
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2037303837.roa
File: 323830333a343836303a3a2f33322d3332203d3e2037303837.roa (raw, json)
Hash identifier: hUmbDlHk2ohk1u3eQpZtIW1EFbzzV+M/gVgKFhwRnJM=
Subject key identifier: ED:5E:66:A1:F2:92:43:D4:8B:79:19:03:15:94:3B:04:DC:BA:C8:F1
Certificate issuer: /CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Certificate serial: 24C40E206AFBACFD7D6B467ABCF18EBF559B368F
Authority key identifier: 29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2037303837.roa
Signing time: Tue 03 Mar 2026 10:45:00 +0000
ROA not before: Tue 03 Mar 2026 10:40:00 +0000
ROA not after: Tue 02 Mar 2027 10:45:00 +0000
asID: 7087
IP address blocks: 2803:4860::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Mar 2026 20:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c4:0e:20:6a:fb:ac:fd:7d:6b:46:7a:bc:f1:8e:bf:55:9b:36:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2973A8473D433F5A2DD25103C5F3226FC307D6DA
Validity
Not Before: Mar 3 10:40:00 2026 GMT
Not After : Mar 2 10:45:00 2027 GMT
Subject: CN=ED5E66A1F29243D48B79190315943B04DCBAC8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:21:92:b4:07:4a:df:e1:fe:9d:75:f4:11:
7e:9d:f9:1c:c2:b7:39:f6:22:9d:33:4e:eb:37:9b:
de:f6:65:43:d6:00:60:66:76:4f:a9:78:4c:84:37:
e9:cd:8c:20:ad:c2:b9:f5:ac:f0:56:de:b9:9f:24:
f8:da:cb:7b:9e:4f:30:97:87:79:de:a3:20:18:e3:
f4:c6:db:f1:df:84:48:5f:b5:a5:e2:f4:4d:41:9f:
66:f3:94:7d:7f:02:0c:4a:de:6d:fd:1e:b4:83:57:
e9:bd:3f:e5:b0:95:50:74:53:61:58:b6:fb:79:13:
d5:5a:be:74:bf:45:24:93:99:bc:5e:76:a9:8b:94:
57:3a:ac:91:80:6f:fb:19:1d:1d:38:c4:b2:a5:31:
b3:d9:d7:5b:2a:26:c1:6f:dd:9b:9e:4e:0c:9f:6d:
0b:be:9a:93:29:65:87:c0:a6:af:16:99:00:97:1a:
d9:e2:d5:91:cf:97:e6:d1:78:ca:f3:33:a4:76:94:
19:f2:52:db:fd:75:f4:1a:dd:52:91:be:49:a2:8b:
25:9e:57:a9:fe:cd:cd:86:51:72:dc:ad:2f:f0:66:
80:18:40:ea:08:82:64:79:34:1e:24:59:23:4b:44:
5b:29:42:4d:6a:fe:4b:68:fb:57:94:04:3b:86:19:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:66:A1:F2:92:43:D4:8B:79:19:03:15:94:3B:04:DC:BA:C8:F1
X509v3 Authority Key Identifier:
keyid:29:73:A8:47:3D:43:3F:5A:2D:D2:51:03:C5:F3:22:6F:C3:07:D6:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2973A8473D433F5A2DD25103C5F3226FC307D6DA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22E76C62F16ED4322B4715BA93F3171E460314903FFE2E021DF26E155AFAAE31/0/323830333a343836303a3a2f33322d3332203d3e2037303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4860::/32
Signature Algorithm: sha256WithRSAEncryption
9d:13:69:4d:71:25:31:c6:41:b6:0b:38:cb:e3:31:09:4a:21:
f5:f0:c9:97:ee:9d:5c:e4:0d:2e:81:98:f9:3a:07:cf:63:c5:
a5:a1:42:4b:29:59:4a:b2:7f:b7:6c:a4:54:6b:a4:5f:b0:d1:
e1:c0:90:b7:83:7d:81:e5:b8:9c:1b:60:ad:24:b4:66:98:a2:
a7:43:3a:47:ba:df:fc:35:e5:f5:e2:0b:0c:c3:81:a1:a1:2f:
a5:77:6c:a2:d4:2f:15:ce:c8:30:5f:6f:72:b2:01:b4:f2:ae:
23:e6:75:38:09:da:c3:b2:1c:51:7d:ee:5a:ae:85:58:ae:0a:
7e:50:e0:3f:3f:f7:a0:25:39:14:f0:5f:2c:66:91:0f:78:fc:
d5:4e:dc:66:4b:25:f5:b6:d5:dd:e2:6c:0e:5e:23:a9:0c:38:
fa:b8:7c:28:36:18:96:78:85:59:ea:f8:d9:be:db:74:a1:19:
98:ac:b5:f6:a7:eb:9d:d8:28:e4:03:78:ba:fd:c2:8d:39:f5:
fc:23:46:d2:f4:a0:f0:5e:25:59:1e:14:e5:f8:18:0e:84:e2:
cb:cb:3b:38:6a:a8:cc:f0:fa:ff:d5:33:4a:0e:97:85:b5:24:
3a:19:bf:1c:57:de:7c:d8:5b:fe:8b:d8:0c:ee:da:01:d2:2e:
d5:b5:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 11:55:20 2026 by rpki-client