$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa File: 323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa (raw, json) Hash identifier: PBrV7y5qjVOHwj3Bjit0LMfoAj/ND3J2AaRV2J5RIGo= Subject key identifier: DE:8E:FB:5E:28:8A:8F:EF:80:D5:15:9E:22:3C:F2:A4:97:33:42:01 Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B Certificate serial: 129FDD7E952805FE595C57B2CA3BB97783D04236 Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa Signing time: Tue 04 Feb 2025 20:03:30 +0000 ROA not before: Tue 04 Feb 2025 19:58:30 +0000 ROA not after: Tue 03 Feb 2026 20:03:30 +0000 asID: 263173 IP address blocks: 2800:3b0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 19:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:dd:7e:95:28:05:fe:59:5c:57:b2:ca:3b:b9:77:83:d0:42:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B Validity Not Before: Feb 4 19:58:30 2025 GMT Not After : Feb 3 20:03:30 2026 GMT Subject: CN=DE8EFB5E288A8FEF80D5159E223CF2A497334201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:c8:7e:e7:2d:f1:73:58:d4:b4:ae:7c:6f: f7:3e:a9:f2:91:ef:5b:39:ef:7b:f7:c9:7c:75:ee: 38:fc:d3:e2:e9:21:7f:0a:54:4a:da:4c:f7:a6:82: 6e:6b:72:fb:f0:6f:5d:e6:09:c6:67:f5:18:10:66: 47:58:01:be:4a:3b:ba:76:45:85:c2:c8:24:fd:7e: d9:dc:72:a5:12:51:47:a0:c4:4a:f1:d7:e8:32:d0: 94:ae:0f:80:05:e0:92:0d:72:33:55:c0:3b:50:31: 81:e9:43:51:6d:a0:77:79:1e:a9:0c:b7:6a:7c:cc: c4:85:63:6c:42:ad:a0:33:0c:4d:87:9d:92:12:1c: 1d:58:08:fd:cf:7b:47:9a:88:34:a0:29:dc:9b:25: 3f:51:22:f6:97:f0:01:d3:a0:21:23:fa:89:cc:37: 2e:dd:e6:86:da:9f:7d:64:cd:c3:89:3d:d5:a4:ab: 17:83:23:13:81:d6:38:8d:ab:b2:7f:fb:c6:73:a2: 51:56:32:29:c4:14:aa:a1:d3:c1:7c:85:6e:ac:51: a1:aa:1c:09:2d:e0:f8:cf:29:29:b9:de:7b:fa:40: ad:0d:c4:5e:e8:04:21:13:73:f6:fb:81:19:8d:16: 4b:5b:a5:2e:4a:f4:da:91:57:e3:b1:3d:f5:1e:b5: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:FB:5E:28:8A:8F:EF:80:D5:15:9E:22:3C:F2:A4:97:33:42:01 X509v3 Authority Key Identifier: keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a323030303a3a2f33362d3336203d3e20323633313733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:3b0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 70:74:23:67:b3:4c:5b:f6:99:cc:f6:7f:6e:e0:bb:c7:6c:ff: 3a:b2:88:86:05:40:87:80:23:36:ce:6e:ec:36:9a:00:a4:65: f2:44:82:11:fb:1d:9c:94:a1:3d:58:ca:1b:8c:e7:f2:7f:0c: 90:4b:27:db:1c:4d:14:d7:98:37:a5:67:36:f3:9b:49:4f:65: b3:66:90:eb:12:26:6d:6c:5c:77:4e:35:8c:b5:35:8f:16:bf: 5e:8d:5c:c4:9e:83:9e:da:b3:d2:05:57:03:f2:d9:76:25:d0: 02:95:66:32:f4:a2:0f:3b:5d:91:7d:26:94:fa:91:e8:fc:b8: 1c:8d:e4:bc:cc:06:68:f8:d7:3d:5c:d6:f8:04:df:b5:5e:56: 0a:71:dd:41:82:79:a0:51:40:2b:b9:46:73:e3:63:dc:c1:38: f0:e1:0c:af:b0:8d:ec:e0:cb:d5:d0:db:87:51:73:42:ac:2a: ab:cb:79:82:20:17:5c:f8:e9:49:4f:69:ae:9e:a8:1a:82:81: 64:88:4a:ae:4e:d5:9b:a0:c8:35:6b:95:0f:b4:a6:b4:6b:08: 3a:b7:1e:79:41:da:96:fe:3b:0b:99:73:0d:49:8f:46:f5:80: 42:47:54:ce:78:4c:80:2f:8a:d6:d3:5c:41:f4:c1:d4:00:1e: cc:a4:92:33 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUEp/dfpUoBf5ZXFeyyju5d4PQQjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC NUI0M0U4QjAeFw0yNTAyMDQxOTU4MzBaFw0yNjAyMDMyMDAzMzBaMDMxMTAvBgNV BAMTKERFOEVGQjVFMjg4QThGRUY4MEQ1MTU5RTIyM0NGMkE0OTczMzQyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4psh+5y3xc1jUtK58b/c+qfKR 71s573v3yXx17jj80+LpIX8KVEraTPemgm5rcvvwb13mCcZn9RgQZkdYAb5KO7p2 RYXCyCT9ftnccqUSUUegxErx1+gy0JSuD4AF4JINcjNVwDtQMYHpQ1FtoHd5HqkM t2p8zMSFY2xCraAzDE2HnZISHB1YCP3Pe0eaiDSgKdybJT9RIvaX8AHToCEj+onM Ny7d5oban31kzcOJPdWkqxeDIxOB1jiNq7J/+8ZzolFWMinEFKqh08F8hW6sUaGq HAkt4PjPKSm53nv6QK0NxF7oBCETc/b7gRmNFktbpS5K9NqRV+OxPfUetc2bAgMB AAGjggLSMIICzjAdBgNVHQ4EFgQU3o77XiiKj++A1RWeIjzypJczQgEwHwYDVR0j BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMyMzgzMDMwM2EzMzYyMzAzYTMyMzAz MDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjMzMzEzNzMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYEKAADsCAwDQYJKoZIhvcNAQELBQADggEBAHB0I2ezTFv2mcz2f27gu8ds/zqy iIYFQIeAIzbObuw2mgCkZfJEghH7HZyUoT1YyhuM5/J/DJBLJ9scTRTXmDelZzbz m0lPZbNmkOsSJm1sXHdONYy1NY8Wv16NXMSeg57as9IFVwPy2XYl0AKVZjL0og87 XZF9JpT6kej8uByN5LzMBmj41z1c1vgE37VeVgpx3UGCeaBRQCu5RnPjY9zBOPDh DK+wjezgy9XQ24dRc0KsKqvLeYIgF1z46UlPaa6eqBqCgWSISq5O1ZugyDVrlQ+0 prRrCDq3HnlB2pb+OwuZcw1Jj0b1gEJHVM54TIAvitbTXEH0wdQAHsykkjM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:23 2025 by rpki-client