
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230393a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323230393a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: 5z1nD+BDQUrxuNuWupP29pbwxAyLmc5uaoW6X2s9uZQ=
Subject key identifier: 25:7E:F6:32:3A:F8:11:19:7D:EE:5C:F0:18:78:A5:9D:00:65:71:62
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 54ACBF9C80476B4C1065A02360DF4ADA5016CB6F
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230393a3a2f34382d3634203d3e20323637383233.roa
Signing time: Tue 03 Mar 2026 16:25:02 +0000
ROA not before: Tue 03 Mar 2026 16:20:02 +0000
ROA not after: Tue 02 Mar 2027 16:25:02 +0000
asID: 267823
IP address blocks: 2803:1860:2209::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ac:bf:9c:80:47:6b:4c:10:65:a0:23:60:df:4a:da:50:16:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 3 16:20:02 2026 GMT
Not After : Mar 2 16:25:02 2027 GMT
Subject: CN=257EF6323AF811197DEE5CF01878A59D00657162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:62:31:28:8e:e4:a4:2d:7c:c2:d7:f5:74:
4b:cd:15:00:27:92:30:0b:4f:5b:6b:37:68:b8:73:
76:b5:85:90:63:8d:16:78:fe:e2:b2:79:6f:fa:cb:
ff:f5:13:77:d6:46:64:d6:31:86:c8:03:e6:53:ab:
0b:b9:77:be:5d:4a:3f:07:66:79:0a:19:31:ca:b8:
ca:88:4b:8d:d5:50:9e:05:5f:2d:47:2a:90:ab:8c:
fe:fb:aa:9c:c8:83:a6:cc:4e:08:0a:f0:73:50:d5:
36:e1:1d:3c:55:77:99:07:36:fd:02:38:31:85:83:
81:cf:6e:53:cf:fa:a2:d0:a6:45:ec:b3:ad:cc:b2:
d0:c2:eb:0a:55:52:d2:4a:08:e9:da:8b:f2:07:2b:
90:36:82:33:bb:55:4e:ef:7c:87:57:7a:a2:45:54:
2a:1d:fa:d8:bb:fa:f7:0b:02:42:42:e4:c6:e1:f0:
25:ed:58:f7:42:84:e7:97:a0:b0:17:df:e8:11:5d:
8b:0b:20:d5:ea:54:2a:f9:7f:94:6a:2c:15:06:f2:
f1:55:7f:d9:ab:27:81:17:5f:f3:e4:2d:88:6a:76:
3b:12:2a:b5:b6:db:24:fd:73:b2:06:af:b1:39:48:
a2:f2:04:be:60:4c:f9:c9:eb:c7:6d:43:73:ef:35:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:F6:32:3A:F8:11:19:7D:EE:5C:F0:18:78:A5:9D:00:65:71:62
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323230393a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2209::/48
Signature Algorithm: sha256WithRSAEncryption
b2:91:5d:f2:d7:03:28:c0:ab:22:cd:22:09:3f:e6:d3:83:10:
25:f3:f8:41:4d:1d:a2:7b:2e:11:27:6d:2b:1e:b2:f5:ed:e4:
31:bb:29:15:86:8a:b4:9d:45:c2:85:e8:29:aa:9b:f3:80:3d:
22:ad:29:2a:77:7b:af:41:f7:95:ba:14:7d:c9:87:e3:35:3b:
90:16:a7:94:d0:4f:e4:39:5b:a8:ee:55:60:2f:02:cf:40:bd:
a2:ed:23:fd:bc:00:5e:af:02:5f:d0:20:df:f9:ef:5f:bc:67:
26:a0:0f:7f:93:a3:4a:92:98:08:e9:91:6c:5a:13:c8:54:9d:
89:ae:0e:ac:74:59:16:ee:1f:a4:16:68:9d:e9:5d:41:fc:ce:
b7:93:90:1d:e1:77:45:de:fa:cb:52:00:ce:3f:b7:1c:f4:2d:
d8:70:e3:56:2e:ef:bb:69:70:eb:ed:3c:4c:fe:fd:fc:d2:a8:
16:b7:91:b9:9a:1b:ab:a4:c3:d3:b5:3f:cf:10:0b:a4:e2:8e:
23:14:18:c3:68:63:dc:f2:6e:71:bc:3a:14:5b:53:84:28:78:
40:7a:3a:64:a5:ac:7f:76:ec:d4:a5:98:e9:81:89:64:d5:d3:
d4:15:ca:37:6d:a7:95:4b:50:31:fa:25:ad:02:6b:69:3c:bb:
46:b6:ee:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:05 2026 by rpki-client