$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3630303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3630303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: wfRIy4qBZBoS0/RO3BVPuA8ZB7spsBd5yO8bv/cFKLI= Subject key identifier: C7:42:EF:5B:D8:49:59:D5:48:2D:61:3B:CB:C9:3B:06:40:92:BD:08 Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 5F08E344FB01E9409129198222BF2D8CAD7D2423 Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3630303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:00 +0000 ROA not before: Mon 03 Nov 2025 01:20:00 +0000 ROA not after: Mon 02 Nov 2026 01:25:00 +0000 asID: 273134 IP address blocks: 2803:5450:600::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:08:e3:44:fb:01:e9:40:91:29:19:82:22:bf:2d:8c:ad:7d:24:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:00 2025 GMT Not After : Nov 2 01:25:00 2026 GMT Subject: CN=C742EF5BD84959D5482D613BCBC93B064092BD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:c8:fc:b6:43:b1:c6:a9:56:77:b3:3b:24: ef:23:85:e5:c3:8b:c8:ea:b3:67:10:13:2d:9b:f4: 26:b9:5b:55:38:b0:e0:20:47:5c:e8:53:13:a8:69: 9e:61:50:7d:e8:81:24:47:c4:9a:4d:48:fb:38:15: 75:59:17:a7:f5:75:2e:03:b8:f9:1a:3d:d6:84:bb: 6b:10:57:c6:9d:a0:f7:f7:ad:5b:2a:b0:e9:8b:93: e9:05:dc:52:50:2d:19:7d:4a:04:41:cb:df:35:88: ed:6a:5d:a9:77:f1:a7:5c:6b:f8:f3:13:28:4e:71: 11:d2:b5:e3:c2:66:22:c9:7c:ea:79:eb:8e:1b:62: bb:1f:a5:07:ea:3e:cc:ef:4a:af:e3:71:5e:63:30: 38:97:e5:e6:4f:61:3b:6f:75:3a:a8:26:30:1f:7f: b1:e4:40:ef:ca:b4:7a:06:f5:9f:2b:70:ea:ab:a7: 68:c5:28:09:64:8b:1c:3a:33:e1:24:fd:6c:87:44: 4e:e5:1e:99:ed:69:33:aa:e3:0a:b1:5b:5a:88:c4: 37:63:eb:ec:b6:cc:a5:6a:8f:5d:47:b0:bd:72:86: 9e:83:cc:e8:ea:e4:a1:e3:4b:26:a0:ce:89:cf:a3: a4:ec:e6:be:5d:00:14:b4:69:a7:21:53:54:fa:72: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:EF:5B:D8:49:59:D5:48:2D:61:3B:CB:C9:3B:06:40:92:BD:08 X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3630303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:600::/42 Signature Algorithm: sha256WithRSAEncryption b3:83:cf:0e:f5:1a:af:1d:c7:6c:11:d9:f5:b8:bb:05:85:ff: 4c:79:1c:ea:68:67:ce:fb:5d:6c:7a:c3:9f:fc:ee:45:23:77: a5:30:f7:88:31:72:48:be:57:d2:c7:f4:bb:7d:62:a0:ed:8b: cc:70:9b:75:1b:7c:0e:b5:2e:c1:b4:1f:ac:b1:92:b9:06:2c: 53:d6:7c:32:6a:85:36:da:ec:7a:3c:93:5a:8f:9d:fb:04:23: 51:be:7a:a3:cd:ca:0d:f1:9d:93:46:92:0a:1c:c2:09:e1:84: dc:10:74:a0:ae:bb:17:76:a5:64:41:ee:f5:45:4c:c9:8b:12: c6:86:c7:3e:ad:1f:68:3b:48:df:bd:57:e7:1d:f5:72:d4:3e: d9:3d:0a:32:8f:09:2e:b8:03:cf:05:f3:2b:fc:2e:7d:77:36: c2:77:4a:15:43:02:b9:4e:b1:0b:e9:60:b4:80:50:03:82:66: de:6f:74:dc:26:37:a4:2e:25:9b:ef:88:6f:cc:6f:ae:b6:4d: d1:8c:1d:c4:74:45:c5:d0:73:b8:7e:8c:7d:d5:2d:e8:1f:0b: ba:1a:67:27:79:b9:0c:03:6f:9b:42:4d:f0:76:2c:d1:24:f3: 42:8d:58:44:21:46:47:92:fe:f8:3f:8a:d6:5b:11:c8:f8:0f: 03:ed:66:d8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXwjjRPsB6UCRKRmCIr8tjK19JCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDBaFw0yNjExMDIwMTI1MDBaMDMxMTAvBgNV BAMTKEM3NDJFRjVCRDg0OTU5RDU0ODJENjEzQkNCQzkzQjA2NDA5MkJEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjsj8tkOxxqlWd7M7JO8jheXD i8jqs2cQEy2b9Ca5W1U4sOAgR1zoUxOoaZ5hUH3ogSRHxJpNSPs4FXVZF6f1dS4D uPkaPdaEu2sQV8adoPf3rVsqsOmLk+kF3FJQLRl9SgRBy981iO1qXal38adca/jz EyhOcRHStePCZiLJfOp5644bYrsfpQfqPszvSq/jcV5jMDiX5eZPYTtvdTqoJjAf f7HkQO/KtHoG9Z8rcOqrp2jFKAlkixw6M+Ek/WyHRE7lHpntaTOq4wqxW1qIxDdj 6+y2zKVqj11HsL1yhp6DzOjq5KHjSyagzonPo6Ts5r5dABS0aachU1T6chYNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUx0LvW9hJWdVILWE7y8k7BkCSvQgwHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzYz MDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAYAMA0GCSqGSIb3DQEBCwUAA4IBAQCzg88O9RqvHcdsEdn1uLsFhf9M eRzqaGfO+11sesOf/O5FI3elMPeIMXJIvlfSx/S7fWKg7YvMcJt1G3wOtS7BtB+s sZK5BixT1nwyaoU22ux6PJNaj537BCNRvnqjzcoN8Z2TRpIKHMIJ4YTcEHSgrrsX dqVkQe71RUzJixLGhsc+rR9oO0jfvVfnHfVy1D7ZPQoyjwkuuAPPBfMr/C59dzbC d0oVQwK5TrEL6WC0gFADgmbeb3TcJjekLiWb74hvzG+utk3RjB3EdEXF0HO4fox9 1S3oHwu6GmcnebkMA2+bQk3wdizRJPNCjVhEIUZHkv74P4rWWxHI+A8D7WbY -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:20 2025 by rpki-client