
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/323830333a343738303a3a2f33322d3332203d3e20323731383631.roa
File: 323830333a343738303a3a2f33322d3332203d3e20323731383631.roa (raw, json)
Hash identifier: GBXmOs3pku6Pkp6x0IIL32xQ2vKHBxPjbFLYJhjKjbk=
Subject key identifier: 41:23:3C:31:63:D8:7F:0F:48:30:9C:28:87:53:F4:6D:42:18:6E:C3
Certificate issuer: /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial: 6A684DB595008CB120378106A7ABA91CA87E5F0C
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/323830333a343738303a3a2f33322d3332203d3e20323731383631.roa
Signing time: Tue 16 Jun 2026 16:55:00 +0000
ROA not before: Tue 16 Jun 2026 16:50:00 +0000
ROA not after: Tue 15 Jun 2027 16:55:00 +0000
asID: 271861
IP address blocks: 2803:4780::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:68:4d:b5:95:00:8c:b1:20:37:81:06:a7:ab:a9:1c:a8:7e:5f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Validity
Not Before: Jun 16 16:50:00 2026 GMT
Not After : Jun 15 16:55:00 2027 GMT
Subject: CN=41233C3163D87F0F48309C288753F46D42186EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:74:f3:00:02:eb:2f:66:a6:d8:4f:47:f8:aa:
48:20:f5:13:e7:e5:8c:ae:b8:02:da:6d:c1:b7:f6:
bb:65:4d:1e:b0:bf:0e:40:22:50:ce:28:a2:1e:5f:
a6:c4:41:9c:5e:22:72:53:2f:79:5e:ae:3e:f3:66:
0e:cc:46:2e:a3:9f:f6:64:99:89:5b:fd:e7:b3:99:
88:7a:c3:29:d7:30:3d:59:e5:b5:2a:0e:40:61:45:
d4:28:8e:c9:e5:01:3d:c9:2c:26:4b:27:5b:f1:f9:
c6:45:58:ba:c2:42:f5:77:0c:0c:ea:6b:ec:48:a3:
af:d4:db:af:d7:d4:3e:b8:75:ee:fe:17:88:6a:a5:
d3:97:0b:64:da:9c:d1:1a:48:84:72:0d:85:02:4b:
db:cb:4d:95:61:d8:bc:89:bf:07:58:bf:d6:ca:87:
71:ef:3b:d0:5c:1c:4e:61:10:96:42:9e:09:77:8a:
84:95:65:2d:79:bf:ea:9f:df:5d:24:ed:c7:95:32:
11:18:ad:28:8c:9e:57:2d:2e:24:b7:fb:12:2f:f2:
71:8c:e8:54:b9:95:5f:70:d9:05:a5:12:b1:ab:d2:
2b:7c:59:4b:e9:8b:21:2b:ec:01:90:b3:f5:fd:23:
3b:f0:16:4b:a8:6b:f5:63:a7:7c:c5:b7:73:15:1f:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:3C:31:63:D8:7F:0F:48:30:9C:28:87:53:F4:6D:42:18:6E:C3
X509v3 Authority Key Identifier:
keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/323830333a343738303a3a2f33322d3332203d3e20323731383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4780::/32
Signature Algorithm: sha256WithRSAEncryption
3f:16:9a:0f:52:fe:3f:97:39:ba:ab:30:48:16:56:5d:ce:48:
f5:7c:07:0a:1e:8d:c8:25:60:f6:a8:00:06:fa:31:f4:26:de:
00:a8:08:5a:c8:c1:41:53:c8:f0:1c:26:0c:f2:73:f6:3c:8c:
01:b2:e2:8a:7d:f1:17:d9:4b:85:39:22:4a:b3:95:e8:46:9f:
4e:20:b0:e9:1d:5e:0b:90:0b:60:5f:c1:8c:11:fb:e9:4f:99:
ae:06:ac:95:ac:53:e8:bf:e6:70:d5:eb:e2:15:0a:40:67:12:
4c:e7:0c:3b:ec:06:f5:70:e4:6d:9e:22:29:d1:55:38:1d:7f:
60:7a:f8:ab:58:25:fa:5e:03:1d:bb:e2:8e:ec:7c:df:6f:a7:
93:a0:53:c9:2d:de:5a:dd:4b:83:cc:a7:09:46:9c:fd:40:e8:
df:f6:72:fe:d4:01:de:8f:ac:c9:43:e7:88:17:b1:13:de:b7:
67:28:72:14:84:2c:73:9e:1d:ea:31:00:d6:2a:0c:e0:de:cf:
bc:7b:b0:fc:59:e4:6a:bd:d3:d8:06:8a:f3:4c:1a:f1:51:a1:
3d:34:31:f4:31:db:89:af:0f:03:df:6a:e3:c6:da:b4:c0:df:
e7:31:53:65:0e:59:71:0a:ff:14:8d:35:74:05:2e:6e:db:11:
17:02:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:59:14 2026 by rpki-client