$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3538303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3538303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: /1sAe4JDHT+qe01PQlTBBwblaqbUTRmazkRVbjKqA24= Subject key identifier: 68:B9:A2:3C:14:AC:6C:18:C0:1A:5F:44:AC:76:D9:F6:0F:26:38:FD Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 54FA076A85C63E78FA7FE63ECE4F6461D6EC5354 Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3538303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:02 +0000 ROA not before: Mon 03 Nov 2025 01:20:02 +0000 ROA not after: Mon 02 Nov 2026 01:25:02 +0000 asID: 273134 IP address blocks: 2803:5450:580::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fa:07:6a:85:c6:3e:78:fa:7f:e6:3e:ce:4f:64:61:d6:ec:53:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:02 2025 GMT Not After : Nov 2 01:25:02 2026 GMT Subject: CN=68B9A23C14AC6C18C01A5F44AC76D9F60F2638FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:30:82:a6:a8:87:d5:65:42:7c:d0:80:d5: 61:d9:e2:c5:f0:ba:60:3a:bc:54:36:95:20:2e:19: 29:bd:cd:34:c6:55:36:46:e5:10:b6:3e:6d:eb:8e: e4:e3:3e:72:f0:48:49:a0:a9:34:1b:dd:5a:30:fe: 2c:92:51:ff:80:c5:21:99:ea:51:6f:32:b4:48:69: b0:78:cb:46:d8:5c:c8:c4:77:d6:dd:70:af:20:3e: d9:cd:9e:19:aa:2f:de:87:2d:78:ba:1c:84:d4:7f: 1c:30:1b:c9:d2:0a:ab:ac:71:d5:23:98:74:5e:d1: 19:fe:d1:4a:06:cb:1c:5f:9d:c5:ba:ae:41:00:78: a4:59:42:57:92:05:03:f5:7f:c0:55:2d:26:bd:d1: dc:65:09:67:19:2f:6c:b7:97:10:c5:22:67:85:84: a3:b1:f9:af:75:5b:08:ef:c9:cd:43:fe:75:9a:b2: ad:7a:60:cd:04:62:be:92:cd:9e:17:b8:4b:c8:7b: ce:ac:c1:9a:f9:0b:13:26:85:ec:ea:7b:90:e7:b1: d2:80:35:87:14:66:d2:49:30:8a:83:74:7f:07:64: 08:bd:fe:31:55:ae:59:bf:d5:b5:9e:df:d4:27:67: 52:bc:ab:d0:75:a3:89:fb:61:3f:43:36:d8:4c:6f: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B9:A2:3C:14:AC:6C:18:C0:1A:5F:44:AC:76:D9:F6:0F:26:38:FD X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3538303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:580::/42 Signature Algorithm: sha256WithRSAEncryption 1f:fd:3e:18:ad:1c:0a:84:e6:16:fa:86:4e:e3:99:2b:04:9f: 75:dc:ef:8a:9d:5f:7e:ac:97:0c:82:fc:8a:ae:e1:35:b7:24: 1c:03:69:a6:34:0e:61:10:93:aa:d1:4d:58:8d:96:d9:0f:95: 6d:7c:85:49:b9:e6:00:07:d3:10:48:a2:e3:df:c8:c9:fc:2f: ff:f4:88:0a:19:78:85:ce:d3:e4:9d:f1:d4:2f:d0:17:d4:47: 36:e1:52:3e:f1:2c:5b:b3:3d:0f:45:03:b8:52:7e:f7:54:8c: 31:d2:c8:6a:ef:b0:e6:0a:6c:1e:73:ae:6b:64:ed:9a:5c:de: 57:c9:ae:46:ed:36:29:59:20:ac:7e:4d:b0:b6:4f:4b:72:30: ec:c7:43:a0:82:c7:fa:33:8d:97:ad:a1:59:11:ee:d0:65:5a: c3:d8:f9:aa:19:41:78:6e:de:8b:4a:8f:b8:62:96:e6:9f:97: a9:ab:9b:25:dd:14:c6:b8:73:aa:c8:60:16:da:82:70:69:d6: e4:d6:93:98:9d:9d:08:e4:5e:60:59:42:55:f7:bb:2c:56:b2: 22:67:14:7e:f9:81:27:21:46:d7:ec:69:92:ce:ac:da:af:a5: 23:de:40:05:bd:3b:e8:75:df:15:c3:8d:f8:ec:aa:b5:15:22: 21:49:df:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVPoHaoXGPnj6f+Y+zk9kYdbsU1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDJaFw0yNjExMDIwMTI1MDJaMDMxMTAvBgNV BAMTKDY4QjlBMjNDMTRBQzZDMThDMDFBNUY0NEFDNzZEOUY2MEYyNjM4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXzCCpqiH1WVCfNCA1WHZ4sXw umA6vFQ2lSAuGSm9zTTGVTZG5RC2Pm3rjuTjPnLwSEmgqTQb3Vow/iySUf+AxSGZ 6lFvMrRIabB4y0bYXMjEd9bdcK8gPtnNnhmqL96HLXi6HITUfxwwG8nSCquscdUj mHRe0Rn+0UoGyxxfncW6rkEAeKRZQleSBQP1f8BVLSa90dxlCWcZL2y3lxDFImeF hKOx+a91Wwjvyc1D/nWasq16YM0EYr6SzZ4XuEvIe86swZr5CxMmhezqe5DnsdKA NYcUZtJJMIqDdH8HZAi9/jFVrlm/1bWe39QnZ1K8q9B1o4n7YT9DNthMb7HzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaLmiPBSsbBjAGl9ErHbZ9g8mOP0wHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzUz ODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAWAMA0GCSqGSIb3DQEBCwUAA4IBAQAf/T4YrRwKhOYW+oZO45krBJ91 3O+KnV9+rJcMgvyKruE1tyQcA2mmNA5hEJOq0U1YjZbZD5VtfIVJueYAB9MQSKLj 38jJ/C//9IgKGXiFztPknfHUL9AX1Ec24VI+8Sxbsz0PRQO4Un73VIwx0shq77Dm Cmwec65rZO2aXN5Xya5G7TYpWSCsfk2wtk9LcjDsx0Oggsf6M42XraFZEe7QZVrD 2PmqGUF4bt6LSo+4Ypbmn5epq5sl3RTGuHOqyGAW2oJwadbk1pOYnZ0I5F5gWUJV 97ssVrIiZxR++YEnIUbX7GmSzqzar6Uj3kAFvTvodd8Vw4347Kq1FSIhSd+K -----END CERTIFICATE-----Generated at Wed Nov 5 13:14:15 2025 by rpki-client