$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa File: 323830303a3863303a3a2f33322d3332203d3e203138383430.roa (raw, json) Hash identifier: +ZZUEk1wGoKD5v4TDf++5VjMeR9QZx+aQ13Srb25Q+w= Subject key identifier: 75:D3:9F:14:E7:58:9A:8C:2E:78:0E:95:45:9D:55:DD:EC:87:36:C3 Certificate issuer: /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0 Certificate serial: 76C39BBC2998BEF3F8E1698135DE03CAD34F58B8 Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa Signing time: Tue 04 Feb 2025 18:31:47 +0000 ROA not before: Tue 04 Feb 2025 18:26:47 +0000 ROA not after: Tue 03 Feb 2026 18:31:47 +0000 asID: 18840 IP address blocks: 2800:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c3:9b:bc:29:98:be:f3:f8:e1:69:81:35:de:03:ca:d3:4f:58:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0 Validity Not Before: Feb 4 18:26:47 2025 GMT Not After : Feb 3 18:31:47 2026 GMT Subject: CN=75D39F14E7589A8C2E780E95459D55DDEC8736C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:d0:eb:11:f9:63:bb:44:ef:06:be:9c:09: 26:1a:46:7f:ef:81:f9:21:52:e9:a3:c1:c2:93:8b: ed:9c:ad:84:41:f0:eb:30:5e:41:2c:11:f3:79:7f: 56:38:56:69:85:fc:61:db:d9:de:79:aa:d6:8a:74: c2:2b:88:69:70:8d:78:d5:8b:09:68:e0:52:e4:9d: d9:12:b0:3e:3a:15:5e:af:c6:41:c5:00:d2:77:ae: 79:a6:0a:b9:9f:13:94:fc:75:a3:e7:44:05:9d:73: db:b0:da:84:99:be:aa:62:89:cd:2d:05:ec:ef:d3: 0e:42:fd:1b:2c:f2:b9:f2:bf:5b:35:ef:6e:68:6f: d4:45:53:57:d3:b7:bb:19:33:44:b7:47:ce:eb:28: b5:de:10:cb:fb:8d:fb:71:db:a6:b0:89:e4:68:e8: 04:4d:78:24:67:aa:67:ab:41:de:ff:51:ab:7d:60: 1b:0e:d3:cf:29:4e:79:77:79:45:bb:60:b7:20:68: 9d:98:8a:b1:c0:61:4a:5d:f7:bc:6a:f4:5b:ea:b7: f9:a1:63:66:56:bf:2e:05:da:4e:75:d2:9f:72:a8: 9f:fe:04:0a:77:d4:c9:9a:bd:66:54:53:42:b7:18: d6:97:4b:27:49:df:04:c7:bb:33:4b:be:42:54:0e: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D3:9F:14:E7:58:9A:8C:2E:78:0E:95:45:9D:55:DD:EC:87:36:C3 X509v3 Authority Key Identifier: keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/323830303a3863303a3a2f33322d3332203d3e203138383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 39:f3:bb:70:fe:3c:77:f9:a0:f4:b1:83:ed:0f:15:37:3a:a2: c1:6a:77:dd:a9:45:4e:7d:41:e7:2b:e1:b1:1b:a2:06:3e:69: 09:d2:b0:dc:22:08:09:37:c9:aa:db:27:fa:4b:ff:a5:03:84: 8b:83:f0:05:8e:1f:77:f0:f4:9a:ff:17:2a:ad:0f:b5:0c:d2: 21:b7:87:ac:cb:b7:14:31:29:2f:d4:3b:0c:68:b7:8d:56:5d: 74:29:63:54:0d:dc:3b:30:c6:26:3a:d8:ea:44:f7:25:81:35: 0a:1a:ff:df:46:85:6c:f2:9d:06:b0:81:e3:79:f0:cc:10:ca: 08:2a:d5:54:e3:74:d7:90:d2:fe:c9:dd:54:5c:92:29:e2:34: 8a:de:26:19:6b:e0:55:18:bf:92:e9:e4:68:f2:7e:bf:aa:dd: 02:24:ab:a3:82:dd:61:d1:fe:06:2b:a3:48:c1:6e:d7:70:25: c5:03:7f:5f:36:c4:b8:3d:a5:7f:45:e8:ff:9b:e5:49:9f:cd: 11:54:54:b6:32:cc:69:96:7c:84:17:0a:74:5c:99:03:d6:de: e7:d9:07:4a:4b:1b:29:9b:65:41:c5:56:d6:1b:5f:6d:39:52: 52:72:e2:dc:89:05:9c:e0:93:bb:53:ad:df:81:7d:23:30:9a: 20:41:96:39 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUdsObvCmYvvP44WmBNd4DytNPWLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM4Q0UyQTE3RDgwMUJCNUM3NzBFNkVCNkFCM0REREJG NzYyNThDMDAeFw0yNTAyMDQxODI2NDdaFw0yNjAyMDMxODMxNDdaMDMxMTAvBgNV BAMTKDc1RDM5RjE0RTc1ODlBOEMyRTc4MEU5NTQ1OUQ1NURERUM4NzM2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCStNDrEflju0TvBr6cCSYaRn/v gfkhUumjwcKTi+2crYRB8OswXkEsEfN5f1Y4VmmF/GHb2d55qtaKdMIriGlwjXjV iwlo4FLkndkSsD46FV6vxkHFANJ3rnmmCrmfE5T8daPnRAWdc9uw2oSZvqpiic0t Bezv0w5C/Rss8rnyv1s1725ob9RFU1fTt7sZM0S3R87rKLXeEMv7jftx26awieRo 6ARNeCRnqmerQd7/Uat9YBsO088pTnl3eUW7YLcgaJ2YirHAYUpd97xq9Fvqt/mh Y2ZWvy4F2k510p9yqJ/+BAp31MmavWZUU0K3GNaXSydJ3wTHuzNLvkJUDv4PAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUddOfFOdYmowueA6VRZ1V3eyHNsMwHwYDVR0j BBgwFoAUDIzioX2AG7XHcObrarPd2/diWMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QkRENzJGMDAyOTNDNkQ3M0IxQTRFMzk4OTlEMjVEQ0Ez QzMyOTVERkIyMDA0Qjc5NzlFNDYyM0U0MDQ2OUFGLzAvMEM4Q0UyQTE3RDgwMUJC NUM3NzBFNkVCNkFCM0REREJGNzYyNThDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzhDRTJBMTdEODAxQkI1Qzc3 MEU2RUI2QUIzREREQkY3NjI1OEMwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUJERDcyRjAwMjkzQzZENzNCMUE0RTM5ODk5RDI1RENBM0MzMjk1REZC MjAwNEI3OTc5RTQ2MjNFNDA0NjlBRi8wLzMyMzgzMDMwM2EzODYzMzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMTM4MzgzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAIwDANBgkq hkiG9w0BAQsFAAOCAQEAOfO7cP48d/mg9LGD7Q8VNzqiwWp33alFTn1B5yvhsRui Bj5pCdKw3CIICTfJqtsn+kv/pQOEi4PwBY4fd/D0mv8XKq0PtQzSIbeHrMu3FDEp L9Q7DGi3jVZddCljVA3cOzDGJjrY6kT3JYE1Chr/30aFbPKdBrCB43nwzBDKCCrV VON015DS/sndVFySKeI0it4mGWvgVRi/kunkaPJ+v6rdAiSro4LdYdH+BiujSMFu 13AlxQN/XzbEuD2lf0Xo/5vlSZ/NEVRUtjLMaZZ8hBcKdFyZA9be59kHSksbKZtl QcVW1htfbTlSUnLi3IkFnOCTu1Ot34F9IzCaIEGWOQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:59 2025 by rpki-client