
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/323830333a323932303a3a2f33322d3438203d3e20323636363637.roa
File: 323830333a323932303a3a2f33322d3438203d3e20323636363637.roa (raw, json)
Hash identifier: YBlStnOabPKKLAshPoH9VsTkFiqXOefqbmTm3abMD90=
Subject key identifier: BA:29:AB:46:E0:70:00:93:2D:D8:90:18:70:44:41:37:8B:60:DE:9E
Certificate issuer: /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial: 31D9FDA56B0F98395E3AC15BBACA95CFAE5867CC
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/323830333a323932303a3a2f33322d3438203d3e20323636363637.roa
Signing time: Tue 08 Sep 2026 18:34:36 +0000
ROA not before: Tue 08 Sep 2026 18:29:36 +0000
ROA not after: Tue 07 Sep 2027 18:34:36 +0000
asID: 266667
IP address blocks: 2803:2920::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 19 Sep 2026 07:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d9:fd:a5:6b:0f:98:39:5e:3a:c1:5b:ba:ca:95:cf:ae:58:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Validity
Not Before: Sep 8 18:29:36 2026 GMT
Not After : Sep 7 18:34:36 2027 GMT
Subject: CN=BA29AB46E07000932DD89018704441378B60DE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:b3:94:e6:4e:06:f7:69:56:7b:a9:08:d0:
c3:fc:2b:f2:c1:73:ec:de:df:97:ca:6e:20:9a:cd:
d2:51:a6:1f:84:ec:22:9e:8d:1f:9e:72:7e:fa:26:
1d:3c:57:0e:54:51:12:7f:f0:7f:1b:44:e0:83:a3:
2a:ea:68:85:67:11:a8:47:73:17:b2:ff:42:0c:78:
b0:78:53:c4:5d:57:27:c4:46:c7:15:37:42:87:aa:
f8:4c:51:c0:0a:7b:73:c3:df:c0:f8:55:71:f6:7c:
97:95:5a:14:4d:dd:38:fd:74:58:af:b2:5d:f2:74:
9d:fb:2a:4f:ea:ae:d0:ab:f7:aa:e3:25:84:ee:4a:
de:33:62:c7:25:8e:0f:f9:0b:d2:30:c9:95:60:53:
a1:44:8b:6c:f2:42:12:98:81:8a:f7:36:2b:0e:c9:
c9:39:2d:05:85:e0:44:2f:e4:23:ea:ed:f2:8b:3f:
7e:48:58:1f:be:f1:f1:fc:b7:92:e3:69:4b:8d:7c:
6e:b6:b5:40:b6:48:80:06:b4:8a:81:53:6e:be:6f:
17:a0:a4:f6:8e:bc:30:ae:dc:de:78:37:85:2c:1f:
51:35:7c:90:ee:7b:d8:b3:68:dc:26:e1:ae:96:a2:
0e:50:18:f5:e4:d1:3e:22:56:e2:8f:b6:7d:f1:03:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:AB:46:E0:70:00:93:2D:D8:90:18:70:44:41:37:8B:60:DE:9E
X509v3 Authority Key Identifier:
keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/323830333a323932303a3a2f33322d3438203d3e20323636363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2920::/32
Signature Algorithm: sha256WithRSAEncryption
51:56:4b:c6:6f:78:d8:53:60:3e:02:7a:51:f8:19:7b:77:57:
e7:85:16:96:24:25:cd:24:8b:98:22:7d:0e:68:ac:65:b2:17:
77:3f:c3:d8:da:f2:a1:6b:de:3c:62:91:02:bf:ef:62:44:b5:
11:27:49:59:51:2e:62:19:c2:58:8a:f9:f7:32:2c:84:93:7b:
22:c6:79:9d:c3:e6:9d:69:e1:53:c5:03:d2:6c:17:5c:9e:71:
37:d6:93:18:4c:8b:20:f3:8e:8f:81:f9:d6:71:d4:42:3a:98:
05:7c:42:1c:74:49:b3:5b:0e:66:3c:54:e4:38:fd:78:d8:ec:
a0:ea:ba:b9:d3:0e:5d:98:0f:26:f8:4b:af:9c:96:94:1a:88:
f8:f4:97:5e:82:c3:63:7f:61:f2:fe:7c:d1:ce:3a:97:b9:04:
32:fe:80:ae:a8:33:16:b8:28:2e:eb:ca:9e:14:0f:c2:55:cb:
81:17:0d:cc:ca:11:ba:e0:64:e8:ea:37:39:7d:2f:ac:4c:39:
61:30:50:02:e0:c8:31:dc:83:0b:84:7c:1a:99:ba:90:94:a7:
e6:05:a9:52:2a:3a:29:31:bd:d4:fd:f6:21:e1:54:55:d9:3a:
91:0d:05:fe:f9:5a:44:78:a2:ce:9d:02:80:80:20:4d:f2:8e:
b4:44:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:59:10 2026 by rpki-client