab:b6:ad:2a:ea:cd:15:ff:3d:44:
53:66:f1:7d:f2:56:18:99:a4:5c:56:8a:c0:14:46:
08:80:0c:13:a8:1b:38:83:ba:d7:9f:04:ac:4c:89:
e7:d9:78:f7:0b:ea:73:04:af:30:dd:b4:6d:b9:f5:
09:ba:65:ef:dd:e3:44:88:39:f1:ab:9f:e8:38:cc:
f0:de:dc:6f:4f:78:19:8e:fc:e4:10:e9:8e:28:46:
d0:5d:9c:d9:fa:8e:49:ad:e9:f2:5d:23:66:41:da:
cc:3e:ae:ca:24:00:50:20:ac:c8:11:53:dc:34:56:
e3:98:69:b4:85:aa:6d:67:3f:7a:10:b9:e9:e4:2d:
4e:bd:66:a2:60:34:a0:55:1e:6f:1e:29:f8:2b:5b:
0b:f3:29:29:f8:36:bc:fc:28:b3:51:92:94:1c:71:
e0:a3:89:1b:87:dc:f7:a7:18:3e:c6:44:6a:6c:6f:
18:36:49:4e:8f:5d:a0:45:dc:45:7c:cf:5c:b4:92:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:19:EA:76:A6:75:8E:76:60:A0:5F:7D:1A:A9:39:66:58:AA:A3
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030363a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2006::/48
Signature Algorithm: sha256WithRSAEncryption
6b:3c:6d:c8:78:a0:a8:7c:9a:d5:42:07:d0:d3:8c:04:86:03:
e5:d6:ad:70:30:53:8b:79:ee:56:30:94:d1:75:9a:f7:16:4a:
a0:a7:66:17:35:ca:43:85:98:cc:de:00:be:3a:d9:e2:9a:50:
fd:85:6a:3b:b1:0f:45:cc:30:54:33:e5:93:87:05:32:9d:5b:
02:37:6c:07:c0:39:2a:cc:4a:9c:95:1a:14:8c:a8:36:14:55:
5d:89:a4:6c:b0:2a:c6:53:c1:13:b0:56:7c:3b:68:04:b1:e8:
78:fc:b8:ae:1b:65:a3:02:2a:09:19:3c:f4:3f:8e:c2:10:d2:
2c:10:c1:c9:2a:17:cb:a3:56:bf:71:a6:c1:3e:57:c5:20:3f:
a9:61:9f:75:4e:38:66:b9:f5:37:22:c4:35:7f:28:a7:19:08:
1f:82:39:e0:8f:71:ec:55:80:83:d5:bc:98:0f:63:5c:ca:4c:
2b:40:a6:b1:9e:29:43:57:44:bb:40:e3:e8:42:80:11:a1:14:
d0:02:f2:aa:ae:0b:93:d5:d8:c8:5e:42:19:a2:73:26:5a:de:
99:34:4b:19:8d:34:1e:36:e6:3f:af:a2:da:01:64:ff:26:e1:
7a:52:7f:3b:05:df:b7:a8:d4:48:94:0a:dd:63:b3:ad:ca:53:
2c:f7:6c:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:51 2026 by rpki-client