
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa
File: 323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa (raw, json)
Hash identifier: sHg2pNrZdDyZClXBUTs8lnturL9tpyh8nQPugN+/tRs=
Subject key identifier: 52:FD:98:77:98:15:31:61:4A:FC:2B:1F:15:19:53:07:A2:0A:36:5A
Certificate issuer: /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial: 2A1DC23C93752BE5189AF1F9A50FD9689941200D
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa
Signing time: Fri 06 Feb 2026 21:29:28 +0000
ROA not before: Fri 06 Feb 2026 21:24:28 +0000
ROA not after: Fri 05 Feb 2027 21:29:28 +0000
asID: 61468
IP address blocks: 2801:1b:2800::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 22:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1d:c2:3c:93:75:2b:e5:18:9a:f1:f9:a5:0f:d9:68:99:41:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Validity
Not Before: Feb 6 21:24:28 2026 GMT
Not After : Feb 5 21:29:28 2027 GMT
Subject: CN=52FD9877981531614AFC2B1F15195307A20A365A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:db:cf:49:f0:85:5d:1e:af:e0:92:21:ef:
78:51:14:a2:9a:68:ac:29:aa:e1:ec:9c:93:c3:1a:
a9:eb:16:e7:5e:6c:a1:6c:66:37:ee:46:3e:2d:76:
2e:e9:24:79:22:b2:77:a0:f7:42:38:72:16:f4:5e:
2a:44:16:03:f5:3e:c1:52:af:06:47:13:4c:4c:28:
a3:9d:e6:94:5e:28:c8:41:e6:21:f2:38:b5:53:cc:
6c:1f:94:3e:44:51:54:11:d0:0a:c6:69:00:f7:28:
25:f8:5b:ca:39:fa:39:93:e7:c3:98:05:f5:a7:aa:
f7:af:32:f1:32:bc:65:6b:8b:6e:e6:5b:52:41:7c:
e0:84:c7:b3:3f:2f:88:3c:a7:19:e7:8f:79:7f:bb:
4d:84:95:95:06:ec:9e:b7:bd:3a:c0:eb:b7:95:9f:
ae:07:39:22:ac:0c:3a:4b:f4:bf:d7:1b:73:3f:62:
0a:d0:5e:1e:89:58:fe:1c:57:5a:62:07:c8:0c:fc:
28:a3:2a:b3:4a:88:b6:80:de:83:7c:bc:26:52:5a:
ae:d9:2f:df:55:a9:52:8f:6f:72:cf:b5:a7:ba:9e:
38:ce:b0:7d:1d:df:2c:bb:87:77:64:5b:07:1d:27:
b0:87:82:75:cc:07:d8:4d:c6:c8:93:e6:45:b0:6f:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:98:77:98:15:31:61:4A:FC:2B:1F:15:19:53:07:A2:0A:36:5A
X509v3 Authority Key Identifier:
keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e203631343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:2800::/48
Signature Algorithm: sha256WithRSAEncryption
9d:0d:83:8c:02:b0:c2:81:c1:e7:f2:1f:07:c5:ff:33:ff:fe:
26:33:35:eb:5b:12:96:34:00:ab:69:2f:93:0c:93:09:02:e2:
b9:0d:85:c3:40:6e:1f:9c:c6:c4:d3:e0:25:82:fe:11:be:dd:
ff:78:0a:5d:67:c1:87:7c:d8:35:b4:36:bb:f8:e0:42:3d:3e:
62:8a:23:d4:2d:cc:92:15:a3:82:31:50:e1:52:7d:5f:21:cb:
6d:e3:c4:1b:74:20:35:e8:de:d1:49:1d:50:ab:41:1d:e4:9f:
43:3f:d3:19:ea:73:75:67:8b:cf:6c:05:59:d4:53:cf:ba:40:
c3:5d:ba:65:de:ca:78:b3:14:4a:4f:db:4e:f3:4d:c6:f6:d8:
12:4d:0f:f1:b6:77:93:a7:e9:dc:03:2e:90:3b:af:92:c6:cd:
6d:9b:0a:bc:c4:ec:6a:18:7e:f9:2c:fa:9a:06:c2:5c:4c:27:
dd:db:95:4a:3d:3b:9c:99:8b:8e:f9:07:96:2b:1f:82:69:41:
a4:d2:77:9e:58:bd:87:83:90:54:87:08:df:d5:00:94:72:76:
96:c9:27:39:01:42:62:ce:c6:42:27:44:b3:68:93:af:71:71:
ba:79:25:44:55:21:0e:2b:47:f4:15:3c:59:19:8b:c8:f7:16:
fc:70:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:21:36 2026 by rpki-client