
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
File: 323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (raw, json)
Hash identifier: 879k4d5FSFCRR7DOdP3MqnLopg4ZgND8BzqGpu69dRs=
Subject key identifier: 02:EB:D4:91:75:02:1B:2D:EA:F7:99:79:51:B2:40:3F:24:89:CD:99
Certificate issuer: /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial: 1D9A481A5D80728374311F647B7F22A67F273B55
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
Signing time: Tue 06 Jan 2026 19:25:32 +0000
ROA not before: Tue 06 Jan 2026 19:20:32 +0000
ROA not after: Tue 05 Jan 2027 19:25:32 +0000
asID: 264678
IP address blocks: 2803:dd40::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9a:48:1a:5d:80:72:83:74:31:1f:64:7b:7f:22:a6:7f:27:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Validity
Not Before: Jan 6 19:20:32 2026 GMT
Not After : Jan 5 19:25:32 2027 GMT
Subject: CN=02EBD49175021B2DEAF7997951B2403F2489CD99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:a4:37:ae:59:d4:f8:d0:b9:ec:ed:4a:de:
dd:87:d2:e1:8b:a4:3e:2f:cb:d8:c2:00:5b:f6:c3:
a3:6a:56:3c:3e:bd:0d:40:19:c4:55:c6:59:69:cf:
7e:9d:c5:bb:7b:d7:7d:1b:ac:1a:90:09:99:92:14:
8f:9b:70:22:2e:61:e4:2e:35:3c:a4:9a:5a:4f:a1:
65:d4:39:c1:e5:de:31:ad:31:7b:e2:78:59:98:1d:
16:9e:9f:f4:5f:7e:df:4a:a6:fa:5d:19:c7:93:00:
d9:e1:c0:be:60:e8:4e:df:32:46:35:f7:18:b5:b9:
ce:15:46:af:72:6c:e2:88:50:d6:1e:38:e4:7a:b5:
01:2a:40:b0:71:b5:53:2f:7b:f4:53:38:34:39:b0:
df:c9:3e:d3:bd:fa:ed:51:40:2f:d7:d6:c0:e9:54:
33:56:de:6a:f0:ab:0d:0c:a3:bc:d2:33:51:0a:4e:
08:e1:d8:4b:3c:97:10:3e:33:be:1f:d9:01:07:7f:
d4:e4:59:cc:e1:d0:54:93:9f:ed:85:80:7d:db:79:
a4:aa:87:91:72:07:f9:32:82:f9:19:dc:f6:5c:3c:
3e:40:d2:77:e5:08:a6:33:88:97:dd:3b:59:59:90:
37:db:0d:6d:b2:37:ce:57:a5:b3:35:d0:17:cd:f1:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EB:D4:91:75:02:1B:2D:EA:F7:99:79:51:B2:40:3F:24:89:CD:99
X509v3 Authority Key Identifier:
keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
79:3c:e4:e0:71:d2:14:2d:aa:04:9f:94:ef:45:96:33:0a:9d:
04:81:5f:d0:76:c0:89:0e:a2:fa:fd:c3:3e:c5:7d:30:5e:d7:
85:ca:cd:b2:df:a5:22:6d:4f:d7:12:d0:e9:c5:69:9a:b0:b9:
e3:85:b4:a8:5f:53:d0:c5:9c:f1:fc:e5:32:dd:28:33:41:fe:
ba:e7:d2:3b:69:55:61:1b:c2:b4:a4:80:80:8f:fe:b1:4e:e9:
18:59:d7:1c:a7:a4:e7:c7:7b:17:05:b2:f1:c7:d6:7b:68:6e:
cf:89:b4:41:94:e3:d4:52:ab:c6:c4:82:d3:b6:c6:fc:6b:bb:
47:4f:83:58:0b:2d:c5:97:7c:f5:36:cc:b2:90:4b:95:6f:6b:
8c:7d:bd:8e:75:fb:c5:bd:4c:3d:c6:f8:ea:da:74:22:d9:ff:
3e:0f:69:87:27:2d:0b:c6:7f:e4:a7:3c:6e:89:1c:45:1e:14:
05:5e:98:ae:ab:72:24:54:34:25:a9:96:43:97:e8:41:70:e9:
dd:3c:b2:fc:0f:4d:3a:a1:6c:67:27:03:28:c3:05:d2:4f:77:
fb:3b:ec:c7:75:cc:05:63:bb:29:9b:b2:41:62:31:75:d4:bd:
14:f7:33:6a:ec:5b:54:9a:d0:7b:6e:44:e7:61:38:61:a0:84:
d6:02:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:12:27 2026 by rpki-client