
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130373a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323130373a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: DaxsAoDqrx8fdglIaVk66WYv6GDVX2+P6t+u3ggj26o=
Subject key identifier: 41:C2:84:3A:4B:06:D3:7A:A0:A8:6C:A9:7B:EE:93:A0:BF:39:02:2B
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 5BC8FCB16A456A42EDF1A792592CA2D67083970E
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130373a3a2f34382d3634203d3e20323637383233.roa
Signing time: Wed 04 Mar 2026 15:20:02 +0000
ROA not before: Wed 04 Mar 2026 15:15:02 +0000
ROA not after: Wed 03 Mar 2027 15:20:02 +0000
asID: 267823
IP address blocks: 2803:1860:2107::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c8:fc:b1:6a:45:6a:42:ed:f1:a7:92:59:2c:a2:d6:70:83:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 4 15:15:02 2026 GMT
Not After : Mar 3 15:20:02 2027 GMT
Subject: CN=41C2843A4B06D37AA0A86CA97BEE93A0BF39022B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:8a:f5:85:24:e1:20:29:b1:21:63:41:aa:
3a:aa:c0:38:d0:97:bf:97:2d:b4:5c:0c:80:56:4d:
36:6e:75:c3:f7:02:c9:94:57:77:35:6f:fe:cc:36:
95:ed:1f:27:1e:07:6e:d5:9a:72:de:37:94:98:9a:
19:83:61:6c:51:b9:7e:27:54:87:18:ba:60:77:2b:
d7:26:71:2a:ff:85:18:a4:88:29:78:6f:f9:0f:ef:
40:b4:aa:f9:5b:a3:03:c6:50:7f:75:98:bd:aa:fc:
25:87:cc:77:c6:c6:bb:0d:c2:bc:b5:bd:60:96:1a:
d6:97:bb:7c:69:62:49:6b:fd:0a:c8:dc:0c:66:59:
d0:f5:57:6f:19:ff:88:d3:d6:9b:8a:09:c0:c9:0b:
2d:84:c3:86:f3:eb:2d:3a:62:2a:81:4e:68:72:a9:
76:0a:74:c8:91:21:5b:71:b3:a6:ff:33:bd:45:20:
36:26:fe:cb:04:55:2f:1d:d6:61:01:7d:ed:ab:e0:
19:1e:38:b3:09:57:6c:7e:9e:c0:ff:e2:11:e5:ff:
3c:33:6b:70:b1:aa:b7:4f:6d:ec:f9:37:10:cc:e3:
5d:51:d9:e9:9b:bc:3a:3a:c1:fd:2e:41:0a:46:ff:
b3:8a:2c:9c:57:b9:4a:88:6e:16:6f:d8:54:6d:8a:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:84:3A:4B:06:D3:7A:A0:A8:6C:A9:7B:EE:93:A0:BF:39:02:2B
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130373a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2107::/48
Signature Algorithm: sha256WithRSAEncryption
9e:db:78:b6:e0:4e:0f:ca:e7:f6:6f:8e:e7:b9:0d:18:3d:b5:
eb:10:c1:e1:92:88:ca:1c:94:3f:17:6c:e5:ce:96:a4:b2:cd:
d2:2f:d3:b2:f7:21:87:19:0b:cb:52:a7:d3:19:ca:10:71:05:
c1:06:13:ba:ce:4f:3d:0a:af:a0:3c:fb:33:5d:48:fc:2b:4e:
0a:0f:24:ab:bb:25:28:b8:b1:61:b3:8c:a7:51:78:37:45:26:
ba:1a:81:a3:c3:3e:c9:63:d4:94:05:c7:c5:df:3c:8d:46:f0:
cf:3c:31:73:6e:d1:23:d6:a7:2e:e2:40:ca:58:3e:fc:57:12:
6e:f3:eb:e4:72:4f:a6:40:49:63:69:fe:4a:22:d7:53:be:fd:
2c:b4:94:92:e4:cb:20:dc:ab:5d:05:cb:8a:95:0f:70:fc:4f:
22:47:ef:ef:7a:ac:51:f4:15:cb:ee:bc:70:d5:3b:d2:ae:b5:
dd:44:b8:83:c1:37:4d:73:af:30:7a:6e:c1:2b:80:b7:fb:b5:
7c:5a:4e:d6:bc:6e:be:e7:a2:cd:a4:40:d0:7e:72:8f:96:12:
d4:20:1d:26:22:31:da:2a:ed:95:5d:89:25:06:55:05:3c:e5:
45:ab:59:ed:ec:e0:77:fb:56:6d:32:70:8b:01:e5:72:da:ea:
e7:55:29:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:58 2026 by rpki-client