$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3563303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3563303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: RF723JnImbQo0cgA75rvIWv6AyDj3h6nM7AtifG4M5A= Subject key identifier: 75:38:9D:D3:95:16:A0:73:0C:A2:ED:F5:3C:01:1B:27:C3:68:77:DF Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 07FE3C621C2D5DBE5A3A74AB69447F34F95AB87D Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3563303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:03 +0000 ROA not before: Mon 03 Nov 2025 01:20:03 +0000 ROA not after: Mon 02 Nov 2026 01:25:03 +0000 asID: 273134 IP address blocks: 2803:5450:5c0::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fe:3c:62:1c:2d:5d:be:5a:3a:74:ab:69:44:7f:34:f9:5a:b8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:03 2025 GMT Not After : Nov 2 01:25:03 2026 GMT Subject: CN=75389DD39516A0730CA2EDF53C011B27C36877DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:ef:c8:7d:3a:fa:df:6c:d8:ff:00:ff:71: 47:94:4d:27:41:d4:cf:c0:22:6b:e6:83:96:ea:c0: 54:38:d5:5c:13:5f:10:dc:42:53:bc:a2:72:f3:f3: ab:39:24:0e:79:b8:1e:4a:7d:a2:78:a0:79:1b:12: 1b:8c:c6:7d:f2:69:e2:bc:06:2e:58:aa:45:eb:55: cf:68:37:4e:f4:1a:4f:90:23:01:14:84:9f:a6:9b: 02:da:63:5e:5d:0d:78:8d:80:3f:44:a9:a2:26:a6: 32:2c:bd:7c:18:bc:30:fb:80:8f:cb:e0:46:1e:2b: 86:02:b1:aa:37:9a:bf:4d:d5:7c:c8:ab:75:f4:4e: 04:eb:49:53:30:76:60:ac:6f:72:ab:93:f0:0b:45: 4e:04:3e:af:4c:8f:26:c8:72:44:c8:33:6b:f0:4c: f7:d8:70:92:67:0c:05:80:eb:ee:16:78:57:b7:94: 92:a4:8a:dd:d8:a9:e2:49:eb:d2:fd:d5:e1:85:3a: 67:81:c9:1a:b6:c6:c4:df:7c:94:5d:03:40:7e:fb: 71:f5:8d:28:df:d4:dd:1a:4a:84:23:f6:88:52:cb: 39:39:f2:12:98:59:4d:b2:43:e5:3a:b2:fe:5f:f7: 96:c6:b8:10:a1:a6:15:7c:d7:09:4d:66:9e:f4:ef: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:38:9D:D3:95:16:A0:73:0C:A2:ED:F5:3C:01:1B:27:C3:68:77:DF X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3563303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:5c0::/42 Signature Algorithm: sha256WithRSAEncryption 71:c3:1b:95:ea:8e:a2:7f:f1:3b:bd:1b:85:e1:b2:48:bf:bc: cc:50:24:e9:05:14:76:3d:89:af:f1:ce:74:3b:52:26:98:78: fc:46:5a:e4:d2:d4:6f:ac:c3:de:24:b5:d0:f2:61:4d:43:b1: 7c:bf:3c:ed:69:41:40:53:86:db:d1:f8:d0:3d:77:6c:74:30: e1:fd:14:99:1a:d8:36:e7:ac:e3:0c:36:40:19:7c:d8:f9:ae: 25:d0:a6:4b:c0:db:a0:bb:c0:72:15:26:04:c0:3e:3a:d8:1c: 46:2b:41:cb:ff:fe:ef:48:32:a9:86:7d:90:a2:5b:13:41:d9: c3:b6:ec:f1:c2:01:1e:f3:12:cf:ab:c0:e1:9a:4d:db:9a:aa: c6:58:a6:2d:23:4e:4d:35:dd:86:21:c3:0a:80:83:8f:a1:63: 7f:76:bf:d6:e2:63:c5:fc:98:fe:c6:1c:c4:80:91:ac:67:c0: 72:d1:aa:e8:21:58:51:ba:44:03:31:58:7b:61:f1:67:25:c1: 25:b7:a8:0b:a0:31:b2:35:c6:19:d7:a0:22:1e:5d:01:95:b9: 80:bf:d3:9f:1b:f4:76:f7:14:92:3e:78:64:24:43:d5:c9:a2: 33:44:54:ea:be:b7:e0:52:a2:9c:7b:7d:f4:76:41:9e:73:35: b5:dd:32:2f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB/48YhwtXb5aOnSraUR/NPlauH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDNaFw0yNjExMDIwMTI1MDNaMDMxMTAvBgNV BAMTKDc1Mzg5REQzOTUxNkEwNzMwQ0EyRURGNTNDMDExQjI3QzM2ODc3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJO/IfTr632zY/wD/cUeUTSdB 1M/AImvmg5bqwFQ41VwTXxDcQlO8onLz86s5JA55uB5KfaJ4oHkbEhuMxn3yaeK8 Bi5YqkXrVc9oN070Gk+QIwEUhJ+mmwLaY15dDXiNgD9EqaImpjIsvXwYvDD7gI/L 4EYeK4YCsao3mr9N1XzIq3X0TgTrSVMwdmCsb3Krk/ALRU4EPq9MjybIckTIM2vw TPfYcJJnDAWA6+4WeFe3lJKkit3YqeJJ69L91eGFOmeByRq2xsTffJRdA0B++3H1 jSjf1N0aSoQj9ohSyzk58hKYWU2yQ+U6sv5f95bGuBChphV81wlNZp7076OFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdTid05UWoHMMou31PAEbJ8Nod98wHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzU2 MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAXAMA0GCSqGSIb3DQEBCwUAA4IBAQBxwxuV6o6if/E7vRuF4bJIv7zM UCTpBRR2PYmv8c50O1ImmHj8Rlrk0tRvrMPeJLXQ8mFNQ7F8vzztaUFAU4bb0fjQ PXdsdDDh/RSZGtg256zjDDZAGXzY+a4l0KZLwNugu8ByFSYEwD462BxGK0HL//7v SDKphn2QolsTQdnDtuzxwgEe8xLPq8Dhmk3bmqrGWKYtI05NNd2GIcMKgIOPoWN/ dr/W4mPF/Jj+xhzEgJGsZ8By0aroIVhRukQDMVh7YfFnJcElt6gLoDGyNcYZ16Ai Hl0BlbmAv9OfG/R29xSSPnhkJEPVyaIzRFTqvrfgUqKce330dkGeczW13TIv -----END CERTIFICATE-----Generated at Wed Nov 5 13:14:35 2025 by rpki-client