
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
File: 323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa (raw, json)
Hash identifier: PqGhzofOlepNTxhXejcRX/OsF34FpdThZKyoDtU4Oc4=
Subject key identifier: 9B:7B:BE:A7:CE:D2:13:27:D4:8B:77:4E:76:A3:57:5B:E9:A7:A2:87
Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial: 3D2EE13DA88A803279110D2886987EE8195EB2D4
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
Signing time: Mon 15 Sep 2025 02:46:33 +0000
ROA not before: Mon 15 Sep 2025 02:41:33 +0000
ROA not after: Mon 14 Sep 2026 02:46:33 +0000
asID: 272889
IP address blocks: 2803:8690:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2e:e1:3d:a8:8a:80:32:79:11:0d:28:86:98:7e:e8:19:5e:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Validity
Not Before: Sep 15 02:41:33 2025 GMT
Not After : Sep 14 02:46:33 2026 GMT
Subject: CN=9B7BBEA7CED21327D48B774E76A3575BE9A7A287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:a3:3d:cb:7e:65:39:f7:d1:02:55:6a:98:
76:59:c0:89:b9:08:74:3b:e7:3a:b0:20:e4:55:d7:
43:7b:69:31:5c:7f:36:80:2a:59:6f:30:71:fd:d3:
9e:cc:64:4c:f7:95:08:bf:01:a2:65:56:72:f2:67:
0f:ab:0a:60:c7:70:96:cd:65:2b:2c:10:9e:85:0a:
5c:54:e2:71:19:42:60:b3:14:30:57:32:39:99:f8:
14:46:8f:60:48:6a:22:0f:41:87:eb:03:a1:95:94:
61:b7:b2:10:5a:a0:42:f4:23:67:75:19:44:fe:f3:
4b:cd:0d:19:05:46:d4:5d:ae:e1:d6:2c:56:ce:31:
37:64:8a:9c:2a:e0:96:f3:00:b9:df:97:e6:d6:0a:
07:3b:b3:f0:a3:fa:df:26:d3:d5:dc:1b:8a:60:c9:
7a:03:58:18:ee:b9:d9:a6:9d:af:b4:02:26:03:9c:
11:84:b3:29:9c:75:3e:8b:0c:fe:7b:9f:92:88:a4:
af:b4:ac:7d:f6:01:38:6e:de:38:a2:60:22:38:2f:
0c:e2:16:d3:16:21:13:3f:33:cc:4f:a7:71:0d:8d:
0e:c6:61:c5:b6:71:47:c7:e0:41:41:e7:30:89:a7:
40:ae:13:ec:71:20:79:63:70:14:0a:73:fb:a7:44:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7B:BE:A7:CE:D2:13:27:D4:8B:77:4E:76:A3:57:5B:E9:A7:A2:87
X509v3 Authority Key Identifier:
keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3330303a3a2f34302d3430203d3e20323732383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:8690:300::/40
Signature Algorithm: sha256WithRSAEncryption
81:71:37:3c:fd:33:10:50:f1:c4:a9:fd:4b:d7:69:d5:17:25:
fa:23:49:01:8f:73:20:69:f2:87:64:27:58:29:1a:60:35:4f:
ec:f7:60:d2:8e:b8:c3:ff:13:3b:7a:72:3b:17:ba:47:30:3b:
df:d8:74:f2:70:ad:7d:e8:6c:4a:68:a3:47:9f:ce:3c:a8:77:
4d:1d:47:22:01:bf:8e:44:ec:0a:b6:cc:a1:06:b5:18:8e:0e:
5f:57:c6:16:91:c4:71:78:af:4f:13:8c:b4:dc:04:b6:ba:05:
56:bd:f7:bc:c0:c7:c1:38:59:55:fd:20:5c:43:17:b3:98:0d:
22:4b:89:9c:5d:ba:7e:c8:43:59:22:9f:29:fc:4c:84:43:7e:
f3:01:bd:ff:7f:74:54:ef:dc:70:38:b9:44:a7:01:5d:c4:b6:
04:ee:bb:9d:63:2f:b2:4f:c7:e2:8f:9f:1a:c2:0e:8d:3c:11:
98:26:1f:0f:a8:76:4f:57:06:21:09:b6:08:7b:13:21:d3:80:
db:4a:e9:2b:78:b1:65:63:4f:f8:f9:db:8b:b6:db:a7:2d:dc:
04:ef:f0:b5:e5:79:c7:fb:17:ed:2d:7f:0f:3f:33:0c:be:69:
09:5c:7b:c5:8f:f8:40:df:33:7e:59:a1:36:7c:97:bb:83:f1:
ad:16:88:3b
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUPS7hPaiKgDJ5EQ0ohph+6BlestQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgxMTIzOTVBNjMxREU5QThENTIzM0ZFMTcxMTQ1RDNF
NUY2RkNGRDAeFw0yNTA5MTUwMjQxMzNaFw0yNjA5MTQwMjQ2MzNaMDMxMTAvBgNV
BAMTKDlCN0JCRUE3Q0VEMjEzMjdENDhCNzc0RTc2QTM1NzVCRTlBN0EyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6x6M9y35lOffRAlVqmHZZwIm5
CHQ75zqwIORV10N7aTFcfzaAKllvMHH9057MZEz3lQi/AaJlVnLyZw+rCmDHcJbN
ZSssEJ6FClxU4nEZQmCzFDBXMjmZ+BRGj2BIaiIPQYfrA6GVlGG3shBaoEL0I2d1
GUT+80vNDRkFRtRdruHWLFbOMTdkipwq4JbzALnfl+bWCgc7s/Cj+t8m09XcG4pg
yXoDWBjuudmmna+0AiYDnBGEsymcdT6LDP57n5KIpK+0rH32AThu3jiiYCI4Lwzi
FtMWIRM/M8xPp3ENjQ7GYcW2cUfH4EFB5zCJp0CuE+xxIHljcBQKc/unRJs5AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUm3u+p87SEyfUi3dOdqNXW+mnoocwHwYDVR0j
BBgwFoAUOBEjlaYx3pqNUjP+FxFF0+X2/P0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTFCRjZBQjA2MjE1RDg4NzY5RDgyMjkyMDUxNEQzN0Yx
NEMwQ0Q4RDQ0MTE3RTY0RjBGNTQyMjk1QTFBQTI5LzAvMzgxMTIzOTVBNjMxREU5
QThENTIzM0ZFMTcxMTQ1RDNFNUY2RkNGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODExMjM5NUE2MzFERTlBOEQ1
MjMzRkUxNzExNDVEM0U1RjZGQ0ZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUExQkY2QUIwNjIxNUQ4ODc2OUQ4MjI5MjA1MTREMzdGMTRDMENEOEQ0
NDExN0U2NEYwRjU0MjI5NUExQUEyOS8wLzMyMzgzMDMzM2EzODM2MzkzMDNhMzMz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzODM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAOGkAMwDQYJKoZIhvcNAQELBQADggEBAIFxNzz9MxBQ8cSp/UvXadUXJfoj
SQGPcyBp8odkJ1gpGmA1T+z3YNKOuMP/Ezt6cjsXukcwO9/YdPJwrX3obEpoo0ef
zjyod00dRyIBv45E7Aq2zKEGtRiODl9XxhaRxHF4r08TjLTcBLa6BVa997zAx8E4
WVX9IFxDF7OYDSJLiZxdun7IQ1kinyn8TIRDfvMBvf9/dFTv3HA4uUSnAV3EtgTu
u51jL7JPx+KPnxrCDo08EZgmHw+odk9XBiEJtgh7EyHTgNtK6St4sWVjT/j524u2
26ct3ATv8LXlecf7F+0tfw8/Mwy+aQlce8WP+EDfM35ZoTZ8l7uD8a0WiDs=
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:21:55 2025 by rpki-client