$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa File: 323830363a3363383a3a2f33322d3332203d3e20323730313439.roa (raw, json) Hash identifier: jvdrWAxMskBr8pBNGyYJ7lYwYZ2yNKoPIIZpz2RoJMQ= Subject key identifier: 92:30:8F:64:EA:89:58:BE:BC:F0:00:B0:22:21:06:EC:E3:28:7B:91 Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB Certificate serial: 25D6F05915DCA86BAE861EA65919E148250F765F Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa Signing time: Tue 04 Feb 2025 18:08:42 +0000 ROA not before: Tue 04 Feb 2025 18:03:42 +0000 ROA not after: Tue 03 Feb 2026 18:08:42 +0000 asID: 270149 IP address blocks: 2806:3c8::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d6:f0:59:15:dc:a8:6b:ae:86:1e:a6:59:19:e1:48:25:0f:76:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB Validity Not Before: Feb 4 18:03:42 2025 GMT Not After : Feb 3 18:08:42 2026 GMT Subject: CN=92308F64EA8958BEBCF000B0222106ECE3287B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:2b:ad:8c:82:c2:a0:52:0e:15:08:79:bb: ea:ac:67:12:de:00:63:6e:40:a7:01:de:07:b4:15: d8:32:db:06:f5:ef:dc:b0:be:ec:4a:6b:2b:c1:bc: e4:cd:76:f1:0c:3f:1b:4e:99:3d:53:e6:35:d9:16: 90:9c:57:49:6c:b6:a1:d2:ca:16:87:2d:e8:6e:ac: be:de:14:95:3c:d1:99:32:45:27:3f:49:f1:65:51: 3b:97:f9:84:b0:37:14:f4:1d:a2:c5:42:7c:47:7a: 20:30:12:41:a6:e0:6f:2c:e6:0c:e0:e2:07:83:1a: 69:85:52:3d:42:ff:09:37:32:84:34:cb:68:26:11: 60:e4:fa:a7:f2:7e:f8:86:6a:ff:a3:da:4b:e1:f9: c8:a2:c9:0a:51:83:40:78:2b:41:91:44:e2:de:9d: 47:2f:df:48:11:75:c1:a2:d9:2d:73:7a:65:2c:a8: 52:3f:46:10:3a:f8:9e:b3:fd:4a:32:00:52:4b:82: 50:35:3b:86:67:b0:0a:4b:e0:98:d1:eb:81:91:b1: 98:fd:34:77:37:74:9d:d2:b2:1b:4c:0b:c2:9e:d9: e7:26:9a:80:e4:df:4c:8c:a7:67:0b:32:5f:2c:e7: 0c:a9:ef:22:19:ec:ff:0f:47:ad:dd:4b:70:93:bc: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:30:8F:64:EA:89:58:BE:BC:F0:00:B0:22:21:06:EC:E3:28:7B:91 X509v3 Authority Key Identifier: keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/323830363a3363383a3a2f33322d3332203d3e20323730313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3c8::/32 Signature Algorithm: sha256WithRSAEncryption 84:ef:ea:ff:21:cd:0b:b1:03:fd:14:39:70:9d:3b:5d:12:d1: 21:14:66:d0:24:6d:fe:fc:f1:94:4a:1a:ea:da:97:d1:38:93: 8d:4b:54:1c:11:22:d0:a2:eb:82:fd:14:71:48:53:35:95:ba: 83:a9:3a:25:9d:2f:1d:cb:3b:29:78:b5:70:10:ea:67:32:35: 05:50:ac:2a:81:f7:bc:a9:49:ba:43:16:1a:19:30:7c:63:cc: f2:be:fe:c8:f2:28:f2:67:d8:8a:9c:f2:21:50:c0:66:41:45: 4c:c8:9b:5a:51:66:81:45:52:d6:a0:2e:1a:41:e5:5f:2d:f7: 02:7a:b1:a0:fc:00:48:c0:51:31:eb:12:f1:67:b6:d4:64:f0: 79:d7:72:e5:36:bb:b0:ae:03:95:6f:8d:f7:88:e1:e2:0d:91: 71:86:44:9b:82:d2:1b:11:9a:c8:1e:de:16:2f:2b:e4:bc:8a: bb:91:90:99:1d:bd:1a:87:e3:7f:39:24:3f:8f:5a:77:b2:34: f1:2b:2d:df:14:31:67:e4:64:41:ab:ec:ae:2e:51:9f:57:17: 67:d1:4e:25:51:51:05:03:8f:9d:1a:02:be:f4:3a:5a:01:d4: f0:d3:c5:57:76:8b:aa:35:a3:bf:c9:5c:96:c6:26:ef:c9:52: 6b:9a:80:8c -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUJdbwWRXcqGuuhh6mWRnhSCUPdl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4 QzM3OTFEQjAeFw0yNTAyMDQxODAzNDJaFw0yNjAyMDMxODA4NDJaMDMxMTAvBgNV BAMTKDkyMzA4RjY0RUE4OTU4QkVCQ0YwMDBCMDIyMjEwNkVDRTMyODdCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVyutjILCoFIOFQh5u+qsZxLe AGNuQKcB3ge0Fdgy2wb179ywvuxKayvBvOTNdvEMPxtOmT1T5jXZFpCcV0lstqHS yhaHLehurL7eFJU80ZkyRSc/SfFlUTuX+YSwNxT0HaLFQnxHeiAwEkGm4G8s5gzg 4geDGmmFUj1C/wk3MoQ0y2gmEWDk+qfyfviGav+j2kvh+ciiyQpRg0B4K0GRROLe nUcv30gRdcGi2S1zemUsqFI/RhA6+J6z/UoyAFJLglA1O4ZnsApL4JjR64GRsZj9 NHc3dJ3SshtMC8Ke2ecmmoDk30yMp2cLMl8s5wyp7yIZ7P8PR63dS3CTvNY1AgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUkjCPZOqJWL688ACwIiEG7OMoe5EwHwYDVR0j BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1 NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMyMzgzMDM2M2EzMzYzMzgzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzAzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPIMA0G CSqGSIb3DQEBCwUAA4IBAQCE7+r/Ic0LsQP9FDlwnTtdEtEhFGbQJG3+/PGUShrq 2pfROJONS1QcESLQouuC/RRxSFM1lbqDqTolnS8dyzspeLVwEOpnMjUFUKwqgfe8 qUm6QxYaGTB8Y8zyvv7I8ijyZ9iKnPIhUMBmQUVMyJtaUWaBRVLWoC4aQeVfLfcC erGg/ABIwFEx6xLxZ7bUZPB513LlNruwrgOVb433iOHiDZFxhkSbgtIbEZrIHt4W LyvkvIq7kZCZHb0ah+N/OSQ/j1p3sjTxKy3fFDFn5GRBq+yuLlGfVxdn0U4lUVEF A4+dGgK+9DpaAdTw08VXdouqNaO/yVyWxibvyVJrmoCM -----END CERTIFICATE-----Generated at Sat Nov 1 06:58:14 2025 by rpki-client