
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235313a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323235313a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: BdRa5vgL11WhhqMaJX/QmORJQtHuZZCe20JI0F+U2/o=
Subject key identifier: 6F:3B:6D:86:5F:30:66:D6:6F:74:17:16:09:0C:F1:7D:6B:57:D3:A6
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 637E6BFB1BFE04CB21FD64E150CB83A962D03048
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235313a3a2f34382d3634203d3e20323637383233.roa
Signing time: Tue 03 Mar 2026 16:25:00 +0000
ROA not before: Tue 03 Mar 2026 16:20:00 +0000
ROA not after: Tue 02 Mar 2027 16:25:00 +0000
asID: 267823
IP address blocks: 2803:1860:2251::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7e:6b:fb:1b:fe:04:cb:21:fd:64:e1:50:cb:83:a9:62:d0:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 3 16:20:00 2026 GMT
Not After : Mar 2 16:25:00 2027 GMT
Subject: CN=6F3B6D865F3066D66F741716090CF17D6B57D3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:b0:a4:bd:27:d1:46:b3:62:a0:bf:27:b5:
58:c8:08:77:53:d9:1d:c6:b7:4f:ae:59:f0:f0:63:
9f:0d:d6:29:1f:1a:0d:fb:d3:75:17:d3:c0:ad:80:
fb:22:2a:37:35:b7:5b:3d:fc:95:69:54:bb:38:18:
70:de:c4:72:68:c6:5c:77:66:fc:2c:d3:85:b2:bc:
bf:f9:ca:c2:78:2a:9c:be:36:77:88:0f:5f:2e:3c:
63:f9:4c:f9:21:d9:31:e2:9e:d4:30:0e:13:0f:1c:
2e:2c:41:54:96:24:00:3b:cb:d2:d6:fb:3c:c5:1b:
ce:a5:02:89:2d:e5:ff:f7:5e:7e:e5:2e:f1:45:3d:
6d:ff:68:f0:69:e3:6c:f3:bc:ba:82:ec:8b:6a:9b:
4b:99:a8:75:55:0f:f5:66:e0:71:88:3e:6f:57:d9:
e2:4b:72:5f:44:78:72:d7:d7:40:40:75:a9:ab:66:
38:d3:9f:09:d2:6b:34:b4:34:a4:03:ae:03:23:45:
c1:23:30:f9:1b:b0:ff:f4:d3:b0:d6:54:b8:c0:50:
6e:3d:d4:cd:22:a8:fd:63:10:1a:ba:50:fd:e5:49:
8a:91:46:3d:e5:20:f0:9e:8e:67:c7:50:81:7a:d1:
6b:ce:2d:cc:50:df:7a:e7:a3:3b:4a:4b:6e:34:fa:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3B:6D:86:5F:30:66:D6:6F:74:17:16:09:0C:F1:7D:6B:57:D3:A6
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235313a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2251::/48
Signature Algorithm: sha256WithRSAEncryption
00:82:d4:b1:0d:b4:a8:ec:e1:12:e7:6c:75:d8:9c:4a:dd:f4:
9c:49:ff:52:87:d5:6f:f6:f9:86:8e:ca:3c:80:3a:89:df:22:
4a:1e:c0:74:b5:93:b7:7a:e4:d6:6f:94:07:71:9f:82:d5:81:
42:47:1a:ce:f1:f4:7c:86:cc:bd:f3:fb:61:51:44:6a:0c:4d:
1c:37:6d:94:e2:50:73:3b:92:05:95:60:ad:fd:36:38:b9:39:
81:81:a1:26:1c:a0:d6:11:96:53:7b:38:0e:1f:70:91:73:4b:
d3:bb:e1:55:ae:d2:ea:26:56:23:60:0d:2a:d7:7f:33:b5:83:
82:da:a6:95:f0:38:b7:07:91:e4:7d:b5:4d:a7:c4:2f:a3:52:
4d:14:34:f5:34:4c:af:f6:ee:1f:f1:c7:ce:93:01:01:1f:a7:
58:b4:9c:1c:15:53:44:e9:9f:1d:ae:db:01:d9:87:6a:be:0d:
87:83:c3:2d:f3:b7:d0:2b:aa:3f:a1:bc:3c:cd:4b:f8:2b:8f:
64:5e:c5:24:2d:e3:08:6f:46:11:ae:db:8d:f4:b4:76:3c:bf:
39:b1:34:c8:71:cf:42:6e:13:7c:2b:04:9e:cf:92:d7:09:fc:
77:fc:75:53:bb:5b:7d:ce:95:46:13:8b:38:d5:32:ce:5c:0e:
44:69:e1:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:20 2026 by rpki-client