
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a346330303a3a2f33382d3338203d3e203238343531.roa
File: 323830363a3366393a346330303a3a2f33382d3338203d3e203238343531.roa (raw, json)
Hash identifier: qlnANKuIh+OoMXqmlk9hMFXpUtLUcsxl8PSNzTeiYHg=
Subject key identifier: 43:A5:C0:83:99:B3:A8:A6:AD:09:EC:F5:69:F4:02:A2:8C:E2:CC:B1
Certificate issuer: /CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Certificate serial: 1DFD70AA313EDABA83C51B5F855386377727B6C3
Authority key identifier: FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a346330303a3a2f33382d3338203d3e203238343531.roa
Signing time: Thu 23 Oct 2025 21:30:00 +0000
ROA not before: Thu 23 Oct 2025 21:25:00 +0000
ROA not after: Thu 22 Oct 2026 21:30:00 +0000
asID: 28451
IP address blocks: 2806:3f9:4c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fd:70:aa:31:3e:da:ba:83:c5:1b:5f:85:53:86:37:77:27:b6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF8AC067065068E09CB651C346795E8C0753D3DB
Validity
Not Before: Oct 23 21:25:00 2025 GMT
Not After : Oct 22 21:30:00 2026 GMT
Subject: CN=43A5C08399B3A8A6AD09ECF569F402A28CE2CCB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:b3:12:35:b3:e3:d8:82:d2:4e:ff:81:78:
11:07:3f:5f:c1:c2:9f:fa:c0:c7:22:de:9d:28:d7:
43:3a:e0:aa:bf:10:a8:cd:23:44:34:3a:cb:37:4d:
13:2a:fb:3f:64:4f:2f:22:df:75:b5:8e:3d:10:88:
d0:ec:f1:e5:36:fa:c3:06:51:f4:f0:7b:ef:03:41:
0d:1a:bb:db:ba:82:b7:36:11:3a:77:85:a3:b4:f5:
f6:cc:9a:fb:3f:84:52:9b:96:01:9f:d6:0f:59:78:
41:40:0f:93:a8:b3:ad:8b:aa:5f:fe:bf:2a:27:7a:
d7:a2:25:06:e2:d1:67:d0:e5:73:db:9b:b6:83:3d:
3e:28:bf:83:87:ba:84:b4:c3:1e:f0:f5:11:e2:a8:
59:ed:c8:1c:23:08:dd:08:f6:65:15:c4:db:02:c8:
f2:16:73:7a:86:5c:c3:3e:6b:80:1d:e2:94:d4:55:
05:4c:6a:cb:bc:b5:9a:11:b7:32:7a:17:bf:81:53:
fc:19:55:40:6d:b3:a0:c7:11:d8:ec:a6:11:4a:5d:
d5:4f:5d:4a:ba:48:cf:33:16:07:6b:bb:4e:07:3a:
5f:63:04:56:dd:13:fd:0c:8e:ab:8b:80:07:87:9e:
c3:59:9a:e8:52:f4:50:be:1d:6c:bb:db:25:f8:dc:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:C0:83:99:B3:A8:A6:AD:09:EC:F5:69:F4:02:A2:8C:E2:CC:B1
X509v3 Authority Key Identifier:
keyid:FF:8A:C0:67:06:50:68:E0:9C:B6:51:C3:46:79:5E:8C:07:53:D3:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/FF8AC067065068E09CB651C346795E8C0753D3DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF8AC067065068E09CB651C346795E8C0753D3DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F006FADC2476E45091F377CE712138FFAF6B1AA78CB688215CE7B4A6BB843AE/0/323830363a3366393a346330303a3a2f33382d3338203d3e203238343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3f9:4c00::/38
Signature Algorithm: sha256WithRSAEncryption
d6:ca:38:a8:e1:01:bc:7e:b9:40:c5:78:67:27:84:66:be:05:
7f:df:9d:5e:5e:45:cb:b8:84:46:4e:3b:e6:db:41:98:3e:92:
ec:d2:52:47:bf:ab:fc:4b:d4:94:41:21:1a:0d:d0:b5:28:a3:
20:4d:3f:51:bd:1d:44:b6:f9:f7:a9:6f:17:89:bb:3e:70:a8:
37:44:1d:5c:41:b8:ce:cf:44:59:41:ec:04:21:4c:5b:ca:81:
60:65:7a:48:a2:42:04:7f:ab:b1:a8:d3:93:cf:d2:b4:7e:94:
3b:74:88:b3:9b:a4:c1:b0:9b:90:f3:30:03:f1:48:76:5f:f0:
54:e1:a2:91:43:24:da:e6:fa:c9:b9:bc:74:ec:68:bc:ec:eb:
52:77:3c:e0:64:ce:dd:01:41:58:c5:f6:fc:18:0d:4e:0c:77:
2c:69:4d:db:cd:e8:37:d2:03:5f:f0:c2:53:6b:aa:d3:26:a6:
59:f9:97:a1:72:f3:83:1a:9e:2c:74:7b:2a:06:2b:d4:3a:05:
70:7d:ec:c0:72:ec:27:91:9a:37:8e:34:81:bd:c1:25:42:cc:
f2:3e:25:42:3b:5c:f5:0a:b0:dc:95:fa:71:c8:3c:c2:ab:7a:
90:15:f1:08:e2:23:bf:2b:94:f6:7b:a7:6f:2c:26:02:22:af:
01:e2:9c:40
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUHf1wqjE+2rqDxRtfhVOGN3cntsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4QUMwNjcwNjUwNjhFMDlDQjY1MUMzNDY3OTVFOEMw
NzUzRDNEQjAeFw0yNTEwMjMyMTI1MDBaFw0yNjEwMjIyMTMwMDBaMDMxMTAvBgNV
BAMTKDQzQTVDMDgzOTlCM0E4QTZBRDA5RUNGNTY5RjQwMkEyOENFMkNDQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJbMSNbPj2ILSTv+BeBEHP1/B
wp/6wMci3p0o10M64Kq/EKjNI0Q0Oss3TRMq+z9kTy8i33W1jj0QiNDs8eU2+sMG
UfTwe+8DQQ0au9u6grc2ETp3haO09fbMmvs/hFKblgGf1g9ZeEFAD5Oos62Lql/+
vyoneteiJQbi0WfQ5XPbm7aDPT4ov4OHuoS0wx7w9RHiqFntyBwjCN0I9mUVxNsC
yPIWc3qGXMM+a4Ad4pTUVQVMasu8tZoRtzJ6F7+BU/wZVUBts6DHEdjsphFKXdVP
XUq6SM8zFgdru04HOl9jBFbdE/0MjquLgAeHnsNZmuhS9FC+HWy72yX43LxtAgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUQ6XAg5mzqKatCez1afQCoozizLEwHwYDVR0j
BBgwFoAU/4rAZwZQaOCctlHDRnlejAdT09swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjAwNkZBREMyNDc2RTQ1MDkxRjM3N0NFNzEyMTM4RkZB
RjZCMUFBNzhDQjY4ODIxNUNFN0I0QTZCQjg0M0FFLzAvRkY4QUMwNjcwNjUwNjhF
MDlDQjY1MUMzNDY3OTVFOEMwNzUzRDNEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjhBQzA2NzA2NTA2OEUwOUNC
NjUxQzM0Njc5NUU4QzA3NTNEM0RCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYwMDZGQURDMjQ3NkU0NTA5MUYzNzdDRTcxMjEzOEZGQUY2QjFBQTc4
Q0I2ODgyMTVDRTdCNEE2QkI4NDNBRS8wLzMyMzgzMDM2M2EzMzY2MzkzYTM0NjMz
MDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzODM0MzUzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
AigGA/lMMA0GCSqGSIb3DQEBCwUAA4IBAQDWyjio4QG8frlAxXhnJ4RmvgV/351e
XkXLuIRGTjvm20GYPpLs0lJHv6v8S9SUQSEaDdC1KKMgTT9RvR1Etvn3qW8Xibs+
cKg3RB1cQbjOz0RZQewEIUxbyoFgZXpIokIEf6uxqNOTz9K0fpQ7dIizm6TBsJuQ
8zAD8Uh2X/BU4aKRQyTa5vrJubx07Gi87OtSdzzgZM7dAUFYxfb8GA1ODHcsaU3b
zeg30gNf8MJTa6rTJqZZ+ZehcvODGp4sdHsqBivUOgVwfezAcuwnkZo3jjSBvcEl
QszyPiVCO1z1CrDclfpxyDzCq3qQFfEI4iO/K5T2e6dvLCYCIq8B4pxA
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:28 2025 by rpki-client