
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/323830333a6330303a3a2f33322d3438203d3e20323632323330.roa
File: 323830333a6330303a3a2f33322d3438203d3e20323632323330.roa (raw, json)
Hash identifier: PAX9X4EtZrA9wdNyadSZNUFkj9xYIYO8211EEb3YzBU=
Subject key identifier: 52:4C:07:3F:2A:3E:F2:3C:43:B0:74:55:D9:99:9E:53:08:CE:46:CD
Certificate issuer: /CN=5476D3DCCFF32D40304F300362E14E912C59544D
Certificate serial: 02A6416C44801B6DB51DB041B5D4B9261492EA9C
Authority key identifier: 54:76:D3:DC:CF:F3:2D:40:30:4F:30:03:62:E1:4E:91:2C:59:54:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/323830333a6330303a3a2f33322d3438203d3e20323632323330.roa
Signing time: Tue 06 Jan 2026 20:55:45 +0000
ROA not before: Tue 06 Jan 2026 20:50:45 +0000
ROA not after: Tue 05 Jan 2027 20:55:45 +0000
asID: 262230
IP address blocks: 2803:c00::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.crl
rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a6:41:6c:44:80:1b:6d:b5:1d:b0:41:b5:d4:b9:26:14:92:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476D3DCCFF32D40304F300362E14E912C59544D
Validity
Not Before: Jan 6 20:50:45 2026 GMT
Not After : Jan 5 20:55:45 2027 GMT
Subject: CN=524C073F2A3EF23C43B07455D9999E5308CE46CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:49:c6:c7:59:c8:db:fa:1a:04:43:f0:60:
59:7d:e3:ac:17:52:30:1c:32:ed:48:78:a1:c5:fd:
96:e7:1a:86:44:45:81:7c:ea:8a:2e:46:4e:93:20:
1f:db:e2:c4:0f:69:10:8d:81:5c:b7:61:3f:50:89:
df:4d:d3:64:8e:ff:85:48:a0:bc:f6:79:86:b3:00:
6f:a5:65:56:0b:4b:8c:40:20:a9:47:9a:6d:68:83:
6a:4a:43:36:48:36:1b:13:15:5a:0f:8c:ea:52:4f:
cf:da:ec:1f:8c:f7:cd:8f:03:c1:ad:31:9e:c4:fb:
c2:2f:c2:b6:ed:48:47:32:d8:aa:1b:2f:4f:d0:a3:
1d:74:c8:4e:b3:4f:bb:92:c2:ba:59:6e:e7:ba:be:
00:16:ab:04:f2:47:e5:77:27:2a:82:f7:01:72:15:
04:5a:3a:d9:65:27:1e:f6:39:7a:db:f5:31:07:61:
e3:c8:47:66:2d:f1:a2:c2:59:09:27:c8:a0:ba:bc:
e2:b7:93:6e:69:f5:0e:63:02:9e:16:e1:6b:61:e7:
2d:02:f5:47:e5:70:63:1f:97:4f:8b:eb:e9:86:66:
ba:f4:ed:ef:09:86:0b:11:91:bb:87:fe:58:c0:9e:
de:cc:10:29:bf:eb:c1:a0:51:cf:ad:dc:c3:d6:90:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4C:07:3F:2A:3E:F2:3C:43:B0:74:55:D9:99:9E:53:08:CE:46:CD
X509v3 Authority Key Identifier:
keyid:54:76:D3:DC:CF:F3:2D:40:30:4F:30:03:62:E1:4E:91:2C:59:54:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/323830333a6330303a3a2f33322d3438203d3e20323632323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c00::/32
Signature Algorithm: sha256WithRSAEncryption
9d:05:c2:9f:4b:4b:11:e7:e4:69:f4:a7:28:94:09:1d:8d:2d:
29:41:a0:95:b2:dc:6c:dd:32:75:ad:f2:89:e2:d4:f2:1e:04:
90:b7:6f:c3:2e:70:14:a1:12:d9:2b:1e:2a:c0:19:2b:c2:61:
59:e4:e9:85:e5:0b:9f:38:23:b5:a2:1d:d0:96:e0:91:7f:92:
28:c7:4c:72:73:32:9e:f6:7d:81:b2:d1:85:dc:90:a2:a5:0a:
d0:3d:d2:2a:6a:76:1b:6f:47:a8:77:94:ec:5c:5c:f9:0b:8e:
b9:39:0f:96:b8:9e:48:26:28:65:a8:d3:9e:b9:37:a5:ef:56:
6c:d4:c4:53:55:75:47:9c:dc:0c:63:ef:c4:2e:3a:e0:db:5b:
22:0c:8a:2d:68:3c:3d:50:76:2d:bf:09:92:97:0d:e5:5c:a9:
70:51:2e:99:10:95:62:d4:d7:42:5f:9d:26:d4:b4:5f:19:99:
ab:80:2f:27:05:62:8f:2d:a9:ce:eb:ae:f6:10:7d:a4:cf:54:
39:e8:e3:6b:6c:0b:39:17:8e:d2:f0:3f:47:9c:41:41:bf:31:
70:f0:28:ca:24:b6:04:56:c0:54:45:98:ec:5c:88:be:68:83:
47:60:8d:8a:82:c7:7e:ab:a3:c9:07:48:3d:2d:f3:ce:e2:bf:
34:c0:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:42 2026 by rpki-client