
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa
File: 323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa (raw, json)
Hash identifier: aRMmPlJKc53K10xn/lEnj5VtecQ6ASteW3WZleGUf94=
Subject key identifier: BA:5B:1A:6C:4A:4A:B5:D5:07:80:43:0C:89:E8:7F:6B:A4:79:E4:F0
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 6104B297DF968DCDC63BB480704D75BAAD017BFF
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa
Signing time: Tue 03 Mar 2026 16:25:03 +0000
ROA not before: Tue 03 Mar 2026 16:20:03 +0000
ROA not after: Tue 02 Mar 2027 16:25:03 +0000
asID: 267823
IP address blocks: 2803:1860:2254::/48 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:04:b2:97:df:96:8d:cd:c6:3b:b4:80:70:4d:75:ba:ad:01:7b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Mar 3 16:20:03 2026 GMT
Not After : Mar 2 16:25:03 2027 GMT
Subject: CN=BA5B1A6C4A4AB5D50780430C89E87F6BA479E4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:f3:67:62:f0:19:52:40:f8:e8:14:4f:91:
67:3e:80:ea:93:fe:27:e5:09:ad:a4:2c:14:67:1e:
0b:95:10:76:53:fe:e8:38:c1:9b:3c:4a:53:bd:c9:
ed:cf:32:9b:3b:80:b0:0e:46:7a:5d:82:06:56:44:
f2:4c:dd:25:67:c9:b7:a7:79:0e:fe:d0:2c:e8:58:
2c:5b:da:e7:b0:19:ca:c0:42:e5:eb:10:f7:6f:63:
bc:2f:37:22:23:26:2c:eb:3c:43:62:d1:76:1e:94:
06:75:29:51:01:27:cf:1c:62:8b:c6:c3:d1:35:aa:
63:15:40:83:49:cc:ee:3e:3b:3b:c9:ff:aa:29:78:
6f:de:96:e7:16:4b:71:b7:b0:60:41:c7:ed:3d:be:
b7:00:cf:96:74:ec:56:17:20:bc:b6:e6:b1:24:a1:
e3:76:80:72:c9:80:e4:2c:ca:48:5f:ba:9e:0a:b2:
4e:1e:f6:af:1a:ba:ed:00:2d:78:dd:85:07:ed:84:
bb:1c:64:89:81:5f:9a:48:aa:64:95:9f:8f:dd:41:
75:5c:0d:81:a5:c1:e6:20:b6:d8:ca:38:5f:89:bb:
2b:d7:a5:75:c6:ed:ee:6c:bb:fb:09:19:bc:fc:e6:
7b:99:7a:6d:b3:dc:65:98:1d:9f:cc:24:1a:14:f9:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:1A:6C:4A:4A:B5:D5:07:80:43:0C:89:E8:7F:6B:A4:79:E4:F0
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323235343a3a2f34382d3634203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1860:2254::/48
Signature Algorithm: sha256WithRSAEncryption
89:e2:4c:d3:48:0c:a7:f5:ff:0a:14:89:32:0d:d9:9a:1d:71:
ad:40:15:57:2f:1b:b8:bb:37:27:61:00:cc:9d:3b:15:ea:49:
3c:26:ed:a5:28:a0:a0:60:6b:69:22:f8:9f:09:bf:8d:18:4b:
b7:34:2e:69:64:ae:6d:6c:07:4f:8a:95:87:fe:44:c7:eb:30:
2a:7a:cc:81:00:76:f3:97:b6:73:18:bc:19:83:e9:72:0f:a1:
2d:ae:75:47:68:c1:3d:c2:d1:bc:41:e2:a7:59:61:78:3f:54:
ed:c1:9c:4c:4a:25:f2:ae:4b:9b:64:72:fb:c5:66:69:ab:0e:
e4:c8:b5:ca:ec:64:37:59:24:01:21:4c:0d:81:7f:6d:08:11:
29:8e:4c:11:b9:40:01:70:00:1e:a8:60:dc:b9:e1:77:5d:14:
b5:d9:02:6c:af:2a:99:a4:79:9d:ff:71:70:65:2c:78:c1:04:
c3:d8:ea:c3:2c:77:5a:aa:96:09:fa:71:21:64:16:80:d6:ad:
17:4b:05:3f:37:54:e9:02:e4:dd:ee:ac:e5:a2:f2:25:d4:0d:
b9:e8:58:0b:2a:6b:d8:82:16:65:8f:c1:fc:51:65:ed:eb:fb:
7c:3a:77:50:96:24:5e:d2:80:b0:bd:ac:fe:e0:6d:e4:ab:6e:
67:f6:67:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:19 2026 by rpki-client