$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a373030303a3a2f33362d3336203d3e203237383138.roa File: 323830333a333338303a373030303a3a2f33362d3336203d3e203237383138.roa (raw, json) Hash identifier: eJNc18GIccOKox+WGqbArd9YHSOWDZBHCjnoRlaZWl4= Subject key identifier: 5A:7B:EF:C0:A0:79:07:C0:86:81:25:D3:AC:70:35:11:89:31:90:57 Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB Certificate serial: 51020505025BE1C63794CA1D6CF1C6C91A6B0D81 Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a373030303a3a2f33362d3336203d3e203237383138.roa Signing time: Tue 04 Feb 2025 18:25:08 +0000 ROA not before: Tue 04 Feb 2025 18:20:08 +0000 ROA not after: Tue 03 Feb 2026 18:25:08 +0000 asID: 27818 IP address blocks: 2803:3380:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:02:05:05:02:5b:e1:c6:37:94:ca:1d:6c:f1:c6:c9:1a:6b:0d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB Validity Not Before: Feb 4 18:20:08 2025 GMT Not After : Feb 3 18:25:08 2026 GMT Subject: CN=5A7BEFC0A07907C0868125D3AC70351189319057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:64:67:bf:d6:13:1a:cb:10:e2:d5:98:c5: 93:6f:6e:90:cf:94:31:eb:ae:a8:6f:79:12:77:f0: 48:6a:71:fc:9c:f7:31:1a:68:ec:4a:fe:33:96:f8: 5c:ad:a4:50:b2:e2:ad:b0:cd:eb:d5:f9:ad:10:4d: a6:5d:30:ee:95:7b:8d:8b:ac:45:7f:81:cd:2d:0d: df:14:19:30:64:00:6c:79:b8:89:95:f8:93:80:3d: 6b:dc:36:d1:c2:df:b6:ed:b9:d0:24:ba:b5:86:f8: 6f:82:92:6a:2d:8a:00:b6:7a:06:50:d9:87:f1:4a: 17:c5:85:62:ed:5e:a2:b1:03:16:b2:bc:db:fa:7c: 98:dc:62:ed:cf:65:70:da:c9:d5:8c:72:b8:e0:5c: 42:bc:c9:57:1b:ef:5c:5c:ff:96:dc:17:ae:db:15: dd:28:11:c0:49:7c:6f:34:04:11:7c:ee:a8:18:b6: e5:d4:80:9c:88:a0:87:a9:92:8e:8a:fa:b4:c6:1c: b2:b1:8a:65:ee:59:66:fc:9a:39:1c:5a:7e:25:7b: 5b:04:a0:af:e0:a1:4f:45:d1:40:27:d5:b8:4e:dd: 94:15:8d:4d:2d:8d:58:86:9d:0c:47:ad:c6:6d:8e: f9:b1:3e:38:08:82:ab:88:a7:02:ec:f1:00:2f:e7: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7B:EF:C0:A0:79:07:C0:86:81:25:D3:AC:70:35:11:89:31:90:57 X509v3 Authority Key Identifier: keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a373030303a3a2f33362d3336203d3e203237383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3380:7000::/36 Signature Algorithm: sha256WithRSAEncryption 3b:6e:ef:58:aa:b4:d6:f0:a3:7b:31:43:cc:95:25:f9:51:a6: 47:b9:59:ae:e9:b1:00:6b:0c:e1:f3:4d:c2:a1:f0:e7:4f:ab: 44:99:d3:7c:87:43:84:a6:3e:bb:31:8a:10:21:0a:f7:d1:ef: 14:8f:ef:0f:00:1f:85:7e:5d:5d:15:2f:e9:30:90:43:91:8a: 13:5e:60:0e:ac:ac:a8:81:36:34:d3:20:ea:87:d7:9e:9b:cb: 92:64:11:1e:01:fc:6e:da:25:32:1c:4c:a7:7a:83:de:93:83: d4:cc:6e:6d:b1:0d:a1:c8:a4:a2:8a:ae:05:08:97:f8:1b:34: d9:4d:cd:b3:57:1f:af:d9:f9:e8:8f:21:b3:44:c2:10:32:0f: aa:f0:12:88:f2:73:82:11:87:b8:33:3c:f3:c4:54:2c:75:ce: 3e:b7:c7:a3:44:67:c7:dd:d0:00:63:e9:cc:d0:8c:e5:cb:c8: e7:7d:b1:0b:3f:65:de:33:ad:23:ae:cb:88:47:64:c6:2b:f4: a2:bf:ef:a6:93:46:73:82:1c:a2:ca:19:92:87:6b:3f:ee:9b: fc:9f:22:0d:cd:aa:56:f0:82:a9:94:8b:49:48:14:81:96:83: 49:41:76:55:21:ff:8b:ca:ad:11:cf:60:75:74:ed:e2:6a:d4: 65:26:bf:b0 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUUQIFBQJb4cY3lModbPHGyRprDYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0 MUFEQTNCQjAeFw0yNTAyMDQxODIwMDhaFw0yNjAyMDMxODI1MDhaMDMxMTAvBgNV BAMTKDVBN0JFRkMwQTA3OTA3QzA4NjgxMjVEM0FDNzAzNTExODkzMTkwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZGRnv9YTGssQ4tWYxZNvbpDP lDHrrqhveRJ38Ehqcfyc9zEaaOxK/jOW+FytpFCy4q2wzevV+a0QTaZdMO6Ve42L rEV/gc0tDd8UGTBkAGx5uImV+JOAPWvcNtHC37btudAkurWG+G+CkmotigC2egZQ 2YfxShfFhWLtXqKxAxayvNv6fJjcYu3PZXDaydWMcrjgXEK8yVcb71xc/5bcF67b Fd0oEcBJfG80BBF87qgYtuXUgJyIoIepko6K+rTGHLKximXuWWb8mjkcWn4le1sE oK/goU9F0UAn1bhO3ZQVjU0tjViGnQxHrcZtjvmxPjgIgquIpwLs8QAv50KBAgMB AAGjggLSMIICzjAdBgNVHQ4EFgQUWnvvwKB5B8CGgSXTrHA1EYkxkFcwHwYDVR0j BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0 Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0 RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhMzcz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYEKAMzgHAwDQYJKoZIhvcNAQELBQADggEBADtu71iqtNbwo3sxQ8yVJflRpke5 Wa7psQBrDOHzTcKh8OdPq0SZ03yHQ4SmPrsxihAhCvfR7xSP7w8AH4V+XV0VL+kw kEORihNeYA6srKiBNjTTIOqH156by5JkER4B/G7aJTIcTKd6g96Tg9TMbm2xDaHI pKKKrgUIl/gbNNlNzbNXH6/Z+eiPIbNEwhAyD6rwEojyc4IRh7gzPPPEVCx1zj63 x6NEZ8fd0ABj6czQjOXLyOd9sQs/Zd4zrSOuy4hHZMYr9KK/76aTRnOCHKLKGZKH az/um/yfIg3NqlbwgqmUi0lIFIGWg0lBdlUh/4vKrRHPYHV07eJq1GUmv7A= -----END CERTIFICATE-----Generated at Sat Nov 1 18:20:36 2025 by rpki-client