
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3332203d3e20323332333233.roa
File: 323830303a3730303a3a2f33322d3332203d3e20323332333233.roa (raw, json)
Hash identifier: usJ4yz3MIV/bi1/vyUCBlP/PckEnoS5wILuS5/GVRf8=
Subject key identifier: E3:5A:23:B3:3B:01:BB:2F:57:DD:12:AC:74:86:50:F4:61:6D:16:32
Certificate issuer: /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Certificate serial: 50BC4E98C8C3E7403FC8F7B4A9C23B0DA9C2242E
Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3332203d3e20323332333233.roa
Signing time: Tue 15 Sep 2026 13:30:11 +0000
ROA not before: Tue 15 Sep 2026 13:25:11 +0000
ROA not after: Tue 14 Sep 2027 13:30:11 +0000
asID: 232323
IP address blocks: 2800:700::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bc:4e:98:c8:c3:e7:40:3f:c8:f7:b4:a9:c2:3b:0d:a9:c2:24:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6
Validity
Not Before: Sep 15 13:25:11 2026 GMT
Not After : Sep 14 13:30:11 2027 GMT
Subject: CN=E35A23B33B01BB2F57DD12AC748650F4616D1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:34:62:89:89:23:0e:16:69:6e:8a:8a:f6:
2f:20:08:1c:e6:56:9b:57:2f:d1:47:98:ee:b6:bd:
d1:8c:78:6d:cf:fc:dd:a2:65:bb:0e:ca:b5:69:50:
3e:e8:92:07:0a:86:ac:84:58:46:0a:3b:ba:be:86:
a9:06:03:91:b2:e7:92:72:a9:bc:b4:bd:9f:ed:79:
7f:2d:e9:66:0f:92:ab:98:76:f7:ed:44:7d:84:0d:
24:06:72:60:8a:08:af:b2:41:dd:d0:e1:75:38:03:
41:c2:01:8a:bf:79:d1:c7:71:6d:88:d0:0c:ff:f6:
e5:0e:e8:a4:0e:09:ff:f5:15:77:f1:c9:73:fc:f6:
57:16:42:6e:62:2e:6f:f0:1d:2b:fd:fa:a5:b5:cd:
9f:3d:92:4c:c4:9f:dd:d4:43:78:0d:f6:b3:0c:e4:
48:ae:22:b0:51:d8:eb:56:c8:69:0e:31:cb:3e:43:
e4:b9:07:1e:ed:80:17:ed:29:c3:8e:d3:aa:61:44:
a4:f7:00:79:ae:63:c0:1e:9b:0f:56:86:b0:73:98:
02:62:57:02:f1:94:fd:c4:c4:23:39:40:d3:f7:fc:
36:78:60:b3:ea:60:24:3c:c4:cf:c5:a3:e7:f2:c1:
6b:a9:5b:5b:ca:81:d4:69:5a:e0:b8:55:8e:3d:c6:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5A:23:B3:3B:01:BB:2F:57:DD:12:AC:74:86:50:F4:61:6D:16:32
X509v3 Authority Key Identifier:
keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3332203d3e20323332333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:700::/32
Signature Algorithm: sha256WithRSAEncryption
9e:73:8b:b2:c3:d2:32:59:d7:ec:5d:9b:12:9f:32:c2:b0:af:
23:a0:c9:f3:44:3a:f9:59:5f:8a:c2:5a:65:e7:22:8d:71:63:
e5:5f:21:b3:9b:93:57:37:45:47:4e:c6:14:23:bb:9a:e9:f8:
9b:5f:cb:e7:5f:f9:42:76:25:ca:e0:a6:f3:d3:63:d2:87:9e:
1e:66:af:04:65:91:a5:eb:07:47:23:a1:fa:e5:73:50:30:90:
0a:12:5c:80:b9:28:a4:8e:15:d9:e6:ef:27:8b:bb:4c:37:e7:
94:36:b4:b5:37:a1:d3:9b:2b:0e:b9:08:ae:47:c1:c6:aa:9b:
d5:5d:9a:d4:4e:9b:56:ee:2a:60:30:a1:95:6e:70:e9:0a:d2:
9b:6f:7a:40:63:93:ca:e2:db:02:c2:94:d8:c4:aa:f8:e9:78:
f4:09:70:2a:5a:6c:db:e8:b5:fb:2f:5c:ee:0c:84:58:4b:e2:
ee:4b:9b:39:ed:0a:34:7c:f6:b6:37:9c:e5:18:52:57:f0:26:
70:97:74:93:87:8c:0a:b5:89:1d:87:0c:e6:ff:be:0c:9a:12:
d6:49:66:14:c8:49:fb:34:5f:f7:64:e8:f0:15:84:d8:df:15:
6b:df:bd:23:81:6d:4c:d4:c6:01:41:f8:e5:63:ef:1c:44:4a:
e9:51:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:09:13 2026 by rpki-client