
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a3a2f33342d3334203d3e20323635353239.roa
File: 323830363a3238633a3a2f33342d3334203d3e20323635353239.roa (raw, json)
Hash identifier: 97AAb5yjncqA1x4X7G1L/bt1FW+qpAtxnIJBQ/xw3Xs=
Subject key identifier: 47:63:96:FC:79:8C:2A:17:A0:6E:2F:5A:E0:95:5D:6D:C4:C8:D7:F3
Certificate issuer: /CN=42FB55A41791F87502D72CC216E456680D5D80C0
Certificate serial: 52A3AC7613A966E6B1D180DDA16F0E431330072D
Authority key identifier: 42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a3a2f33342d3334203d3e20323635353239.roa
Signing time: Tue 02 Jun 2026 13:45:02 +0000
ROA not before: Tue 02 Jun 2026 13:40:02 +0000
ROA not after: Tue 01 Jun 2027 13:45:02 +0000
asID: 265529
IP address blocks: 2806:28c::/34 maxlen: 34
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Jun 2026 16:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a3:ac:76:13:a9:66:e6:b1:d1:80:dd:a1:6f:0e:43:13:30:07:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42FB55A41791F87502D72CC216E456680D5D80C0
Validity
Not Before: Jun 2 13:40:02 2026 GMT
Not After : Jun 1 13:45:02 2027 GMT
Subject: CN=476396FC798C2A17A06E2F5AE0955D6DC4C8D7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:39:b8:74:49:5e:07:fe:8a:76:1d:d8:ac:
9c:79:99:a0:99:5a:73:68:ce:ba:6e:de:1c:0d:17:
dc:39:47:49:10:d8:a8:a1:04:63:74:fb:54:43:45:
a9:83:53:5f:ae:e0:5a:55:47:44:93:7e:d5:8a:c6:
5e:bc:cd:ee:37:aa:79:19:42:a9:f8:f2:02:56:a5:
9f:c9:30:51:b4:ea:74:7e:fb:74:48:04:4c:3f:9e:
4a:cf:bc:2b:f8:e0:54:7d:5d:14:e5:07:35:c2:26:
6a:ce:c0:a0:26:94:ee:08:40:f6:65:23:ec:a4:d2:
db:f1:03:de:c4:94:28:86:1a:0c:5b:0f:ff:1c:7f:
2e:60:a0:49:dd:9e:43:7e:53:5e:10:34:ec:5a:bf:
1b:f9:d9:32:75:5b:08:5a:c1:a2:7c:de:03:27:d9:
43:41:e5:93:76:b8:03:a7:ef:57:ee:8e:a2:af:1d:
b1:03:cb:db:67:2b:03:24:3d:43:00:37:26:99:0d:
02:01:d0:2c:3c:79:0f:ff:a9:c0:b6:35:59:1c:a9:
e6:14:e1:e0:ae:f1:52:39:9c:5a:bc:42:2d:c6:c1:
6a:a7:4a:a0:77:f7:65:75:fd:e4:b8:ea:c9:49:e0:
90:65:40:0f:69:5d:c6:1a:50:a6:8a:2c:e8:bb:81:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:96:FC:79:8C:2A:17:A0:6E:2F:5A:E0:95:5D:6D:C4:C8:D7:F3
X509v3 Authority Key Identifier:
keyid:42:FB:55:A4:17:91:F8:75:02:D7:2C:C2:16:E4:56:68:0D:5D:80:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/42FB55A41791F87502D72CC216E456680D5D80C0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42FB55A41791F87502D72CC216E456680D5D80C0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CF1E17EB6D9A7080DB6B0F50A25A46AC21B045D3C1C39BE022D213BF41CD7B1/0/323830363a3238633a3a2f33342d3334203d3e20323635353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:28c::/34
Signature Algorithm: sha256WithRSAEncryption
1a:cb:5d:90:bb:70:14:5f:1e:95:3b:b5:be:0e:fd:14:78:f9:
4f:11:21:55:59:54:2f:27:84:75:67:c6:c6:18:2e:c9:89:7f:
7f:9d:e8:e1:88:f4:1e:c6:1a:d6:ab:00:7e:e5:9e:25:a5:5c:
aa:d4:ce:4b:4f:7e:d7:ff:07:b7:8a:f0:92:7c:58:a6:26:70:
3d:a7:62:a2:2f:04:a2:c9:86:bd:9f:08:d3:c6:76:e7:77:40:
da:64:41:b6:79:22:d5:5d:28:09:49:81:90:f8:8f:2f:5c:56:
e5:dd:ef:56:79:c6:d7:11:c7:28:fd:27:2f:e6:5a:47:d2:39:
f7:fa:3d:08:e6:c7:1b:11:20:86:3f:12:2d:a7:c1:ec:18:5c:
7a:4c:26:4a:6a:5d:7f:39:a9:fb:ec:10:73:1c:84:97:f1:a4:
29:95:9a:07:a0:2a:d0:04:e1:ef:23:b6:cd:ba:f4:24:3f:32:
d3:f5:b7:66:0a:97:cc:c9:87:dc:38:94:8c:3f:8c:dc:b6:23:
94:1f:f3:e1:23:e6:28:26:9e:25:e0:d9:01:8d:df:6b:02:a4:
ff:a8:c5:35:97:1b:6c:d1:57:c2:29:f7:f5:65:02:0c:ed:da:
37:1c:30:09:d8:b8:e7:07:e1:26:21:70:fd:ad:79:12:20:41:
31:d1:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:57:46 2026 by rpki-client