
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/323830333a646635303a3a2f33322d3438203d3e20323733393533.roa
File: 323830333a646635303a3a2f33322d3438203d3e20323733393533.roa (raw, json)
Hash identifier: X8VlExOwpve0LMhImGUIcT1+srlljGs2IFMMx5CKmKM=
Subject key identifier: 9F:88:88:29:6D:1D:19:D5:DB:38:A0:0A:66:DB:DA:97:85:FD:CD:D4
Certificate issuer: /CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2
Certificate serial: 761BB029B077119BAC670115BF28C3FDF0F03D3A
Authority key identifier: E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/323830333a646635303a3a2f33322d3438203d3e20323733393533.roa
Signing time: Tue 24 Mar 2026 22:35:52 +0000
ROA not before: Tue 24 Mar 2026 22:30:52 +0000
ROA not after: Tue 23 Mar 2027 22:35:52 +0000
asID: 273953
IP address blocks: 2803:df50::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl
rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 18:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1b:b0:29:b0:77:11:9b:ac:67:01:15:bf:28:c3:fd:f0:f0:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2
Validity
Not Before: Mar 24 22:30:52 2026 GMT
Not After : Mar 23 22:35:52 2027 GMT
Subject: CN=9F8888296D1D19D5DB38A00A66DBDA9785FDCDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:18:1a:91:8f:c7:82:4e:7c:e8:b6:e0:3c:
cb:fb:81:12:ba:27:20:9f:f8:fe:8a:cc:b2:85:63:
c7:86:ca:53:dd:d8:54:5b:15:8a:a8:f1:b8:8d:c1:
c7:92:2c:cb:b0:17:5d:13:d9:9f:7e:e5:95:bf:86:
43:b3:8f:e2:2c:dc:b5:e7:96:da:02:19:17:41:cb:
be:38:4c:8e:38:e5:75:65:10:ab:e1:d4:34:be:c5:
5e:b2:03:43:59:b6:ef:89:cb:88:78:15:87:63:4b:
35:45:ee:d0:ff:aa:a6:3e:0b:d7:74:20:27:a4:22:
c8:42:0a:bc:a5:74:ad:07:f4:43:26:c6:99:d6:d0:
57:be:46:5d:04:4a:ff:01:a3:6a:18:35:5c:ef:0f:
c9:c3:e8:dc:a7:49:cd:f2:8d:d0:9f:6c:f2:cd:c7:
e9:17:9b:fc:31:9d:51:f7:17:03:cc:7f:50:07:5b:
fe:70:7b:f2:d9:54:58:b2:cb:61:4f:7e:9a:d1:dd:
97:6c:53:21:ea:27:c7:a1:99:d4:b0:3b:35:c3:83:
40:3c:75:b5:6d:56:7f:5e:16:cd:ff:05:57:14:15:
92:ff:64:11:f5:77:77:15:43:dc:81:54:37:08:23:
89:62:e6:0c:b5:d7:94:03:90:2e:65:3b:72:f5:91:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:88:29:6D:1D:19:D5:DB:38:A0:0A:66:DB:DA:97:85:FD:CD:D4
X509v3 Authority Key Identifier:
keyid:E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/323830333a646635303a3a2f33322d3438203d3e20323733393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:df50::/32
Signature Algorithm: sha256WithRSAEncryption
9a:49:45:97:8a:12:7b:99:3e:12:10:7b:82:bb:d1:24:f0:a4:
4b:94:d4:71:75:51:d1:bd:32:69:96:55:b9:de:df:f4:b1:23:
7f:03:e7:75:c9:db:2e:38:24:e3:17:54:78:9a:9b:2a:1e:58:
b3:53:ca:f9:32:29:e7:83:86:f3:08:e4:a1:af:6c:e9:aa:ab:
ae:b1:dc:07:1d:86:b1:45:6f:4e:87:66:21:97:8b:b5:5b:05:
03:91:e8:0c:bc:9e:15:63:4e:16:56:1c:b1:3b:b6:af:cf:99:
84:57:b9:e6:05:98:22:d2:a6:62:f8:9d:cb:5b:ce:35:a4:c8:
05:13:0f:a7:48:7f:dd:6c:ce:40:09:62:98:1a:25:3e:58:df:
20:e3:74:6c:9f:c2:58:b3:4b:43:64:cd:09:79:3f:35:5c:ae:
fd:70:ae:6c:16:f1:c7:63:8c:53:cb:fb:fe:b3:ba:e2:5d:24:
b3:a7:83:4e:7e:bc:6d:bb:f3:70:50:01:41:74:8f:5a:b3:22:
dc:8e:87:d8:a4:95:48:a2:cc:ce:e6:8a:b8:0f:dc:05:0c:18:
ad:56:14:31:ed:00:20:cf:50:c1:58:40:ca:11:0b:d3:94:31:
75:eb:29:30:b5:a7:eb:6e:98:e7:62:25:4e:5f:52:3a:d3:be:
b1:60:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:57:39 2026 by rpki-client