
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
File: 323830303a6231303a3a2f33322d3332203d3e203237383834.roa (raw, json)
Hash identifier: AIuUHEb/sSiAvODY6yfygvJ3vGpJxtnM30dSPDnTMhg=
Subject key identifier: FB:9E:3D:33:58:5E:5F:8B:AB:1D:9E:FB:7D:37:D5:84:A4:70:24:85
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 1F130B3B7AFBC1787309012D3F38035CFC20FA
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
Signing time: Thu 29 Oct 2026 20:06:08 +0000
ROA not before: Thu 29 Oct 2026 20:01:08 +0000
ROA not after: Thu 28 Oct 2027 20:06:08 +0000
asID: 27884
IP address blocks: 2800:b10::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 02:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:13:0b:3b:7a:fb:c1:78:73:09:01:2d:3f:38:03:5c:fc:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Oct 29 20:01:08 2026 GMT
Not After : Oct 28 20:06:08 2027 GMT
Subject: CN=FB9E3D33585E5F8BAB1D9EFB7D37D584A4702485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:86:c9:50:d7:94:c8:68:f7:09:cb:d4:b8:
26:5e:40:29:15:b7:26:a4:50:6b:27:dc:25:0c:e6:
cf:0a:2f:09:b0:4e:24:e1:2c:01:b4:90:cf:b0:d1:
62:c4:7e:13:dc:c5:72:88:47:7c:e6:f1:6e:13:a1:
de:f6:b7:d8:d5:66:65:3a:4e:7f:d0:54:70:34:17:
13:e7:93:1a:34:68:49:b0:29:fd:ad:67:fd:f4:e6:
93:07:ad:67:be:9a:11:34:22:f8:bd:db:fe:dc:7e:
2e:5e:3b:c8:b3:08:53:95:29:7b:08:d1:d1:50:33:
f9:90:01:d6:cf:86:80:9a:3a:57:84:d9:02:6f:c7:
6c:a4:b9:32:fa:79:06:42:fe:fb:7e:f5:a5:ab:e9:
68:02:15:4b:a6:c0:63:19:e6:a6:d2:cd:93:cf:82:
67:12:e1:54:8a:81:5f:54:7f:52:0f:ca:82:86:ce:
5e:39:2a:64:3b:3b:a5:cb:a9:2f:5d:bd:69:07:35:
5a:40:d1:f3:15:6a:e8:1e:1d:df:2c:6c:d1:6d:dd:
f5:bd:97:e0:58:bf:26:ec:0d:79:17:51:b4:02:29:
dc:5a:3b:7d:91:03:93:f3:15:a4:94:ab:d8:5f:ce:
f8:35:a8:8d:64:47:72:1c:4c:33:15:1e:a8:52:59:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:3D:33:58:5E:5F:8B:AB:1D:9E:FB:7D:37:D5:84:A4:70:24:85
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f33322d3332203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b10::/32
Signature Algorithm: sha256WithRSAEncryption
87:b4:32:f8:18:0d:b1:dc:71:56:d3:69:8e:d7:4d:c4:0d:0f:
83:56:3e:61:ed:c3:0a:61:aa:4c:15:19:cb:fa:cb:a6:9b:9b:
e1:7b:18:9a:c9:19:c0:08:9c:d1:f6:62:49:2e:a2:a5:ba:ee:
e1:25:59:7d:38:05:9c:83:11:87:37:ac:4f:66:88:72:c3:19:
7f:ad:86:b7:b2:88:87:ed:3e:b7:7b:55:83:8d:27:24:0d:28:
d0:c5:9b:99:a2:08:46:43:84:50:5e:57:dd:10:10:9f:db:e9:
1a:10:5f:e1:af:6f:ef:5b:6b:f3:8a:b6:e5:e5:3a:a8:cd:35:
86:03:80:ec:84:e3:e2:f6:2f:5f:a0:b5:8b:38:d3:7d:04:32:
ad:0b:1e:3b:2a:4f:71:98:7d:f9:08:2a:fc:b3:b0:35:da:c0:
74:f6:d5:96:06:b7:78:18:ea:f5:d3:24:c8:fe:e2:1c:0c:c0:
b1:12:86:24:36:b7:60:04:7b:3f:68:6a:b1:bc:b5:f2:ed:2b:
d5:24:24:60:92:cd:f8:da:76:f1:b1:5c:09:aa:66:7a:3b:0f:
92:2e:0b:0d:1b:3f:97:f9:c8:21:9a:59:77:e7:cd:1e:76:87:
ae:6a:6d:32:6f:2b:d9:b5:29:88:87:53:2d:e7:0b:9f:05:bb:
a8:d9:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:22:57 2026 by rpki-client