
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
File: 323830303a6231303a3a2f34382d3438203d3e203237383834.roa (raw, json)
Hash identifier: MKzrSm31Kt5Z4FvApzOz/KH6W2ET7Eg4k3yXumGTy90=
Subject key identifier: 01:4C:4A:C4:11:28:AA:95:02:FE:28:2C:36:75:20:5F:97:33:BE:1E
Certificate issuer: /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial: 6DD97041BCB555F688FCC2F4DA469B6714BCE46C
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
Signing time: Thu 29 Oct 2026 22:06:09 +0000
ROA not before: Thu 29 Oct 2026 22:01:09 +0000
ROA not after: Thu 28 Oct 2027 22:06:09 +0000
asID: 27884
IP address blocks: 2800:b10::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d9:70:41:bc:b5:55:f6:88:fc:c2:f4:da:46:9b:67:14:bc:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Validity
Not Before: Oct 29 22:01:09 2026 GMT
Not After : Oct 28 22:06:09 2027 GMT
Subject: CN=014C4AC41128AA9502FE282C3675205F9733BE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:a4:65:45:12:6b:d2:5a:5b:98:56:38:d7:
5e:58:d6:f7:a0:34:77:28:85:63:0e:dd:5e:3e:10:
87:a5:18:35:56:72:89:b6:9b:62:b6:cd:2e:d4:a9:
72:d9:d7:e9:9f:db:2c:8c:66:bb:3e:93:49:b3:d2:
aa:49:76:b6:9a:7f:a0:bd:c3:93:39:76:8b:09:e1:
7e:dc:f9:aa:e2:60:ca:ab:0f:51:d1:7e:13:33:b1:
27:58:12:e9:c5:7e:2d:ca:00:02:96:82:15:70:02:
64:59:25:55:49:06:ce:4e:99:36:71:48:12:86:d8:
fb:14:6d:43:5e:02:b9:31:4e:a1:7b:16:77:2b:d1:
05:71:f2:80:e4:41:ed:77:85:f8:d3:4d:8d:92:ac:
a2:d6:83:ca:38:19:c1:60:9e:23:3e:a4:3a:b7:db:
cc:4d:0a:43:36:bc:6d:f6:3a:48:2a:cc:11:b3:36:
ba:67:c6:7e:27:73:2d:7b:d8:6d:07:8f:f4:88:1a:
56:ab:2c:7f:ec:63:ce:81:3d:69:59:e4:9d:58:f8:
b2:34:b2:9c:79:f6:34:4c:90:5f:f2:d4:22:d4:9b:
cb:d9:48:9a:cc:83:88:df:24:17:15:cd:8b:c0:15:
64:4a:43:1f:09:9f:49:e7:f7:f3:68:a8:54:99:85:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4C:4A:C4:11:28:AA:95:02:FE:28:2C:36:75:20:5F:97:33:BE:1E
X509v3 Authority Key Identifier:
keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/323830303a6231303a3a2f34382d3438203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b10::/48
Signature Algorithm: sha256WithRSAEncryption
56:69:e1:64:4a:55:69:f9:90:55:c8:f5:f4:59:62:06:44:7d:
2d:df:9d:84:e4:42:b7:37:92:5a:3f:9c:b6:e3:a1:68:d9:f0:
8c:a0:7e:4b:fb:5b:04:07:4d:fc:92:c6:ab:0e:1f:96:e7:07:
55:03:e1:90:d1:56:17:c1:0c:d2:3d:80:8a:98:01:72:9f:29:
80:5a:14:5c:d4:a8:53:94:9e:4b:f4:a1:90:67:ad:b5:1c:7f:
3a:5c:5e:44:09:33:a5:51:21:b1:51:2d:97:2e:d6:74:65:e7:
2d:14:fb:f4:1c:02:1d:65:cc:a7:0c:df:56:20:d1:72:5d:8c:
8a:56:83:41:4d:31:b7:09:57:0e:cd:f6:c0:12:ed:57:e1:ff:
7d:da:34:ff:f5:25:1d:5e:77:f0:58:2f:70:41:90:16:e0:bc:
8e:e4:33:57:b4:f0:69:75:8a:bc:71:34:e3:c3:24:f1:21:e3:
43:2c:f1:f2:0b:3b:d8:d1:ba:65:71:72:de:f3:4b:3a:9a:b6:
af:fe:b5:dd:1f:fb:07:4f:6c:38:7a:31:f8:4c:48:56:5a:58:
d0:8c:9b:b9:ab:2a:6d:98:ad:17:f7:20:83:25:a7:62:8b:d8:
36:a7:fa:28:66:9d:de:e7:7d:81:59:4e:96:c3:23:87:6e:44:
c1:9f:02:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:04:26 2026 by rpki-client