
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666653a3a2f34382d3438203d3e20323632323439.roa
File: 323830313a3134303a666666653a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier: sNMs0V7zUycVns+m/9Auzduwboh1uCklpFPcNsny/p0=
Subject key identifier: BE:B2:8B:66:7F:0D:B8:2B:F0:BC:CA:33:BE:68:16:7F:C5:03:0B:73
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 485F4C27AF356AC84D9D9C0950D93E023C2EEBEE
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666653a3a2f34382d3438203d3e20323632323439.roa
Signing time: Fri 16 Oct 2026 14:40:46 +0000
ROA not before: Fri 16 Oct 2026 14:35:46 +0000
ROA not after: Fri 15 Oct 2027 14:40:46 +0000
asID: 262249
IP address blocks: 2801:140:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 18:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5f:4c:27:af:35:6a:c8:4d:9d:9c:09:50:d9:3e:02:3c:2e:eb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Oct 16 14:35:46 2026 GMT
Not After : Oct 15 14:40:46 2027 GMT
Subject: CN=BEB28B667F0DB82BF0BCCA33BE68167FC5030B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:64:56:a7:9b:28:fc:4d:29:11:0b:01:c1:
f9:85:ea:fb:75:47:af:7c:fb:c6:3e:3e:3a:17:90:
02:d7:5a:67:be:37:ab:a4:9c:82:8e:47:b3:f1:67:
72:1e:b7:93:1f:07:2b:d2:80:f5:5e:b6:54:41:62:
50:ac:ed:11:69:f4:44:c4:66:08:81:b8:90:47:39:
e3:8b:db:a1:03:00:7d:fc:b3:d5:76:36:e5:8e:4b:
96:82:f2:88:8b:0e:25:e9:0a:78:36:92:4d:b7:9f:
6e:4c:9b:00:b4:d1:cd:d3:aa:3d:e8:0d:2e:d7:87:
20:9b:4f:b7:5d:36:a7:d1:cf:b4:0e:f5:55:22:c9:
d9:a0:69:13:21:f9:80:1d:c4:fe:b7:ef:36:e3:01:
15:eb:80:17:73:48:94:84:2e:3e:a1:56:d5:24:9b:
7b:35:9c:22:4f:42:dd:12:e5:28:9b:4e:f7:e0:0b:
9d:d1:ad:96:a4:27:64:a4:db:61:fb:0e:95:90:e8:
70:8c:02:29:3c:d0:d2:7d:b6:b5:eb:22:b5:78:46:
ab:9f:d6:a5:8a:58:07:c9:1f:d9:42:17:e7:75:28:
66:48:b5:72:cb:6f:5e:97:11:41:4f:95:b5:20:a5:
83:46:cc:b1:2b:a1:14:b7:14:4b:a4:e7:fd:a4:bb:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:8B:66:7F:0D:B8:2B:F0:BC:CA:33:BE:68:16:7F:C5:03:0B:73
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a666666653a3a2f34382d3438203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:140:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
3f:67:59:3d:44:8d:37:33:4e:9a:3f:2b:c1:f3:b3:cb:14:05:
5c:0a:ba:ea:fa:82:a3:ff:3d:53:46:20:32:5e:76:1f:79:b2:
d9:68:c0:39:86:6a:7f:9e:9b:e7:ae:1d:92:1d:a1:05:7f:d9:
32:ed:f3:8f:e2:b3:8f:86:bd:42:ab:fd:16:d7:6b:cd:b1:be:
a7:66:c6:39:0a:4a:04:91:7e:34:a9:02:0b:48:14:7c:f9:9d:
11:00:22:36:c9:a1:7b:16:0e:04:3c:cb:6d:b1:1d:a0:60:e9:
a6:74:e2:84:b7:e2:4d:c4:bd:5d:64:a3:27:eb:ee:68:ce:7f:
1c:1e:be:2a:71:3f:bc:54:b2:28:b5:92:ee:47:23:54:2b:a8:
18:8c:97:ed:38:6a:b0:99:40:03:a7:f3:5b:cf:47:d8:f1:b8:
34:8a:a2:10:d3:7f:70:05:b1:3a:00:e7:29:f3:ce:65:28:17:
96:cb:4a:ed:e5:1b:8b:17:04:8a:f3:0a:54:e6:42:9d:73:19:
cb:a0:a0:94:ac:d3:21:3b:14:e4:9e:76:89:cd:82:e0:20:ef:
25:03:5a:f4:ec:24:21:ac:fe:f7:a2:59:01:eb:22:5c:2a:04:
ed:35:6d:cc:17:e2:da:13:aa:8d:dd:6e:e6:0e:33:4c:c2:60:
f6:f6:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:28:27 2026 by rpki-client