$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3734303a3a2f34322d3432203d3e20323733313334.roa File: 323830333a353435303a3734303a3a2f34322d3432203d3e20323733313334.roa (raw, json) Hash identifier: xSoyKpVa6TpiYcwwnGvWkFIxYSrbn4d7BuBZaUa8KQE= Subject key identifier: 3B:37:B8:EF:40:9A:BE:92:0D:88:5F:51:E9:78:C9:54:09:54:78:20 Certificate issuer: /CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Certificate serial: 223F7A2138D99B1D4D5DB6BE50B7B7D0B7EB2B2E Authority key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3734303a3a2f34322d3432203d3e20323733313334.roa Signing time: Mon 03 Nov 2025 01:25:02 +0000 ROA not before: Mon 03 Nov 2025 01:20:02 +0000 ROA not after: Mon 02 Nov 2026 01:25:02 +0000 asID: 273134 IP address blocks: 2803:5450:740::/42 maxlen: 42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3f:7a:21:38:d9:9b:1d:4d:5d:b6:be:50:b7:b7:d0:b7:eb:2b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Validity Not Before: Nov 3 01:20:02 2025 GMT Not After : Nov 2 01:25:02 2026 GMT Subject: CN=3B37B8EF409ABE920D885F51E978C95409547820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:f5:71:cc:07:4d:28:67:19:07:7d:1d:53: 9e:f8:4c:6b:fa:9b:5e:b1:65:c4:0f:8e:75:b9:89: 51:fb:76:2a:ed:b7:f5:aa:a0:36:b0:90:bd:db:93: 0d:63:b7:de:a0:76:3b:41:a6:36:99:a7:82:8b:a6: 30:2f:72:33:73:88:bf:bd:65:6b:20:af:90:11:b3: cc:1b:df:bf:8b:c6:bd:d5:69:55:6d:f9:b2:ce:6e: a3:8c:f1:c3:d7:a6:8d:a1:6a:48:69:1b:4a:24:33: 4e:e5:14:3a:c8:aa:ca:90:6e:ea:43:0d:8d:5d:51: dc:9e:0b:b5:43:5c:11:83:30:6b:e0:f0:fb:ae:40: 90:4e:b2:f1:14:0f:ad:0e:e7:a9:7f:d7:1d:fa:ff: ee:b8:ad:5f:6c:9b:f9:61:f4:e8:28:c1:9a:8c:4b: d7:a3:e7:6d:8c:fc:70:af:8b:12:7c:e0:18:09:a6: d5:4b:0f:91:38:b6:9f:83:3d:30:9f:34:3a:6f:95: 05:dc:31:fa:d2:83:6e:46:20:48:0d:4c:59:5e:3e: 2b:78:3e:c6:d7:43:8a:70:58:54:8a:28:d6:9e:c9: 71:b7:35:88:21:ef:04:22:1f:ed:04:f4:39:87:aa: 97:78:bc:7d:52:ad:5b:85:42:c0:ce:23:51:1b:aa: 7c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:B8:EF:40:9A:BE:92:0D:88:5F:51:E9:78:C9:54:09:54:78:20 X509v3 Authority Key Identifier: keyid:12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/323830333a353435303a3734303a3a2f34322d3432203d3e20323733313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450:740::/42 Signature Algorithm: sha256WithRSAEncryption 74:eb:a0:17:30:0f:b7:de:83:d5:41:be:10:77:8e:db:59:9d: 55:62:3f:87:05:72:44:5c:0d:60:9e:13:27:a0:43:a8:1f:3d: 0b:c8:b0:5c:e2:dd:43:c3:f3:24:b4:0b:5b:80:86:e9:8c:ab: bc:16:ab:e1:9b:7a:47:61:8f:f9:a9:22:7d:be:ca:d8:c3:38: 9c:d8:5e:9e:d9:1a:8f:91:cc:77:38:7e:46:99:b3:82:25:ac: 1c:07:45:7e:75:68:1a:5e:66:cf:a6:a2:60:0f:01:0b:dc:83: d0:9c:0a:30:b5:62:43:62:2a:ba:1c:01:db:98:7f:fc:c3:bb: 2b:a7:29:54:fb:7a:34:1f:ca:74:0c:4a:e0:99:2c:78:d4:d2: db:b2:17:34:33:95:4a:ca:c0:2e:a9:10:cf:36:c7:5a:47:4c: 64:2e:4e:14:c0:90:c3:78:76:7d:43:96:e5:65:96:09:d1:69: 85:40:1e:a9:3d:6a:a3:f2:04:b3:2e:47:b3:2f:26:2e:eb:22: 94:32:5e:43:16:e6:ea:f0:26:8e:cd:06:35:0d:6b:78:b2:58: 2d:57:43:28:cf:4a:7a:86:b5:e7:1b:24:c0:b4:82:f6:0a:97: 52:44:27:2c:16:44:fe:28:09:81:36:fd:13:42:2a:7a:35:2e: 61:9d:65:eb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIj96ITjZmx1NXba+ULe30LfrKy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhFMTA2MEFFN0NB OTdGMzI3QzAeFw0yNTExMDMwMTIwMDJaFw0yNjExMDIwMTI1MDJaMDMxMTAvBgNV BAMTKDNCMzdCOEVGNDA5QUJFOTIwRDg4NUY1MUU5NzhDOTU0MDk1NDc4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNPVxzAdNKGcZB30dU574TGv6 m16xZcQPjnW5iVH7dirtt/WqoDawkL3bkw1jt96gdjtBpjaZp4KLpjAvcjNziL+9 ZWsgr5ARs8wb37+Lxr3VaVVt+bLObqOM8cPXpo2hakhpG0okM07lFDrIqsqQbupD DY1dUdyeC7VDXBGDMGvg8PuuQJBOsvEUD60O56l/1x36/+64rV9sm/lh9OgowZqM S9ej522M/HCvixJ84BgJptVLD5E4tp+DPTCfNDpvlQXcMfrSg25GIEgNTFlePit4 PsbXQ4pwWFSKKNaeyXG3NYgh7wQiH+0E9DmHqpd4vH1SrVuFQsDOI1EbqnxVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOze470CavpINiF9R6XjJVAlUeCAwHwYDVR0j BBgwFoAUElorscCOMCusIzyOEGCufKl/MnwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0 M0U3M0IwQTM5NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAy QkFDMjMzQzhFMTA2MEFFN0NBOTdGMzI3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjVBMkJCMUMwOEUzMDJCQUMy MzNDOEUxMDYwQUU3Q0E5N0YzMjdDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3Q0YzNzYxMTE4NDNFNzNCMEEz OTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzMyMzgzMDMzM2EzNTM0MzUzMDNhMzcz NDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzEzMzM0LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcGKANUUAdAMA0GCSqGSIb3DQEBCwUAA4IBAQB066AXMA+33oPVQb4Qd47bWZ1V Yj+HBXJEXA1gnhMnoEOoHz0LyLBc4t1Dw/MktAtbgIbpjKu8Fqvhm3pHYY/5qSJ9 vsrYwzic2F6e2RqPkcx3OH5GmbOCJawcB0V+dWgaXmbPpqJgDwEL3IPQnAowtWJD Yiq6HAHbmH/8w7srpylU+3o0H8p0DErgmSx41NLbshc0M5VKysAuqRDPNsdaR0xk Lk4UwJDDeHZ9Q5blZZYJ0WmFQB6pPWqj8gSzLkezLyYu6yKUMl5DFubq8CaOzQY1 DWt4slgtV0Moz0p6hrXnGyTAtIL2CpdSRCcsFkT+KAmBNv0TQip6NS5hnWXr -----END CERTIFICATE-----Generated at Wed Nov 5 08:34:16 2025 by rpki-client