
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/323830333a626139303a3a2f33322d3438203d3e20323732383834.roa
File: 323830333a626139303a3a2f33322d3438203d3e20323732383834.roa (raw, json)
Hash identifier: PpTAnGJaKQKat/ImjZkznWcM0CraMRv9rIP+OlEbwz0=
Subject key identifier: BD:ED:CF:E5:EE:95:75:80:1F:91:6B:E3:F1:42:19:A7:D4:A8:20:22
Certificate issuer: /CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2
Certificate serial: 7B03C1B281B0E0F02B397D85E7BC28BFDEF6BC40
Authority key identifier: CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/323830333a626139303a3a2f33322d3438203d3e20323732383834.roa
Signing time: Fri 23 Jan 2026 17:27:09 +0000
ROA not before: Fri 23 Jan 2026 17:22:09 +0000
ROA not after: Fri 22 Jan 2027 17:27:09 +0000
asID: 272884
IP address blocks: 2803:ba90::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl
rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:03:c1:b2:81:b0:e0:f0:2b:39:7d:85:e7:bc:28:bf:de:f6:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2
Validity
Not Before: Jan 23 17:22:09 2026 GMT
Not After : Jan 22 17:27:09 2027 GMT
Subject: CN=BDEDCFE5EE9575801F916BE3F14219A7D4A82022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:e5:70:52:eb:fe:d0:3d:1a:ad:58:09:79:
3f:78:7a:88:dc:74:e9:88:41:65:f7:eb:86:de:f8:
a4:eb:34:7d:a1:49:ae:23:bf:53:0a:4a:01:1c:f6:
77:9c:62:28:c2:03:75:ca:59:78:a6:1f:2a:96:68:
be:64:3c:66:b9:96:03:82:5c:4b:90:76:5d:cf:97:
f8:7f:17:3b:0c:d3:4b:68:ee:25:73:3c:c9:a3:75:
bb:c6:76:1d:f3:65:30:e1:5d:14:05:05:b3:40:5c:
4e:48:9b:04:db:8c:b3:b2:99:2d:8d:fb:0e:4d:57:
2a:14:1f:e8:06:62:00:03:1d:ac:22:96:6a:37:4f:
6a:88:bf:80:85:2d:44:1b:9a:0b:6a:be:1b:c9:8f:
67:ad:6b:d0:e6:9c:27:b4:b1:bc:5d:ad:0b:98:14:
8e:51:f0:aa:d2:a4:7b:df:5d:13:92:b7:e0:ab:10:
4b:d2:42:19:e4:49:1a:1b:20:bf:2f:a1:2b:a5:7e:
df:d3:50:ac:13:46:93:86:69:de:08:22:b1:c9:4b:
14:52:0e:2f:ca:99:a6:ef:57:a2:e3:d5:37:cb:00:
f8:22:57:7a:b0:57:7d:31:01:0d:70:47:cf:da:b2:
dc:3a:f0:2f:de:35:36:93:11:0f:81:c8:9c:12:d4:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:CF:E5:EE:95:75:80:1F:91:6B:E3:F1:42:19:A7:D4:A8:20:22
X509v3 Authority Key Identifier:
keyid:CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/323830333a626139303a3a2f33322d3438203d3e20323732383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ba90::/32
Signature Algorithm: sha256WithRSAEncryption
4b:48:72:46:c9:24:5d:f1:a7:3b:bc:7d:ef:6f:49:30:71:9b:
0b:9f:ac:42:30:82:e7:38:db:bb:80:48:18:5d:9f:02:b7:8b:
50:2a:b5:9c:7c:64:84:f0:c5:6f:f9:e0:aa:f4:3c:ba:61:3b:
d9:2a:99:a7:78:f7:21:57:28:29:72:6f:d8:49:28:62:aa:32:
de:c6:b3:dd:2d:ea:02:da:8e:8c:0f:7e:66:47:dd:94:f5:b9:
4e:6f:fc:85:f0:50:2f:ca:ba:ec:6e:b2:99:6a:76:59:07:ce:
9e:4c:0e:51:1d:a3:6e:cc:86:38:16:ee:cc:b2:57:58:38:f0:
c1:8d:a5:6c:93:0a:8d:6f:1c:20:21:72:dd:3a:ad:97:db:c2:
53:76:db:12:fd:01:f7:97:15:1e:cc:bb:5a:b8:a7:01:96:25:
63:e5:b6:e8:dd:f3:05:9d:31:6a:79:dd:3f:47:31:24:56:3e:
4c:b1:05:83:29:5e:fe:87:07:82:89:5d:42:4a:df:e6:1b:af:
31:33:a7:46:d4:8e:64:a3:6e:0a:99:1e:d0:56:06:3a:54:bc:
a0:3d:24:80:21:00:cf:6d:89:af:d0:b2:6c:b4:38:f3:76:dc:
5f:ff:0a:f8:84:49:07:c6:47:3a:80:c3:b1:a1:56:f7:9c:ba:
57:3a:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:30 2026 by rpki-client