
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
File: 323830303a3261303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier: +PKOZazlu96bI2BjjSND4IaVPVNizSG3UhLAb4wTcOs=
Subject key identifier: 7D:03:D0:DB:CA:18:B5:8A:9C:64:DD:42:3A:36:56:06:2B:60:13:04
Certificate issuer: /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial: 0DF87F21F1C4E2D1D7B3E8DB4AB7973AF84151BC
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
Signing time: Tue 06 Jan 2026 19:08:30 +0000
ROA not before: Tue 06 Jan 2026 19:03:30 +0000
ROA not after: Tue 05 Jan 2027 19:08:30 +0000
asID: 27947
IP address blocks: 2800:2a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 14:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f8:7f:21:f1:c4:e2:d1:d7:b3:e8:db:4a:b7:97:3a:f8:41:51:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Validity
Not Before: Jan 6 19:03:30 2026 GMT
Not After : Jan 5 19:08:30 2027 GMT
Subject: CN=7D03D0DBCA18B58A9C64DD423A3656062B601304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:ae:80:20:10:84:ad:ea:7b:8f:f2:4b:99:
18:55:a2:50:0a:aa:29:89:65:d0:8d:fa:d5:7a:3f:
b6:d9:06:35:4d:c3:f9:8c:38:dc:f2:f3:60:c8:90:
db:84:ce:90:85:23:1c:83:1c:6b:61:29:de:75:8e:
99:ed:89:75:da:90:79:4e:4c:b4:be:df:3f:a2:62:
98:0d:07:29:fc:9b:40:d6:8d:49:a0:bd:0d:34:c6:
d4:e1:6b:a9:e6:19:ef:cb:b4:81:b5:ae:f6:da:ca:
e4:94:9f:f9:6a:87:7e:48:3f:28:7e:1e:c2:d8:3a:
df:f0:ab:6f:b0:c7:33:30:cc:cf:4d:14:05:ff:9d:
77:7c:e0:c8:c5:01:95:37:80:53:d2:79:a4:0c:be:
f9:b3:7d:b5:27:d3:19:91:e4:7f:ec:a6:5d:aa:71:
98:c2:8c:a2:fa:82:9b:85:82:a3:76:0d:2e:da:58:
17:6b:56:11:ce:28:67:3c:db:41:3d:cf:7d:10:01:
b0:67:a7:2e:41:59:15:29:2f:2f:88:17:fc:74:e6:
68:4d:34:3c:f5:6c:4e:2d:db:93:3c:f4:1f:46:2d:
20:1f:85:3e:05:05:9c:e3:01:58:df:07:f8:7f:f5:
ee:de:21:e5:c9:07:06:aa:2c:bd:24:e4:ab:7b:56:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:D0:DB:CA:18:B5:8A:9C:64:DD:42:3A:36:56:06:2B:60:13:04
X509v3 Authority Key Identifier:
keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:2a0::/32
Signature Algorithm: sha256WithRSAEncryption
52:8b:5d:a1:d2:06:e4:21:f5:cb:ed:f5:5d:3c:e6:5f:db:a7:
6e:e0:65:06:aa:29:db:a6:76:28:9d:ca:ba:fc:b5:a7:d6:19:
8b:64:82:46:4d:5a:ce:76:9a:f1:e8:fc:18:fb:80:5e:b4:47:
e8:35:8b:1e:eb:aa:b0:e1:9f:87:23:e7:c3:a8:0b:df:12:17:
97:37:95:69:00:97:94:45:96:41:4e:a1:37:19:8f:36:dc:50:
a3:e0:21:25:c8:94:4b:17:72:79:1c:dd:94:e5:26:3e:bd:97:
40:b2:92:b1:12:f2:31:7b:7e:d7:ca:37:09:9c:d8:24:cf:ea:
28:52:3d:51:01:ad:22:c2:0a:ae:8a:9c:e0:90:d4:4e:7b:ac:
79:b9:49:04:d4:7f:8f:79:f8:f8:4c:c6:da:c1:83:18:2e:41:
c8:56:ba:97:98:8b:b8:92:3e:42:05:36:59:19:6f:c6:57:4d:
dc:79:cb:c9:f3:fe:21:90:7f:14:a5:47:eb:68:fe:ce:41:1e:
e8:79:84:be:23:32:1c:01:ab:45:e7:90:3f:f6:9a:f2:b3:2c:
8a:91:05:6b:24:58:15:1f:96:d7:23:9b:f7:91:d8:ad:25:93:
af:45:8e:ae:32:8c:19:70:1a:3f:37:ad:e7:98:e7:5e:7b:c7:
6b:00:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:12 2026 by rpki-client