$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3530303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3530303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: Hwq8r5aPw9/hUnFuCGIaObv5RXMeQ4u+YyvsguCDxsQ= Subject key identifier: 32:90:93:38:D4:F7:7B:BF:65:3C:9D:9A:33:E0:BF:52:61:82:64:17 Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 0F8868BA0E545E2427270915C9CC9B29ECD33BC3 Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3530303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:01 +0000 ROA not before: Mon 03 Nov 2025 01:20:01 +0000 ROA not after: Mon 02 Nov 2026 01:25:01 +0000 asID: 273134 IP address blocks: 2803:5450:500::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:88:68:ba:0e:54:5e:24:27:27:09:15:c9:cc:9b:29:ec:d3:3b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:01 2025 GMT Not After : Nov 2 01:25:01 2026 GMT Subject: CN=32909338D4F77BBF653C9D9A33E0BF5261826417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:e8:68:de:9c:80:b2:03:df:d7:f3:41:b8: 8c:b0:89:39:1c:4f:68:3c:92:a9:a7:48:54:07:b2: 2b:93:9c:84:50:c6:70:47:3a:ef:b2:a3:d0:7b:a9: 26:33:39:0b:b6:29:06:3c:c5:a6:f5:11:18:f5:78: 71:e1:f4:0d:55:3b:62:67:89:9f:a1:33:ac:c8:67: 94:18:2f:c2:cd:e1:12:13:ca:c9:d2:0f:66:5d:f6: b9:13:bf:ab:da:04:24:9d:d1:da:a9:c6:1b:17:a0: fb:ac:4d:3f:45:07:48:99:ee:c8:0e:95:7b:fe:01: f7:d5:ab:04:d5:38:ad:c3:a4:8e:b6:b1:38:e3:e9: 64:75:cb:55:0f:09:66:71:b4:e5:b2:5b:44:8c:db: 82:e6:c0:13:74:76:62:68:de:9c:48:0c:72:7c:cd: d3:bc:3c:40:64:17:8d:a7:c4:a0:09:fa:ec:e5:33: c6:7c:68:36:16:f3:61:30:e1:88:14:59:93:20:b8: da:4d:50:3d:1a:bf:e0:44:68:b5:33:7c:a5:9e:86: bc:28:e8:d9:c3:53:bd:4d:5c:a2:4a:2b:85:57:27: 73:c8:95:29:16:84:c2:e1:c9:a5:a7:5c:08:64:98: 46:88:a8:27:f1:95:3f:4e:53:09:65:f2:01:57:fe: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:93:38:D4:F7:7B:BF:65:3C:9D:9A:33:E0:BF:52:61:82:64:17 X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3530303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:500::/42 Signature Algorithm: sha256WithRSAEncryption 73:10:f3:96:49:b6:d2:a7:2a:8a:d8:cd:2b:44:e3:6e:96:35: 1c:72:42:59:e3:cd:9a:d3:b3:4b:74:cb:17:26:88:e3:6a:2d: d4:ce:94:dc:b7:f0:b5:e8:f5:74:51:50:e5:04:17:b2:c2:89: b2:ee:f4:a8:d0:e3:81:61:95:11:4a:83:3c:d9:97:0d:8b:fd: bd:4a:72:9d:cd:04:56:a4:3d:8d:60:f1:56:db:15:ec:ef:c1: eb:13:77:24:1f:12:ac:e5:ea:1c:27:23:9d:3e:9c:b5:e1:8d: e0:73:a4:14:27:65:a0:9b:7c:43:dc:55:c7:84:6b:00:32:d3: 40:1a:13:28:36:56:f8:a2:cd:5d:3f:8e:83:21:4e:8f:87:df: e7:0b:7d:35:95:fc:cb:bf:5e:27:c9:36:aa:a9:fa:0a:38:63: da:8d:d2:32:6a:d5:8a:d2:1e:88:e0:8e:2a:dd:3f:fd:be:77: 2c:d6:27:bb:fa:8b:19:37:31:29:2f:66:fa:f1:7e:e2:a2:fb: 66:ea:d9:0e:6c:34:87:ad:dd:ce:78:18:8d:40:ec:aa:e4:ce: 0d:6b:4c:c7:a5:f6:26:0a:b9:6d:e0:1c:a1:7c:9a:8f:85:64: a6:0a:d6:1b:5a:f8:7c:6c:76:7a:0e:64:76:75:f2:8d:83:68: 41:e2:ea:85 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD4houg5UXiQnJwkVycybKezTO8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDFaFw0yNjExMDIwMTI1MDFaMDMxMTAvBgNV BAMTKDMyOTA5MzM4RDRGNzdCQkY2NTNDOUQ5QTMzRTBCRjUyNjE4MjY0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO1uho3pyAsgPf1/NBuIywiTkc T2g8kqmnSFQHsiuTnIRQxnBHOu+yo9B7qSYzOQu2KQY8xab1ERj1eHHh9A1VO2Jn iZ+hM6zIZ5QYL8LN4RITysnSD2Zd9rkTv6vaBCSd0dqpxhsXoPusTT9FB0iZ7sgO lXv+AffVqwTVOK3DpI62sTjj6WR1y1UPCWZxtOWyW0SM24LmwBN0dmJo3pxIDHJ8 zdO8PEBkF42nxKAJ+uzlM8Z8aDYW82Ew4YgUWZMguNpNUD0av+BEaLUzfKWehrwo 6NnDU71NXKJKK4VXJ3PIlSkWhMLhyaWnXAhkmEaIqCfxlT9OUwll8gFX/g/hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMpCTONT3e79lPJ2aM+C/UmGCZBcwHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzUz MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzEPOWSbbSpyqK2M0rRONuljUc ckJZ482a07NLdMsXJojjai3UzpTct/C16PV0UVDlBBeywomy7vSo0OOBYZURSoM8 2ZcNi/29SnKdzQRWpD2NYPFW2xXs78HrE3ckHxKs5eocJyOdPpy14Y3gc6QUJ2Wg m3xD3FXHhGsAMtNAGhMoNlb4os1dP46DIU6Ph9/nC301lfzLv14nyTaqqfoKOGPa jdIyatWK0h6I4I4q3T/9vncs1ie7+osZNzEpL2b68X7iovtm6tkObDSHrd3OeBiN QOyq5M4Na0zHpfYmCrlt4ByhfJqPhWSmCtYbWvh8bHZ6DmR2dfKNg2hB4uqF -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:17 2025 by rpki-client