
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: elVlBbvmLCEj9PNLtlYfnibTte78pWtiRuMHjomBlfQ=
Subject key identifier: 53:0A:3F:45:38:BC:90:7B:A6:FE:AD:90:66:57:A7:51:EC:8F:7A:7D
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 0EA16D9AD6654E4729CC2717FDA687D65EDA1F9D
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa
Signing time: Tue 03 Mar 2026 16:25:09 +0000
ROA not before: Tue 03 Mar 2026 16:20:09 +0000
ROA not after: Tue 02 Mar 2027 16:25:09 +0000
asID: 267823
IP address blocks: 2803:1860:2208::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a1:6d:9a:d6:65:4e:47:29:cc:27:17:fd:a6:87:d6:5e:da:1f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 3 16:20:09 2026 GMT
Not After : Mar 2 16:25:09 2027 GMT
Subject: CN=530A3F4538BC907BA6FEAD906657A751EC8F7A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:48:26:31:a7:43:1e:d2:2e:2d:42:76:eb:
70:bc:12:81:40:9a:29:9c:48:de:77:af:ee:39:96:
82:50:54:c8:5e:91:c0:89:55:6c:1a:18:73:05:19:
67:df:10:6f:e2:a1:dd:3d:7a:2f:8c:5b:35:81:19:
7e:e8:2b:78:22:59:75:e6:0f:55:87:71:1f:41:a5:
64:53:5c:ff:6b:1f:9b:d1:1c:2a:e9:47:04:3b:47:
81:22:ce:14:a1:d9:50:cb:95:95:13:de:df:37:46:
d9:be:53:d0:26:6d:f5:f3:6a:4a:94:f2:22:61:07:
92:61:0b:cd:b8:d6:6c:57:08:11:a0:79:31:40:95:
97:d8:02:28:2d:92:3b:c2:06:04:8e:73:05:4d:f1:
47:71:e3:31:cb:12:eb:e4:f1:42:e6:3c:e0:1d:20:
45:65:f3:7d:09:4b:f4:19:29:a5:84:70:a8:27:55:
6b:df:1d:7b:ba:a7:59:5a:ae:1f:97:67:66:15:05:
7c:62:d6:2f:42:6a:93:03:14:4c:c1:e2:f6:ca:34:
4a:a6:2e:42:b5:1f:82:72:f6:64:06:ec:5a:8f:6a:
05:2a:4f:ac:4b:aa:61:f9:31:99:22:9b:09:42:cc:
f5:18:df:0c:b7:db:74:6d:ad:bf:ac:74:78:19:20:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:3F:45:38:BC:90:7B:A6:FE:AD:90:66:57:A7:51:EC:8F:7A:7D
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230383a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2208::/48
Signature Algorithm: sha256WithRSAEncryption
0e:2b:d6:e3:bf:45:90:b3:30:7d:3e:fa:ad:d6:d8:80:ed:b4:
58:9a:32:02:3b:25:df:75:9f:6c:e4:2b:35:a7:52:ad:0a:d5:
e5:05:d9:ad:83:df:89:24:78:0d:97:f4:2c:47:71:4d:ea:23:
bf:41:7a:11:97:52:9d:40:fe:c5:f9:b3:34:da:e7:87:9a:35:
6c:84:44:31:25:5a:d0:51:b2:e9:80:99:81:4d:8e:db:c5:8d:
a1:84:5f:a8:5c:d4:20:f4:02:49:1b:80:09:36:ad:d4:3f:0b:
ea:1a:68:25:58:ab:6b:43:87:c1:aa:cf:e8:59:c9:b1:a2:bf:
cc:d4:2c:63:7f:c8:a4:ca:cc:b5:3f:53:36:91:00:d3:4f:c4:
9a:c0:67:14:d5:68:ce:dd:49:49:f3:09:12:98:2a:70:9d:a8:
95:d9:4a:91:f9:5d:62:9d:08:fd:60:dc:69:98:0a:a0:92:45:
15:17:78:fe:c7:e1:9e:fe:de:0e:2f:05:f0:a8:d9:dd:89:c7:
d9:11:fe:6e:a1:64:91:78:b5:cf:50:ea:d2:06:b7:e2:b0:34:
07:6e:62:ec:bb:0e:30:a5:6b:5b:4e:67:ec:40:88:8a:f9:19:
37:63:32:1e:e9:53:04:40:cd:7b:f5:a1:56:03:d5:5b:cb:0b:
e9:f6:31:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:31 2026 by rpki-client