$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa File: 323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa (raw, json) Hash identifier: agE0M0lFtQc1VANpkHA6fajhH2henOEPVncqTPZduXg= Subject key identifier: 2E:38:B5:A3:ED:08:6B:F7:30:02:26:FB:8B:59:13:8F:F8:08:0E:A3 Certificate issuer: /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D Certificate serial: 5F5A35D587629F208CC3D553633E2B7EF6C8E3A6 Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa Signing time: Wed 29 Jan 2025 15:30:01 +0000 ROA not before: Wed 29 Jan 2025 15:25:01 +0000 ROA not after: Wed 28 Jan 2026 15:30:01 +0000 asID: 270088 IP address blocks: 2803:bbe0:900::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5a:35:d5:87:62:9f:20:8c:c3:d5:53:63:3e:2b:7e:f6:c8:e3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D Validity Not Before: Jan 29 15:25:01 2025 GMT Not After : Jan 28 15:30:01 2026 GMT Subject: CN=2E38B5A3ED086BF7300226FB8B59138FF8080EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:e7:6d:35:1c:3e:59:03:f2:78:29:8c:2d: 03:ac:85:94:ef:83:1f:00:8c:77:65:ae:2f:c1:78: fd:70:3a:0b:55:f4:6d:ad:ee:37:89:c6:ea:62:29: a3:d0:1d:f5:a3:b6:28:2e:75:61:29:04:28:e7:8a: b1:3e:46:41:37:f6:93:39:37:a6:8c:82:7f:ab:ea: 7e:a6:9c:92:0b:cd:ba:8b:82:01:e4:bd:db:7a:25: b2:91:c1:45:8d:3f:7e:81:62:3f:0e:d0:eb:b7:8c: 34:86:1c:f4:f8:4b:f3:3c:71:64:cb:fa:f4:d0:51: c5:77:df:65:8a:75:06:43:db:be:b2:69:06:31:dd: 39:cd:d6:41:7b:cf:72:c7:f6:b4:d8:b7:2c:cd:a9: ed:00:b1:54:97:2a:e7:5f:30:32:a8:0c:b2:4c:eb: 5f:17:b5:ab:28:02:13:b1:ef:d6:96:77:50:42:98: 0a:ce:b8:80:c2:14:60:6d:12:35:ea:29:36:ec:6a: f7:9d:b1:0c:2a:ab:70:ee:fa:43:26:71:f3:22:8b: df:72:b7:f3:b8:c5:59:b3:02:e6:43:47:f0:c6:40: ad:28:3f:35:45:41:02:3e:29:6f:2b:96:2f:38:1e: b9:ac:29:90:3f:6f:16:d1:cd:1d:00:3b:b6:d2:1a: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:B5:A3:ED:08:6B:F7:30:02:26:FB:8B:59:13:8F:F8:08:0E:A3 X509v3 Authority Key Identifier: keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bbe0:900::/40 Signature Algorithm: sha256WithRSAEncryption 3e:74:4a:e3:4b:aa:9f:47:30:03:d6:cc:00:e5:cf:9b:73:60: 87:0d:b2:8a:19:d2:d7:bd:62:9f:d4:c0:d7:1e:37:cb:3d:c1: 67:45:84:57:87:c4:c7:a7:70:c7:b3:c2:89:1b:14:6f:c7:b7: 36:2a:30:73:3f:9b:2e:fd:cc:81:89:b7:00:e8:ac:92:80:6f: 8e:b0:66:cf:67:cc:62:8f:9c:d7:d7:e9:fa:5b:d0:e1:49:14: 8d:a0:b1:43:e8:a6:1e:93:53:a9:75:2f:6d:36:d2:d0:25:79: 71:8e:03:14:74:3e:60:9d:00:65:c1:dc:29:d0:7e:8d:98:b7: 66:5e:95:28:6d:20:83:6e:47:4c:13:8c:03:28:ae:1d:39:c2: 01:3d:ec:55:b3:52:95:14:14:2e:87:4d:78:55:39:7a:5d:c0: 07:79:18:82:e0:54:6a:b0:7f:8b:dd:59:17:db:fd:62:1c:1b: 88:13:5d:ea:9c:aa:d3:d6:48:3c:fa:d3:d6:44:3b:f8:d1:85: e4:ae:10:71:1e:3d:e5:41:60:7d:90:4e:2f:79:2f:07:a1:fe: 02:fb:14:33:a1:70:95:61:97:76:0b:b7:d4:73:19:8a:e3:ed: dd:96:fe:33:54:12:32:65:e6:ed:37:16:ef:3b:7c:44:cc:de: ed:1e:58:16 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUX1o11YdinyCMw9VTYz4rfvbI46YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBQTJFNEQzQzdDREY5NjI2RDMzMUFDRDM4RDE3MTlG M0Q0QTcyRDAeFw0yNTAxMjkxNTI1MDFaFw0yNjAxMjgxNTMwMDFaMDMxMTAvBgNV BAMTKDJFMzhCNUEzRUQwODZCRjczMDAyMjZGQjhCNTkxMzhGRjgwODBFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKC+dtNRw+WQPyeCmMLQOshZTv gx8AjHdlri/BeP1wOgtV9G2t7jeJxupiKaPQHfWjtigudWEpBCjnirE+RkE39pM5 N6aMgn+r6n6mnJILzbqLggHkvdt6JbKRwUWNP36BYj8O0Ou3jDSGHPT4S/M8cWTL +vTQUcV332WKdQZD276yaQYx3TnN1kF7z3LH9rTYtyzNqe0AsVSXKudfMDKoDLJM 618XtasoAhOx79aWd1BCmArOuIDCFGBtEjXqKTbsavedsQwqq3Du+kMmcfMii99y t/O4xVmzAuZDR/DGQK0oPzVFQQI+KW8rli84HrmsKZA/bxbRzR0AO7bSGm/VAgMB AAGjggLSMIICzjAdBgNVHQ4EFgQULji1o+0Ia/cwAib7i1kTj/gIDqMwHwYDVR0j BBgwFoAUCKouTTx835Ym0zGs040XGfPUpy0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RDRCQjI0MjFDMjREMTlGMzEyM0IwQzY4MUIwMUFEODJB OTI5NDE1ODJDOURBQkI5NDkzRTA5N0YzRjJGODkzLzAvMDhBQTJFNEQzQzdDREY5 NjI2RDMzMUFDRDM4RDE3MTlGM0Q0QTcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEFBMkU0RDNDN0NERjk2MjZE MzMxQUNEMzhEMTcxOUYzRDRBNzJELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEQ0QkIyNDIxQzI0RDE5RjMxMjNCMEM2ODFCMDFBRDgyQTkyOTQxNTgy QzlEQUJCOTQ5M0UwOTdGM0YyRjg5My8wLzMyMzgzMDMzM2E2MjYyNjUzMDNhMzkz MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMwMzAzODM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAKAO74AkwDQYJKoZIhvcNAQELBQADggEBAD50SuNLqp9HMAPWzADlz5tzYIcN sooZ0te9Yp/UwNceN8s9wWdFhFeHxMencMezwokbFG/HtzYqMHM/my79zIGJtwDo rJKAb46wZs9nzGKPnNfX6fpb0OFJFI2gsUPoph6TU6l1L2020tAleXGOAxR0PmCd AGXB3CnQfo2Yt2ZelShtIINuR0wTjAMorh05wgE97FWzUpUUFC6HTXhVOXpdwAd5 GILgVGqwf4vdWRfb/WIcG4gTXeqcqtPWSDz609ZEO/jRheSuEHEePeVBYH2QTi95 Lweh/gL7FDOhcJVhl3YLt9RzGYrj7d2W/jNUEjJl5u03Fu87fETM3u0eWBY= -----END CERTIFICATE-----Generated at Wed Nov 5 19:53:28 2025 by rpki-client