$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa File: 323830333a636230303a3a2f33322d3438203d3e203236363139.roa (raw, json) Hash identifier: KW3lUoDvvrdqMuQgIayGikrgDXx44M0yF2kixQvrmQE= Subject key identifier: 52:F7:F5:99:D7:48:D7:74:AC:95:77:A7:AD:BC:EB:47:E5:F6:5C:04 Certificate issuer: /CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9 Certificate serial: 7984156E8F5352C8A8115CE45E975DDA761F597D Authority key identifier: AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa Signing time: Mon 12 Oct 2026 21:40:07 +0000 ROA not before: Mon 12 Oct 2026 21:35:07 +0000 ROA not after: Mon 11 Oct 2027 21:40:07 +0000 asID: 26619 IP address blocks: 2803:cb00::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 Oct 2026 11:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:84:15:6e:8f:53:52:c8:a8:11:5c:e4:5e:97:5d:da:76:1f:59:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9 Validity Not Before: Oct 12 21:35:07 2026 GMT Not After : Oct 11 21:40:07 2027 GMT Subject: CN=52F7F599D748D774AC9577A7ADBCEB47E5F65C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:77:0d:b1:a2:8d:02:5d:0d:db:b9:98:6b: ee:92:04:0c:70:a8:82:00:7c:cb:99:2b:5f:b3:ed: 0a:43:74:e4:c5:72:6c:90:da:5a:12:20:b0:99:c9: bd:23:c9:83:e8:f6:18:6e:ee:0c:4a:50:7a:2d:be: 0e:9c:29:dd:6d:23:19:7c:38:3b:fb:74:be:c6:0f: ff:4e:59:72:03:52:a7:6e:59:30:fe:b1:f0:b2:74: 7c:75:12:ad:c8:88:f1:b2:d7:1e:0b:f3:ac:e6:00: 56:e4:54:1b:76:ef:98:82:3f:91:c9:b3:a2:5d:0f: 95:16:d0:63:d8:e9:ee:70:46:9d:d1:30:5b:b6:28: 97:05:50:dc:ba:98:c7:43:08:cb:50:08:4e:de:b3: 61:2c:33:4c:02:8f:a6:7b:18:26:e2:4f:02:84:59: f6:f7:72:1a:cb:51:5c:69:39:dd:32:d4:f6:8c:19: 92:c4:55:1d:b9:6b:e0:47:d3:00:90:68:2b:3c:cc: 2e:6f:a0:53:f4:8c:27:d9:3b:83:9b:c0:17:5e:23: c6:5f:ee:db:0c:dd:70:fe:92:39:5a:95:ff:ff:dc: 17:7e:83:f2:d1:79:d2:cd:ac:17:8f:3b:84:27:94: 54:46:32:94:6a:05:ba:a3:90:23:4e:1b:99:53:08: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:F5:99:D7:48:D7:74:AC:95:77:A7:AD:BC:EB:47:E5:F6:5C:04 X509v3 Authority Key Identifier: keyid:AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cb00::/32 Signature Algorithm: sha256WithRSAEncryption 39:92:34:47:50:61:d9:39:c0:e3:2e:24:f5:b3:3e:51:ab:3e: 95:bb:72:4a:0f:bc:15:6a:3b:5d:27:04:1f:dc:1e:19:c4:f0: fd:15:6c:e7:32:a1:38:40:0b:0b:eb:04:74:2e:92:ed:da:a3: 31:a4:64:4a:58:3e:49:9b:d6:f1:e8:b1:67:fb:2e:51:7c:9c: a9:d3:e8:ad:4b:65:c3:80:14:be:8a:48:af:fb:9f:7d:07:51: 8e:c1:ce:1d:93:90:d2:68:5c:fc:a2:65:52:88:1b:81:c2:45: 46:47:9a:7e:a6:d0:6e:f5:a9:98:7e:d7:2d:2b:15:cb:28:35: 10:af:0f:5e:df:49:d3:37:07:6b:ea:24:c4:03:e9:37:58:9c: 34:18:0a:73:90:ab:b5:dc:1d:23:70:81:62:4e:ec:96:2e:23: 6b:d9:88:51:03:87:2a:09:3d:0d:71:ac:b5:1c:3c:14:8b:18: 4d:cd:c8:da:02:c6:c2:01:5b:a3:9e:85:00:56:b7:21:76:62: ee:2b:32:c6:83:5f:36:d5:c8:57:4e:a8:a0:81:67:55:ca:2e: 95:8c:6a:0c:90:62:9b:39:b2:12:57:3c:73:42:58:15:c0:14: 34:63:ba:ab:d3:8c:45:ee:31:55:3a:35:2e:81:69:39:bb:22: d0:e2:d5:e8 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUeYQVbo9TUsioEVzkXpdd2nYfWX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2NkU5RjVDM0MxMUE1RjcxQUMxMDBCQzA1QTk5NThF RjIxNDhDOTAeFw0yNjEwMTIyMTM1MDdaFw0yNzEwMTEyMTQwMDdaMDMxMTAvBgNV BAMTKDUyRjdGNTk5RDc0OEQ3NzRBQzk1NzdBN0FEQkNFQjQ3RTVGNjVDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKncNsaKNAl0N27mYa+6SBAxw qIIAfMuZK1+z7QpDdOTFcmyQ2loSILCZyb0jyYPo9hhu7gxKUHotvg6cKd1tIxl8 ODv7dL7GD/9OWXIDUqduWTD+sfCydHx1Eq3IiPGy1x4L86zmAFbkVBt275iCP5HJ s6JdD5UW0GPY6e5wRp3RMFu2KJcFUNy6mMdDCMtQCE7es2EsM0wCj6Z7GCbiTwKE Wfb3chrLUVxpOd0y1PaMGZLEVR25a+BH0wCQaCs8zC5voFP0jCfZO4ObwBdeI8Zf 7tsM3XD+kjlalf//3Bd+g/LRedLNrBePO4QnlFRGMpRqBbqjkCNOG5lTCNNPAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUUvf1mddI13SslXenrbzrR+X2XAQwHwYDVR0j BBgwFoAUrWbp9cPBGl9xrBALwFqZWO8hSMkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMEE3NkEzN0NDRERBNjBGQUEzODA2RjU1MEY1NDcyM0Iy MDUxRjdGNDBBNkJBRUJGMUQ4NjVFQzM1OTFCODBELzAvQUQ2NkU5RjVDM0MxMUE1 RjcxQUMxMDBCQzA1QTk5NThFRjIxNDhDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDY2RTlGNUMzQzExQTVGNzFB QzEwMEJDMDVBOTk1OEVGMjE0OEM5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDBBNzZBMzdDQ0REQTYwRkFBMzgwNkY1NTBGNTQ3MjNCMjA1MUY3RjQw QTZCQUVCRjFEODY1RUMzNTkxQjgwRC8wLzMyMzgzMDMzM2E2MzYyMzAzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA8sAMA0G CSqGSIb3DQEBCwUAA4IBAQA5kjRHUGHZOcDjLiT1sz5Rqz6Vu3JKD7wVajtdJwQf 3B4ZxPD9FWznMqE4QAsL6wR0LpLt2qMxpGRKWD5Jm9bx6LFn+y5RfJyp0+itS2XD gBS+ikiv+599B1GOwc4dk5DSaFz8omVSiBuBwkVGR5p+ptBu9amYftctKxXLKDUQ rw9e30nTNwdr6iTEA+k3WJw0GApzkKu13B0jcIFiTuyWLiNr2YhRA4cqCT0Ncay1 HDwUixhNzcjaAsbCAVujnoUAVrchdmLuKzLGg1821chXTqiggWdVyi6VjGoMkGKb ObISVzxzQlgVwBQ0Y7qr04xF7jFVOjUugWk5uyLQ4tXo -----END CERTIFICATE-----Generated at Thu Oct 15 10:04:15 2026 by rpki-client