
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
File: 323830333a3630303a3a2f33322d3536203d3e203236313035.roa (raw, json)
Hash identifier: QDG9tCM1V37qPEQ93N7GMK0wTsZZ8m0hHg9KngEbyCU=
Subject key identifier: E8:08:A2:3B:13:BB:88:93:E2:AF:F2:C2:EC:57:5F:34:A2:EA:21:B8
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 0D441E522E5D9AF071A6644B6E53A0701283E1C7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
Signing time: Fri 25 Sep 2026 14:36:57 +0000
ROA not before: Fri 25 Sep 2026 14:31:57 +0000
ROA not after: Fri 24 Sep 2027 14:36:57 +0000
asID: 26105
IP address blocks: 2803:600::/32 maxlen: 56
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 19:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:44:1e:52:2e:5d:9a:f0:71:a6:64:4b:6e:53:a0:70:12:83:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Sep 25 14:31:57 2026 GMT
Not After : Sep 24 14:36:57 2027 GMT
Subject: CN=E808A23B13BB8893E2AFF2C2EC575F34A2EA21B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:14:70:36:ed:94:ca:c8:ec:85:d6:36:0c:
39:9b:9b:94:d2:d7:d7:32:86:c2:00:fb:5e:6f:e0:
7b:10:97:31:6e:84:c9:49:72:d0:c4:17:49:ed:3c:
ca:ff:29:6c:fe:e4:6b:18:21:6f:09:55:64:81:27:
69:44:65:c4:44:c2:d2:24:96:7a:e1:ad:75:f4:dd:
c8:56:8b:2d:d2:48:fe:fe:d0:8c:20:74:6e:c8:56:
4c:bb:da:11:35:61:d5:a0:9e:15:3b:b4:47:19:f5:
00:75:a0:9b:2f:dc:a5:31:77:ac:c5:d2:21:bd:2f:
23:04:58:e8:b4:c3:6c:7c:3b:41:04:f3:a3:e0:f0:
c7:1d:29:6e:23:db:93:3f:23:a1:9c:1d:f4:c9:94:
4f:3b:4f:60:ec:1b:6c:38:1a:f8:1c:8a:5b:cd:65:
e6:98:e5:57:b9:8f:e5:9b:03:61:2f:7c:e0:2a:68:
c9:05:27:dc:2f:e4:98:30:14:9f:12:fd:3d:9c:6f:
d4:75:f4:aa:76:c6:5b:b5:9d:1f:57:e0:7b:0f:06:
cb:0e:5e:e9:72:68:e2:96:cc:3a:64:76:5b:a8:bb:
84:8e:2e:89:17:63:03:73:5b:b4:b6:de:16:3b:e4:
48:46:f4:68:2c:35:51:83:95:a6:94:2f:ee:73:b5:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:A2:3B:13:BB:88:93:E2:AF:F2:C2:EC:57:5F:34:A2:EA:21:B8
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830333a3630303a3a2f33322d3536203d3e203236313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:600::/32
Signature Algorithm: sha256WithRSAEncryption
3a:20:bc:0f:c1:e9:ef:01:0e:fb:fc:ce:de:1c:a8:e9:8c:f2:
41:6c:3f:29:28:36:2e:03:f1:1d:43:14:ca:55:e8:a5:13:6d:
41:48:c6:6f:04:4d:67:87:66:de:be:b1:d6:0a:66:d0:f8:ba:
8e:68:a3:c6:92:e6:a2:ca:d8:04:8e:cd:37:1f:15:6a:9e:51:
e7:f0:f1:67:38:cb:79:7d:64:0d:cd:bc:c3:46:ea:a4:70:dc:
01:a2:1d:c6:87:ba:ab:a5:a9:3f:46:75:a8:31:d7:c7:ef:34:
fa:d0:20:7c:fa:f2:8a:95:74:e8:93:e6:81:b6:7c:f2:07:f6:
67:2b:32:48:4d:85:98:ec:69:5c:40:13:58:cc:c7:e2:1b:cc:
59:a8:e3:e3:13:42:b8:4c:36:4a:ca:40:af:fa:36:7f:54:70:
9a:14:04:bc:82:98:e8:75:b7:76:b6:d2:98:6f:c5:a6:a3:60:
bc:1f:7b:78:8f:07:b3:8b:4b:85:b2:a3:5b:39:87:bf:40:ca:
1a:47:55:c0:a7:a3:ac:07:11:c2:da:03:d7:0b:e0:f4:df:03:
5f:9e:8e:5d:01:44:bd:3b:61:67:5a:4c:09:91:cf:ce:a2:c8:
9e:ce:10:10:c9:59:b4:db:18:4e:b7:b4:3b:12:bd:94:9f:84:
c0:6f:04:2b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUDUQeUi5dmvBxpmRLblOgcBKD4ccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNjA5MjUxNDMxNTdaFw0yNzA5MjQxNDM2NTdaMDMxMTAvBgNV
BAMTKEU4MDhBMjNCMTNCQjg4OTNFMkFGRjJDMkVDNTc1RjM0QTJFQTIxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MRRwNu2UysjshdY2DDmbm5TS
19cyhsIA+15v4HsQlzFuhMlJctDEF0ntPMr/KWz+5GsYIW8JVWSBJ2lEZcREwtIk
lnrhrXX03chWiy3SSP7+0IwgdG7IVky72hE1YdWgnhU7tEcZ9QB1oJsv3KUxd6zF
0iG9LyMEWOi0w2x8O0EE86Pg8McdKW4j25M/I6GcHfTJlE87T2DsG2w4GvgcilvN
ZeaY5Ve5j+WbA2EvfOAqaMkFJ9wv5JgwFJ8S/T2cb9R19Kp2xlu1nR9X4HsPBssO
XulyaOKWzDpkdluou4SOLokXYwNzW7S23hY75EhG9GgsNVGDlaaUL+5ztfufAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU6AiiOxO7iJPir/LC7FdfNKLqIbgwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC
RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzgzMDMzM2EzNjMwMzAzYTNhMmYz
MzMyMmQzNTM2MjAzZDNlMjAzMjM2MzEzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMGADANBgkq
hkiG9w0BAQsFAAOCAQEAOiC8D8Hp7wEO+/zO3hyo6YzyQWw/KSg2LgPxHUMUylXo
pRNtQUjGbwRNZ4dm3r6x1gpm0Pi6jmijxpLmosrYBI7NNx8Vap5R5/DxZzjLeX1k
Dc28w0bqpHDcAaIdxoe6q6WpP0Z1qDHXx+80+tAgfPryipV06JPmgbZ88gf2Zysy
SE2FmOxpXEATWMzH4hvMWajj4xNCuEw2SspAr/o2f1RwmhQEvIKY6HW3drbSmG/F
pqNgvB97eI8Hs4tLhbKjWzmHv0DKGkdVwKejrAcRwtoD1wvg9N8DX56OXQFEvTth
Z1pMCZHPzqLIns4QEMlZtNsYTre0OxK9lJ+EwG8EKw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:27:49 2026 by rpki-client