
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
File: 323830313a3139353a3a2f34342d3434203d3e20323733313437.roa (raw, json)
Hash identifier: UZwg1SWmwvnxwvHzFaCJlY2I/yr9ezO60BZFtan7cnQ=
Subject key identifier: 98:09:A9:69:9F:DE:DA:89:1C:38:D6:B3:3A:A0:6E:98:40:B3:10:44
Certificate issuer: /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
Certificate serial: 3C3CB6A1BF7C0C24FAFFD59345C80372EC2A64BF
Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
Signing time: Wed 08 Apr 2026 01:37:58 +0000
ROA not before: Wed 08 Apr 2026 01:32:58 +0000
ROA not after: Wed 07 Apr 2027 01:37:58 +0000
asID: 273147
IP address blocks: 2801:195::/44 maxlen: 44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl
rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Apr 2026 19:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3c:b6:a1:bf:7c:0c:24:fa:ff:d5:93:45:c8:03:72:ec:2a:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
Validity
Not Before: Apr 8 01:32:58 2026 GMT
Not After : Apr 7 01:37:58 2027 GMT
Subject: CN=9809A9699FDEDA891C38D6B33AA06E9840B31044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:a5:06:cd:32:c7:89:18:69:68:cc:55:e0:
cc:94:84:6c:68:cd:7d:37:0f:c9:b2:76:3d:b7:35:
51:76:e2:a2:39:89:2d:81:0a:af:b9:92:81:c2:24:
b6:16:26:d7:42:56:5a:ba:14:a4:c8:86:04:66:59:
ec:8c:2e:c5:92:d8:83:70:50:fa:57:1d:9f:8a:e9:
d7:ef:ca:08:a7:91:58:95:b4:7c:0b:05:cd:93:ce:
57:25:26:71:4a:cf:84:97:64:0e:ba:ca:56:bf:18:
38:51:88:f5:b2:8d:b8:3c:94:8b:a1:b6:3e:50:90:
52:0c:60:02:77:c3:b5:d5:c1:a6:a0:cb:8e:2c:1e:
18:46:0f:9b:cd:8d:b3:50:b9:d9:3f:64:95:cd:3f:
75:d0:7b:dd:02:c1:34:43:3e:9a:99:f8:0c:9e:26:
64:f0:92:6d:a6:e9:6d:d2:d5:e9:ef:14:e2:53:46:
76:11:ff:cc:8d:1a:08:3e:38:72:b1:aa:df:14:a9:
cd:11:43:59:c5:99:fe:21:62:65:9c:5e:5b:f5:3c:
2d:9a:00:fe:20:1f:22:51:29:6b:7c:30:f7:1e:0a:
26:ab:d0:51:7d:ec:30:5c:c1:44:56:be:30:b5:88:
c6:e5:62:14:92:fe:08:7e:98:ce:47:89:d8:f4:90:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:A9:69:9F:DE:DA:89:1C:38:D6:B3:3A:A0:6E:98:40:B3:10:44
X509v3 Authority Key Identifier:
keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:195::/44
Signature Algorithm: sha256WithRSAEncryption
29:e2:28:0d:ef:10:b7:23:6c:ed:f8:f9:69:98:b9:e1:86:e7:
7d:2b:bb:f2:2b:d3:56:ae:83:a2:db:ff:40:2d:27:db:d6:8a:
a7:14:0c:53:8e:e7:35:2b:c0:18:37:4f:69:a9:23:86:a6:73:
74:1a:1b:93:4b:dc:22:33:ed:8d:bf:c3:be:10:47:d1:53:44:
73:24:09:0d:ec:32:55:a4:73:3a:69:44:a8:81:f1:99:e8:04:
1a:35:d0:72:47:af:e4:40:5e:60:9c:e4:09:53:a8:53:0f:fd:
ae:0c:2f:88:30:2c:42:35:f7:4d:55:f2:31:3b:b7:87:1c:04:
4e:b9:55:8d:1e:de:e7:c2:ef:d4:97:33:87:f6:b7:2b:af:c7:
98:17:08:ba:05:6c:05:50:b0:b3:99:a6:a0:1e:a9:8b:c5:c8:
b7:9e:7c:e0:90:b8:15:27:18:b5:b5:ce:dd:8b:aa:e0:62:03:
40:74:7d:eb:0e:25:dd:e4:26:78:33:5d:d9:3e:69:e3:bd:99:
82:d5:9b:b4:d9:fd:43:67:73:e1:42:85:2f:64:1a:a0:6e:1a:
c6:95:68:e6:ac:de:32:ce:43:9f:88:8f:8a:f8:cb:49:6b:87:
7f:c2:f4:c0:01:e3:92:2b:28:6d:3c:fb:1d:f7:a3:a4:e9:47:
0d:2b:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:56:39 2026 by rpki-client