
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e203337373037.roa
File: 323830363a3364333a3a2f33322d3332203d3e203337373037.roa (raw, json)
Hash identifier: IzP7H7mYu2B0u5jgrtrT8Whyj/ezChJdNNgGcmq0Jx0=
Subject key identifier: C5:77:A0:A3:66:5A:97:7B:47:0A:38:DA:DB:6D:78:D1:5B:8E:C8:A6
Certificate issuer: /CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
Certificate serial: 27BBA03FAE4FA1212A84522BDEEA242F10312A16
Authority key identifier: 6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e203337373037.roa
Signing time: Wed 29 Oct 2025 19:40:00 +0000
ROA not before: Wed 29 Oct 2025 19:35:00 +0000
ROA not after: Wed 28 Oct 2026 19:40:00 +0000
asID: 37707
IP address blocks: 2806:3d3::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl
rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bb:a0:3f:ae:4f:a1:21:2a:84:52:2b:de:ea:24:2f:10:31:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
Validity
Not Before: Oct 29 19:35:00 2025 GMT
Not After : Oct 28 19:40:00 2026 GMT
Subject: CN=C577A0A3665A977B470A38DADB6D78D15B8EC8A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:25:07:29:69:c5:dc:ce:bc:8d:0c:87:fa:
aa:e0:29:74:59:ab:bb:69:fe:37:20:c3:ce:4c:ea:
06:9d:79:8f:e6:45:94:36:a4:62:35:6a:17:e5:da:
60:ac:37:73:97:e5:ce:b6:15:53:96:de:c9:4a:6b:
53:1d:96:1d:8e:1b:1f:41:62:51:55:bd:d9:05:c4:
93:6d:b0:fd:ab:6e:88:0d:e7:76:28:37:b8:e7:e3:
30:85:7e:c6:ad:d6:f1:80:e4:92:dc:07:73:be:19:
25:50:8e:e7:9d:c0:0c:13:6e:b9:db:60:51:09:a0:
a7:e5:71:6c:d4:a6:1b:4f:c2:35:50:88:2e:d8:3c:
1c:f4:91:64:c0:e9:a4:2a:0b:03:8a:ba:0d:e8:b7:
87:5c:94:c0:49:ac:0c:4c:8e:03:76:a2:6c:79:ef:
07:ce:a3:a5:7d:a7:62:a9:9f:ce:88:0f:40:c6:3d:
32:ab:2d:2d:53:76:39:7c:c5:f1:82:9b:70:ce:2f:
cb:a2:14:3d:7f:96:f2:3b:23:7a:c5:74:88:c6:30:
c1:47:ba:1d:2b:e0:41:42:38:ad:8c:d1:bf:3d:e9:
d7:2d:4e:a1:bb:72:fe:aa:4b:9e:98:4e:ec:fa:98:
0a:5a:8c:14:8b:ec:d5:28:c6:e8:98:e4:63:c4:1a:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:A0:A3:66:5A:97:7B:47:0A:38:DA:DB:6D:78:D1:5B:8E:C8:A6
X509v3 Authority Key Identifier:
keyid:6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e203337373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3d3::/32
Signature Algorithm: sha256WithRSAEncryption
82:98:b4:a4:3c:a2:d4:35:7a:eb:e7:c9:dd:c7:ff:1b:d6:0c:
79:15:6c:93:63:85:98:22:58:06:09:46:61:32:1c:74:e8:6e:
4e:a1:02:7d:dc:a0:80:a6:15:fe:0a:03:c8:3f:75:d4:fe:31:
96:15:91:00:e1:b5:bc:2a:75:48:7d:be:42:1d:5d:99:b6:b4:
e4:84:05:a1:2e:af:9d:63:dc:ab:00:43:84:d1:66:84:4f:bc:
90:3c:1a:b0:bc:8c:6a:f9:9f:1d:1c:f9:95:64:53:ed:39:cb:
19:3a:1a:6f:7a:08:27:7d:60:52:2c:3b:3d:22:dd:10:0a:05:
fc:f3:c0:12:03:cb:26:b1:33:89:2c:0a:ba:dc:b4:5e:40:37:
55:cb:49:e4:e0:f0:28:f8:a2:63:c4:5a:7a:32:c8:be:45:52:
3e:d2:b0:cc:02:e9:2a:3e:ea:55:3e:13:59:b1:a4:4e:b3:de:
a7:46:a5:e7:75:fb:83:92:6a:51:07:19:f0:36:da:5d:65:e0:
cd:9e:ae:3f:aa:cf:f0:2c:92:52:6d:a4:85:2a:f6:b9:dd:3e:
58:db:36:47:14:96:d9:c6:35:c2:64:6f:5a:63:4f:0b:45:81:
a4:33:0a:17:42:3e:1b:0d:be:b2:37:24:1e:2e:4a:71:f6:d2:
72:6b:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:06:58 2025 by rpki-client