
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a3a2f34382d3438203d3e203134323332.roa
File: 323830303a3262303a3a2f34382d3438203d3e203134323332.roa (raw, json)
Hash identifier: xVKAymHQtd3qAtmH3XLz7bipb3y+ADnQqVmkg48D1b8=
Subject key identifier: 8C:4B:86:0E:62:46:D9:03:49:35:B0:A6:32:FA:22:94:24:1A:D1:EC
Certificate issuer: /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial: 212B49B83EFF4EB5B0C2EBE9B98339E972911B07
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a3a2f34382d3438203d3e203134323332.roa
Signing time: Fri 16 Oct 2026 16:00:05 +0000
ROA not before: Fri 16 Oct 2026 15:55:05 +0000
ROA not after: Fri 15 Oct 2027 16:00:05 +0000
asID: 14232
IP address blocks: 2800:2b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 23 Oct 2026 18:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2b:49:b8:3e:ff:4e:b5:b0:c2:eb:e9:b9:83:39:e9:72:91:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Validity
Not Before: Oct 16 15:55:05 2026 GMT
Not After : Oct 15 16:00:05 2027 GMT
Subject: CN=8C4B860E6246D9034935B0A632FA2294241AD1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:7e:86:15:9d:ab:18:76:cb:1b:c6:ff:1e:
13:e4:14:16:5d:fd:81:1f:5f:3a:d6:3b:09:1c:5d:
fc:75:51:9c:97:09:ea:84:ea:01:23:93:ba:89:a5:
78:6a:38:8a:dc:b8:be:9c:a9:af:9d:94:e9:29:51:
47:68:6b:5a:c0:0f:bb:2a:0c:56:6b:2f:bb:32:66:
10:06:a4:dd:8d:22:96:bc:39:26:11:56:fe:e0:10:
d4:18:a3:d5:fb:66:17:6b:07:06:e2:05:99:ce:04:
04:2f:d0:a6:09:76:28:c4:b9:cc:b5:06:e4:bd:5f:
4e:0a:f9:e5:db:40:53:24:2f:13:5a:10:aa:b5:67:
c3:00:18:8e:ac:ad:04:91:47:c6:1e:9c:a9:34:bf:
92:0b:10:48:02:c3:0a:00:be:3a:52:49:57:7d:42:
50:b5:39:8e:80:c9:a9:54:28:01:b9:f3:93:67:e2:
af:cd:f2:fb:6b:5e:69:7e:54:97:ec:d3:0b:63:17:
23:64:e9:47:04:9f:c2:f9:d9:f3:c2:c7:f8:69:9c:
93:6c:c2:48:e3:61:61:a0:fd:c4:39:0b:53:fc:dd:
d0:13:25:c0:52:d6:fc:08:7a:de:09:da:14:07:b8:
2a:ef:9b:e3:db:73:b2:73:c7:28:ef:dd:9a:f3:e8:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4B:86:0E:62:46:D9:03:49:35:B0:A6:32:FA:22:94:24:1A:D1:EC
X509v3 Authority Key Identifier:
keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/323830303a3262303a3a2f34382d3438203d3e203134323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:2b0::/48
Signature Algorithm: sha256WithRSAEncryption
51:0e:1d:19:0b:c0:bc:81:98:fa:e0:b1:9d:02:f7:49:4f:de:
ab:84:11:7f:7d:73:69:e9:4d:af:80:37:28:28:66:29:d4:df:
24:52:c8:6d:56:85:1a:8b:fd:73:2b:87:13:fd:b1:ca:72:13:
c2:2e:5c:a9:d5:c0:fd:90:4e:60:5f:f4:a8:d0:3b:ba:e1:94:
41:f8:36:32:55:b2:f4:71:d4:8d:bb:62:b8:b6:af:83:1d:43:
7b:ef:c4:12:f5:88:7e:4c:a8:dd:6a:1a:ed:1c:8e:4f:0b:3d:
b4:3c:91:1b:42:a6:fe:99:15:73:06:95:8c:5c:42:1e:6a:4a:
b1:13:7c:01:65:a2:39:04:6a:e6:c0:65:a8:ce:d0:10:bf:c1:
c6:6d:54:47:e5:d2:cc:d2:d5:9d:55:9a:b4:e8:a4:50:1c:dc:
d4:2c:a2:35:28:d3:d7:f0:66:8d:d1:22:7d:16:b4:66:c6:27:
6c:c1:d8:4d:e5:ce:3e:0e:0d:e6:18:4d:d0:46:6a:89:8a:36:
bd:56:cf:08:9d:f8:21:6e:3a:85:43:e0:d6:45:a0:97:a9:df:
ee:43:a2:b9:4f:f1:06:f0:2e:5f:25:5f:38:43:92:1a:c4:da:
18:dc:c6:8c:72:26:7d:0b:db:fa:51:bd:07:68:f4:1e:de:b2:
dc:69:18:3c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUIStJuD7/TrWwwuvpuYM56XKRGwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNjEwMTYxNTU1MDVaFw0yNzEwMTUxNjAwMDVaMDMxMTAvBgNV
BAMTKDhDNEI4NjBFNjI0NkQ5MDM0OTM1QjBBNjMyRkEyMjk0MjQxQUQxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscH6GFZ2rGHbLG8b/HhPkFBZd
/YEfXzrWOwkcXfx1UZyXCeqE6gEjk7qJpXhqOIrcuL6cqa+dlOkpUUdoa1rAD7sq
DFZrL7syZhAGpN2NIpa8OSYRVv7gENQYo9X7ZhdrBwbiBZnOBAQv0KYJdijEucy1
BuS9X04K+eXbQFMkLxNaEKq1Z8MAGI6srQSRR8YenKk0v5ILEEgCwwoAvjpSSVd9
QlC1OY6AyalUKAG585Nn4q/N8vtrXml+VJfs0wtjFyNk6UcEn8L52fPCx/hpnJNs
wkjjYWGg/cQ5C1P83dATJcBS1vwIet4J2hQHuCrvm+Pbc7Jzxyjv3Zrz6HJXAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUjEuGDmJG2QNJNbCmMvoilCQa0ewwHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMyMzgzMDMwM2EzMjYyMzAzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAACsAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQBRDh0ZC8C8gZj64LGdAvdJT96rhBF/fXNp6U2vgDco
KGYp1N8kUshtVoUai/1zK4cT/bHKchPCLlyp1cD9kE5gX/So0Du64ZRB+DYyVbL0
cdSNu2K4tq+DHUN778QS9Yh+TKjdahrtHI5PCz20PJEbQqb+mRVzBpWMXEIeakqx
E3wBZaI5BGrmwGWoztAQv8HGbVRH5dLM0tWdVZq06KRQHNzULKI1KNPX8GaN0SJ9
FrRmxidswdhN5c4+Dg3mGE3QRmqJija9Vs8InfghbjqFQ+DWRaCXqd/uQ6K5T/EG
8C5fJV84Q5IaxNoY3MaMciZ9C9v6Ub0HaPQe3rLcaRg8
-----END CERTIFICATE-----
Generated at Tue Oct 20 01:57:56 2026 by rpki-client