
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666633a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a666666633a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: Fg4Xp8vj0BAF/zZRmnvjrjBP99GvCux8wxv+FyRFhFk=
Subject key identifier: 8F:92:9D:07:5E:9A:8E:89:F2:E4:F1:17:44:99:5C:90:96:AF:0C:2D
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 49CFECDFCAE8DE5EC34C1D63ECB80D4DB6EF3475
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666633a3a2f34382d3438203d3e20323632323439.roa
Signing time: Mon 19 Oct 2026 12:41:53 +0000
ROA not before: Mon 19 Oct 2026 12:36:53 +0000
ROA not after: Mon 18 Oct 2027 12:41:53 +0000
asID: 262249
IP address blocks: 2801:140:fffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 18:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cf:ec:df:ca:e8:de:5e:c3:4c:1d:63:ec:b8:0d:4d:b6:ef:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Oct 19 12:36:53 2026 GMT
Not After : Oct 18 12:41:53 2027 GMT
Subject: CN=8F929D075E9A8E89F2E4F11744995C9096AF0C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:a7:36:60:0c:55:07:e6:8d:8b:e9:b1:ec:
9e:1e:49:87:46:39:84:10:c6:99:29:a0:d1:6d:e3:
07:df:8e:38:bf:b6:ec:ba:2e:59:76:25:70:99:24:
10:1f:eb:fa:45:7a:b2:1b:81:16:82:f0:5d:64:fd:
88:28:4e:07:83:30:61:51:8b:76:7d:08:d1:da:70:
64:ff:07:b9:b3:3e:a9:58:16:2d:47:21:42:5e:0b:
fa:7f:7f:87:dd:0f:05:92:20:50:84:39:83:0e:70:
3d:ed:4e:59:3b:89:14:d3:16:fc:a3:39:b6:0a:da:
89:63:5e:6a:94:21:8b:15:df:0f:f6:95:b7:5a:9d:
32:b7:20:64:51:7f:e2:b8:c2:b1:e3:b8:f7:f6:9e:
5b:7f:c9:6a:bf:65:ba:6d:d2:5f:55:14:5d:63:ec:
e1:fa:5d:08:3f:a3:c6:1e:b1:e3:2e:32:71:45:0a:
2c:bd:19:c1:c5:b8:de:35:04:ee:29:c7:11:42:c3:
74:e4:9e:9d:1c:06:68:41:e9:46:0e:37:79:b8:cd:
a6:ce:10:2a:b0:72:3a:0e:aa:6e:b1:48:54:f3:45:
82:0c:0e:33:1b:d5:f6:06:38:e5:5d:5b:bf:b5:e1:
e3:6e:5c:11:d5:55:a2:d7:65:b4:6a:43:d6:22:23:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:9D:07:5E:9A:8E:89:F2:E4:F1:17:44:99:5C:90:96:AF:0C:2D
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666633a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
38:63:81:4b:a6:be:de:27:7f:52:36:3f:d7:b2:42:5d:ca:f9:
9f:96:15:07:67:8b:c3:21:4e:18:ea:e1:44:e7:b8:c7:bb:d6:
9a:4c:bc:92:29:a0:32:4d:a0:fc:c9:7d:37:15:a8:d7:43:4f:
52:39:3f:69:e1:ea:50:52:09:b5:3e:d8:60:36:7b:d4:af:35:
ad:3c:f1:c6:38:68:89:da:a2:7b:8d:3f:79:64:71:af:15:19:
25:78:61:d9:81:94:ba:8b:e1:fe:77:c0:4c:42:a6:8a:51:cb:
42:94:7f:42:bf:b7:9a:13:ee:b1:67:99:88:ae:2d:e3:3e:67:
f9:8e:21:38:1c:66:cc:a7:0a:d2:7c:00:e4:4f:02:c9:da:65:
f4:0f:d1:e6:50:70:0d:73:84:90:9a:50:53:99:d8:8c:7b:c5:
78:c2:8b:56:b2:f9:e1:97:89:77:66:41:62:62:17:b6:0c:e5:
48:32:8b:9e:88:fc:2f:93:ac:41:63:8a:d2:ca:66:c6:5a:a4:
05:af:8e:77:79:86:b1:f1:d1:70:0a:64:aa:ca:bc:49:17:c1:
d8:60:3e:9b:68:5f:80:9a:56:8c:88:a0:6e:5c:7d:ab:03:81:
79:a2:1e:26:0a:f4:4d:f2:35:fa:c3:d8:34:2f:8c:b3:27:19:
2b:9e:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:28:18 2026 by rpki-client