$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa File: 323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa (raw, json) Hash identifier: 159l4jbNPECj3mTXdns3yI4dyHoTEDm/MVQ7lr1KbKE= Subject key identifier: 8E:B6:14:C7:28:80:DA:60:34:C4:F1:7C:11:F0:4A:2D:B6:4D:AE:04 Certificate issuer: /CN=67695A57A246E7FEEC5E99692566E43D7F039663 Certificate serial: 5DB48EC433B9C1B83F549E492B5F8719CE39DF18 Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa Signing time: Fri 17 Apr 2026 15:39:15 +0000 ROA not before: Fri 17 Apr 2026 15:34:15 +0000 ROA not after: Fri 16 Apr 2027 15:39:15 +0000 asID: 266683 IP address blocks: 2803:c520:990::/44 maxlen: 44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b4:8e:c4:33:b9:c1:b8:3f:54:9e:49:2b:5f:87:19:ce:39:df:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663 Validity Not Before: Apr 17 15:34:15 2026 GMT Not After : Apr 16 15:39:15 2027 GMT Subject: CN=8EB614C72880DA6034C4F17C11F04A2DB64DAE04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:eb:f6:28:9e:a6:80:97:f9:57:8f:1a:4c: f7:46:ac:e6:88:c5:9b:bc:f1:ae:be:69:aa:34:af: 75:1e:5d:59:80:a5:38:54:a5:09:03:0b:8a:87:49: 3c:a1:7d:d1:c5:ac:cf:65:8c:c2:92:aa:26:e3:00: 3c:43:d3:7d:e2:1d:93:a4:d5:bf:58:a2:f4:9d:d0: e3:a6:0d:0d:56:e1:18:74:be:a2:bf:89:28:bd:1f: fe:77:a1:f6:09:69:c4:ab:5f:09:36:ee:3e:5b:3a: 91:ca:e0:06:52:a8:bf:58:31:0e:5b:42:6c:ca:90: 68:38:46:88:55:f4:ab:0a:a6:1b:10:2a:d0:9d:1b: f9:c8:04:02:d8:58:44:0d:2c:bd:34:36:4f:6b:e6: 4d:40:42:d3:98:b5:a4:9b:52:fa:1d:78:67:9d:f0: ec:b9:34:c6:90:66:70:c7:70:0c:29:00:00:1d:04: 21:4c:c7:34:3d:ec:22:bd:f8:ef:e3:20:e2:ff:80: e9:6a:b7:ce:ef:4c:1e:e7:b0:f5:ae:30:36:c4:66: 9e:f9:94:8a:90:cb:72:be:03:08:a7:0a:3d:50:d8: 68:e3:d5:f4:4f:27:7c:34:66:57:92:87:db:25:18: 41:5f:51:b2:19:b0:dd:ff:7e:f4:97:38:16:b0:d0: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:14:C7:28:80:DA:60:34:C4:F1:7C:11:F0:4A:2D:B6:4D:AE:04 X509v3 Authority Key Identifier: keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3939303a3a2f34342d3434203d3e20323636363833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c520:990::/44 Signature Algorithm: sha256WithRSAEncryption 47:09:af:1f:87:bd:3c:36:63:5a:19:55:59:b9:ca:43:cc:71: d9:23:e8:01:6e:7a:a5:20:3f:11:a7:cb:1e:ab:e1:68:af:1a: 24:25:9f:e5:56:e6:b7:39:15:97:4e:c0:02:32:95:79:89:27: d7:94:8d:b3:34:ac:1b:f8:22:b0:8e:77:08:2f:48:3c:bf:e3: 9c:ae:db:10:e4:62:4b:3d:a9:72:29:33:57:37:95:12:59:bc: c0:4a:4d:9d:86:c0:80:0f:7e:6b:b1:c8:62:c2:cb:f5:53:b5: 9b:ee:f0:9f:73:0a:fe:16:5c:3c:33:ee:f9:19:9e:ee:ba:e0: bd:81:23:c4:2e:30:f1:66:59:27:d4:2d:f6:88:7c:2e:e7:3b: 2a:c9:84:5f:28:ea:7a:d9:99:91:57:99:9b:9e:d9:b8:ab:93: 75:77:8e:a6:80:cb:17:ab:0c:d2:c1:7f:09:f3:16:04:5d:91: 38:90:8a:38:e0:07:b4:42:94:26:09:07:f5:6f:89:6b:c8:7d: 07:70:20:f1:dc:39:7e:26:ab:f5:a8:ed:b0:d1:29:73:53:11: 98:e9:5b:55:59:18:fb:b8:12:31:cf:94:a7:34:57:e4:86:27: f4:0d:a4:2c:26:4b:40:8a:68:da:44:97:32:1d:0f:00:5c:c9: d4:d0:57:05 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXbSOxDO5wbg/VJ5JK1+HGc453xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2OTVBNTdBMjQ2RTdGRUVDNUU5OTY5MjU2NkU0M0Q3 RjAzOTY2MzAeFw0yNjA0MTcxNTM0MTVaFw0yNzA0MTYxNTM5MTVaMDMxMTAvBgNV BAMTKDhFQjYxNEM3Mjg4MERBNjAzNEM0RjE3QzExRjA0QTJEQjY0REFFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3uv2KJ6mgJf5V48aTPdGrOaI xZu88a6+aao0r3UeXVmApThUpQkDC4qHSTyhfdHFrM9ljMKSqibjADxD033iHZOk 1b9YovSd0OOmDQ1W4Rh0vqK/iSi9H/53ofYJacSrXwk27j5bOpHK4AZSqL9YMQ5b QmzKkGg4RohV9KsKphsQKtCdG/nIBALYWEQNLL00Nk9r5k1AQtOYtaSbUvodeGed 8Oy5NMaQZnDHcAwpAAAdBCFMxzQ97CK9+O/jIOL/gOlqt87vTB7nsPWuMDbEZp75 lIqQy3K+AwinCj1Q2Gjj1fRPJ3w0ZleSh9slGEFfUbIZsN3/fvSXOBaw0IQtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjrYUxyiA2mA0xPF8EfBKLbZNrgQwHwYDVR0j BBgwFoAUZ2laV6JG5/7sXplpJWbkPX8DlmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTdEMjI3NzBFQTQ3ODU0NDY1NTk1OUU2NUIwREFENkEz OTgzNTdGQTY3MzA5QTc2NEFBRDcxQTREMzk0MUEyLzAvNjc2OTVBNTdBMjQ2RTdG RUVDNUU5OTY5MjU2NkU0M0Q3RjAzOTY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzY5NUE1N0EyNDZFN0ZFRUM1 RTk5NjkyNTY2RTQzRDdGMDM5NjYzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDE3RDIyNzcwRUE0Nzg1NDQ2NTU5NTlFNjVCMERBRDZBMzk4MzU3RkE2 NzMwOUE3NjRBQUQ3MUE0RDM5NDFBMi8wLzMyMzgzMDMzM2E2MzM1MzIzMDNhMzkz OTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNjM2MzYzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEKAPFIAmQMA0GCSqGSIb3DQEBCwUAA4IBAQBHCa8fh708NmNaGVVZucpDzHHZ I+gBbnqlID8Rp8seq+ForxokJZ/lVua3ORWXTsACMpV5iSfXlI2zNKwb+CKwjncI L0g8v+OcrtsQ5GJLPalyKTNXN5USWbzASk2dhsCAD35rschiwsv1U7Wb7vCfcwr+ Flw8M+75GZ7uuuC9gSPELjDxZlkn1C32iHwu5zsqyYRfKOp62ZmRV5mbntm4q5N1 d46mgMsXqwzSwX8J8xYEXZE4kIo44Ae0QpQmCQf1b4lryH0HcCDx3Dl+Jqv1qO2w 0SlzUxGY6VtVWRj7uBIxz5SnNFfkhif0DaQsJktAimjaRJcyHQ8AXMnU0FcF -----END CERTIFICATE-----Generated at Sat Apr 18 03:38:08 2026 by rpki-client