
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/323830333a636561303a3a2f33322d3438203d3e20323731383932.roa
File: 323830333a636561303a3a2f33322d3438203d3e20323731383932.roa (raw, json)
Hash identifier: nMqy81cEh2+uMI5KolAZcdGka55V8TeR4Kg+EYHIggM=
Subject key identifier: 68:84:B5:F6:1C:DB:44:A3:8C:F4:DC:6D:EE:79:B4:26:46:0A:24:41
Certificate issuer: /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial: 7D022E966A0F2C35580956E4DFB4A51D75F2F041
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/323830333a636561303a3a2f33322d3438203d3e20323731383932.roa
Signing time: Fri 13 Mar 2026 21:00:00 +0000
ROA not before: Fri 13 Mar 2026 20:55:00 +0000
ROA not after: Fri 12 Mar 2027 21:00:00 +0000
asID: 271892
IP address blocks: 2803:cea0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Mar 2026 05:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:02:2e:96:6a:0f:2c:35:58:09:56:e4:df:b4:a5:1d:75:f2:f0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Validity
Not Before: Mar 13 20:55:00 2026 GMT
Not After : Mar 12 21:00:00 2027 GMT
Subject: CN=6884B5F61CDB44A38CF4DC6DEE79B426460A2441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:1f:46:5c:0e:2f:44:f5:b2:3e:96:a5:da:
fc:52:8f:6f:51:85:c3:21:d2:1e:2b:3f:ec:b3:3b:
db:36:09:bf:b8:ce:1b:89:12:8f:5d:75:c2:09:fb:
b7:28:4d:d9:10:5b:34:fe:bd:98:b2:69:1d:a0:fd:
de:82:2a:d7:80:e7:6d:b4:a0:67:1f:03:24:17:a4:
a3:1b:4d:42:ff:09:59:20:f0:03:06:bd:5d:4e:81:
08:88:d8:03:de:8a:00:25:19:11:97:e0:4d:3f:12:
af:b3:9a:ed:b8:c9:b2:23:49:00:b0:23:83:23:46:
cf:a0:10:80:1d:cb:58:b4:48:7e:30:f2:51:1c:6d:
f3:4d:9a:73:51:d8:32:77:95:de:cc:fc:ab:f8:95:
1e:45:e9:85:fa:95:c9:05:6f:30:d9:4f:61:88:7c:
51:f6:33:db:7f:e7:c8:e5:84:00:62:d8:40:8b:70:
c3:63:34:d8:6b:47:b1:c5:f4:c7:37:91:25:ab:f0:
61:f8:c1:9a:b8:96:3d:df:73:52:9a:e9:e8:80:ef:
8a:37:b3:0c:7f:05:35:ba:dc:de:22:ef:e9:b3:86:
5a:ed:ed:07:78:5c:7f:70:e9:7d:4c:ca:0a:b0:f0:
48:92:1e:81:ee:02:83:fd:d6:f7:c3:02:30:56:39:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:B5:F6:1C:DB:44:A3:8C:F4:DC:6D:EE:79:B4:26:46:0A:24:41
X509v3 Authority Key Identifier:
keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/323830333a636561303a3a2f33322d3438203d3e20323731383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cea0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:d1:c8:c9:42:52:82:3e:c2:51:81:e7:17:6d:f3:fd:6e:e9:
7c:08:5d:56:d4:57:91:c3:fe:78:91:75:cd:39:69:23:0b:c1:
79:83:7b:da:34:21:1a:fc:98:ca:83:b1:d1:cf:0c:63:01:74:
78:a7:92:0b:b0:15:83:7f:b2:31:01:c6:7e:d9:c0:09:9f:e9:
2e:e9:c1:04:e7:fa:74:88:91:6e:8d:04:16:25:8d:b8:7d:e7:
ff:e9:e5:83:25:19:86:27:6a:7d:c2:29:69:99:54:10:17:28:
97:8d:6b:da:07:f6:9d:06:ee:ce:0f:52:06:7c:6c:39:79:0e:
1c:e2:49:04:f0:f6:ec:22:7e:a4:ba:5a:fe:eb:a4:ae:3e:52:
21:3c:29:f8:57:b1:4f:3c:a9:04:7c:79:9e:62:06:71:0a:30:
06:f4:05:25:0a:a0:0d:c2:db:fc:49:24:48:39:a9:a4:51:4e:
3f:d1:aa:28:11:d4:ce:56:01:7a:e3:32:7d:49:74:35:6f:ad:
de:ad:62:12:39:7c:c2:26:bd:8b:36:5c:ec:a8:66:cb:60:a0:
5a:96:a0:89:ad:22:4b:58:2f:a2:2c:e9:5f:1c:bc:23:2e:e3:
6f:c4:a3:34:29:e0:54:27:69:2a:f4:0c:c7:bc:1a:3d:96:9b:
58:9f:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:55:32 2026 by rpki-client