
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203138383039.roa
File: 323830333a3630303a3a2f33322d3536203d3e203138383039.roa (raw, json)
Hash identifier: BpU7eEVEesrxHLSZyEAizTshqhoAXQQUzQ5z6I/Rg2M=
Subject key identifier: DD:14:37:31:3A:C0:54:49:0A:D9:04:9E:34:5F:D1:D5:C4:9F:B8:0B
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 5DC8501D30A75ED97DCBFCA767DB0D61899B2366
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203138383039.roa
Signing time: Fri 25 Sep 2026 14:36:52 +0000
ROA not before: Fri 25 Sep 2026 14:31:52 +0000
ROA not after: Fri 24 Sep 2027 14:36:52 +0000
asID: 18809
IP address blocks: 2803:600::/32 maxlen: 56
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 19:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c8:50:1d:30:a7:5e:d9:7d:cb:fc:a7:67:db:0d:61:89:9b:23:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Sep 25 14:31:52 2026 GMT
Not After : Sep 24 14:36:52 2027 GMT
Subject: CN=DD1437313AC054490AD9049E345FD1D5C49FB80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:96:2a:77:de:13:f2:9f:cc:ee:43:79:1e:
0c:70:e5:3f:2e:40:00:ca:4c:ae:8e:a7:af:a1:ad:
85:0b:b4:01:23:43:1e:97:4a:40:31:c0:93:b8:57:
48:45:73:1e:c0:23:50:68:a3:11:fa:b1:de:bf:42:
bc:f2:8a:43:ff:36:d4:db:f7:d9:73:fb:5d:be:01:
ed:e3:c5:a1:90:24:be:0a:07:de:be:ed:65:45:2a:
b4:a7:60:bd:3a:86:3b:38:8b:7b:83:26:08:d0:66:
96:91:f8:fb:05:8a:a1:4f:e0:b2:69:d8:27:98:57:
b0:09:98:8c:1d:e4:a7:42:b1:bb:70:27:03:04:2c:
74:65:32:89:1b:12:dd:3b:e6:3e:f5:6a:f2:84:0c:
58:53:e2:8d:bc:d7:e2:f1:f3:27:4a:f6:d2:20:0d:
6b:6d:8e:e3:f1:62:31:65:ca:43:08:21:b7:4a:68:
49:e0:9a:8e:60:a5:00:ce:36:cf:0b:2f:c6:1e:ee:
b9:00:88:cd:54:7e:8b:41:71:aa:16:da:f0:9b:b5:
eb:06:4f:f5:8c:09:11:0f:73:13:71:b1:61:d8:cd:
41:24:e3:11:e5:77:4f:a4:37:7f:67:e4:8f:d5:0d:
3f:73:7d:55:af:4d:16:18:f3:22:82:d1:7b:f2:a8:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:37:31:3A:C0:54:49:0A:D9:04:9E:34:5F:D1:D5:C4:9F:B8:0B
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203138383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:600::/32
Signature Algorithm: sha256WithRSAEncryption
3e:20:d3:ec:64:e7:ec:5e:1a:60:3b:c9:de:b2:33:21:9c:a1:
a4:88:dc:8c:ff:95:27:22:8e:a9:83:7e:32:ca:bd:26:b7:80:
28:00:6a:dc:4d:96:49:fa:e3:00:f8:36:39:44:48:9b:36:f1:
55:17:e6:8e:3f:cf:e5:d7:cc:3d:6a:fb:04:67:0c:d0:99:a6:
3f:e6:7c:1b:4a:42:69:71:90:59:19:7a:c8:ea:27:98:bc:83:
f6:64:b6:7d:9d:f9:14:6d:85:19:f5:1b:bb:64:30:90:4f:3e:
71:c0:d6:2c:84:32:af:6c:d1:ad:5a:89:52:18:ca:27:3f:a8:
8e:cc:bd:c7:23:f5:6b:05:b1:9c:c3:bf:ad:30:e3:e4:7c:6d:
64:40:7c:f6:a1:ef:84:af:5d:6c:b4:43:28:91:1c:42:a1:7c:
43:fd:3e:d2:47:8f:de:1f:52:9d:46:1b:df:6a:41:d3:d2:b5:
4c:9c:6b:8e:20:c7:52:7a:96:ad:0c:c8:dc:a9:ad:9e:d7:80:
13:0b:26:60:fa:c7:9f:ca:97:b2:ef:30:e6:49:a2:e8:b3:2b:
d9:b4:14:c8:30:a4:fe:b6:c1:c4:dd:ec:f2:cf:74:80:4d:81:
49:d5:dc:01:03:53:bd:6f:0a:8d:de:96:2f:f4:f6:b9:22:b3:
06:2e:b2:3e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXchQHTCnXtl9y/ynZ9sNYYmbI2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNTJaFw0yNzA5MjQxNDM2NTJaMDMxMTAvBgNV
BAMTKEREMTQzNzMxM0FDMDU0NDkwQUQ5MDQ5RTM0NUZEMUQ1QzQ5RkI4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkOJYqd94T8p/M7kN5Hgxw5T8u
QADKTK6Op6+hrYULtAEjQx6XSkAxwJO4V0hFcx7AI1BooxH6sd6/QrzyikP/NtTb
99lz+12+Ae3jxaGQJL4KB96+7WVFKrSnYL06hjs4i3uDJgjQZpaR+PsFiqFP4LJp
2CeYV7AJmIwd5KdCsbtwJwMELHRlMokbEt075j71avKEDFhT4o281+Lx8ydK9tIg
DWttjuPxYjFlykMIIbdKaEngmo5gpQDONs8LL8Ye7rkAiM1UfotBcaoW2vCbtesG
T/WMCREPcxNxsWHYzUEk4xHld0+kN39n5I/VDT9zfVWvTRYY8yKC0XvyqDszAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU3RQ3MTrAVEkK2QSeNF/R1cSfuAswHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzgzMDMzM2EzNjMwMzAzYTNhMmYz
MzMyMmQzNTM2MjAzZDNlMjAzMTM4MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMGADANBgkq
hkiG9w0BAQsFAAOCAQEAPiDT7GTn7F4aYDvJ3rIzIZyhpIjcjP+VJyKOqYN+Msq9
JreAKABq3E2WSfrjAPg2OURImzbxVRfmjj/P5dfMPWr7BGcM0JmmP+Z8G0pCaXGQ
WRl6yOonmLyD9mS2fZ35FG2FGfUbu2QwkE8+ccDWLIQyr2zRrVqJUhjKJz+ojsy9
xyP1awWxnMO/rTDj5HxtZEB89qHvhK9dbLRDKJEcQqF8Q/0+0keP3h9SnUYb32pB
09K1TJxrjiDHUnqWrQzI3KmtnteAEwsmYPrHn8qXsu8w5kmi6LMr2bQUyDCk/rbB
xN3s8s90gE2BSdXcAQNTvW8Kjd6WL/T2uSKzBi6yPg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 08:30:30 2026 by rpki-client