
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
File: 323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa (raw, json)
Hash identifier: 5VwiRnk27PGYRj4hTeR5KiWvKQyi8kcTy+D5BOE0FyY=
Subject key identifier: D2:DF:99:0D:F5:C9:2B:7E:03:EA:4D:04:64:21:8D:99:5D:88:BC:24
Certificate issuer: /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial: 25E97A57CDCD5C08870C7CD242A0A187B06BA429
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
Signing time: Wed 05 Mar 2025 23:35:00 +0000
ROA not before: Wed 05 Mar 2025 23:30:00 +0000
ROA not after: Wed 04 Mar 2026 23:35:00 +0000
asID: 28451
IP address blocks: 2806:3f9:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Oct 2025 00:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e9:7a:57:cd:cd:5c:08:87:0c:7c:d2:42:a0:a1:87:b0:6b:a4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Validity
Not Before: Mar 5 23:30:00 2025 GMT
Not After : Mar 4 23:35:00 2026 GMT
Subject: CN=D2DF990DF5C92B7E03EA4D0464218D995D88BC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:1f:27:88:2d:51:b5:aa:11:58:a1:a5:7c:
0a:bf:09:a0:cf:f5:a9:ac:f9:7e:97:e6:db:d5:a8:
9e:63:95:50:42:ef:16:56:d4:47:79:30:cb:17:3d:
0e:42:c7:bf:3a:b3:a8:52:33:66:da:c7:c0:01:5c:
bd:8e:16:d8:09:12:2f:25:0a:f8:73:b2:66:37:0f:
16:af:27:c6:7c:03:31:6a:6d:85:3b:17:2c:92:4d:
af:45:e4:ce:e8:69:1b:10:8d:d2:ef:51:a7:e0:b2:
a1:cd:2e:1b:3b:e3:e0:b9:dd:48:ab:89:3e:7d:49:
b5:70:ff:48:7c:a4:be:4d:bb:bc:2f:e1:1a:73:9c:
c5:96:56:5c:b8:c3:1d:c0:d5:8e:d0:ce:96:a3:50:
96:1b:93:a5:4b:de:8b:91:fa:78:82:9e:8f:04:41:
c9:ce:9f:8d:6a:74:c5:48:0b:8a:4d:25:a7:d4:6e:
52:6a:7f:01:0e:3f:29:92:c4:ca:e5:c7:a6:0c:f6:
7c:22:93:06:c8:24:1c:3b:7b:ca:59:2f:07:ae:da:
a9:db:13:16:0e:f5:af:69:50:de:6b:9f:75:cb:15:
59:0f:6f:ff:c0:af:79:f8:ee:1c:ee:97:61:b3:a3:
49:be:df:b2:67:78:e6:6c:eb:81:04:52:1f:f2:29:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:99:0D:F5:C9:2B:7E:03:EA:4D:04:64:21:8D:99:5D:88:BC:24
X509v3 Authority Key Identifier:
keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a343030303a3a2f33342d3334203d3e203238343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3f9:4000::/34
Signature Algorithm: sha256WithRSAEncryption
9d:a0:c3:70:88:c5:f2:22:2c:5b:fa:5c:4b:1e:7f:c1:84:a1:
f7:a8:86:28:3f:f9:db:54:78:ab:4d:6d:c8:1d:76:7b:51:69:
e1:df:8b:0c:01:f3:f5:c3:1b:b6:4a:a3:fc:9d:0e:76:44:1f:
d6:0d:f0:50:65:af:f9:21:a7:01:2c:86:a7:58:9f:1b:73:6f:
34:b1:d8:f9:df:63:fa:05:b4:08:b9:e2:31:fc:8e:75:09:fa:
db:1c:ea:3f:e2:a0:2f:65:f3:41:e5:d4:69:06:75:bb:c8:b9:
6c:74:a2:20:e8:f1:97:4d:53:ad:2d:56:1e:09:49:e9:68:72:
9b:4c:88:99:9a:0a:69:47:b7:37:57:80:09:92:2e:b7:ea:e1:
0a:cf:a1:af:be:84:87:a1:57:a8:3d:96:a6:da:be:21:cb:07:
72:75:13:b6:11:cf:52:3c:97:a8:e4:ed:13:2e:a3:b8:d7:96:
9c:b6:6a:4f:bd:af:c0:6f:9a:94:49:86:43:89:ff:93:1e:7e:
80:b1:dc:19:d3:04:a5:7c:b5:e9:80:c4:4a:46:48:d3:4c:16:
19:da:95:db:ad:df:81:fa:f2:e2:40:e8:9b:89:9a:35:0a:7e:
68:88:12:ba:09:cb:c8:9f:07:9e:eb:a1:60:70:c7:dc:c2:2d:
62:13:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:42:15 2025 by rpki-client