$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa File: 323830303a3837303a3a2f33322d3332203d3e2036373632.roa (raw, json) Hash identifier: 5xpVJPTN67M/pp4cnxkXbQk5DQnnbLd8lt9G0/u1iyU= Subject key identifier: B1:42:1A:39:12:3C:3D:77:64:E6:67:32:37:58:80:76:69:E4:9D:BE Certificate issuer: /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D Certificate serial: 5978706D5BF056C5EA3583580A2A62BC21ECFCB9 Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa Signing time: Tue 04 Feb 2025 18:18:21 +0000 ROA not before: Tue 04 Feb 2025 18:13:21 +0000 ROA not after: Tue 03 Feb 2026 18:18:21 +0000 asID: 6762 IP address blocks: 2800:870::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:78:70:6d:5b:f0:56:c5:ea:35:83:58:0a:2a:62:bc:21:ec:fc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D Validity Not Before: Feb 4 18:13:21 2025 GMT Not After : Feb 3 18:18:21 2026 GMT Subject: CN=B1421A39123C3D7764E667323758807669E49DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:05:f2:2e:0e:a6:7f:c6:1a:52:09:de:db: c3:2d:e5:6b:fa:18:b0:09:6d:93:d6:15:be:fc:af: f3:a8:d3:8a:af:0c:dc:de:83:bb:27:fc:9e:74:d1: e1:fb:cd:71:f0:23:55:bd:bb:4d:11:b3:9f:91:62: 92:3a:4e:d1:c3:c5:41:c6:85:d6:cf:45:cb:af:4a: b4:b8:07:68:d2:a5:27:00:7e:e9:31:0b:76:a0:03: 99:aa:c5:69:88:ec:69:de:49:36:9e:54:96:9d:0f: 8d:7f:fe:cb:f6:fc:12:ed:1e:e5:43:d1:e5:4a:4e: 62:e8:1d:0d:0e:89:fd:5c:b2:4c:76:ad:1c:2e:9c: b3:79:ba:6b:31:8d:7a:91:7f:b4:51:0d:cd:c2:bc: 23:70:cb:08:b4:e3:de:c2:74:27:78:34:00:7a:f4: b3:c8:28:dc:bb:3f:c0:e3:39:24:38:02:f5:c4:f2: 7d:ed:62:5a:07:4e:26:d2:e1:e3:5e:8d:f3:aa:dc: e6:88:cc:66:fd:1d:0d:30:b1:c0:f4:f9:cf:f4:86: 9a:03:9c:f5:7d:69:ef:26:cd:c6:d2:df:1e:57:f4: a6:d7:18:18:a1:f8:d2:26:10:ea:41:65:68:92:a3: 05:ce:7b:4d:fd:7c:18:8a:bc:8f:cd:5d:a6:c6:dd: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:42:1A:39:12:3C:3D:77:64:E6:67:32:37:58:80:76:69:E4:9D:BE X509v3 Authority Key Identifier: keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:870::/32 Signature Algorithm: sha256WithRSAEncryption 3e:84:14:24:c3:02:6e:3d:82:d7:0f:21:50:de:ab:ab:62:be: 27:00:bb:b7:2a:c4:86:e7:9e:a3:69:b9:84:eb:f3:d1:6a:7c: 9a:7e:69:2e:69:6d:4e:2d:52:2c:d8:b0:91:cd:5b:5d:47:2d: 04:62:43:cc:f5:d3:40:24:df:89:f7:b3:06:59:c2:88:13:31: 46:4f:58:ef:35:c7:4a:d2:7b:2d:39:14:7b:b4:e6:18:a1:c9: 30:fd:1a:67:0c:70:a9:76:c9:92:e7:c5:f7:f8:b2:6f:cc:f2: 6c:46:69:e0:9f:dc:39:60:24:ef:07:af:75:92:d9:ca:56:75: 66:32:31:44:e7:17:4e:12:ad:46:25:c5:b0:bd:dd:69:3c:64: f8:1a:c1:46:d6:87:e5:41:f5:2f:f0:fe:1a:d1:61:14:39:ba: 1f:6d:60:18:96:1f:88:d6:34:5b:c3:58:ea:83:cd:f8:da:6e: 90:05:db:fc:8e:3d:58:3c:4b:68:aa:35:e7:8d:44:cd:fa:87: b2:99:b6:a8:62:ec:43:56:ea:cd:56:0c:0f:2c:ad:ce:f9:31: 21:b9:f0:96:a1:e6:5a:80:65:e1:a7:5d:94:ff:af:e2:e5:3f: 94:f2:28:24:53:f9:c8:09:e5:07:fa:80:9e:3e:8c:8b:17:74: de:58:29:d1 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUWXhwbVvwVsXqNYNYCipivCHs/LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2NDA2RjJBOURCQjA4QTlFRTNBQzJCNEY3OEVDMjVG MkRGRDcyRDAeFw0yNTAyMDQxODEzMjFaFw0yNjAyMDMxODE4MjFaMDMxMTAvBgNV BAMTKEIxNDIxQTM5MTIzQzNENzc2NEU2NjczMjM3NTg4MDc2NjlFNDlEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFAXyLg6mf8YaUgne28Mt5Wv6 GLAJbZPWFb78r/Oo04qvDNzeg7sn/J500eH7zXHwI1W9u00Rs5+RYpI6TtHDxUHG hdbPRcuvSrS4B2jSpScAfukxC3agA5mqxWmI7GneSTaeVJadD41//sv2/BLtHuVD 0eVKTmLoHQ0Oif1cskx2rRwunLN5umsxjXqRf7RRDc3CvCNwywi0497CdCd4NAB6 9LPIKNy7P8DjOSQ4AvXE8n3tYloHTibS4eNejfOq3OaIzGb9HQ0wscD0+c/0hpoD nPV9ae8mzcbS3x5X9KbXGBih+NImEOpBZWiSowXOe039fBiKvI/NXabG3agvAgMB AAGjggLDMIICvzAdBgNVHQ4EFgQUsUIaORI8PXdk5mcyN1iAdmnknb4wHwYDVR0j BBgwFoAU72QG8qnbsIqe46wrT3jsJfLf1y0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNDkwOUNFMEZERUU3Q0RENjdCQUVBRDdCNzg5QTE4MTQ1 MDY1RjcyRjkzRjFFMTgwNDRCNEExQTQ4NUM2NEExLzAvRUY2NDA2RjJBOURCQjA4 QTlFRTNBQzJCNEY3OEVDMjVGMkRGRDcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjY0MDZGMkE5REJCMDhBOUVF M0FDMkI0Rjc4RUMyNUYyREZENzJELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzQ5MDlDRTBGREVFN0NERDY3QkFFQUQ3Qjc4OUExODE0NTA2NUY3MkY5 M0YxRTE4MDQ0QjRBMUE0ODVDNjRBMS8wLzMyMzgzMDMwM2EzODM3MzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzNjM3MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgACHAwDQYJKoZI hvcNAQELBQADggEBAD6EFCTDAm49gtcPIVDeq6tivicAu7cqxIbnnqNpuYTr89Fq fJp+aS5pbU4tUizYsJHNW11HLQRiQ8z100Ak34n3swZZwogTMUZPWO81x0rSey05 FHu05hihyTD9GmcMcKl2yZLnxff4sm/M8mxGaeCf3DlgJO8Hr3WS2cpWdWYyMUTn F04SrUYlxbC93Wk8ZPgawUbWh+VB9S/w/hrRYRQ5uh9tYBiWH4jWNFvDWOqDzfja bpAF2/yOPVg8S2iqNeeNRM36h7KZtqhi7ENW6s1WDA8src75MSG58Jah5lqAZeGn XZT/r+LlP5TyKCRT+cgJ5Qf6gJ4+jIsXdN5YKdE= -----END CERTIFICATE-----Generated at Tue Nov 4 20:52:53 2025 by rpki-client