$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/323830333a3964303a3a2f33322d3634203d3e20323734313435.roa File: 323830333a3964303a3a2f33322d3634203d3e20323734313435.roa (raw, json) Hash identifier: 3jO+BLhUpwYWeds8xYGDEz3hSrW7Pp9RUMGq4ZvZG6I= Subject key identifier: A9:F7:28:AF:55:29:53:9B:FD:47:CB:09:8C:64:EC:05:4E:88:56:85 Certificate issuer: /CN=8EC85B4C27B04A291CCCBF3385A339E01B6F3834 Certificate serial: 1DBAE257B7DCCD3E5AEDCFE96E2648B79E631176 Authority key identifier: 8E:C8:5B:4C:27:B0:4A:29:1C:CC:BF:33:85:A3:39:E0:1B:6F:38:34 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/323830333a3964303a3a2f33322d3634203d3e20323734313435.roa Signing time: Sat 02 Aug 2025 09:35:00 +0000 ROA not before: Sat 02 Aug 2025 09:30:00 +0000 ROA not after: Sat 01 Aug 2026 09:35:00 +0000 asID: 274145 IP address blocks: 2803:9d0::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 Aug 2025 05:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ba:e2:57:b7:dc:cd:3e:5a:ed:cf:e9:6e:26:48:b7:9e:63:11:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC85B4C27B04A291CCCBF3385A339E01B6F3834 Validity Not Before: Aug 2 09:30:00 2025 GMT Not After : Aug 1 09:35:00 2026 GMT Subject: CN=A9F728AF5529539BFD47CB098C64EC054E885685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:45:97:9b:3a:cf:cf:64:d0:5b:4d:b8:8b: b7:a0:ae:84:7f:11:ec:b1:a5:bd:e1:8f:81:c6:c3: 6e:58:f4:02:b5:e5:70:b3:c2:5e:b6:ee:65:9b:b9: 50:1d:89:4f:ed:87:3c:96:dc:50:64:1d:27:02:45: 9c:27:80:ed:ca:af:09:75:65:0e:64:d9:3b:0b:1d: 30:18:b6:cb:8b:24:f8:c5:71:1c:9a:21:4c:07:43: 8f:a8:c5:40:18:0b:7c:21:5c:31:e0:70:4e:6e:fc: fe:31:00:5a:51:38:c2:8f:61:f9:a4:dc:f1:11:72: c4:47:13:6b:64:fe:c9:41:e5:36:2e:23:01:a9:92: 2c:13:ce:78:5f:7e:01:a0:68:09:ec:c7:3d:c8:b0: ec:1b:dc:8f:55:3d:7f:0b:2a:1d:f9:89:12:1b:bd: 5e:6b:0b:b9:a7:1b:7d:be:e2:10:ca:ca:10:b4:48: b2:f0:68:c2:0c:70:4d:d7:ca:9d:d1:d0:24:55:d8: 6a:58:ed:46:9f:a8:c8:5a:12:3a:8a:ae:da:28:88: 00:76:18:e7:fe:3d:e5:b0:82:0c:a6:8c:cc:49:04: 0e:e6:e5:d4:40:88:1f:4e:1f:06:45:09:e4:25:51: c9:e3:89:06:4e:7c:4d:1e:ea:4d:74:04:c6:d5:26: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:28:AF:55:29:53:9B:FD:47:CB:09:8C:64:EC:05:4E:88:56:85 X509v3 Authority Key Identifier: keyid:8E:C8:5B:4C:27:B0:4A:29:1C:CC:BF:33:85:A3:39:E0:1B:6F:38:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC85B4C27B04A291CCCBF3385A339E01B6F3834.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4848F38D6BB5181DA66E05D8E0A2B83D4461A29140CCEB1A67649376A5B49DC/0/323830333a3964303a3a2f33322d3634203d3e20323734313435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9d0::/32 Signature Algorithm: sha256WithRSAEncryption a1:31:39:19:4c:00:8b:d4:bb:bd:f7:b7:f5:e8:6a:e5:cf:e2: 07:53:23:1d:da:3b:45:bb:d2:f0:d4:20:a1:dd:44:25:49:60: f3:6e:33:db:be:7f:40:43:51:e2:41:15:fa:b1:83:c2:1f:23: 48:56:4a:c1:10:10:95:a2:66:c6:ff:72:bf:76:b7:37:bf:1f: aa:01:8b:6e:bc:b2:2d:51:44:c0:04:7a:9c:50:dd:9f:e5:e6: f8:a9:cc:46:5b:17:c8:71:a8:06:45:13:86:0c:24:f6:00:1a: 14:6c:ff:43:49:7f:62:7a:30:2e:04:fc:d3:ff:e2:4c:97:a4: 51:19:b5:1e:67:f7:61:c7:26:70:1f:cf:d9:1e:53:2f:fc:a7: f7:92:89:f7:5d:6e:51:6d:26:51:e2:1a:40:9b:53:a2:fd:64: 30:0f:d6:14:12:58:0a:31:6e:c1:81:df:43:e7:e4:ce:e1:8d: f2:af:2b:3f:0c:75:9a:51:19:85:db:a5:18:45:2b:be:2a:c5: f1:3e:33:5a:f6:1b:ed:4b:f9:56:35:37:ce:ef:86:68:df:14: 47:14:de:c6:28:2f:09:15:c9:43:4a:db:f8:21:7b:32:0b:b9: 06:31:5f:1b:0b:b9:cd:62:8e:82:46:db:bf:8d:74:8d:e3:1e: 52:78:b8:c7 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUHbriV7fczT5a7c/pbiZIt55jEXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDODVCNEMyN0IwNEEyOTFDQ0NCRjMzODVBMzM5RTAx QjZGMzgzNDAeFw0yNTA4MDIwOTMwMDBaFw0yNjA4MDEwOTM1MDBaMDMxMTAvBgNV BAMTKEE5RjcyOEFGNTUyOTUzOUJGRDQ3Q0IwOThDNjRFQzA1NEU4ODU2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkEWXmzrPz2TQW024i7egroR/ Eeyxpb3hj4HGw25Y9AK15XCzwl627mWbuVAdiU/thzyW3FBkHScCRZwngO3Krwl1 ZQ5k2TsLHTAYtsuLJPjFcRyaIUwHQ4+oxUAYC3whXDHgcE5u/P4xAFpROMKPYfmk 3PERcsRHE2tk/slB5TYuIwGpkiwTznhffgGgaAnsxz3IsOwb3I9VPX8LKh35iRIb vV5rC7mnG32+4hDKyhC0SLLwaMIMcE3Xyp3R0CRV2GpY7UafqMhaEjqKrtooiAB2 GOf+PeWwggymjMxJBA7m5dRAiB9OHwZFCeQlUcnjiQZOfE0e6k10BMbVJvx/AgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUqfcor1UpU5v9R8sJjGTsBU6IVoUwHwYDVR0j BBgwFoAUjshbTCewSikczL8zhaM54BtvODQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNDg0OEYzOEQ2QkI1MTgxREE2NkUwNUQ4RTBBMkI4M0Q0 NDYxQTI5MTQwQ0NFQjFBNjc2NDkzNzZBNUI0OURDLzAvOEVDODVCNEMyN0IwNEEy OTFDQ0NCRjMzODVBMzM5RTAxQjZGMzgzNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUM4NUI0QzI3QjA0QTI5MUND Q0JGMzM4NUEzMzlFMDFCNkYzODM0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjQ4NDhGMzhENkJCNTE4MURBNjZFMDVEOEUwQTJCODNENDQ2MUEyOTE0 MENDRUIxQTY3NjQ5Mzc2QTVCNDlEQy8wLzMyMzgzMDMzM2EzOTY0MzAzYTNhMmYz MzMyMmQzNjM0MjAzZDNlMjAzMjM3MzQzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwnQMA0G CSqGSIb3DQEBCwUAA4IBAQChMTkZTACL1Lu997f16Grlz+IHUyMd2jtFu9Lw1CCh 3UQlSWDzbjPbvn9AQ1HiQRX6sYPCHyNIVkrBEBCVombG/3K/drc3vx+qAYtuvLIt UUTABHqcUN2f5eb4qcxGWxfIcagGRROGDCT2ABoUbP9DSX9iejAuBPzT/+JMl6RR GbUeZ/dhxyZwH8/ZHlMv/Kf3kon3XW5RbSZR4hpAm1Oi/WQwD9YUElgKMW7Bgd9D 5+TO4Y3yrys/DHWaURmF26UYRSu+KsXxPjNa9hvtS/lWNTfO74Zo3xRHFN7GKC8J FclDStv4IXsyC7kGMV8bC7nNYo6CRtu/jXSN4x5SeLjH -----END CERTIFICATE-----Generated at Mon Aug 11 02:24:31 2025 by rpki-client