
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326534303a3a2f34332d3634203d3e203634313230.roa
File: 323830333a663038303a326534303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier: XWzpdrEA6RcYmtBh+L0MDO6JD5Y7A/I0/Jt5mSt5RZU=
Subject key identifier: 58:DC:0F:93:7E:51:D8:D7:8B:4B:2D:88:2C:9D:B0:F2:FD:77:44:1F
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 69274B5D37875A1E533827F876C76B85B11F9F2C
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326534303a3a2f34332d3634203d3e203634313230.roa
Signing time: Sat 07 Mar 2026 17:33:16 +0000
ROA not before: Sat 07 Mar 2026 17:28:16 +0000
ROA not after: Sat 06 Mar 2027 17:33:16 +0000
asID: 64120
IP address blocks: 2803:f080:2e40::/43 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:27:4b:5d:37:87:5a:1e:53:38:27:f8:76:c7:6b:85:b1:1f:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Mar 7 17:28:16 2026 GMT
Not After : Mar 6 17:33:16 2027 GMT
Subject: CN=58DC0F937E51D8D78B4B2D882C9DB0F2FD77441F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:ca:31:d5:90:f9:62:b4:72:d1:5e:77:92:
4f:93:ed:35:dd:c7:d2:6b:4f:eb:d4:cc:62:f0:f2:
2a:b1:01:63:04:f9:8f:a6:57:e7:0a:81:b0:e2:aa:
72:57:5c:25:44:5a:ba:15:d7:8d:80:59:64:a0:c7:
20:07:86:a0:4d:4d:39:a1:3f:b2:af:aa:fd:6c:fb:
54:70:1c:31:fd:43:08:7f:6e:ca:3f:63:09:68:97:
7d:4a:7c:91:18:be:9f:f1:ec:a1:5d:d8:39:28:d1:
6e:5a:a8:4c:26:27:9d:b3:22:38:7e:e5:90:04:73:
a1:e7:fe:87:47:cf:bd:a0:f3:44:b6:64:79:d2:d0:
e9:f5:d2:3c:eb:02:93:48:bc:63:69:a7:5f:cd:f6:
23:cb:ff:d4:3e:5d:35:b7:79:82:f9:7f:60:2c:8c:
67:25:08:84:ae:7b:90:f6:0e:5a:b4:9b:56:f6:80:
a7:58:f6:e9:5f:7a:59:d6:eb:b1:b6:8b:ca:a6:52:
40:59:a9:1c:20:bb:61:98:9e:47:6c:1b:46:5d:54:
cd:53:32:92:87:d8:4d:76:5b:6b:7c:e0:27:99:79:
c5:22:6b:2b:0a:92:20:d2:dd:c5:0f:c6:40:95:5c:
e1:b1:59:f1:43:05:33:cb:b5:2f:64:10:e0:a5:ed:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:0F:93:7E:51:D8:D7:8B:4B:2D:88:2C:9D:B0:F2:FD:77:44:1F
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326534303a3a2f34332d3634203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:2e40::/43
Signature Algorithm: sha256WithRSAEncryption
0e:a6:f1:82:c2:ae:6a:1a:68:a2:5d:09:81:b8:a7:b3:d6:9c:
84:08:02:76:f7:e6:04:87:de:43:f2:76:61:25:d2:fa:71:de:
49:d0:4f:08:a3:dd:90:08:39:95:e2:ef:94:75:28:8f:1a:d7:
27:c2:fc:77:67:da:02:41:fc:88:55:9b:18:46:fb:a1:46:0d:
96:a0:bc:af:94:1f:36:dd:b2:e3:0f:3b:39:92:32:aa:d5:3e:
f4:13:63:51:a6:c7:4f:2b:fa:ef:2d:ec:01:7b:4e:0f:00:1e:
85:42:c3:cb:d2:17:1c:5f:11:fb:c0:52:ef:d9:57:33:4f:c3:
9b:58:98:3d:dc:53:5c:a5:ce:8b:ba:17:2d:77:3f:51:06:1b:
f0:36:ab:83:ee:93:47:c1:db:4f:54:11:8c:0c:39:8f:aa:82:
61:43:f2:ee:d3:0c:00:61:12:58:0a:c8:aa:1f:eb:dc:1a:de:
48:26:43:50:b7:99:7f:6a:5f:c8:82:40:0b:a4:68:6c:4b:c9:
96:c1:f1:95:e6:d5:e7:a0:6e:54:9e:11:d8:8e:0e:b3:42:9f:
f1:ff:b0:a5:b1:c6:b8:62:55:93:36:1f:44:f9:be:20:b2:a2:
44:03:2e:7c:4d:3b:fb:ea:61:97:b8:b6:a5:25:c7:43:5a:57:
68:9f:63:5a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUaSdLXTeHWh5TOCf4dsdrhbEfnywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNjAzMDcxNzI4MTZaFw0yNzAzMDYxNzMzMTZaMDMxMTAvBgNV
BAMTKDU4REMwRjkzN0U1MUQ4RDc4QjRCMkQ4ODJDOURCMEYyRkQ3NzQ0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhMox1ZD5YrRy0V53kk+T7TXd
x9JrT+vUzGLw8iqxAWME+Y+mV+cKgbDiqnJXXCVEWroV142AWWSgxyAHhqBNTTmh
P7Kvqv1s+1RwHDH9Qwh/bso/Ywlol31KfJEYvp/x7KFd2Dko0W5aqEwmJ52zIjh+
5ZAEc6Hn/odHz72g80S2ZHnS0On10jzrApNIvGNpp1/N9iPL/9Q+XTW3eYL5f2As
jGclCISue5D2Dlq0m1b2gKdY9ulfelnW67G2i8qmUkBZqRwgu2GYnkdsG0ZdVM1T
MpKH2E12W2t84CeZecUiaysKkiDS3cUPxkCVXOGxWfFDBTPLtS9kEOCl7YXRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWNwPk35R2NeLSy2ILJ2w8v13RB8wHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzI2
NTM0MzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcFKAPwgC5AMA0GCSqGSIb3DQEBCwUAA4IBAQAOpvGCwq5qGmiiXQmBuKez1pyE
CAJ29+YEh95D8nZhJdL6cd5J0E8Io92QCDmV4u+UdSiPGtcnwvx3Z9oCQfyIVZsY
RvuhRg2WoLyvlB823bLjDzs5kjKq1T70E2NRpsdPK/rvLewBe04PAB6FQsPL0hcc
XxH7wFLv2VczT8ObWJg93FNcpc6Luhctdz9RBhvwNquD7pNHwdtPVBGMDDmPqoJh
Q/Lu0wwAYRJYCsiqH+vcGt5IJkNQt5l/al/IgkALpGhsS8mWwfGV5tXnoG5UnhHY
jg6zQp/x/7Clsca4YlWTNh9E+b4gsqJEAy58TTv76mGXuLalJcdDWldon2Na
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:12:11 2026 by rpki-client