$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa File: 323830303a6237303a3a2f34382d3438203d3e20323632313931.roa (raw, json) Hash identifier: u7JWmGM0MwjkAR8RofaqiPvBK7L/vhO2FgvSUHRK4X0= Subject key identifier: D4:CC:FF:A0:70:CC:73:50:48:19:E7:85:3A:8A:C4:4C:2F:67:9B:FE Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD Certificate serial: 172AFDB7506D1C6F2C9B69FE3FCCD318ADD683D7 Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa Signing time: Tue 04 Feb 2025 20:04:46 +0000 ROA not before: Tue 04 Feb 2025 19:59:46 +0000 ROA not after: Tue 03 Feb 2026 20:04:46 +0000 asID: 262191 IP address blocks: 2800:b70::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2a:fd:b7:50:6d:1c:6f:2c:9b:69:fe:3f:cc:d3:18:ad:d6:83:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD Validity Not Before: Feb 4 19:59:46 2025 GMT Not After : Feb 3 20:04:46 2026 GMT Subject: CN=D4CCFFA070CC73504819E7853A8AC44C2F679BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:1d:fc:18:57:a2:24:f2:34:3d:b4:f3:a0: 0c:6a:d0:d7:6b:24:36:4a:e2:b2:6b:1a:c6:eb:4c: b5:f4:bd:0a:1b:b6:9e:f2:f1:d4:bb:85:6e:41:03: 5e:aa:70:53:00:dd:5f:6b:38:1d:20:25:9a:29:72: 8b:69:b8:31:f4:6d:b0:0f:0f:b5:f5:bd:03:a2:ef: 91:0b:20:f5:26:96:1c:3f:0b:aa:e9:74:6f:29:ce: a1:86:5b:09:ea:72:b0:3a:c4:f3:a3:03:a6:14:fa: 0c:5a:3f:de:64:40:02:ba:4e:d4:b0:19:65:8c:2c: 73:10:a6:e7:23:65:e9:d5:33:d0:2b:e4:5e:2f:5a: a6:87:09:4d:f4:51:86:9d:86:d1:6b:70:01:62:df: 4a:12:6d:49:17:7b:14:ee:2d:70:05:73:1f:6a:72: 91:d4:4f:92:3c:4e:63:91:8d:a1:c2:cc:c5:e5:ab: e1:6e:3e:19:46:6b:07:12:db:20:54:70:88:bf:c5: 40:20:09:81:17:df:4b:42:5a:db:26:e6:69:40:52: f8:f1:58:2e:fc:58:d3:d3:ed:c6:ea:bc:2f:d8:67: 4f:7c:d4:42:17:fd:1f:51:6a:73:4f:1b:06:f5:3a: c3:cb:3b:f0:77:ce:83:bf:db:75:72:21:4c:bd:64: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CC:FF:A0:70:CC:73:50:48:19:E7:85:3A:8A:C4:4C:2F:67:9B:FE X509v3 Authority Key Identifier: keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3a2f34382d3438203d3e20323632313931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:b70::/48 Signature Algorithm: sha256WithRSAEncryption 8b:7c:a8:b2:20:62:2a:f3:5b:d8:d1:28:59:bc:aa:c2:8b:6e: 81:09:75:a9:45:e7:0f:dc:e8:24:c4:fc:b3:ad:01:f8:e2:cf: ef:0b:08:04:dd:b5:87:f1:cc:bb:b9:6e:7a:31:c7:d3:c7:b1: 50:21:57:94:fc:52:7f:75:60:37:c5:00:67:e3:a3:21:ea:be: c6:3b:1f:5e:fa:00:6a:0b:cb:5c:00:2b:db:7b:67:66:88:e9: 38:35:4f:38:a2:17:f3:4e:f1:2b:4f:2f:86:4d:4f:c1:0d:f9: 53:c8:81:71:3e:12:ed:ff:ca:f1:53:7f:14:6d:b8:f4:dd:70: 30:0c:71:c8:08:40:c9:cd:65:5c:8d:f8:79:38:cd:60:2b:97: 7b:a0:3f:8d:c3:36:e8:bb:d6:8f:95:d1:f7:00:d0:18:86:5b: f5:5e:05:e9:64:13:bc:31:54:2d:b4:1d:ae:ae:30:82:52:71: 40:5f:2e:ba:89:53:84:e4:f8:46:98:20:25:79:f8:62:8b:1b: 3e:e8:30:c4:1c:df:8d:4a:df:b4:5c:8c:92:75:81:2c:f1:0a: 35:6c:2c:60:e6:85:1c:60:0b:f8:78:d1:b7:69:43:21:f2:42: 1a:bd:89:1f:81:38:37:71:fd:7a:a4:71:94:e4:55:25:1b:f8: 5f:6b:73:94 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUFyr9t1BtHG8sm2n+P8zTGK3Wg9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4 OTA2NkRDRDAeFw0yNTAyMDQxOTU5NDZaFw0yNjAyMDMyMDA0NDZaMDMxMTAvBgNV BAMTKEQ0Q0NGRkEwNzBDQzczNTA0ODE5RTc4NTNBOEFDNDRDMkY2NzlCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUR38GFeiJPI0PbTzoAxq0Ndr JDZK4rJrGsbrTLX0vQobtp7y8dS7hW5BA16qcFMA3V9rOB0gJZopcotpuDH0bbAP D7X1vQOi75ELIPUmlhw/C6rpdG8pzqGGWwnqcrA6xPOjA6YU+gxaP95kQAK6TtSw GWWMLHMQpucjZenVM9Ar5F4vWqaHCU30UYadhtFrcAFi30oSbUkXexTuLXAFcx9q cpHUT5I8TmORjaHCzMXlq+FuPhlGawcS2yBUcIi/xUAgCYEX30tCWtsm5mlAUvjx WC78WNPT7cbqvC/YZ0981EIX/R9RanNPGwb1OsPLO/B3zoO/23VyIUy9ZPUNAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU1Mz/oHDMc1BIGeeFOorETC9nm/4wHwYDVR0j BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2 OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAAtwAAAw DQYJKoZIhvcNAQELBQADggEBAIt8qLIgYirzW9jRKFm8qsKLboEJdalF5w/c6CTE /LOtAfjiz+8LCATdtYfxzLu5bnoxx9PHsVAhV5T8Un91YDfFAGfjoyHqvsY7H176 AGoLy1wAK9t7Z2aI6Tg1TziiF/NO8StPL4ZNT8EN+VPIgXE+Eu3/yvFTfxRtuPTd cDAMccgIQMnNZVyN+Hk4zWArl3ugP43DNui71o+V0fcA0BiGW/VeBelkE7wxVC20 Ha6uMIJScUBfLrqJU4Tk+EaYICV5+GKLGz7oMMQc341K37RcjJJ1gSzxCjVsLGDm hRxgC/h40bdpQyHyQhq9iR+BODdx/XqkcZTkVSUb+F9rc5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:06 2025 by rpki-client