$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33322d3438203d3e20323731383936.roa File: 323830333a323231303a3a2f33322d3438203d3e20323731383936.roa (raw, json) Hash identifier: adCs36QNzm3GUXnrmgFT4GEFYY5rriy/pu2JadFfnwA= Subject key identifier: 20:23:4B:A3:09:EA:05:1D:C9:90:FA:9C:F5:65:A3:3C:8C:17:D1:13 Certificate issuer: /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Certificate serial: 62BCC2CFA96ED9D677E7D732F76675FB45D7E7 Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33322d3438203d3e20323731383936.roa Signing time: Tue 21 Oct 2025 19:30:00 +0000 ROA not before: Tue 21 Oct 2025 19:25:00 +0000 ROA not after: Tue 20 Oct 2026 19:30:00 +0000 asID: 271896 IP address blocks: 2803:2210::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 21:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:bc:c2:cf:a9:6e:d9:d6:77:e7:d7:32:f7:66:75:fb:45:d7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D Validity Not Before: Oct 21 19:25:00 2025 GMT Not After : Oct 20 19:30:00 2026 GMT Subject: CN=20234BA309EA051DC990FA9CF565A33C8C17D113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:0b:a6:a2:28:12:75:80:39:24:97:47:bc: e0:36:8f:d4:03:c9:b5:c7:40:62:2c:b3:3f:0d:89: d7:44:e1:aa:4a:5a:8e:d7:4e:75:84:42:70:5d:d7: 91:6f:ad:62:7a:a5:02:dd:ca:44:56:ae:06:f6:a6: 33:a4:7a:31:90:e0:f6:4b:e2:25:61:b0:51:05:19: eb:a8:a6:d8:d9:a5:fa:74:f9:2d:f4:40:b5:96:3e: 14:db:0f:e6:58:20:08:1c:fc:50:bd:4c:ef:0b:3b: 46:a4:98:b3:48:e5:61:a3:e3:00:16:e5:55:24:a6: 20:9a:2b:f7:c4:45:a9:2a:f0:95:45:ba:8f:29:10: d8:0b:05:9f:5d:a9:54:a0:12:dd:22:c7:83:61:d6: 5d:eb:f7:df:00:49:45:74:f7:e0:da:38:d6:b5:7a: ea:10:3f:0d:2b:43:7e:c3:3f:49:bc:3f:05:45:e1: 1f:8e:46:9c:5c:6b:d5:b0:32:5b:2e:11:1a:bb:95: 7b:0c:9e:bb:75:2c:9f:93:fa:88:e2:60:d3:dc:19: fe:1a:14:4c:1a:e6:d3:4e:64:57:6f:b6:36:8e:c0: 82:1e:71:bb:3a:06:02:d9:f0:2a:5e:a1:59:2c:3b: 7a:74:c1:8f:78:5b:b1:6e:73:e5:9e:26:48:88:d5: ca:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:23:4B:A3:09:EA:05:1D:C9:90:FA:9C:F5:65:A3:3C:8C:17:D1:13 X509v3 Authority Key Identifier: keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/323830333a323231303a3a2f33322d3438203d3e20323731383936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2210::/32 Signature Algorithm: sha256WithRSAEncryption ae:65:bc:ba:53:c2:aa:51:a6:68:89:6e:9b:57:0b:73:c0:1e: de:bc:f1:b2:da:db:ec:e3:f7:d7:e4:88:99:6a:4d:1e:35:4b: 1f:d4:48:6d:4e:85:af:6f:1b:dd:0f:76:5d:14:95:c9:2f:19: 75:c3:2b:8a:93:c3:02:53:12:28:ee:35:84:5f:b4:e6:33:9a: c1:e6:b6:16:af:da:5f:c2:c0:2c:de:d8:db:b3:03:83:b4:0e: ff:bd:cb:f5:16:12:31:0e:0a:32:5d:ad:9e:a9:2c:d3:9d:6b: 20:5e:4e:e8:d3:f7:75:b4:27:52:61:30:77:c3:34:61:40:dd: 65:48:2d:de:cf:97:f0:e5:22:35:e0:93:14:2a:cb:e6:b1:e2: be:b2:07:e8:00:b1:02:90:11:42:64:12:38:70:aa:fd:3c:6a: 02:f3:2a:b2:d4:ad:8a:3b:46:b5:ba:0c:e6:88:37:70:6d:d6: 14:8a:2a:18:95:40:27:71:80:2a:07:6e:91:20:ee:3e:ce:9d: f5:ca:76:52:ff:07:97:01:30:c9:ac:27:07:b8:e8:73:cb:8a: 36:a4:3d:cb:08:d0:22:8c:c7:4a:2e:f2:23:e6:1f:a0:9b:6e: 5c:80:27:c6:71:ed:8d:b4:9f:29:d2:c4:33:50:69:85:3a:e0: 1f:20:36:a0 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgITYrzCz6lu2dZ359cy92Z1+0XX5zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyMUJDM0U4NEIyMkNBOERCQkVCODQ1N0Y3QkZFMzAzRUNG QjM1NTdEMB4XDTI1MTAyMTE5MjUwMFoXDTI2MTAyMDE5MzAwMFowMzExMC8GA1UE AxMoMjAyMzRCQTMwOUVBMDUxREM5OTBGQTlDRjU2NUEzM0M4QzE3RDExMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKzlC6aiKBJ1gDkkl0e84DaP1APJ tcdAYiyzPw2J10ThqkpajtdOdYRCcF3XkW+tYnqlAt3KRFauBvamM6R6MZDg9kvi JWGwUQUZ66im2Nml+nT5LfRAtZY+FNsP5lggCBz8UL1M7ws7RqSYs0jlYaPjABbl VSSmIJor98RFqSrwlUW6jykQ2AsFn12pVKAS3SLHg2HWXev33wBJRXT34No41rV6 6hA/DStDfsM/Sbw/BUXhH45GnFxr1bAyWy4RGruVewyeu3Usn5P6iOJg09wZ/hoU TBrm005kV2+2No7Agh5xuzoGAtnwKl6hWSw7enTBj3hbsW5z5Z4mSIjVyl0CAwEA AaOCAskwggLFMB0GA1UdDgQWBBQgI0ujCeoFHcmQ+pz1ZaM8jBfREzAfBgNVHSME GDAWgBQhvD6Esiyo2764RX97/jA+z7NVfTAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0 L3Jwa2kvbGFjbmljL0M2N0MxRTJCQTZFMTM5MTQyQzFDRDU0RDYzQTYzNURENUZD MTIzNERCRkMzRjNFN0ExNzdCMDkyM0FBODhDQTQvMC8yMUJDM0U4NEIyMkNBOERC QkVCODQ1N0Y3QkZFMzAzRUNGQjM1NTdELmNybDCBuQYIKwYBBQUHAQEEgawwgakw gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzIxQkMzRTg0QjIyQ0E4REJCRUI4 NDU3RjdCRkUzMDNFQ0ZCMzU1N0QuY2VyMIHHBggrBgEFBQcBCwSBujCBtzCBtAYI KwYBBQUHMAuGgadyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNjdDMUUyQkE2RTEzOTE0MkMxQ0Q1NEQ2M0E2MzVERDVGQzEyMzREQkZD M0YzRTdBMTc3QjA5MjNBQTg4Q0E0LzAvMzIzODMwMzMzYTMyMzIzMTMwM2EzYTJm MzMzMjJkMzQzODIwM2QzZTIwMzIzNzMxMzgzOTM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMiEDAN BgkqhkiG9w0BAQsFAAOCAQEArmW8ulPCqlGmaIlum1cLc8Ae3rzxstrb7OP31+SI mWpNHjVLH9RIbU6Fr28b3Q92XRSVyS8ZdcMripPDAlMSKO41hF+05jOawea2Fq/a X8LALN7Y27MDg7QO/73L9RYSMQ4KMl2tnqks051rIF5O6NP3dbQnUmEwd8M0YUDd ZUgt3s+X8OUiNeCTFCrL5rHivrIH6ACxApARQmQSOHCq/TxqAvMqstStijtGtboM 5og3cG3WFIoqGJVAJ3GAKgdukSDuPs6d9cp2Uv8HlwEwyawnB7joc8uKNqQ9ywjQ IozHSi7yI+YfoJtuXIAnxnHtjbSfKdLEM1BphTrgHyA2oA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:41:30 2025 by rpki-client