
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3435203d3e20323733303437.roa
File: 323830313a3136353a3a2f34342d3435203d3e20323733303437.roa (raw, json)
Hash identifier: ZvJjJyijCMt5OPg72bBJ37Eq8XxpBv9pVQDfcNkgAgc=
Subject key identifier: 71:BD:4E:B7:D6:F9:B3:CE:B5:0A:E6:81:C0:5B:2A:16:BB:D7:FE:25
Certificate issuer: /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial: 03C5C9D9DFC2C7EA880E9680F8A5A6F312C1509D
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3435203d3e20323733303437.roa
Signing time: Mon 30 Mar 2026 21:36:53 +0000
ROA not before: Mon 30 Mar 2026 21:31:53 +0000
ROA not after: Mon 29 Mar 2027 21:36:53 +0000
asID: 273047
IP address blocks: 2801:165::/44 maxlen: 45
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 17:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c5:c9:d9:df:c2:c7:ea:88:0e:96:80:f8:a5:a6:f3:12:c1:50:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Validity
Not Before: Mar 30 21:31:53 2026 GMT
Not After : Mar 29 21:36:53 2027 GMT
Subject: CN=71BD4EB7D6F9B3CEB50AE681C05B2A16BBD7FE25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:fa:5e:f7:73:ca:57:ef:ac:32:a7:13:7f:
cb:eb:ef:26:03:af:e5:ce:19:3d:d4:9f:b4:be:f2:
dd:7f:07:9f:ae:1f:da:39:9a:ed:77:ef:25:04:02:
4d:c8:03:f5:4b:3a:d6:65:df:b4:9f:c6:13:3b:66:
24:95:0d:52:d2:89:68:3a:18:64:8b:ea:33:b8:00:
06:39:09:99:0f:e5:17:f9:fe:53:d3:74:c6:ad:62:
01:fb:18:d1:e2:63:b2:f2:6e:18:dd:6f:57:29:98:
2d:9d:9c:3a:90:bb:a8:cd:70:fb:e4:ae:8d:93:f5:
72:bc:e3:58:87:1e:30:24:9b:8b:04:9c:16:52:78:
3c:da:8d:2a:d5:5a:3a:32:17:b1:92:4f:7d:fa:4a:
f7:58:63:28:49:5c:85:d1:ca:cb:a3:80:6b:4b:61:
58:65:17:33:77:42:2f:9c:6c:92:d0:67:fa:f1:07:
6a:0b:e2:c9:50:0f:c6:5c:fe:68:a6:d3:8f:ea:8b:
3b:51:e9:b8:43:0f:b9:44:72:76:39:52:34:11:e4:
de:a9:eb:20:32:b0:ea:88:75:69:cf:1a:ca:c4:3e:
c2:f8:46:09:03:31:b3:37:d7:5d:0f:01:b2:42:10:
6d:a7:f0:8a:00:05:2b:aa:d3:8e:a1:e5:97:08:e4:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:4E:B7:D6:F9:B3:CE:B5:0A:E6:81:C0:5B:2A:16:BB:D7:FE:25
X509v3 Authority Key Identifier:
keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a3a2f34342d3435203d3e20323733303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
c5:be:65:37:3c:09:93:61:33:ac:3d:37:6e:a8:b0:2b:25:25:
b9:7d:19:b5:7b:81:00:4c:ca:56:39:21:09:d2:2f:c9:4c:22:
ac:f7:67:94:9c:e2:9b:2d:c8:b1:41:5e:62:a6:8e:93:c1:67:
23:b1:e0:36:1e:bd:91:3b:04:da:62:95:ae:16:51:55:9f:7d:
b8:fa:b9:44:52:65:79:7f:f7:5f:12:af:45:9c:5b:99:c9:76:
5d:98:55:81:5d:5d:44:71:12:d4:c6:05:7c:35:79:f3:30:c4:
57:c8:58:95:01:7b:ee:a8:e2:cc:e3:7b:33:01:7a:5c:47:4a:
94:b4:8c:5a:de:a2:70:00:34:70:42:0f:14:ad:21:7d:28:ca:
1e:75:d8:43:37:dd:7a:e1:c2:a7:36:fb:a0:a4:72:27:31:35:
9a:4d:a8:d9:8e:7d:38:99:9d:2b:12:9d:48:f2:e3:e9:e3:f0:
47:f4:ed:81:ba:7d:db:de:ab:43:7b:2c:62:21:34:03:ba:2c:
52:3b:cf:9e:af:e5:74:e6:ee:2a:44:37:5a:7c:8c:56:c5:2c:
35:a7:26:5f:36:d9:77:ec:27:d4:6e:e7:d9:fb:2f:ce:39:19:
76:2e:a3:c0:04:b4:17:19:86:9e:fe:cc:42:17:86:42:c1:34:
99:4a:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:43 2026 by rpki-client