
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: etKcDYwiLBc3VutoZvOwgsJ/1xCUANzoQrzhGzuQ2Xk=
Subject key identifier: 46:E8:1D:01:D8:43:BD:63:C4:3A:E5:8A:20:36:03:9D:EB:8B:98:67
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 30D8826873BADB06F5E88B02D496FBD97387D14F
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa
Signing time: Mon 19 Oct 2026 12:41:52 +0000
ROA not before: Mon 19 Oct 2026 12:36:52 +0000
ROA not after: Mon 18 Oct 2027 12:41:52 +0000
asID: 262249
IP address blocks: 2801:140:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Nov 2026 20:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d8:82:68:73:ba:db:06:f5:e8:8b:02:d4:96:fb:d9:73:87:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Oct 19 12:36:52 2026 GMT
Not After : Oct 18 12:41:52 2027 GMT
Subject: CN=46E81D01D843BD63C43AE58A2036039DEB8B9867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:87:f8:a3:11:be:83:7d:da:c0:37:2e:0a:
a7:bd:8e:a6:56:bf:59:97:a1:ef:65:d6:4f:e6:ff:
a7:98:49:69:e6:03:7d:cc:67:b5:fd:f6:e2:37:43:
cc:9e:72:19:9a:26:19:86:de:23:f1:ec:17:9b:e0:
cd:f8:c0:38:9f:bf:02:12:1a:71:19:ff:a3:86:95:
a7:c0:a2:6d:b3:bb:7b:ae:cb:98:1a:d5:64:74:02:
5e:38:ee:44:b1:85:97:12:62:cf:91:a6:29:cd:c2:
98:75:03:92:09:40:38:65:52:6b:fd:d0:11:34:1e:
3e:51:dc:f4:16:5a:1d:2e:f2:f8:76:75:0d:be:18:
76:fb:a7:21:01:f2:5a:18:91:11:93:40:51:40:43:
4d:8e:75:f1:4c:30:8b:75:65:d7:2e:f4:e0:3b:30:
cc:5d:0b:4e:68:e2:cd:9d:70:fe:b3:36:5f:d8:22:
ae:74:1e:92:cd:42:fe:c8:c4:89:27:87:83:39:e4:
30:53:21:13:0f:80:d1:4b:df:99:8c:dc:af:9a:5d:
2f:6a:76:b9:52:42:f8:93:38:5e:83:25:ae:be:dc:
e7:8b:b1:1c:8b:41:35:ea:0f:cc:59:04:2b:f7:ce:
fe:97:1a:c7:c1:e5:38:e5:eb:c8:96:96:11:bb:ad:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:1D:01:D8:43:BD:63:C4:3A:E5:8A:20:36:03:9D:EB:8B:98:67
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a3132313a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:121::/48
Signature Algorithm: sha256WithRSAEncryption
15:c6:c7:c3:af:e7:b0:ed:3d:fb:9d:99:cd:cc:af:82:4b:56:
ac:1c:00:dc:9c:84:41:85:a9:d5:06:86:16:03:5f:98:b9:71:
c7:f6:d8:ad:0d:2e:0b:d8:6f:83:5d:4a:ae:b8:29:ea:0b:cd:
d1:04:a0:8a:94:0e:77:f0:e6:ca:24:f8:0b:ba:10:b3:27:f6:
1b:cf:32:65:4f:60:5f:b7:b8:aa:f7:31:a5:1b:b3:dd:dd:ee:
58:91:9a:2f:57:18:b0:84:8a:33:06:fc:da:32:55:be:f8:99:
dc:d5:37:69:5c:6f:0b:85:c1:94:c4:9e:43:d9:60:ab:ee:89:
ad:c4:c2:87:67:12:cd:9d:36:ad:45:3a:78:37:23:1a:65:59:
e7:d1:16:f1:9c:8e:a4:e2:58:3a:47:17:4f:94:f0:a2:2d:a8:
79:3e:d6:fa:98:fd:03:04:72:b8:83:33:2c:a1:bd:30:73:fa:
02:67:f0:ee:59:f5:e5:8d:04:be:33:77:4d:5c:09:93:d9:fe:
dc:f7:54:a8:b3:76:d5:bc:dc:6c:12:22:55:f3:3c:b1:1f:8e:
58:25:6d:a8:78:2f:f8:87:09:76:e4:57:90:2d:e0:32:09:4a:
e1:09:19:80:4d:4c:11:0a:80:40:39:0d:2b:59:80:6d:3c:37:
5a:17:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:46:31 2026 by rpki-client