$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/323830333a623230303a3a2f33322d3438203d3e203532333636.roa File: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (raw, json) Hash identifier: XKA1MlyxnJrXu8kNyuF9oL4/BFd9LVJobp86M1utvUE= Subject key identifier: 35:77:53:0A:28:E9:AA:03:2F:16:E6:1B:04:AD:FC:59:EA:6E:05:23 Certificate issuer: /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B Certificate serial: 4A3982221ED49EEFB2881EA9432965A12D0EF421 Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/323830333a623230303a3a2f33322d3438203d3e203532333636.roa Signing time: Tue 04 Feb 2025 18:47:49 +0000 ROA not before: Tue 04 Feb 2025 18:42:49 +0000 ROA not after: Tue 03 Feb 2026 18:47:49 +0000 asID: 52366 IP address blocks: 2803:b200::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 19:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:39:82:22:1e:d4:9e:ef:b2:88:1e:a9:43:29:65:a1:2d:0e:f4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B Validity Not Before: Feb 4 18:42:49 2025 GMT Not After : Feb 3 18:47:49 2026 GMT Subject: CN=3577530A28E9AA032F16E61B04ADFC59EA6E0523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:7b:1f:e7:de:ef:87:28:58:ef:0d:a4:52: bc:df:a2:74:61:b1:14:f4:70:01:b9:b2:6c:e4:b8: 99:55:59:4a:ff:5a:20:90:8f:d5:e5:8b:54:08:5a: 08:91:70:64:18:4d:a7:9e:1d:2e:c7:b1:ce:ca:4e: 2b:ff:8d:13:ee:69:c6:98:23:b8:b5:12:9d:24:39: 22:48:7c:a6:2d:c2:db:dc:56:70:d6:d2:b9:57:9a: c9:d8:9c:3a:5d:c5:98:a4:52:36:61:7a:a7:4b:cb: f8:e7:bc:fa:93:fb:10:e7:ae:81:e4:09:36:7a:c8: 25:8c:b4:78:a5:2b:bc:1f:5e:89:fc:f6:b8:6f:d9: ab:f4:5f:5e:7c:1e:45:65:a4:6d:00:e5:92:28:42: 9e:aa:a0:e5:d9:38:bb:47:f6:80:ea:34:cd:02:4c: 3a:7a:aa:60:b0:2c:d0:6d:fc:94:86:72:06:e1:0f: e7:8c:54:61:01:98:3b:d7:ec:52:e7:fa:8b:ad:65: 91:87:52:ab:19:b9:2b:de:e5:eb:b8:73:40:92:20: fa:07:64:ed:e7:13:27:b7:24:0e:bf:9d:1e:4b:4b: 34:5f:c5:42:31:a1:78:aa:24:a8:e5:3d:fb:ab:bb: ba:8e:7a:a0:71:6b:62:35:43:cd:57:50:a1:02:3f: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:53:0A:28:E9:AA:03:2F:16:E6:1B:04:AD:FC:59:EA:6E:05:23 X509v3 Authority Key Identifier: keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/323830333a623230303a3a2f33322d3438203d3e203532333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b200::/32 Signature Algorithm: sha256WithRSAEncryption 11:0d:14:fe:2b:c5:1d:18:a5:0f:44:ad:08:51:c6:fc:3b:68: c0:98:2c:40:d4:87:17:68:0d:a9:0a:3f:12:cd:72:d9:ee:49: 3d:1d:2a:a1:a8:8d:28:d6:bf:09:29:97:16:e6:af:22:6f:b4: 9c:89:2e:2d:5a:0a:7a:a6:96:91:ba:f0:53:fa:c7:1a:ec:32: b5:5a:b5:c1:c1:67:86:be:29:0d:06:37:65:16:8a:47:65:99: fb:f1:e4:37:88:36:6f:d1:e9:27:bb:ff:d6:c7:43:c5:c6:f8: 8d:23:26:81:97:58:3f:f6:57:84:81:6b:c1:11:06:e7:6f:02: 6a:72:55:6c:91:8a:ca:da:d6:db:b0:ae:41:51:67:91:e5:14: cd:fd:ed:5d:ba:28:b3:34:13:ef:38:34:3b:38:31:6b:22:41: 55:bd:eb:fa:07:f2:b8:db:25:5a:2e:90:62:b8:57:6d:69:65: cd:04:c5:a2:a7:d6:81:a0:17:3f:2b:19:45:eb:d0:5a:b7:a3: ff:d8:05:8e:ac:78:d2:75:8b:7b:47:c9:3f:cc:90:7b:cb:68: 56:11:57:0f:d6:c9:61:32:39:fe:6b:ff:d9:f0:e9:bc:33:3d: ce:f6:33:01:59:6a:68:19:1f:dd:b5:6b:fa:a2:b5:ff:ff:00: 99:72:3e:ed -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUSjmCIh7Unu+yiB6pQylloS0O9CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBNDg2RjRFOEUzMkVCQjdDQTMyQTI1QTlFRkUxMDdF RjVGQjI1QjAeFw0yNTAyMDQxODQyNDlaFw0yNjAyMDMxODQ3NDlaMDMxMTAvBgNV BAMTKDM1Nzc1MzBBMjhFOUFBMDMyRjE2RTYxQjA0QURGQzU5RUE2RTA1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZR3sf597vhyhY7w2kUrzfonRh sRT0cAG5smzkuJlVWUr/WiCQj9Xli1QIWgiRcGQYTaeeHS7Hsc7KTiv/jRPuacaY I7i1Ep0kOSJIfKYtwtvcVnDW0rlXmsnYnDpdxZikUjZheqdLy/jnvPqT+xDnroHk CTZ6yCWMtHilK7wfXon89rhv2av0X158HkVlpG0A5ZIoQp6qoOXZOLtH9oDqNM0C TDp6qmCwLNBt/JSGcgbhD+eMVGEBmDvX7FLn+outZZGHUqsZuSve5eu4c0CSIPoH ZO3nEye3JA6/nR5LSzRfxUIxoXiqJKjlPfuru7qOeqBxa2I1Q81XUKECP3ljAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUNXdTCijpqgMvFuYbBK38WepuBSMwHwYDVR0j BBgwFoAU16SG9OjjLrt8oyolqe/hB+9fslswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjUwRDU5QzE0RDI4MjQxOUMxRkZDNkQ1MzRBRDBCNDYw MDY5ODA3NzIzNTVBMjFENTg3MTAyNUY4MkM5ODgzLzAvRDdBNDg2RjRFOEUzMkVC QjdDQTMyQTI1QTlFRkUxMDdFRjVGQjI1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0E0ODZGNEU4RTMyRUJCN0NB MzJBMjVBOUVGRTEwN0VGNUZCMjVCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzY1MEQ1OUMxNEQyODI0MTlDMUZGQzZENTM0QUQwQjQ2MDA2OTgwNzcy MzU1QTIxRDU4NzEwMjVGODJDOTg4My8wLzMyMzgzMDMzM2E2MjMyMzAzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA7IAMA0G CSqGSIb3DQEBCwUAA4IBAQARDRT+K8UdGKUPRK0IUcb8O2jAmCxA1IcXaA2pCj8S zXLZ7kk9HSqhqI0o1r8JKZcW5q8ib7SciS4tWgp6ppaRuvBT+sca7DK1WrXBwWeG vikNBjdlFopHZZn78eQ3iDZv0eknu//Wx0PFxviNIyaBl1g/9leEgWvBEQbnbwJq clVskYrK2tbbsK5BUWeR5RTN/e1duiizNBPvODQ7ODFrIkFVvev6B/K42yVaLpBi uFdtaWXNBMWip9aBoBc/KxlF69Bat6P/2AWOrHjSdYt7R8k/zJB7y2hWEVcP1slh Mjn+a//Z8Om8Mz3O9jMBWWpoGR/dtWv6orX//wCZcj7t -----END CERTIFICATE-----Generated at Wed Nov 5 19:03:33 2025 by rpki-client