
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
File: 323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (raw, json)
Hash identifier: CS+P551Yu5V1f1S0N+nkUhlgxfNbyXLy5YTAVtPeesk=
Subject key identifier: 4B:B8:29:32:2F:D5:F0:AD:5A:99:EA:6C:B3:0C:74:D3:E3:C2:BF:54
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 14D908DD7A15D4B4698FCB39EBA5007EDF80B496
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
Signing time: Tue 06 Jan 2026 19:44:03 +0000
ROA not before: Tue 06 Jan 2026 19:39:03 +0000
ROA not after: Tue 05 Jan 2027 19:44:03 +0000
asID: 266780
IP address blocks: 2803:9f20::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 21 Feb 2026 22:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d9:08:dd:7a:15:d4:b4:69:8f:cb:39:eb:a5:00:7e:df:80:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Jan 6 19:39:03 2026 GMT
Not After : Jan 5 19:44:03 2027 GMT
Subject: CN=4BB829322FD5F0AD5A99EA6CB30C74D3E3C2BF54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:29:2f:67:5d:32:03:98:33:38:bd:a0:4e:
fa:af:87:95:71:f3:dc:b8:0b:6f:1f:ff:47:cc:7e:
0e:ee:f2:93:65:81:ff:d4:87:6b:fb:ba:39:1c:c8:
6d:f9:4e:17:4c:b8:0e:be:73:7b:74:65:02:c4:7b:
f4:fb:6c:67:7a:17:2e:ae:ce:72:09:9a:b5:df:6b:
02:cc:99:bb:c6:20:bd:32:c3:b5:43:41:a0:6d:05:
9d:6f:3d:54:65:20:f0:58:93:a2:50:04:e6:29:10:
6d:bb:d1:f9:b2:5f:97:f3:a4:0d:b1:cb:22:ba:26:
f3:c4:da:e0:57:7a:81:9f:8c:26:ce:af:43:0f:5c:
80:8e:48:45:8a:53:55:41:da:54:20:e8:65:fd:cb:
75:17:c2:37:1c:0e:32:8f:c7:63:fb:8a:36:47:a8:
1c:3a:68:bd:ef:a2:aa:fc:9b:55:ef:03:8c:98:db:
be:4d:07:61:c8:36:a7:34:2a:f7:6b:cc:c3:6f:ce:
7b:2d:8e:94:b3:2c:bf:79:d5:35:06:80:cc:dc:7d:
96:53:90:52:6a:08:a0:35:eb:6d:57:0b:dd:24:1a:
d3:f2:03:41:3e:7f:0c:4e:b5:21:8f:52:28:e0:dc:
53:36:a2:a8:79:2f:23:c7:eb:6e:5d:05:c1:ca:21:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B8:29:32:2F:D5:F0:AD:5A:99:EA:6C:B3:0C:74:D3:E3:C2:BF:54
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9f20::/32
Signature Algorithm: sha256WithRSAEncryption
7c:74:9d:22:8f:64:50:46:49:ba:66:90:7b:bc:e1:68:fb:10:
ba:56:55:50:6b:4e:73:d8:0f:7e:dd:77:df:2a:81:8d:29:a8:
a7:7b:00:30:fd:a8:3f:cc:79:7c:e1:52:8d:dc:14:2b:af:ab:
5c:0a:0b:31:be:9c:81:6e:de:93:be:78:5f:7d:45:2d:c5:88:
2c:dc:e8:63:7b:58:a6:78:7b:87:c7:a0:65:49:f8:88:f2:86:
c4:b8:76:22:80:b7:fa:43:c5:ad:61:93:4b:6c:d5:1c:18:63:
4e:0d:51:90:b2:f8:b4:20:c7:f6:83:81:58:d0:b4:f8:12:cd:
a5:f4:7c:01:50:01:5c:fa:16:b3:d4:65:ec:33:b8:0d:19:f1:
e6:ad:1d:09:38:cb:0a:f1:8a:fd:5a:c1:62:65:41:2b:e7:93:
ab:a7:0a:3e:db:09:2c:01:3b:4d:bd:d6:da:fb:27:6f:cc:6e:
ca:9b:7f:29:45:f0:54:0a:d8:e3:bb:aa:57:d1:7b:b0:bc:ad:
ec:df:8c:1f:9d:d9:48:ad:97:d6:81:f4:d3:6d:ea:29:00:d8:
01:a7:57:1d:77:31:42:86:d9:db:39:7a:96:64:f6:4e:75:63:
2d:78:69:61:c0:ae:96:49:f6:19:fc:c0:d7:9e:26:aa:fd:db:
97:de:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 20:28:27 2026 by rpki-client