$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa File: 323830303a6264303a3a2f33322d3332203d3e20323639373530.roa (raw, json) Hash identifier: qhbwBZk9vlgCg+3+LKKtZAbyHyHvM9g+PWDyKgdskwA= Subject key identifier: EE:04:72:23:D4:79:91:60:BB:81:A9:ED:10:AD:50:A3:18:96:1C:67 Certificate issuer: /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5 Certificate serial: 57ED8608166A8D3E5A7C29506AB36997E252191A Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa Signing time: Tue 04 Feb 2025 18:49:17 +0000 ROA not before: Tue 04 Feb 2025 18:44:17 +0000 ROA not after: Tue 03 Feb 2026 18:49:17 +0000 asID: 269750 IP address blocks: 2800:bd0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ed:86:08:16:6a:8d:3e:5a:7c:29:50:6a:b3:69:97:e2:52:19:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5 Validity Not Before: Feb 4 18:44:17 2025 GMT Not After : Feb 3 18:49:17 2026 GMT Subject: CN=EE047223D4799160BB81A9ED10AD50A318961C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:a1:24:c6:bc:72:d9:e9:3a:64:07:08:2d: 85:63:b3:7a:84:0f:26:7e:73:35:af:71:7e:42:6f: 68:6a:2e:8b:4f:83:cd:b7:d7:6d:84:23:c6:02:24: 54:c1:ed:7c:3f:76:07:f0:3f:b2:91:27:8d:23:79: 29:69:85:65:7c:41:7a:b9:42:44:ff:b1:d0:d8:30: a7:b5:2b:8f:60:ae:a2:44:58:0d:1c:f1:38:1d:87: 63:16:1e:53:0e:25:8d:59:8a:f7:92:76:d2:ba:49: 8d:40:73:10:42:28:0c:ba:40:8c:98:6a:3c:80:d3: 46:fc:1d:b4:f8:cf:1f:2e:e9:21:a8:93:78:9f:29: 41:ca:97:48:84:0b:63:c7:b2:cb:8a:ac:91:bd:1b: 4a:09:e1:b5:99:3f:1e:5c:f7:99:23:da:b7:21:50: b8:bf:9f:75:e2:ca:87:e1:16:b4:f3:46:16:a6:ed: 9a:0b:25:c3:0b:96:8c:73:bd:6e:3c:23:f4:bb:64: c8:d4:fe:72:93:10:5b:09:5c:60:a4:ce:dc:62:f4: ae:fe:6e:00:b6:a6:4c:4d:95:7a:f1:68:5d:a6:8c: a3:e9:3d:22:03:3e:7d:b8:f8:38:fc:3c:a3:9f:3d: 5e:1a:da:7b:05:6a:4d:e6:f7:d0:71:1c:01:2c:59: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:04:72:23:D4:79:91:60:BB:81:A9:ED:10:AD:50:A3:18:96:1C:67 X509v3 Authority Key Identifier: keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/323830303a6264303a3a2f33322d3332203d3e20323639373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:bd0::/32 Signature Algorithm: sha256WithRSAEncryption 23:af:77:f1:4d:35:68:62:7d:d5:aa:a8:57:f6:a5:a6:8d:a6: 9a:af:ce:58:bf:f2:d6:70:dd:ba:39:1e:17:ec:66:0a:10:d4: 85:4e:27:4b:21:c7:55:db:8e:f5:90:b1:16:3e:a4:a6:57:a5: 70:20:36:42:0f:59:f6:91:af:4c:23:a3:b0:ec:b4:b3:48:45: 18:f7:97:7b:c3:f6:d9:26:85:42:a0:bb:ba:a3:dd:5a:09:58: ef:f4:04:1a:44:4d:fc:9a:26:bd:04:09:2c:3c:e5:f0:9a:71: e8:0d:f5:91:88:12:4f:2f:cc:16:a6:64:16:fd:6b:ff:19:4f: 25:f3:b3:2d:2c:0d:63:76:42:31:97:6d:06:d7:52:27:e3:e1: 25:8e:8d:97:38:48:31:1e:6d:b9:ac:65:51:f0:ec:64:de:02: b5:d5:94:14:44:82:23:73:61:4d:37:11:79:10:26:f2:e1:34: 89:a6:6c:30:97:7a:bf:20:78:f7:71:a5:b3:e2:e9:d5:15:31: ee:e9:18:3b:8a:55:6d:31:92:ad:ed:76:4d:65:29:24:ee:fe: ac:3b:14:51:61:c0:d3:e0:d2:8e:d5:a1:13:14:f1:33:30:f2: f3:5e:4c:eb:79:b0:a8:61:9d:d6:3d:51:d7:1f:18:0a:99:07: ec:ee:08:a6 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUV+2GCBZqjT5afClQarNpl+JSGRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThDNkIyRUU1ODIw RkFCMDRDNTAeFw0yNTAyMDQxODQ0MTdaFw0yNjAyMDMxODQ5MTdaMDMxMTAvBgNV BAMTKEVFMDQ3MjIzRDQ3OTkxNjBCQjgxQTlFRDEwQUQ1MEEzMTg5NjFDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzqEkxrxy2ek6ZAcILYVjs3qE DyZ+czWvcX5Cb2hqLotPg823122EI8YCJFTB7Xw/dgfwP7KRJ40jeSlphWV8QXq5 QkT/sdDYMKe1K49grqJEWA0c8Tgdh2MWHlMOJY1ZiveSdtK6SY1AcxBCKAy6QIyY ajyA00b8HbT4zx8u6SGok3ifKUHKl0iEC2PHssuKrJG9G0oJ4bWZPx5c95kj2rch ULi/n3XiyofhFrTzRham7ZoLJcMLloxzvW48I/S7ZMjU/nKTEFsJXGCkztxi9K7+ bgC2pkxNlXrxaF2mjKPpPSIDPn24+Dj8PKOfPV4a2nsFak3m99BxHAEsWcXPAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQU7gRyI9R5kWC7gantEK1QoxiWHGcwHwYDVR0j BBgwFoAUqu+jLpsHfwBF9mqMay7lgg+rBMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1 NjExRUM1MTE1QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0Yw MDQ1RjY2QThDNkIyRUU1ODIwRkFCMDRDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVGQTMyRTlCMDc3RjAwNDVG NjZBOEM2QjJFRTU4MjBGQUIwNEM1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNGNEY0MDc5QjhBNTYxMUVDNTEx NUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wLzMyMzgzMDMwM2E2MjY0MzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzkzNzM1MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAAvQMA0G CSqGSIb3DQEBCwUAA4IBAQAjr3fxTTVoYn3VqqhX9qWmjaaar85Yv/LWcN26OR4X 7GYKENSFTidLIcdV2471kLEWPqSmV6VwIDZCD1n2ka9MI6Ow7LSzSEUY95d7w/bZ JoVCoLu6o91aCVjv9AQaRE38mia9BAksPOXwmnHoDfWRiBJPL8wWpmQW/Wv/GU8l 87MtLA1jdkIxl20G11In4+Eljo2XOEgxHm25rGVR8Oxk3gK11ZQURIIjc2FNNxF5 ECby4TSJpmwwl3q/IHj3caWz4unVFTHu6Rg7ilVtMZKt7XZNZSkk7v6sOxRRYcDT 4NKO1aETFPEzMPLzXkzrebCoYZ3WPVHXHxgKmQfs7gim -----END CERTIFICATE-----Generated at Wed Nov 5 22:17:10 2025 by rpki-client