
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa
File: 323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa (raw, json)
Hash identifier: P45ryzwEPzJ7NT3CKpfnnjdBKs9eYBIv414kIK5pi8o=
Subject key identifier: 32:DC:AA:8F:A4:19:E0:B1:E1:59:85:20:96:87:E7:18:4B:49:F9:F8
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 03AEDD707D26E98D02A20DC5047C560EFB6AF48E
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa
Signing time: Thu 29 Oct 2026 20:06:08 +0000
ROA not before: Thu 29 Oct 2026 20:01:08 +0000
ROA not after: Thu 28 Oct 2027 20:06:08 +0000
asID: 398947
IP address blocks: 2800:b10:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Nov 2026 20:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ae:dd:70:7d:26:e9:8d:02:a2:0d:c5:04:7c:56:0e:fb:6a:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Oct 29 20:01:08 2026 GMT
Not After : Oct 28 20:06:08 2027 GMT
Subject: CN=32DCAA8FA419E0B1E15985209687E7184B49F9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:70:25:30:5f:17:27:24:dd:38:e1:50:a5:
fb:9c:59:d8:e3:a9:7b:35:8e:b6:ad:b0:c7:18:77:
bd:68:0f:58:0e:b5:09:26:b6:ba:e5:05:16:04:1e:
dd:6b:2c:63:d5:5d:7a:b9:e9:50:90:ba:f8:f4:13:
bd:4b:82:f3:c7:a3:96:1e:58:80:e8:2d:6c:34:25:
66:89:c7:13:d9:36:49:eb:80:c0:76:ff:04:6c:1b:
7e:af:dd:59:e6:c8:b8:ad:e3:05:c5:2b:66:8c:a3:
cc:2f:5d:ce:fb:9a:02:0d:97:5f:96:db:72:28:5a:
03:c0:65:27:b3:af:5e:88:cd:40:65:85:ec:76:56:
f3:90:b4:39:d0:51:76:45:57:9d:62:8e:ea:fa:84:
f9:14:d7:81:24:81:fc:98:1c:34:c6:44:e8:f4:91:
e2:06:c8:30:13:d3:1e:a8:6e:02:5b:17:31:28:dd:
b9:29:82:5e:cc:04:76:21:e5:a5:6e:42:b4:e6:1a:
da:fc:1f:94:be:65:58:f8:97:f9:99:53:7e:43:41:
bc:cc:34:30:ac:85:4a:33:b6:6e:7c:70:10:65:1a:
1d:30:89:b9:fc:71:b4:63:c7:b1:bf:c6:4b:0e:39:
b9:94:3c:cb:15:02:33:58:ab:cb:a8:2c:96:7e:28:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:AA:8F:A4:19:E0:B1:E1:59:85:20:96:87:E7:18:4B:49:F9:F8
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3230303a3a2f34382d3438203d3e20333938393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b10:200::/48
Signature Algorithm: sha256WithRSAEncryption
64:55:bf:c1:50:51:76:13:2c:42:63:08:5d:7f:9d:d0:e7:7e:
32:e3:d3:05:a2:7c:d7:3a:73:f2:1f:46:5a:29:3c:eb:2c:27:
6b:e0:0f:86:79:aa:c9:73:37:57:e4:a4:c3:c2:d7:2c:fd:ed:
fe:37:a5:16:b1:75:8c:c9:d7:be:7f:4c:7f:7c:4b:e9:4f:82:
52:76:10:15:5e:9b:fd:c5:1d:f5:fa:b0:46:83:03:f4:12:70:
de:a8:c3:e4:c3:03:92:51:07:ab:51:8e:fc:d6:28:5a:e2:a5:
81:7e:ce:88:8e:18:75:c5:32:f1:4a:75:db:13:45:55:ba:f7:
61:7f:1e:c6:1e:b0:50:16:e0:26:4c:b3:d6:dd:14:eb:b0:17:
d1:b7:1e:80:ae:f5:66:47:43:7b:0d:22:1e:5e:fb:62:c8:5e:
96:69:72:96:4d:bb:00:8f:aa:21:ba:b4:04:06:fa:ac:dc:1e:
39:43:99:b1:b0:9d:90:b6:24:f6:96:95:30:61:e0:88:d0:97:
c7:00:bd:9f:d2:5a:df:44:bd:6a:dd:31:e3:83:e0:86:93:08:
45:8f:20:69:1a:66:a3:61:83:ff:ba:26:da:b2:ba:08:3e:8a:
39:b1:56:ba:0c:f9:de:c1:a3:20:b2:c6:3c:7b:14:2f:51:0f:
85:de:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:53:09 2026 by rpki-client