$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3430303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3430303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: blpUOIS74lTDybQ9rKxQI/7Ebu4zPUkHgt5EG5ql2XY= Subject key identifier: 75:D1:5D:B4:51:EA:30:F3:F5:53:0E:09:44:D7:52:1C:DA:1A:14:D8 Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 213C9AB4F94554A3D5621DDD5F9AEC308BAC72BB Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3430303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:03 +0000 ROA not before: Mon 03 Nov 2025 01:20:03 +0000 ROA not after: Mon 02 Nov 2026 01:25:03 +0000 asID: 273134 IP address blocks: 2803:5450:400::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3c:9a:b4:f9:45:54:a3:d5:62:1d:dd:5f:9a:ec:30:8b:ac:72:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:03 2025 GMT Not After : Nov 2 01:25:03 2026 GMT Subject: CN=75D15DB451EA30F3F5530E0944D7521CDA1A14D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:0d:ac:80:74:37:33:9e:8b:8d:3a:3f:b1: ad:03:b7:80:ca:18:a7:ca:0a:95:57:c5:70:1e:6b: f5:eb:33:66:f9:e3:b9:7d:f5:2c:02:b5:cf:bd:a9: ac:0f:82:9f:6b:3e:73:b3:f6:e7:69:65:5c:0f:d9: 21:58:70:01:a8:5a:8f:4d:2a:c6:13:bc:b7:33:7a: 78:d7:7b:2a:f0:f8:c7:d3:c6:58:f0:c1:6a:e1:20: ca:6f:dd:eb:ae:82:55:9c:cd:b8:ca:7d:19:9e:4f: 6a:b4:92:93:8e:db:42:c4:22:b9:f1:12:74:06:d1: 96:a6:1e:c2:f0:ab:66:fa:90:b0:1c:3f:e2:10:b9: 89:9d:9d:5e:bb:9d:61:91:c8:6e:06:33:76:5b:68: 83:1f:e4:9c:d0:93:82:2a:04:e3:98:a9:2e:a5:e7: 2f:cd:2b:4b:ba:5f:1c:74:96:b3:01:18:f9:ae:51: 42:07:41:22:f7:8f:e8:1c:7c:be:d9:9f:ab:9e:c6: bc:d9:42:25:63:28:37:26:0f:af:ec:06:02:a1:85: ba:6d:3c:08:39:b5:73:a7:8a:30:b5:43:1a:a7:11: e5:fe:96:8a:c2:14:c0:40:e8:27:56:04:3f:92:b5: ea:39:87:aa:3a:ef:b7:85:0c:f9:75:3f:02:72:60: 6c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:5D:B4:51:EA:30:F3:F5:53:0E:09:44:D7:52:1C:DA:1A:14:D8 X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3430303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:400::/42 Signature Algorithm: sha256WithRSAEncryption 80:92:19:5b:d9:a1:1f:1f:db:83:1c:4e:5d:72:63:d7:94:9f: 28:b0:a4:d5:df:68:5e:ee:94:33:ba:d1:d8:93:92:86:a7:8c: 35:d6:d3:dd:dc:8d:3e:18:c1:a0:df:4f:40:ce:fb:2f:86:3e: ce:ec:43:52:11:ab:c0:87:01:9d:9a:88:d5:d8:62:75:df:65: 31:fa:6c:aa:7c:da:60:78:3a:02:a4:22:1a:41:b6:3c:25:b2: d3:e3:27:8a:71:ac:a3:9e:10:f6:89:14:28:16:d8:bd:b2:3d: 19:20:85:e7:4d:50:a5:5d:5d:0a:da:a0:71:20:e9:31:8c:79: 2b:4a:d7:60:bb:9d:42:a3:0b:f9:83:ed:14:8c:18:31:45:88: 93:29:3e:de:28:9a:c0:81:24:04:19:96:a7:58:ec:8b:3c:fe: 04:6f:51:8f:78:ec:52:94:26:7a:b5:ff:27:87:06:0e:fb:f7: 4f:f5:b8:3d:fc:1e:5e:1c:ea:47:1c:4d:26:6b:3b:90:87:ba: 87:bd:fd:ba:ec:42:0e:c9:52:91:13:3d:dd:d3:6a:d3:81:ad: ad:67:fc:c5:26:13:62:e7:76:a4:99:93:3a:ce:2f:8a:72:17: fe:b0:c6:39:5d:29:de:bf:57:c2:b5:0e:fd:2e:88:e7:8f:1c: ad:e9:76:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUITyatPlFVKPVYh3dX5rsMIuscrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDNaFw0yNjExMDIwMTI1MDNaMDMxMTAvBgNV BAMTKDc1RDE1REI0NTFFQTMwRjNGNTUzMEUwOTQ0RDc1MjFDREExQTE0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGQ2sgHQ3M56LjTo/sa0Dt4DK GKfKCpVXxXAea/XrM2b547l99SwCtc+9qawPgp9rPnOz9udpZVwP2SFYcAGoWo9N KsYTvLczenjXeyrw+MfTxljwwWrhIMpv3euuglWczbjKfRmeT2q0kpOO20LEIrnx EnQG0ZamHsLwq2b6kLAcP+IQuYmdnV67nWGRyG4GM3ZbaIMf5JzQk4IqBOOYqS6l 5y/NK0u6Xxx0lrMBGPmuUUIHQSL3j+gcfL7Zn6uexrzZQiVjKDcmD6/sBgKhhbpt PAg5tXOnijC1QxqnEeX+lorCFMBA6CdWBD+Steo5h6o677eFDPl1PwJyYGyxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUddFdtFHqMPP1Uw4JRNdSHNoaFNgwHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzQz MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAQAMA0GCSqGSIb3DQEBCwUAA4IBAQCAkhlb2aEfH9uDHE5dcmPXlJ8o sKTV32he7pQzutHYk5KGp4w11tPd3I0+GMGg309Azvsvhj7O7ENSEavAhwGdmojV 2GJ132Ux+myqfNpgeDoCpCIaQbY8JbLT4yeKcayjnhD2iRQoFti9sj0ZIIXnTVCl XV0K2qBxIOkxjHkrStdgu51Cowv5g+0UjBgxRYiTKT7eKJrAgSQEGZanWOyLPP4E b1GPeOxSlCZ6tf8nhwYO+/dP9bg9/B5eHOpHHE0mazuQh7qHvf267EIOyVKREz3d 02rTga2tZ/zFJhNi53akmZM6zi+Kchf+sMY5XSnev1fCtQ79Lojnjxyt6XYe -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:19 2025 by rpki-client