
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
File: 323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa (raw, json)
Hash identifier: 50fcrf/NfoB8GzZsX1VcpC2AvzGIcSfQjpWxVrzxwqE=
Subject key identifier: EC:FC:87:E9:D6:C1:6C:37:FA:33:F5:9B:23:86:65:E2:9F:42:D5:BC
Certificate issuer: /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial: 28F71EBEA0BAAE82DDACFB8216D49B1D9483C20D
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
Signing time: Tue 06 Jan 2026 19:25:00 +0000
ROA not before: Tue 06 Jan 2026 19:20:00 +0000
ROA not after: Tue 05 Jan 2027 19:25:00 +0000
asID: 273114
IP address blocks: 2803:790:4000::/36 maxlen: 64
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 19:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f7:1e:be:a0:ba:ae:82:dd:ac:fb:82:16:d4:9b:1d:94:83:c2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Validity
Not Before: Jan 6 19:20:00 2026 GMT
Not After : Jan 5 19:25:00 2027 GMT
Subject: CN=ECFC87E9D6C16C37FA33F59B238665E29F42D5BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:4b:f5:cb:db:ea:20:a0:be:af:5f:b6:ec:
b0:a9:f7:68:c5:2a:5a:23:39:8e:c1:92:48:94:9b:
9c:ac:3a:eb:81:09:be:91:b8:1f:6b:8a:60:e9:f0:
26:53:44:67:00:4a:62:d3:b8:23:1d:17:a6:44:10:
ac:7f:fe:15:88:da:ba:02:df:32:55:fc:21:32:8f:
aa:06:21:32:50:d4:2a:cc:f6:2f:02:f3:5b:4d:dd:
0d:8c:43:7b:10:fd:84:95:53:ce:21:c7:d6:50:f3:
54:61:11:a1:9b:0b:6c:d5:2b:1a:28:e7:84:cc:22:
86:40:a8:5e:8e:72:f5:8f:7f:21:d5:21:e9:7c:d2:
f2:5e:f5:b9:72:0d:98:40:d1:70:f1:50:bd:a1:04:
d6:f2:e0:95:3c:1f:c4:55:d0:f1:3c:e7:b0:d2:18:
d3:d0:21:a9:31:b4:15:64:8f:74:f6:1e:b7:d7:46:
aa:13:bb:5a:87:e9:6e:8b:cb:21:22:f1:e9:93:b9:
43:4c:b1:2f:77:f5:8a:88:01:ea:73:ed:c8:a4:3e:
37:38:09:86:9b:6b:09:31:3b:87:8b:c2:55:cb:4d:
66:9a:9f:12:f7:44:a7:8b:a3:7d:39:73:54:3a:b8:
bd:10:9d:d1:99:44:1c:c9:8a:a7:8b:9d:51:f3:06:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:87:E9:D6:C1:6C:37:FA:33:F5:9B:23:86:65:E2:9F:42:D5:BC
X509v3 Authority Key Identifier:
keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:790:4000::/36
Signature Algorithm: sha256WithRSAEncryption
2e:aa:e1:df:53:c5:e6:6e:33:59:7a:d9:40:51:3b:e8:a4:75:
78:1c:5a:79:5a:41:d5:e1:15:76:ac:77:66:87:7b:c9:67:c2:
a2:2c:9c:73:fa:88:3d:95:dc:d4:a2:4f:b8:95:a6:e5:31:6e:
3f:44:a8:11:f5:97:ad:cf:0c:09:26:aa:1a:80:10:c1:50:f7:
1f:79:9d:2c:25:28:f7:40:ee:80:6d:4c:c6:82:f4:72:45:08:
c4:4f:f9:4f:1d:ed:f9:74:d7:2f:b0:fd:84:59:84:f6:72:b3:
64:16:7d:6d:3e:77:c6:2c:2f:a4:9e:71:8f:c0:d8:90:fa:26:
5d:45:ba:a8:74:da:d3:85:e0:35:10:de:24:81:a8:c0:9e:78:
5a:9b:e0:7d:6d:71:05:a6:85:8a:34:3b:41:a5:2d:ae:ca:ff:
95:59:95:d6:ce:04:6f:be:e7:02:b7:56:21:f3:dd:13:ee:b7:
da:15:36:ef:8b:01:b5:27:8a:56:19:ef:47:95:9d:5d:59:d1:
24:3c:4e:85:4d:2e:e0:17:e1:9b:41:e7:42:a2:22:a7:7c:13:
b1:25:db:38:43:19:8f:81:26:2a:7d:f4:46:fa:df:6b:90:ed:
05:e1:c5:75:25:2f:6d:a1:2b:19:78:71:f3:eb:a4:58:83:08:
0a:ce:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:08:17 2026 by rpki-client