
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/323830333a313233303a3a2f33322d3334203d3e20323732383835.roa
File: 323830333a313233303a3a2f33322d3334203d3e20323732383835.roa (raw, json)
Hash identifier: GHqYsBW/jVzPQHPlq1j/wrG6y0zBJQIbzKNaTIqrXEc=
Subject key identifier: 13:DD:26:83:DB:AC:C7:F2:41:B9:96:72:0E:BD:29:B0:AE:F4:CC:A8
Certificate issuer: /CN=4D589E119E93073CAED797C92FC4BDE3B8AE4D9E
Certificate serial: 721A25190706A5B6684DCE31B13BF6F8740ABC2A
Authority key identifier: 4D:58:9E:11:9E:93:07:3C:AE:D7:97:C9:2F:C4:BD:E3:B8:AE:4D:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/323830333a313233303a3a2f33322d3334203d3e20323732383835.roa
Signing time: Wed 11 Mar 2026 15:25:00 +0000
ROA not before: Wed 11 Mar 2026 15:20:00 +0000
ROA not after: Wed 10 Mar 2027 15:25:00 +0000
asID: 272885
IP address blocks: 2803:1230::/32 maxlen: 34
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.crl
rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Mar 2026 05:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1a:25:19:07:06:a5:b6:68:4d:ce:31:b1:3b:f6:f8:74:0a:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D589E119E93073CAED797C92FC4BDE3B8AE4D9E
Validity
Not Before: Mar 11 15:20:00 2026 GMT
Not After : Mar 10 15:25:00 2027 GMT
Subject: CN=13DD2683DBACC7F241B996720EBD29B0AEF4CCA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:1f:8a:a0:92:27:6b:f9:a0:4b:2c:4d:fd:
a7:b0:33:ad:94:f0:78:54:73:0f:55:52:79:18:87:
2c:23:c7:29:f1:5e:3d:6d:3e:a4:83:ea:c9:7b:f1:
9e:be:e5:20:d6:2f:12:88:81:7c:7f:5f:d2:af:f3:
0b:dc:e6:51:2e:5e:00:dc:c5:b2:80:3b:86:aa:9e:
c4:57:4a:a2:cb:37:20:4a:b9:4c:ae:8f:e5:0d:f6:
f8:a7:4d:fa:0f:54:2a:a4:9f:55:5b:f6:17:e6:d3:
70:cd:56:bc:68:7e:b3:44:0d:88:1e:f9:3e:31:e0:
50:e8:5e:b7:ff:b0:c7:b1:68:8d:10:ce:72:1d:55:
b4:77:5f:eb:50:22:88:5a:31:95:47:80:6e:6f:a7:
f5:23:73:09:e6:a3:e4:69:6d:68:d5:c5:10:37:11:
86:c6:43:3e:1b:35:c6:aa:94:52:41:a9:c7:9d:63:
98:9d:58:77:ef:9d:a1:8c:4d:98:45:b5:98:34:5c:
bb:c8:d2:3a:db:95:48:e5:a0:51:e4:a3:b7:70:2e:
36:4b:35:a0:00:a2:56:93:dc:04:84:f9:9d:d5:41:
fc:e9:8f:27:34:92:8b:e1:a1:0a:5a:93:ea:b1:ff:
7c:97:0a:7b:05:db:e1:f3:b9:9c:52:b9:82:ba:b8:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:26:83:DB:AC:C7:F2:41:B9:96:72:0E:BD:29:B0:AE:F4:CC:A8
X509v3 Authority Key Identifier:
keyid:4D:58:9E:11:9E:93:07:3C:AE:D7:97:C9:2F:C4:BD:E3:B8:AE:4D:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/323830333a313233303a3a2f33322d3334203d3e20323732383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1230::/32
Signature Algorithm: sha256WithRSAEncryption
9c:58:d3:32:36:ba:91:72:68:e0:49:1d:8f:a0:91:54:c9:f8:
df:ec:81:60:6d:93:53:fb:21:f0:53:03:aa:57:84:e3:76:60:
de:96:c2:7b:03:7a:8e:ac:8e:23:99:bb:06:d4:43:98:68:55:
79:be:4c:f0:83:3e:08:31:3a:bf:b9:95:79:ea:d7:65:50:ec:
59:07:4d:5a:5c:32:e5:18:37:a6:55:b6:ce:23:7b:ae:95:44:
03:b3:a8:c8:6f:67:ab:26:c1:8b:51:be:63:b7:30:3f:a5:0d:
b5:14:e3:9e:b1:c8:7f:95:52:fa:9c:24:6c:3a:74:cb:3b:87:
49:0d:88:d9:fe:c1:a3:25:b4:e7:6c:db:fe:c0:cb:b3:35:af:
7c:02:53:8b:46:45:0c:db:8b:86:42:51:0a:36:e1:f7:4b:0d:
25:5a:38:29:f1:59:91:5e:2a:ce:32:6b:c9:af:98:69:23:a2:
a4:d7:31:01:7c:85:47:16:7a:b0:03:be:25:92:0d:c7:1d:20:
78:41:96:84:93:74:b2:3b:a7:a2:70:37:4f:6e:53:db:32:0d:
2f:9c:ba:e3:12:ab:70:7c:87:70:23:c3:f2:6f:42:95:a3:a5:
aa:be:9a:d6:ea:59:68:4e:7d:33:d3:e2:2e:6d:86:b2:a8:ec:
ea:dd:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 15:40:35 2026 by rpki-client