
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130303a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323130303a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: ynlMM8pxAz/NZ20GiHCkBPgfexU7/4tXzuDLpDIKwLU=
Subject key identifier: E4:47:F7:12:68:0E:A5:CC:B3:8A:2D:B3:93:28:83:D9:9A:DF:0F:95
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 47FA227F039F561CBDF3CE83E51B1B853AFC75AD
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130303a3a2f34382d3634203d3e20323637383233.roa
Signing time: Tue 03 Mar 2026 16:25:05 +0000
ROA not before: Tue 03 Mar 2026 16:20:05 +0000
ROA not after: Tue 02 Mar 2027 16:25:05 +0000
asID: 267823
IP address blocks: 2803:1860:2100::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fa:22:7f:03:9f:56:1c:bd:f3:ce:83:e5:1b:1b:85:3a:fc:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 3 16:20:05 2026 GMT
Not After : Mar 2 16:25:05 2027 GMT
Subject: CN=E447F712680EA5CCB38A2DB3932883D99ADF0F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:62:a5:68:9a:a5:0c:f3:8f:e1:69:e6:1c:
fa:da:8a:2c:fb:46:26:50:1f:e8:2d:9e:89:9e:8e:
e9:29:fe:78:8b:29:c3:6b:0d:08:a3:d7:e6:ff:4f:
d4:88:5c:58:a4:08:2a:cb:b6:67:6e:a0:57:66:93:
e9:a3:d5:14:16:1c:04:b5:60:da:30:7d:ec:00:6b:
67:ac:55:53:b3:35:f1:70:c9:82:2d:6f:6a:f4:ea:
ed:5c:b6:20:39:34:fe:91:99:51:72:c5:15:c1:1c:
d7:0b:1e:5a:58:97:13:fe:b6:ad:6d:db:7a:21:83:
91:ab:89:02:03:f2:e5:4a:eb:a4:36:d1:fd:85:79:
11:e0:f2:5d:e5:7f:8d:78:22:7f:90:54:0e:1c:43:
6b:5e:38:19:ad:d1:86:2d:7f:7e:6b:43:14:05:72:
dd:57:40:4a:c2:43:ad:00:d3:dc:c4:62:56:15:93:
a1:1a:2c:21:e4:08:48:0e:28:d2:35:21:49:1d:d1:
a5:2e:c4:d1:a7:90:d2:a8:ed:28:07:47:47:70:24:
7d:50:28:a7:b4:b7:56:2a:4f:d5:ca:5d:aa:a6:53:
d4:43:57:58:12:db:9f:e4:ea:bd:70:c7:3d:91:cf:
9a:6f:7e:32:17:6c:ea:14:db:c7:42:00:2c:14:0c:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:F7:12:68:0E:A5:CC:B3:8A:2D:B3:93:28:83:D9:9A:DF:0F:95
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130303a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2100::/48
Signature Algorithm: sha256WithRSAEncryption
4b:35:f8:43:9b:33:7d:c2:69:72:93:b6:69:0f:01:d7:e1:3b:
15:cf:57:cf:fd:8b:fb:a0:6c:1b:d0:1b:00:25:f8:80:6e:9f:
0f:28:8f:08:3c:fa:dc:b3:64:55:44:a1:52:77:4a:ea:42:86:
2e:50:23:23:81:1c:03:89:58:77:88:ae:ba:30:ce:26:c7:7a:
44:86:44:be:5c:90:e6:ed:25:1c:ff:d3:41:85:d2:2b:05:90:
4d:72:ff:60:51:a8:b1:85:bd:29:a8:db:9c:52:10:28:2a:18:
c4:a0:06:06:84:05:54:c1:bb:11:e7:e4:0f:ea:0e:00:85:04:
05:27:17:e0:69:28:02:91:96:34:f2:47:e7:73:56:f5:f3:2e:
a0:68:77:4d:48:6b:b1:a9:83:51:7f:5f:88:18:67:bd:d2:78:
d9:a8:00:59:dd:05:fc:b3:5b:2a:13:79:08:c9:3c:54:a7:1b:
d9:f6:e2:39:89:01:8f:70:27:32:28:7b:fd:13:3a:01:3b:1c:
8e:fc:e1:a6:80:45:b9:06:04:46:fd:fb:b1:b3:44:9c:52:4b:
1f:27:37:42:b9:13:ab:a4:8e:9c:e4:09:e8:6b:65:1e:ac:ec:
88:bc:72:92:05:19:9c:45:91:1e:3d:fe:87:6d:76:1c:87:cd:
09:c1:bd:09
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUR/oifwOfVhy9886D5RsbhTr8da0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB
QzREQzlFOTAeFw0yNjAzMDMxNjIwMDVaFw0yNzAzMDIxNjI1MDVaMDMxMTAvBgNV
BAMTKEU0NDdGNzEyNjgwRUE1Q0NCMzhBMkRCMzkzMjg4M0Q5OUFERjBGOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa12KlaJqlDPOP4WnmHPraiiz7
RiZQH+gtnomejukp/niLKcNrDQij1+b/T9SIXFikCCrLtmduoFdmk+mj1RQWHAS1
YNowfewAa2esVVOzNfFwyYItb2r06u1ctiA5NP6RmVFyxRXBHNcLHlpYlxP+tq1t
23ohg5GriQID8uVK66Q20f2FeRHg8l3lf414In+QVA4cQ2teOBmt0YYtf35rQxQF
ct1XQErCQ60A09zEYlYVk6EaLCHkCEgOKNI1IUkd0aUuxNGnkNKo7SgHR0dwJH1Q
KKe0t1YqT9XKXaqmU9RDV1gS25/k6r1wxz2Rz5pvfjIXbOoU28dCACwUDOQHAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQU5Ef3EmgOpcyzii2zkyiD2ZrfD5UwHwYDVR0j
BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5
ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2
MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC
NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy
Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz
MTMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAoAxhgIQAwDQYJKoZIhvcNAQELBQADggEBAEs1+EObM33CaXKTtmkPAdfh
OxXPV8/9i/ugbBvQGwAl+IBunw8ojwg8+tyzZFVEoVJ3SupChi5QIyOBHAOJWHeI
rrowzibHekSGRL5ckObtJRz/00GF0isFkE1y/2BRqLGFvSmo25xSECgqGMSgBgaE
BVTBuxHn5A/qDgCFBAUnF+BpKAKRljTyR+dzVvXzLqBod01Ia7Gpg1F/X4gYZ73S
eNmoAFndBfyzWyoTeQjJPFSnG9n24jmJAY9wJzIoe/0TOgE7HI784aaARbkGBEb9
+7GzRJxSSx8nN0K5E6ukjpzkCehrZR6s7Ii8cpIFGZxFkR49/odtdhyHzQnBvQk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:55 2026 by rpki-client