
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34342d3434203d3e203532343638.roa
File: 323830313a3163393a3a2f34342d3434203d3e203532343638.roa (raw, json)
Hash identifier: /t7tVIyH6EnJtCgDziwGp3MKe3uV8Fj0xrPX+uQgCbE=
Subject key identifier: 72:10:D6:3D:47:D7:51:F0:B2:BD:C0:2C:08:FB:5A:8E:78:6F:95:BA
Certificate issuer: /CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
Certificate serial: 3374C1FF9391ABD6138F0409A40908F5FA8C30A3
Authority key identifier: 0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34342d3434203d3e203532343638.roa
Signing time: Tue 01 Sep 2026 14:33:16 +0000
ROA not before: Tue 01 Sep 2026 14:28:16 +0000
ROA not after: Tue 31 Aug 2027 14:33:16 +0000
asID: 52468
IP address blocks: 2801:1c9::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl
rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:74:c1:ff:93:91:ab:d6:13:8f:04:09:a4:09:08:f5:fa:8c:30:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
Validity
Not Before: Sep 1 14:28:16 2026 GMT
Not After : Aug 31 14:33:16 2027 GMT
Subject: CN=7210D63D47D751F0B2BDC02C08FB5A8E786F95BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:31:ae:a0:a0:f3:87:77:25:38:c0:8a:2c:
63:ce:d3:a5:ab:06:46:4a:9d:b6:2d:70:ff:bc:5e:
6a:4e:83:8b:18:28:79:82:35:36:d0:88:f8:bb:73:
7f:96:38:c7:92:1e:78:e0:1a:78:73:06:44:e9:d4:
c0:0f:4c:f7:70:f3:61:3c:eb:80:8f:e2:05:ed:8d:
8c:e6:d4:8a:e3:50:ea:e4:ff:fd:65:e8:8a:cc:a6:
e3:d2:54:52:2f:6f:87:22:82:69:e6:12:1d:d0:24:
bb:48:4b:cf:1e:31:26:98:b1:b7:8a:1d:3d:f4:6e:
bf:f9:d8:7b:eb:a6:46:48:cb:fd:5f:79:90:18:b3:
14:dc:aa:8a:cf:3c:d5:da:33:4d:2c:3d:5d:19:9d:
79:f5:47:b6:ea:6e:84:e7:52:8c:b3:2c:0a:3b:a9:
34:fa:75:44:0e:5e:f3:b7:62:84:6a:af:f8:2b:68:
8e:ba:d1:b6:11:f4:4b:2c:9f:68:95:31:88:b4:0e:
73:7f:66:e0:03:2c:f4:e6:14:12:7c:81:73:66:d7:
24:e8:06:6b:f7:4f:64:af:a6:91:a3:14:4c:af:86:
75:3c:59:2c:10:f6:68:09:14:f6:83:ee:dc:52:29:
61:a4:55:76:5e:3d:30:a9:e2:f9:5c:de:e1:a4:2d:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:10:D6:3D:47:D7:51:F0:B2:BD:C0:2C:08:FB:5A:8E:78:6F:95:BA
X509v3 Authority Key Identifier:
keyid:0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a3a2f34342d3434203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c9::/44
Signature Algorithm: sha256WithRSAEncryption
6e:06:6d:d9:02:5f:29:c2:c0:22:f9:a8:d2:d9:ff:3d:25:63:
38:52:b8:08:f8:44:4d:75:a3:57:ce:b4:be:27:7e:f1:36:e6:
ea:bd:ba:7a:78:8f:a3:85:69:f9:8e:09:da:d7:39:5f:97:4e:
41:48:af:48:bf:dc:fb:29:f0:3c:79:10:9a:f3:05:6b:76:a6:
e1:90:12:c2:6a:01:e0:d7:e2:e8:8b:85:b7:73:97:31:6f:37:
71:27:da:76:7e:77:b1:b3:94:13:3f:0a:14:fa:3d:b4:3d:3b:
35:03:82:2c:b9:1c:4f:b1:d4:55:0c:45:e1:83:9c:97:b3:09:
95:8e:6b:92:1f:11:a6:94:04:0d:7c:f3:9d:0f:fd:90:b2:ba:
f2:c2:b8:dc:e2:26:8c:e1:3b:3c:02:38:4e:3d:1c:86:dc:fb:
75:56:72:32:0b:bc:05:11:53:cd:66:c4:35:a2:c6:8b:70:f0:
bd:92:ad:a9:8b:88:8d:d3:f4:b4:68:1f:5d:d0:0f:44:d8:12:
db:72:d0:e8:67:ee:ab:97:9a:22:74:e5:f7:11:ea:9a:b2:ea:
09:e1:b2:60:53:78:92:4a:e5:83:ca:b4:fb:1e:db:b1:3a:3e:
96:0d:d7:60:4f:b4:50:37:b2:a9:c1:58:cf:db:07:b2:be:b5:
0d:71:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:39:55 2026 by rpki-client