$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/323830333a323438303a3a2f33322d3438203d3e20323633313835.roa File: 323830333a323438303a3a2f33322d3438203d3e20323633313835.roa (raw, json) Hash identifier: nv1aFkjammN9Bg+BaV1jDLEx2F2qGEIjM5CZE/TTKHQ= Subject key identifier: 95:6D:52:96:D1:EF:37:6A:27:B0:45:07:90:2A:1B:16:98:F7:91:13 Certificate issuer: /CN=9939CB5D6D59281BA93C774A966843C53619C202 Certificate serial: 370B222F867E50A321EF210D4F09D498379EEB54 Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/323830333a323438303a3a2f33322d3438203d3e20323633313835.roa Signing time: Tue 04 Feb 2025 18:11:51 +0000 ROA not before: Tue 04 Feb 2025 18:06:51 +0000 ROA not after: Tue 03 Feb 2026 18:11:51 +0000 asID: 263185 IP address blocks: 2803:2480::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0b:22:2f:86:7e:50:a3:21:ef:21:0d:4f:09:d4:98:37:9e:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202 Validity Not Before: Feb 4 18:06:51 2025 GMT Not After : Feb 3 18:11:51 2026 GMT Subject: CN=956D5296D1EF376A27B04507902A1B1698F79113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:47:b8:09:7e:4c:ae:d0:e0:4b:e2:5e:99: c5:56:4b:de:a7:82:78:cb:43:2e:11:36:ab:95:f5: 9a:01:91:07:0c:ef:29:23:9d:b5:c7:c1:71:03:33: 8e:f6:1c:0f:c3:a2:c7:00:25:d4:49:e4:34:fc:9e: ec:db:db:9c:eb:de:8a:a5:f2:2f:a3:fe:58:6e:d4: a8:c4:59:3d:b0:60:2f:ae:9d:57:20:85:ad:4f:b1: 2a:a5:9a:09:01:c4:aa:aa:02:c4:db:c0:f5:13:08: c0:8d:7d:65:2a:af:81:6e:f2:c7:85:4a:38:4a:cd: 5e:25:6c:65:5f:b4:11:67:de:da:56:c3:13:bf:3a: c8:f6:e9:57:a8:25:81:43:6e:8c:21:f6:cd:b9:f7: 92:46:9e:dd:e6:69:79:ae:80:e0:6b:db:21:9f:35: 71:99:aa:a8:36:54:2b:20:7b:cc:02:17:17:e2:7f: b6:06:9b:2e:b4:4b:e9:41:2c:5d:58:f9:9d:04:4e: 5a:6d:8d:62:2c:2c:3a:95:bd:59:41:f8:4c:c8:c3: 2d:04:94:9c:a4:02:f4:e7:11:64:03:05:44:d6:1d: b6:08:e9:3d:7c:10:81:9a:18:11:ce:5e:68:34:4b: 91:c9:95:4c:61:bc:ce:3f:ea:29:0e:f6:7a:bd:82: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6D:52:96:D1:EF:37:6A:27:B0:45:07:90:2A:1B:16:98:F7:91:13 X509v3 Authority Key Identifier: keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/323830333a323438303a3a2f33322d3438203d3e20323633313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2480::/32 Signature Algorithm: sha256WithRSAEncryption 65:41:f8:f0:7a:53:11:93:ce:c0:63:cd:c1:86:19:7f:ad:92: e6:59:7c:37:2d:9f:70:41:c7:5e:a0:5c:b0:57:2f:89:34:b3: 01:78:3e:f9:b6:fb:58:64:5e:16:7b:67:39:76:ee:52:60:ff: 96:21:c5:f5:e3:0e:0c:ec:89:0b:8d:46:8e:9f:17:b6:df:92: a6:09:a6:29:6d:8e:06:77:52:be:62:83:79:7b:52:77:bf:7e: 29:e0:74:b4:b8:ac:5b:36:94:5d:c0:fe:f5:09:10:78:fb:13: ae:9a:23:12:48:65:ce:75:34:00:e6:45:1e:85:d1:8b:c5:62: be:cb:99:4c:a3:4d:69:fa:f5:26:9a:63:51:ba:3a:50:99:f3: b0:c5:97:f2:06:22:1a:72:ac:b3:cb:54:0c:c7:a1:b7:26:0f: 3f:7a:e4:ff:ad:49:ef:2b:bd:79:ef:a6:e2:36:fb:5e:25:8e: 09:f8:d8:99:7f:c0:5f:b1:59:4f:da:a0:62:55:12:d1:81:e9: 19:17:40:f9:87:84:2b:66:4b:ca:0c:a4:ab:fe:e1:0e:91:09: a4:b9:6a:7f:ce:21:a5:7f:84:c8:fd:3e:aa:f9:5b:f1:a5:b5: 21:00:85:5b:58:13:44:ad:ae:a3:96:02:e7:46:25:97:9a:8b: f0:8c:e2:08 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUNwsiL4Z+UKMh7yENTwnUmDee61QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzOUNCNUQ2RDU5MjgxQkE5M0M3NzRBOTY2ODQzQzUz NjE5QzIwMjAeFw0yNTAyMDQxODA2NTFaFw0yNjAyMDMxODExNTFaMDMxMTAvBgNV BAMTKDk1NkQ1Mjk2RDFFRjM3NkEyN0IwNDUwNzkwMkExQjE2OThGNzkxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvke4CX5MrtDgS+JemcVWS96n gnjLQy4RNquV9ZoBkQcM7ykjnbXHwXEDM472HA/DoscAJdRJ5DT8nuzb25zr3oql 8i+j/lhu1KjEWT2wYC+unVcgha1PsSqlmgkBxKqqAsTbwPUTCMCNfWUqr4Fu8seF SjhKzV4lbGVftBFn3tpWwxO/Osj26VeoJYFDbowh9s2595JGnt3maXmugOBr2yGf NXGZqqg2VCsge8wCFxfif7YGmy60S+lBLF1Y+Z0ETlptjWIsLDqVvVlB+EzIwy0E lJykAvTnEWQDBUTWHbYI6T18EIGaGBHOXmg0S5HJlUxhvM4/6ikO9nq9gr7bAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUlW1SltHvN2onsEUHkCobFpj3kRMwHwYDVR0j BBgwFoAUmTnLXW1ZKBupPHdKlmhDxTYZwgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQkRDRENBNjlCMjJDRTkyMDJDMDkxNUI5MjIzODQzMjU1 OTU1QkVCODNGOUZCRTAyNUM0NUY1OTFEQUFDQ0M1LzAvOTkzOUNCNUQ2RDU5Mjgx QkE5M0M3NzRBOTY2ODQzQzUzNjE5QzIwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTM5Q0I1RDZENTkyODFCQTkz Qzc3NEE5NjY4NDNDNTM2MTlDMjAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUJEQ0RDQTY5QjIyQ0U5MjAyQzA5MTVCOTIyMzg0MzI1NTk1NUJFQjgz RjlGQkUwMjVDNDVGNTkxREFBQ0NDNS8wLzMyMzgzMDMzM2EzMjM0MzgzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMxMzgzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJIAw DQYJKoZIhvcNAQELBQADggEBAGVB+PB6UxGTzsBjzcGGGX+tkuZZfDctn3BBx16g XLBXL4k0swF4Pvm2+1hkXhZ7Zzl27lJg/5YhxfXjDgzsiQuNRo6fF7bfkqYJpilt jgZ3Ur5ig3l7Une/fingdLS4rFs2lF3A/vUJEHj7E66aIxJIZc51NADmRR6F0YvF Yr7LmUyjTWn69SaaY1G6OlCZ87DFl/IGIhpyrLPLVAzHobcmDz965P+tSe8rvXnv puI2+14ljgn42Jl/wF+xWU/aoGJVEtGB6RkXQPmHhCtmS8oMpKv+4Q6RCaS5an/O IaV/hMj9Pqr5W/GltSEAhVtYE0StrqOWAudGJZeai/CM4gg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:58 2025 by rpki-client