
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
File: 323830313a3161613a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier: DOQNk/3Xwc9pZRiFrzqT0KoJu9j75KKYgR7k7vMMJJo=
Subject key identifier: 5D:A2:2A:83:3C:7C:86:50:69:77:24:01:9E:B1:9D:83:AC:81:93:B7
Certificate issuer: /CN=E001D620B6E014F51D5A8A878F416307AA8F761D
Certificate serial: 40E8B7C3A4C3EB11BB28220999FF766228253787
Authority key identifier: E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
Signing time: Tue 07 Apr 2026 04:37:46 +0000
ROA not before: Tue 07 Apr 2026 04:32:46 +0000
ROA not after: Tue 06 Apr 2027 04:37:46 +0000
asID: 27951
IP address blocks: 2801:1aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl
rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e8:b7:c3:a4:c3:eb:11:bb:28:22:09:99:ff:76:62:28:25:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E001D620B6E014F51D5A8A878F416307AA8F761D
Validity
Not Before: Apr 7 04:32:46 2026 GMT
Not After : Apr 6 04:37:46 2027 GMT
Subject: CN=5DA22A833C7C8650697724019EB19D83AC8193B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:0a:8c:f4:73:83:01:c1:a3:79:e7:c6:ef:
51:c9:e0:0b:b4:5c:49:c0:46:64:e4:d9:d1:ef:ca:
22:c5:6e:b2:50:74:8e:9f:21:07:f0:1e:11:11:dc:
e1:30:5d:f0:65:99:bc:83:36:6c:50:d7:12:8e:7b:
7d:9e:a9:de:32:72:d5:42:74:bb:0b:3b:97:0d:3d:
fc:23:b8:a6:b4:d0:15:b1:0a:65:01:7c:ff:38:83:
2f:0f:5b:1b:0d:96:8f:a5:07:5c:76:05:47:da:8f:
17:7f:5d:7b:52:7c:41:78:3b:c7:e4:3c:21:be:37:
1e:98:7e:1d:6b:68:1f:5a:ca:2e:e7:f3:40:7c:71:
30:aa:9d:32:3c:11:02:aa:72:b3:02:14:f6:0c:7c:
da:c2:61:67:e9:b1:99:99:40:75:7a:e9:ae:50:31:
b7:d0:ff:8f:2e:03:81:2a:30:1e:a1:57:03:78:a5:
86:1b:0b:56:c9:0a:c9:ac:0e:c6:92:d4:e7:09:d2:
11:c3:9f:0e:2d:9f:6a:1d:2b:f2:d5:7d:35:06:90:
81:7f:59:f1:17:6f:80:f1:24:9b:01:7a:c8:db:28:
5b:4b:67:d2:3d:9c:9c:7e:ba:4e:61:c2:6c:11:2c:
2c:34:b1:35:4e:a9:37:a9:02:ba:50:d3:6e:53:47:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:2A:83:3C:7C:86:50:69:77:24:01:9E:B1:9D:83:AC:81:93:B7
X509v3 Authority Key Identifier:
keyid:E0:01:D6:20:B6:E0:14:F5:1D:5A:8A:87:8F:41:63:07:AA:8F:76:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/E001D620B6E014F51D5A8A878F416307AA8F761D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E001D620B6E014F51D5A8A878F416307AA8F761D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66581998117107B6569D3D9B1781DCD8369EDC1B4281949F7504B567C3BADE68/0/323830313a3161613a3a2f34382d3438203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1aa::/48
Signature Algorithm: sha256WithRSAEncryption
8b:c9:7f:fe:bd:3f:a8:dd:5f:0c:4b:72:4e:77:22:7c:62:d5:
e7:74:79:84:45:24:a0:bc:be:ad:8d:1b:72:dc:8c:9a:b1:d5:
99:bb:3e:8e:05:5d:0c:40:8d:d7:ea:af:2a:26:17:a6:fb:cc:
67:d5:4f:e9:9b:61:6d:3a:5b:22:99:3a:9e:4a:0a:cc:21:a2:
bf:10:fc:42:42:ed:0d:7f:39:ef:6a:98:44:66:a9:27:b0:f8:
26:24:b2:55:29:a9:da:34:bc:b2:94:68:85:2f:a2:0f:10:08:
fb:94:43:0c:e2:14:75:b0:21:78:33:48:0a:71:b5:2b:1f:ed:
22:5e:5e:35:3d:26:dd:6c:88:6b:cc:89:21:49:7d:b1:d9:9a:
f0:08:73:14:85:58:15:35:ef:4c:33:0b:88:a3:12:92:25:86:
af:e7:6f:82:33:b4:12:b4:a2:51:68:d2:89:6a:e8:f7:97:30:
a9:b5:a1:b7:cc:1b:cd:49:54:cf:7c:61:84:66:14:fc:09:17:
b2:64:4e:ae:27:1f:3a:37:bb:b2:8e:7e:ad:02:b1:5d:c5:be:
29:1d:57:13:ce:09:a2:6d:93:c5:3c:82:aa:72:16:7c:6e:e1:
75:39:59:ab:b8:eb:c1:41:08:46:09:c3:57:dc:27:de:99:a8:
c9:af:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:41 2026 by rpki-client