$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa File: 323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa (raw, json) Hash identifier: rf4QUnVdKpWGaCs+46OA5oaqIQiNEbB0zEshfAQbBMw= Subject key identifier: AE:D5:1F:43:8F:61:68:CA:0F:2C:92:15:8C:0F:9F:50:57:B2:B5:74 Certificate issuer: /CN=B1584F435951195F9A1F345DE3A71C0FFAED9417 Certificate serial: 30555274B1FD21B3FFA5647F9BC86CF079BEB908 Authority key identifier: B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa Signing time: Tue 04 Feb 2025 18:29:04 +0000 ROA not before: Tue 04 Feb 2025 18:24:04 +0000 ROA not after: Tue 03 Feb 2026 18:29:04 +0000 asID: 269791 IP address blocks: 2801:16:4800::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:55:52:74:b1:fd:21:b3:ff:a5:64:7f:9b:c8:6c:f0:79:be:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1584F435951195F9A1F345DE3A71C0FFAED9417 Validity Not Before: Feb 4 18:24:04 2025 GMT Not After : Feb 3 18:29:04 2026 GMT Subject: CN=AED51F438F6168CA0F2C92158C0F9F5057B2B574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:2f:02:a5:0d:00:c2:8b:45:5c:5f:8d:ed: 7b:8e:32:e2:f8:f3:1f:6f:24:ee:76:09:e5:d6:05: ad:76:2a:9e:b1:d4:7b:b1:d8:3d:93:9b:61:1b:ed: 3e:33:bd:d3:19:71:16:ae:be:8f:70:4a:9b:23:05: e0:bb:76:63:70:ac:5e:42:19:eb:2d:4b:f5:9f:85: e1:58:6f:1b:e2:da:35:5f:b8:d8:1d:00:1a:c6:5d: 07:10:b5:89:24:87:dd:f4:b1:45:f1:c5:01:0a:50: 8c:f5:ee:74:4b:b1:bb:eb:15:17:b1:7b:c9:53:1f: f8:33:a5:1e:ad:12:9d:4b:01:8f:64:74:ca:d9:9d: 8b:60:f1:2d:64:4a:6c:f4:df:18:10:e8:cf:94:92: 44:d7:c6:13:3d:47:ba:a7:55:22:7f:6f:62:2f:1d: 82:e8:25:93:39:2f:11:53:0d:c9:46:94:e5:23:bb: bf:f8:a7:a3:58:04:e5:0f:c9:3c:e3:9c:f4:d1:5c: 72:4d:5e:24:aa:38:35:ab:8a:f6:5c:2f:b2:7e:ac: b9:1b:36:0e:3e:40:0e:ca:9b:fc:52:13:e2:c5:bf: 39:4c:4e:e2:df:f8:2f:dd:26:34:1a:5e:db:d6:28: d3:9c:34:88:8c:ee:6b:9a:c6:d3:19:d6:d8:1c:ee: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:1F:43:8F:61:68:CA:0F:2C:92:15:8C:0F:9F:50:57:B2:B5:74 X509v3 Authority Key Identifier: keyid:B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/323830313a31363a343830303a3a2f34382d3438203d3e20323639373931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:16:4800::/48 Signature Algorithm: sha256WithRSAEncryption 27:59:ca:25:b4:75:67:4a:46:90:f5:a3:af:36:34:2d:12:32: c9:87:64:69:60:4e:6e:33:d5:d5:7d:e9:6e:a5:45:53:29:40: b8:ba:02:fd:73:cb:34:d5:33:64:91:d2:09:59:e0:87:e7:ae: cf:5f:bf:64:31:2a:68:1f:2b:4e:72:9b:33:3b:b3:e4:58:c7: 17:aa:15:75:4b:b5:86:57:b7:46:f5:34:27:38:d0:d8:74:7a: af:de:ec:1a:9f:6b:14:9c:cd:f9:93:f0:43:97:94:78:47:ef: 4c:cb:b4:3d:bd:0e:33:8d:ac:03:ee:f5:a8:5f:1c:e3:dd:a3: da:f4:fe:f4:38:d3:fb:a4:a8:e0:65:ed:38:1a:5a:df:dc:39: 0f:fa:8a:bb:1a:3a:a1:8e:20:2c:31:e0:48:2a:5e:7b:ef:61: 81:da:34:88:b8:c3:82:7b:42:6b:fe:7c:98:39:35:e2:2e:9a: 63:bf:2a:42:c0:94:63:7f:7c:65:31:ce:fd:53:90:09:0b:1b: 01:95:29:66:e6:76:03:c0:35:c6:f2:a2:ae:59:82:13:13:0b: 30:17:ff:3d:9e:d1:3d:24:45:55:9a:85:bb:8e:f5:c0:69:69: 20:d0:be:c0:af:e3:1f:64:c3:b5:39:fd:6c:6d:99:0e:99:ab: 17:86:81:d1 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUMFVSdLH9IbP/pWR/m8hs8Hm+uQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1ODRGNDM1OTUxMTk1RjlBMUYzNDVERTNBNzFDMEZG QUVEOTQxNzAeFw0yNTAyMDQxODI0MDRaFw0yNjAyMDMxODI5MDRaMDMxMTAvBgNV BAMTKEFFRDUxRjQzOEY2MTY4Q0EwRjJDOTIxNThDMEY5RjUwNTdCMkI1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDakS8CpQ0AwotFXF+N7XuOMuL4 8x9vJO52CeXWBa12Kp6x1Hux2D2Tm2Eb7T4zvdMZcRauvo9wSpsjBeC7dmNwrF5C GestS/WfheFYbxvi2jVfuNgdABrGXQcQtYkkh930sUXxxQEKUIz17nRLsbvrFRex e8lTH/gzpR6tEp1LAY9kdMrZnYtg8S1kSmz03xgQ6M+UkkTXxhM9R7qnVSJ/b2Iv HYLoJZM5LxFTDclGlOUju7/4p6NYBOUPyTzjnPTRXHJNXiSqODWrivZcL7J+rLkb Ng4+QA7Km/xSE+LFvzlMTuLf+C/dJjQaXtvWKNOcNIiM7muaxtMZ1tgc7hmjAgMB AAGjggLRMIICzTAdBgNVHQ4EFgQUrtUfQ49haMoPLJIVjA+fUFeytXQwHwYDVR0j BBgwFoAUsVhPQ1lRGV+aHzRd46ccD/rtlBcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNTlDRjYyMEE2NUI3OUM2Q0ZDREQ5MjlGRkUzOUI0OEEz Q0JGNTJEREI5MkM2QjUzNkFFRTM0QzY0ODEzMEY5LzAvQjE1ODRGNDM1OTUxMTk1 RjlBMUYzNDVERTNBNzFDMEZGQUVEOTQxNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTU4NEY0MzU5NTExOTVGOUEx RjM0NURFM0E3MUMwRkZBRUQ5NDE3LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTU5Q0Y2MjBBNjVCNzlDNkNGQ0REOTI5RkZFMzlCNDhBM0NCRjUyRERC OTJDNkI1MzZBRUUzNEM2NDgxMzBGOS8wLzMyMzgzMDMxM2EzMTM2M2EzNDM4MzAz MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzOTM3MzkzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACgBABZIADANBgkqhkiG9w0BAQsFAAOCAQEAJ1nKJbR1Z0pGkPWjrzY0LRIyyYdk aWBObjPV1X3pbqVFUylAuLoC/XPLNNUzZJHSCVngh+euz1+/ZDEqaB8rTnKbMzuz 5FjHF6oVdUu1hle3RvU0JzjQ2HR6r97sGp9rFJzN+ZPwQ5eUeEfvTMu0Pb0OM42s A+71qF8c492j2vT+9DjT+6So4GXtOBpa39w5D/qKuxo6oY4gLDHgSCpee+9hgdo0 iLjDgntCa/58mDk14i6aY78qQsCUY398ZTHO/VOQCQsbAZUpZuZ2A8A1xvKirlmC ExMLMBf/PZ7RPSRFVZqFu471wGlpINC+wK/jH2TDtTn9bG2ZDpmrF4aB0Q== -----END CERTIFICATE-----Generated at Wed Nov 5 22:45:32 2025 by rpki-client