
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
File: 323830333a663732303a3a2f33322d3332203d3e20323636373634.roa (raw, json)
Hash identifier: uW+iW1DW4P77YKZlZRS1RPqR5kCtD4GCb/Jdcr0lR+w=
Subject key identifier: D2:B7:F1:C7:94:1A:C2:3C:F4:66:1A:06:C4:86:13:96:CC:33:97:8B
Certificate issuer: /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial: 571BE131838E0B78637892B76ED2D473E813393E
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
Signing time: Fri 27 Mar 2026 00:36:12 +0000
ROA not before: Fri 27 Mar 2026 00:31:12 +0000
ROA not after: Fri 26 Mar 2027 00:36:12 +0000
asID: 266764
IP address blocks: 2803:f720::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 30 Mar 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1b:e1:31:83:8e:0b:78:63:78:92:b7:6e:d2:d4:73:e8:13:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Validity
Not Before: Mar 27 00:31:12 2026 GMT
Not After : Mar 26 00:36:12 2027 GMT
Subject: CN=D2B7F1C7941AC23CF4661A06C4861396CC33978B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:fd:a5:69:59:c0:d9:4e:59:e6:59:b0:d1:
ff:7a:ae:e5:c2:4e:36:ee:23:fd:6c:39:b9:2a:16:
0c:4f:dd:3a:63:25:03:7f:69:54:59:67:6a:ef:57:
7f:a4:b3:55:d0:b0:f2:32:7c:98:6a:3f:79:d9:fb:
e9:49:e4:f1:d8:e8:68:c4:26:68:2e:21:9f:4e:a2:
83:47:41:44:53:9e:0d:66:bd:6c:a3:a8:6e:bc:3a:
4a:6a:54:63:b0:fc:3a:3d:7c:71:38:07:c5:c9:6a:
51:39:ee:cc:bf:1c:12:2a:a9:71:47:f3:a2:0f:46:
bd:41:dd:8d:50:81:40:19:7e:79:30:dd:4c:5e:a4:
8b:88:a4:d0:69:9e:4f:1e:25:ab:19:63:07:78:66:
5c:4a:30:1e:98:b6:ef:f5:57:a0:5d:01:dd:65:bf:
89:8e:bf:ea:06:8d:c9:e1:b6:3c:4b:50:3a:00:14:
fc:19:82:cc:18:45:4d:3a:29:d5:19:c8:62:5d:fd:
e3:85:3c:b2:89:ca:cf:45:84:f0:c2:49:27:31:50:
51:3b:00:a5:fc:df:c0:d0:b5:b9:5a:6e:d7:58:30:
db:6d:d8:98:d4:aa:9c:d3:0b:d7:45:ec:6c:1f:2c:
71:47:0b:da:64:b5:4c:39:90:8d:2a:34:c9:f8:ee:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:F1:C7:94:1A:C2:3C:F4:66:1A:06:C4:86:13:96:CC:33:97:8B
X509v3 Authority Key Identifier:
keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/323830333a663732303a3a2f33322d3332203d3e20323636373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f720::/32
Signature Algorithm: sha256WithRSAEncryption
80:46:fd:e7:0d:89:61:cf:71:80:a2:b5:a1:43:c4:62:8b:5e:
72:c9:c1:ac:83:bf:c6:14:ae:8b:8b:16:d2:1f:a0:44:98:47:
c1:e7:76:73:9e:c3:6d:24:9b:d4:f6:0b:7a:26:8a:c8:4a:cf:
18:c0:6c:84:73:95:33:51:64:dd:31:06:ee:76:f7:70:54:db:
75:a7:54:d1:ea:e3:53:e0:24:f9:4b:63:24:f2:37:3f:39:69:
4c:7c:f7:33:e5:25:7c:97:18:53:d2:e4:32:ac:e0:f2:65:1b:
7b:14:2c:11:22:38:09:b9:25:23:5f:a4:26:5d:d8:0e:83:4c:
d4:33:c9:15:5d:22:73:72:ec:e4:03:fb:a5:a7:9a:dc:a8:4f:
4c:bd:38:6b:89:98:6c:2f:b2:36:5c:be:d2:69:4a:f4:f3:a8:
9c:cd:66:1f:71:f6:06:ab:0b:7f:66:df:60:6e:2f:44:df:ea:
83:1c:49:66:37:8e:b7:f5:ae:db:35:92:df:52:f9:73:c9:3e:
5a:f5:41:93:ea:74:ab:96:d8:41:76:ad:a1:14:2c:a8:41:94:
b6:37:e6:fe:ed:44:c2:9e:f2:41:22:99:38:c5:df:5a:c8:3a:
da:01:a0:a9:d9:e0:de:63:d6:ea:8f:54:46:94:67:0a:2c:3d:
0c:61:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:57:54 2026 by rpki-client