$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3163303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3163303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: W3YNCnDy6WfOvb5+rp+GMfOHqF9KvZptXz5qvcxy6og= Subject key identifier: F4:24:B4:21:F5:59:97:C3:C1:BF:4B:F7:55:35:C4:3A:CC:4F:17:A2 Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 388325BEBD8A04A3A650FEA57A53233364A863B3 Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3163303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:00 +0000 ROA not before: Mon 03 Nov 2025 01:20:00 +0000 ROA not after: Mon 02 Nov 2026 01:25:00 +0000 asID: 273134 IP address blocks: 2803:5450:1c0::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:83:25:be:bd:8a:04:a3:a6:50:fe:a5:7a:53:23:33:64:a8:63:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:00 2025 GMT Not After : Nov 2 01:25:00 2026 GMT Subject: CN=F424B421F55997C3C1BF4BF75535C43ACC4F17A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:0e:dc:2d:7f:52:50:9d:6d:b4:66:68:84: 20:c9:cf:b3:f7:0f:8d:89:49:14:04:12:5e:a8:bc: 80:e8:a7:1b:ef:6b:eb:07:8c:5f:6c:d0:ea:5b:35: 08:d1:c6:89:c4:2e:b5:bf:29:e9:12:b5:63:b5:59: 12:d4:f1:01:55:6a:58:e7:54:28:21:3b:78:e8:a4: 0a:47:99:64:b0:89:9b:5d:31:71:68:a5:d1:93:a6: aa:fa:79:de:d8:68:12:0f:14:51:a2:d6:50:25:72: 23:29:40:b6:15:0d:3f:9e:1a:70:a4:25:b5:2c:85: 25:ab:a8:a0:5c:cf:17:d0:82:4e:50:69:68:00:b9: 39:b8:5b:96:33:7e:57:9b:74:20:74:4e:c1:10:1d: b2:8a:18:16:d5:46:08:95:87:06:53:94:ee:67:e1: bf:1f:07:0a:f8:ab:80:77:0b:c6:68:7d:6d:7f:e1: ff:61:6d:34:3e:c9:86:4b:0d:ef:ce:bc:7a:7a:be: bb:24:ea:f0:6e:1f:43:41:a3:9e:ad:ca:48:95:ed: 33:d5:57:fc:5b:92:8a:57:04:d3:c1:4f:e1:78:d5: 1f:dc:ce:ba:0e:c1:aa:85:59:5b:5a:db:66:bb:ce: d4:16:38:f8:95:47:da:d4:4d:6a:09:49:9a:73:cc: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:B4:21:F5:59:97:C3:C1:BF:4B:F7:55:35:C4:3A:CC:4F:17:A2 X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3163303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:1c0::/42 Signature Algorithm: sha256WithRSAEncryption 76:2d:dc:f5:c5:8b:ec:16:0c:cb:a9:c8:8a:ed:23:63:a4:70: 7a:2d:b4:9a:2f:83:7e:d8:75:03:89:51:ee:7f:38:5a:b7:04: 99:59:88:72:b3:c4:c3:d3:d5:d1:76:ef:cb:59:e5:e7:72:21: 68:4e:51:99:23:4a:e8:ff:1d:16:12:a3:41:46:59:9b:c5:c6: a5:fe:42:39:7c:d1:4b:d3:5e:7e:2d:d4:14:25:2b:80:ec:f7: 2b:29:b7:57:38:5d:c2:e6:c0:d2:ae:e5:fe:9a:3b:25:21:89: ea:b9:39:2b:83:21:a2:c8:29:32:fc:66:8e:5a:a6:72:b4:ac: 2c:8f:62:8a:4d:68:4d:8d:92:48:b2:03:15:08:0d:c1:3f:d6: b5:29:ed:61:19:a4:39:98:b7:73:1f:72:a6:38:cf:e1:92:f9: da:6a:03:42:82:a0:00:02:4e:bf:85:d9:49:df:db:ff:f6:0f: 53:9d:69:0a:74:0b:9d:a6:d1:03:f3:4e:3f:86:d4:df:69:84: 00:c2:47:d1:3a:63:2b:6a:55:14:51:64:9b:8c:2c:05:d2:79: 30:ab:a6:39:3e:70:a6:31:9d:a0:a4:9a:33:2c:65:b3:9d:27: 85:5d:95:e4:31:29:45:a7:70:d4:51:e1:75:67:3e:93:ee:10: 61:ba:e0:e6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOIMlvr2KBKOmUP6lelMjM2SoY7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDBaFw0yNjExMDIwMTI1MDBaMDMxMTAvBgNV BAMTKEY0MjRCNDIxRjU1OTk3QzNDMUJGNEJGNzU1MzVDNDNBQ0M0RjE3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXQ7cLX9SUJ1ttGZohCDJz7P3 D42JSRQEEl6ovIDopxvva+sHjF9s0OpbNQjRxonELrW/KekStWO1WRLU8QFValjn VCghO3jopApHmWSwiZtdMXFopdGTpqr6ed7YaBIPFFGi1lAlciMpQLYVDT+eGnCk JbUshSWrqKBczxfQgk5QaWgAuTm4W5YzflebdCB0TsEQHbKKGBbVRgiVhwZTlO5n 4b8fBwr4q4B3C8ZofW1/4f9hbTQ+yYZLDe/OvHp6vrsk6vBuH0NBo56tykiV7TPV V/xbkopXBNPBT+F41R/czroOwaqFWVta22a7ztQWOPiVR9rUTWoJSZpzzP4lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9CS0IfVZl8PBv0v3VTXEOsxPF6IwHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzE2 MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAHAMA0GCSqGSIb3DQEBCwUAA4IBAQB2Ldz1xYvsFgzLqciK7SNjpHB6 LbSaL4N+2HUDiVHufzhatwSZWYhys8TD09XRdu/LWeXnciFoTlGZI0ro/x0WEqNB Rlmbxcal/kI5fNFL015+LdQUJSuA7PcrKbdXOF3C5sDSruX+mjslIYnquTkrgyGi yCky/GaOWqZytKwsj2KKTWhNjZJIsgMVCA3BP9a1Ke1hGaQ5mLdzH3KmOM/hkvna agNCgqAAAk6/hdlJ39v/9g9TnWkKdAudptED804/htTfaYQAwkfROmMralUUUWSb jCwF0nkwq6Y5PnCmMZ2gpJozLGWznSeFXZXkMSlFp3DUUeF1Zz6T7hBhuuDm -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:15 2025 by rpki-client