$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/323830333a343135303a3a2f33322d3438203d3e20323733323338.roa File: 323830333a343135303a3a2f33322d3438203d3e20323733323338.roa (raw, json) Hash identifier: ikoP1o5smtMx7htqRl/llRo26+5+rt2xqpjcl2VHCPI= Subject key identifier: D0:6A:C8:13:2E:8D:FC:04:E1:BC:A9:95:49:25:FF:43:1D:E0:5D:66 Certificate issuer: /CN=65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2 Certificate serial: 455435AAF6DCE2D3C04AD9C1A867FD4871A867ED Authority key identifier: 65:A9:D2:C8:E6:CC:9D:D1:9E:3E:D9:97:0A:5C:11:8D:A8:74:B0:E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/323830333a343135303a3a2f33322d3438203d3e20323733323338.roa Signing time: Wed 05 Nov 2025 16:50:00 +0000 ROA not before: Wed 05 Nov 2025 16:45:00 +0000 ROA not after: Wed 04 Nov 2026 16:50:00 +0000 asID: 273238 IP address blocks: 2803:4150::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:54:35:aa:f6:dc:e2:d3:c0:4a:d9:c1:a8:67:fd:48:71:a8:67:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2 Validity Not Before: Nov 5 16:45:00 2025 GMT Not After : Nov 4 16:50:00 2026 GMT Subject: CN=D06AC8132E8DFC04E1BCA9954925FF431DE05D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6c:d9:11:b0:d4:5a:b1:59:e3:25:0d:d2:6f: d7:94:9e:65:b9:b2:78:fe:a3:f7:51:95:01:1c:b3: 05:72:26:2d:06:b1:14:ce:63:c7:9a:42:92:99:53: 9c:83:13:ba:23:1e:2c:01:7e:7d:cc:7a:fb:18:02: 12:91:1e:4b:f7:b9:60:b6:f3:a8:42:fc:96:24:af: 66:9c:91:2f:af:d4:be:f7:34:b0:24:d3:39:03:9c: 41:40:34:61:53:ac:65:a8:41:bc:38:bc:40:c5:3f: d5:1c:35:19:76:1d:44:28:7c:f9:d3:06:17:3d:78: 40:eb:e1:d8:29:64:f1:7f:99:71:ab:15:51:9d:1d: 0d:54:52:92:84:8f:81:53:46:cd:ea:7a:a4:60:4d: f7:ca:66:22:a0:c7:f6:c3:2c:5a:dd:d8:42:95:c8: e2:06:65:26:54:17:fd:11:52:90:59:04:97:3d:ea: 88:2e:15:a4:0e:e7:a2:a4:f3:e8:10:91:45:59:ec: b5:0f:d3:b6:9e:ef:a8:83:0d:e1:0d:91:45:62:0e: a4:dc:c8:ab:af:46:a9:ba:f3:12:37:45:7d:f2:fa: e1:eb:dd:e7:aa:03:3f:2c:e5:40:70:a6:21:c9:29: e2:b7:4a:e6:89:87:e3:de:b3:66:6e:bd:6e:d6:ab: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6A:C8:13:2E:8D:FC:04:E1:BC:A9:95:49:25:FF:43:1D:E0:5D:66 X509v3 Authority Key Identifier: keyid:65:A9:D2:C8:E6:CC:9D:D1:9E:3E:D9:97:0A:5C:11:8D:A8:74:B0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65A9D2C8E6CC9DD19E3ED9970A5C118DA874B0E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A86873253547DD2BCEAF8F5714096287CDB8828D308A5A4325E3416204E4AF/0/323830333a343135303a3a2f33322d3438203d3e20323733323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4150::/32 Signature Algorithm: sha256WithRSAEncryption bb:50:a1:19:98:7c:8c:10:54:09:00:4a:9d:78:b7:3f:72:58: 46:0f:44:be:14:56:95:2b:e6:00:d6:f5:af:29:a9:6a:90:cc: 79:8d:5c:ea:0d:a8:43:fe:e2:5d:49:08:e0:be:01:6b:79:1b: 00:02:7c:10:23:d5:69:cf:f7:0f:d9:50:27:a5:1b:13:8b:81: e5:90:8b:57:58:53:8f:35:42:a4:14:b8:e6:2c:2c:9f:b5:c6: b2:f0:fd:ab:41:95:e1:1d:93:cc:70:8d:55:b5:c0:72:5e:65: de:12:36:55:11:55:7d:83:54:4f:7b:f3:ce:a6:d0:4e:95:69: 2e:97:ea:04:62:f4:99:9f:23:b2:df:10:b0:fc:2e:ad:e9:c9: 47:bd:37:02:c3:98:01:b4:13:6b:ec:4f:65:1f:aa:ff:86:c4: e8:eb:d1:9b:25:4e:53:d9:61:88:d1:47:2b:71:c8:78:a8:ed: c5:7b:00:87:4c:6c:9c:83:74:0d:dc:3f:63:91:84:2f:e2:25: ab:eb:1b:3a:e2:eb:d4:54:c8:1b:df:e3:72:8c:d0:9d:ad:d0: 0a:db:f5:50:8c:f2:a4:50:39:94:15:3a:a3:54:fc:27:26:9d: b6:22:4f:42:de:e9:28:2f:08:30:aa:5f:c9:9a:59:2a:27:67: 1a:3b:53:20 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIURVQ1qvbc4tPAStnBqGf9SHGoZ+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBOUQyQzhFNkNDOUREMTlFM0VEOTk3MEE1QzExOERB ODc0QjBFMjAeFw0yNTExMDUxNjQ1MDBaFw0yNjExMDQxNjUwMDBaMDMxMTAvBgNV BAMTKEQwNkFDODEzMkU4REZDMDRFMUJDQTk5NTQ5MjVGRjQzMURFMDVENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHbNkRsNRasVnjJQ3Sb9eUnmW5 snj+o/dRlQEcswVyJi0GsRTOY8eaQpKZU5yDE7ojHiwBfn3MevsYAhKRHkv3uWC2 86hC/JYkr2ackS+v1L73NLAk0zkDnEFANGFTrGWoQbw4vEDFP9UcNRl2HUQofPnT Bhc9eEDr4dgpZPF/mXGrFVGdHQ1UUpKEj4FTRs3qeqRgTffKZiKgx/bDLFrd2EKV yOIGZSZUF/0RUpBZBJc96oguFaQO56Kk8+gQkUVZ7LUP07ae76iDDeENkUViDqTc yKuvRqm68xI3RX3y+uHr3eeqAz8s5UBwpiHJKeK3SuaJh+Pes2ZuvW7WqxDbAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQU0GrIEy6N/AThvKmVSSX/Qx3gXWYwHwYDVR0j BBgwFoAUZanSyObMndGePtmXClwRjah0sOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NUE4Njg3MzI1MzU0N0REMkJDRUFGOEY1NzE0MDk2Mjg3 Q0RCODgyOEQzMDhBNUE0MzI1RTM0MTYyMDRFNEFGLzAvNjVBOUQyQzhFNkNDOURE MTlFM0VEOTk3MEE1QzExOERBODc0QjBFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUE5RDJDOEU2Q0M5REQxOUUz RUQ5OTcwQTVDMTE4REE4NzRCMEUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjVBODY4NzMyNTM1NDdERDJCQ0VBRjhGNTcxNDA5NjI4N0NEQjg4MjhE MzA4QTVBNDMyNUUzNDE2MjA0RTRBRi8wLzMyMzgzMDMzM2EzNDMxMzUzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMyMzMzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDQVAw DQYJKoZIhvcNAQELBQADggEBALtQoRmYfIwQVAkASp14tz9yWEYPRL4UVpUr5gDW 9a8pqWqQzHmNXOoNqEP+4l1JCOC+AWt5GwACfBAj1WnP9w/ZUCelGxOLgeWQi1dY U481QqQUuOYsLJ+1xrLw/atBleEdk8xwjVW1wHJeZd4SNlURVX2DVE97886m0E6V aS6X6gRi9JmfI7LfELD8Lq3pyUe9NwLDmAG0E2vsT2Ufqv+GxOjr0ZslTlPZYYjR RytxyHio7cV7AIdMbJyDdA3cP2ORhC/iJavrGzri69RUyBvf43KM0J2t0Arb9VCM 8qRQOZQVOqNU/CcmnbYiT0Le6SgvCDCqX8maWSonZxo7UyA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:56:55 2025 by rpki-client