
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
File: 323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier: tt8yT0T7YJGX+ZbBtaJWRE7bnPhZSvYB/AqjDZJFD4s=
Subject key identifier: D8:49:DF:6C:DD:D4:B7:79:73:1E:4F:AE:9B:0D:97:D1:DA:78:FA:43
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 1614FB5F36EE8876B8D21EAED3FA5EA09A4F74B2
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
Signing time: Sun 05 Jul 2026 01:50:59 +0000
ROA not before: Sun 05 Jul 2026 01:45:59 +0000
ROA not after: Sun 04 Jul 2027 01:50:59 +0000
asID: 64120
IP address blocks: 2803:f080:20a0::/43 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 08:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:14:fb:5f:36:ee:88:76:b8:d2:1e:ae:d3:fa:5e:a0:9a:4f:74:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Jul 5 01:45:59 2026 GMT
Not After : Jul 4 01:50:59 2027 GMT
Subject: CN=D849DF6CDDD4B779731E4FAE9B0D97D1DA78FA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:d6:13:7d:37:28:d9:ab:27:2b:35:f1:e4:
40:0a:11:e6:cc:89:8e:f0:b1:9c:e1:8c:d7:47:9b:
cc:39:c1:ab:c6:0d:96:e3:31:a8:80:1b:8b:ac:52:
cf:4a:95:da:30:45:7b:d7:f6:72:e9:58:61:bc:a3:
4d:e8:15:84:08:e3:fa:a1:cd:fd:f6:ce:cb:05:2a:
a3:7b:73:7b:6a:03:de:2e:1d:fc:ac:d3:f3:36:a3:
b3:c3:b7:e9:d5:41:23:b9:cd:ce:28:46:c8:db:42:
91:db:da:24:19:65:f6:66:41:d7:81:9f:7e:60:d0:
fe:09:fb:cc:31:bd:8e:4d:53:6d:de:68:0a:05:83:
33:15:07:38:c2:e2:35:54:62:9b:48:8e:f0:d5:12:
f9:29:08:41:a0:91:39:4b:e1:3f:16:35:16:4c:e9:
c8:40:19:56:cd:e1:b1:d2:3a:74:c1:2b:e8:cf:69:
d0:f7:73:13:cb:ab:f7:79:b0:35:91:af:c0:2f:a6:
b3:88:24:16:a3:1c:02:81:60:e7:a5:e4:ad:e9:94:
f2:bb:cc:fd:79:36:01:7e:a0:ae:05:8a:43:91:6f:
d3:9f:f8:3b:9a:79:8f:db:12:ad:d5:61:14:1f:cb:
11:cc:2d:a0:ea:cd:55:b5:99:e1:7f:f7:57:2b:0d:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:DF:6C:DD:D4:B7:79:73:1E:4F:AE:9B:0D:97:D1:DA:78:FA:43
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323061303a3a2f34332d3634203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:20a0::/43
Signature Algorithm: sha256WithRSAEncryption
43:ff:e1:5d:e3:da:48:8e:c1:dc:3a:1c:6e:88:cb:3c:a5:4b:
f2:34:dd:ad:08:b1:ff:4c:de:f8:c8:c2:a3:0f:83:b5:93:f1:
70:c4:ff:71:12:64:f3:5a:b7:19:10:96:e4:71:43:e6:25:68:
4c:b8:4c:c6:c4:e0:6c:37:d6:be:e8:da:1e:b1:3a:a9:dc:7e:
26:ba:d7:66:58:1d:aa:1a:ec:02:cc:0b:b3:0f:bb:fd:f4:87:
c2:d1:c9:45:d3:64:e6:e2:76:56:b7:f6:a0:43:2c:9d:ff:f4:
4f:f6:5a:1f:a9:8e:14:47:bc:bf:ab:ad:47:db:46:45:09:b7:
4b:d1:a3:b8:03:45:8e:05:92:68:35:b9:d0:ce:e1:d2:e0:b5:
b8:b9:5f:46:2c:eb:83:c4:74:84:6d:44:fb:08:43:ee:30:61:
fe:f5:6e:ee:d6:87:21:c0:73:ff:bf:05:4c:37:cb:d9:2b:5e:
83:e0:32:7c:de:e7:fb:97:53:b3:39:f7:b5:ab:85:f6:ab:a1:
e9:e2:39:c6:31:23:de:8d:b8:40:aa:61:87:2d:87:82:50:5a:
9b:61:b1:ad:af:3e:0c:fe:61:3c:03:27:4c:a8:c9:bd:f1:63:
9e:c5:36:c1:69:cc:bd:40:26:46:bc:3e:8f:8c:cf:35:a7:d3:
b2:d1:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:40:18 2026 by rpki-client