
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa
File: 323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa (raw, json)
Hash identifier: fXkxuPcj5Oe7DxhAFUHwUaiq1qhDQ9gBAJ7LkfC+0lY=
Subject key identifier: 20:E8:4B:64:05:AA:0A:87:BC:72:A8:06:68:6C:0D:60:D5:A9:E0:BA
Certificate issuer: /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial: 06A3A281104CBF662B973D9A2310280EE8666011
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa
Signing time: Mon 02 Mar 2026 18:32:25 +0000
ROA not before: Mon 02 Mar 2026 18:27:25 +0000
ROA not after: Mon 01 Mar 2027 18:32:25 +0000
asID: 270165
IP address blocks: 2806:3eb:600::/39 maxlen: 39
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 18 Mar 2026 04:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a3:a2:81:10:4c:bf:66:2b:97:3d:9a:23:10:28:0e:e8:66:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Validity
Not Before: Mar 2 18:27:25 2026 GMT
Not After : Mar 1 18:32:25 2027 GMT
Subject: CN=20E84B6405AA0A87BC72A806686C0D60D5A9E0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:07:56:90:13:cf:8c:df:e5:42:03:dd:53:
18:0a:17:ee:00:28:0a:37:8d:19:06:8a:a5:b3:a1:
0b:41:f6:7f:a7:42:1a:cc:16:32:af:9a:f8:d0:0e:
ee:4e:34:50:92:96:27:a5:a0:52:69:d7:5d:b1:25:
6e:77:d5:2d:32:05:03:5f:40:e1:b8:4c:2e:29:32:
61:12:a9:d6:9c:8f:aa:ca:d2:ea:95:c7:a2:6e:c9:
86:37:95:57:de:38:ea:c0:9d:78:e4:ef:bd:a2:b7:
50:2d:f8:cf:ba:1b:6d:e0:9e:ec:2f:85:2f:14:0b:
35:36:fd:d4:00:d5:b5:11:ed:c4:a0:99:4d:5a:55:
a4:f3:39:62:e4:74:02:73:fd:9c:0b:0b:56:b4:75:
1d:b2:9b:06:d4:d1:06:8c:57:6c:e3:4e:9c:04:d3:
cc:d8:f8:3c:0d:c6:e8:93:61:2a:2b:f2:b6:b9:a9:
fe:ba:e0:5d:f3:23:11:d4:68:47:ce:42:49:a8:3c:
77:c3:f9:59:47:e0:2c:be:0e:33:64:9f:e6:bd:52:
36:dd:55:34:c4:61:c0:d3:63:c8:e8:93:79:e0:87:
09:17:c2:29:3a:4a:07:8a:14:be:ea:ad:1e:b7:46:
5f:af:d4:8f:f4:4b:0a:bf:c5:84:b5:26:a5:f3:c5:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:4B:64:05:AA:0A:87:BC:72:A8:06:68:6C:0D:60:D5:A9:E0:BA
X509v3 Authority Key Identifier:
keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3630303a3a2f33392d3339203d3e20323730313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3eb:600::/39
Signature Algorithm: sha256WithRSAEncryption
b1:df:d5:68:31:2c:a2:c2:85:64:df:d0:68:64:9a:bf:47:07:
9e:90:58:c4:9d:33:de:bb:6c:29:64:3f:06:e8:e2:7a:5a:e6:
50:e2:5c:b7:ac:81:56:36:bf:1f:57:40:70:85:bb:4a:09:b1:
56:ae:bc:8d:44:bc:3d:1b:5c:18:de:58:c9:fc:12:d0:94:1f:
45:b3:8d:31:96:40:e1:56:e7:6c:02:84:cb:55:23:3a:bf:1f:
8f:82:d3:5a:f1:9a:ce:d1:40:d3:57:12:ea:ce:3c:e7:f2:15:
ad:af:cb:8f:75:a5:6b:f1:f9:5a:f7:f4:34:18:8f:3e:6b:bc:
4e:69:89:e6:6a:6a:5b:34:44:c2:6d:96:75:87:4e:b6:93:63:
ac:2c:b6:81:91:f1:5a:0c:9a:7d:b8:5b:de:cd:67:af:f7:7c:
47:c9:b2:f6:bb:c1:79:a7:21:58:50:0f:ab:6e:d5:e9:43:e5:
b7:49:e1:dd:df:bb:16:87:c0:fe:d7:a6:10:86:0b:32:0e:44:
f8:51:97:91:91:38:8c:e8:6a:93:38:1f:37:41:42:e6:54:a0:
f9:52:05:7f:ba:7b:11:c9:b7:9d:9c:71:12:a9:a9:7a:cd:66:
0d:81:7f:82:34:98:a3:46:9f:c0:24:18:79:af:00:3f:0f:2e:
3e:ee:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:43:56 2026 by rpki-client