
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/323830333a653764303a3a2f33322d3332203d3e2037333033.roa
File: 323830333a653764303a3a2f33322d3332203d3e2037333033.roa (raw, json)
Hash identifier: 1G9LdhcXE/nJ9zVke6uWm9wBajUW4RHmB4+jSuKYB3s=
Subject key identifier: B5:7B:CE:92:7F:EA:CE:99:DB:B2:0E:8D:4B:CC:AB:E3:31:C5:1B:95
Certificate issuer: /CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Certificate serial: 61315E7AED5778366E2067E1FFB96EBB65B89181
Authority key identifier: D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/323830333a653764303a3a2f33322d3332203d3e2037333033.roa
Signing time: Mon 19 Oct 2026 13:41:56 +0000
ROA not before: Mon 19 Oct 2026 13:36:56 +0000
ROA not after: Mon 18 Oct 2027 13:41:56 +0000
asID: 7303
IP address blocks: 2803:e7d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 23 Oct 2026 22:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:31:5e:7a:ed:57:78:36:6e:20:67:e1:ff:b9:6e:bb:65:b8:91:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3A9BB2434EF24613DA3D824164DFABE55243F12
Validity
Not Before: Oct 19 13:36:56 2026 GMT
Not After : Oct 18 13:41:56 2027 GMT
Subject: CN=B57BCE927FEACE99DBB20E8D4BCCABE331C51B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:08:3f:f8:6d:26:02:40:c4:04:4c:da:a2:
82:4e:da:fa:f8:28:2d:3b:32:ac:e2:49:f2:f2:63:
8b:8f:8b:ce:26:c8:b1:f8:34:f3:49:84:e8:7e:33:
5a:58:73:d7:26:da:a7:17:4e:23:cd:c7:59:f6:ce:
9e:11:87:b3:ef:e9:55:41:9f:1c:ec:30:1d:91:f5:
38:53:92:55:74:44:3c:ba:a6:f5:25:d8:ad:98:fe:
08:4b:f6:09:6a:5e:10:22:f9:6a:fc:7b:66:d4:f7:
fa:67:b1:5f:c7:a0:04:36:3a:a0:66:88:81:7d:77:
d3:5d:98:05:e4:8c:01:a2:94:93:2a:fa:0a:3a:97:
cf:6c:19:92:52:23:97:d4:69:c7:2a:db:fe:24:b8:
77:29:c7:9e:25:b0:fc:27:32:12:85:f8:42:78:ee:
5f:66:bd:54:56:3b:a2:3f:08:0a:67:0b:98:84:b9:
20:c0:6a:17:62:1b:39:f2:ce:de:77:b7:3c:a5:29:
6e:e2:9d:7c:cd:d7:68:4c:5f:ca:4b:f8:58:80:96:
f5:19:2a:b2:2b:ba:e8:c9:12:83:95:46:d7:c6:6f:
16:e3:66:f5:4f:53:40:31:08:36:ba:d4:4f:d5:73:
91:89:38:f1:43:07:59:09:7d:c1:58:00:ef:98:e6:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:CE:92:7F:EA:CE:99:DB:B2:0E:8D:4B:CC:AB:E3:31:C5:1B:95
X509v3 Authority Key Identifier:
keyid:D3:A9:BB:24:34:EF:24:61:3D:A3:D8:24:16:4D:FA:BE:55:24:3F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3A9BB2434EF24613DA3D824164DFABE55243F12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E67A9374FE68262ECC3779D5D63C1A1E8AD0FF9F42F9E65D6B060F16B9DD2817/0/323830333a653764303a3a2f33322d3332203d3e2037333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e7d0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:2b:89:92:ac:69:ae:2d:16:30:2a:f9:d6:83:d6:12:09:8c:
6e:fd:fa:54:25:42:f3:d7:45:07:4f:b4:2c:61:b7:75:63:69:
cb:be:69:22:28:28:8b:ed:6c:c7:3c:06:d8:ee:a3:a7:8e:32:
74:6d:85:c9:67:8b:62:7a:7e:36:c9:1e:c4:11:e2:72:5e:07:
c9:5f:a2:de:41:2b:9c:61:e9:a8:f1:17:cf:a2:67:c3:f6:6f:
43:42:dc:f3:82:32:bd:9d:8d:d7:93:7e:2b:15:87:45:03:79:
8a:c5:bd:0e:c8:96:8d:93:49:0d:e7:a5:7d:6f:3a:1e:41:17:
ac:da:78:4a:0a:4f:1f:32:80:18:e8:09:bc:6e:9d:db:75:2c:
1a:2b:8c:54:da:94:a0:af:e2:dd:04:9b:c0:06:b8:43:51:e0:
6b:8e:5b:1c:66:83:11:31:54:47:e3:ee:8a:fd:91:17:f9:36:
07:95:c3:90:73:89:53:b3:e2:37:35:b6:fc:d2:ee:ba:d3:75:
d3:85:e2:fa:b6:d4:a1:bd:74:e5:65:50:45:cc:b4:d4:e6:8b:
08:d8:f9:a6:d7:82:b1:07:af:28:f7:92:6d:2c:b4:6d:c0:26:
63:f5:e0:bf:9c:a6:d0:4e:f5:69:9c:58:01:1b:e4:09:76:71:
5a:32:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:00:29 2026 by rpki-client