$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa File: 323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa (raw, json) Hash identifier: kCjiC+WocfpYnsF7z9sTtsheFdji1XPb+cLeJJN/6Pg= Subject key identifier: D7:0E:22:B8:07:0F:A9:85:B1:60:8B:4B:57:30:0E:B1:C2:A7:5D:63 Certificate issuer: /CN=67695A57A246E7FEEC5E99692566E43D7F039663 Certificate serial: 079F1D75BCC21CEDC4EE42D4A589916E6D5E5512 Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa Signing time: Mon 14 Jul 2025 23:25:18 +0000 ROA not before: Mon 14 Jul 2025 23:20:18 +0000 ROA not after: Mon 13 Jul 2026 23:25:18 +0000 asID: 266683 IP address blocks: 2803:c520:960::/44 maxlen: 44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 15:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9f:1d:75:bc:c2:1c:ed:c4:ee:42:d4:a5:89:91:6e:6d:5e:55:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663 Validity Not Before: Jul 14 23:20:18 2025 GMT Not After : Jul 13 23:25:18 2026 GMT Subject: CN=D70E22B8070FA985B1608B4B57300EB1C2A75D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:e9:7b:12:cd:7b:21:b0:39:7c:ee:7e:80: 09:d8:82:74:0c:8b:78:a9:6e:1e:01:8a:a7:79:ce: 1a:e0:26:77:9b:95:9a:5b:1b:6d:72:4e:6f:3d:b6: f0:fd:e0:a0:9c:9e:a2:40:71:0f:b5:2d:45:2e:f1: 56:96:1d:2e:73:ae:8c:35:ea:3d:dd:e4:41:8a:a1: cb:24:3b:77:25:e8:49:2e:62:4f:15:6c:8b:7f:d9: 15:14:b5:b4:db:9d:d8:64:96:35:20:dd:b5:b0:83: 7d:aa:72:d3:1d:51:11:40:71:91:66:45:6b:57:98: a4:7a:ac:b5:48:c7:ce:ff:b8:fe:ab:eb:cf:16:15: 7f:19:9c:26:c5:40:e9:a1:f8:57:f3:73:03:58:9d: 34:2f:b4:8a:0c:be:9d:b2:94:f1:54:02:40:4f:f1: 5f:ae:ac:00:f0:d7:66:bc:fe:5c:fd:36:33:f3:29: df:4f:82:05:04:bc:66:9c:68:b9:ba:aa:95:7a:42: 4c:29:b0:c8:c5:d9:80:5d:61:a6:29:aa:39:df:bc: 09:a8:cc:b6:6d:89:63:63:34:dc:7f:4e:5a:67:b3: 14:0d:a2:70:6b:93:01:d1:5b:6a:5b:c1:ff:e1:4a: be:19:3e:e8:65:13:33:9a:3a:b7:16:b8:48:19:1e: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:22:B8:07:0F:A9:85:B1:60:8B:4B:57:30:0E:B1:C2:A7:5D:63 X509v3 Authority Key Identifier: keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a3936303a3a2f34342d3434203d3e20323636363833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c520:960::/44 Signature Algorithm: sha256WithRSAEncryption 42:1f:7b:46:4c:d2:ae:59:3e:19:37:ca:b7:e5:33:74:5b:18: 4e:ed:99:29:af:35:5c:db:2a:1f:3a:13:9d:c6:b9:93:47:8e: e7:31:08:6c:63:48:bf:49:16:9e:1d:4f:4a:9b:e8:4c:a4:5f: a4:22:0b:6d:fa:d9:82:f6:57:99:84:31:a8:7c:98:94:bd:73: a4:45:c6:9c:11:dd:12:2e:0c:bd:f8:fd:28:ce:30:63:02:97: c2:94:68:fb:ad:c0:d2:ee:9e:03:18:7a:76:cc:70:d5:a0:d9: 58:c8:3d:da:ce:a2:42:e5:9d:27:76:54:d7:ed:b2:bd:21:cb: a9:ed:a7:f0:1d:d2:29:e4:d2:c7:67:13:be:08:b3:37:ee:dc: b4:ad:1f:a0:f2:45:b2:5c:02:42:92:db:4c:35:ae:14:d0:10: 5e:06:dd:a3:7f:e7:0a:cd:20:d8:ba:f9:69:23:f6:41:5e:b1: 26:e1:c5:9a:94:d7:8b:e8:ec:bc:90:93:ef:fd:38:eb:f2:be: de:1d:0a:59:12:7e:20:8a:16:41:16:9e:8d:61:4a:3e:39:bd: 67:2b:2d:a5:12:de:80:b5:fb:a0:d3:50:bd:42:e0:c2:1f:f7: 18:ff:e3:8d:a1:1c:75:76:39:2f:87:eb:81:45:2c:e1:2c:7e: 76:05:1a:dd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB58ddbzCHO3E7kLUpYmRbm1eVRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2OTVBNTdBMjQ2RTdGRUVDNUU5OTY5MjU2NkU0M0Q3 RjAzOTY2MzAeFw0yNTA3MTQyMzIwMThaFw0yNjA3MTMyMzI1MThaMDMxMTAvBgNV BAMTKEQ3MEUyMkI4MDcwRkE5ODVCMTYwOEI0QjU3MzAwRUIxQzJBNzVENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm8ul7Es17IbA5fO5+gAnYgnQM i3ipbh4Biqd5zhrgJneblZpbG21yTm89tvD94KCcnqJAcQ+1LUUu8VaWHS5zrow1 6j3d5EGKocskO3cl6EkuYk8VbIt/2RUUtbTbndhkljUg3bWwg32qctMdURFAcZFm RWtXmKR6rLVIx87/uP6r688WFX8ZnCbFQOmh+FfzcwNYnTQvtIoMvp2ylPFUAkBP 8V+urADw12a8/lz9NjPzKd9PggUEvGacaLm6qpV6QkwpsMjF2YBdYaYpqjnfvAmo zLZtiWNjNNx/TlpnsxQNonBrkwHRW2pbwf/hSr4ZPuhlEzOaOrcWuEgZHuh3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1w4iuAcPqYWxYItLVzAOscKnXWMwHwYDVR0j BBgwFoAUZ2laV6JG5/7sXplpJWbkPX8DlmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTdEMjI3NzBFQTQ3ODU0NDY1NTk1OUU2NUIwREFENkEz OTgzNTdGQTY3MzA5QTc2NEFBRDcxQTREMzk0MUEyLzAvNjc2OTVBNTdBMjQ2RTdG RUVDNUU5OTY5MjU2NkU0M0Q3RjAzOTY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzY5NUE1N0EyNDZFN0ZFRUM1 RTk5NjkyNTY2RTQzRDdGMDM5NjYzLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDE3RDIyNzcwRUE0Nzg1NDQ2NTU5NTlFNjVCMERBRDZBMzk4MzU3RkE2 NzMwOUE3NjRBQUQ3MUE0RDM5NDFBMi8wLzMyMzgzMDMzM2E2MzM1MzIzMDNhMzkz NjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNjM2MzYzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEKAPFIAlgMA0GCSqGSIb3DQEBCwUAA4IBAQBCH3tGTNKuWT4ZN8q35TN0WxhO 7ZkprzVc2yofOhOdxrmTR47nMQhsY0i/SRaeHU9Km+hMpF+kIgtt+tmC9leZhDGo fJiUvXOkRcacEd0SLgy9+P0ozjBjApfClGj7rcDS7p4DGHp2zHDVoNlYyD3azqJC 5Z0ndlTX7bK9Icup7afwHdIp5NLHZxO+CLM37ty0rR+g8kWyXAJCkttMNa4U0BBe Bt2jf+cKzSDYuvlpI/ZBXrEm4cWalNeL6Oy8kJPv/Tjr8r7eHQpZEn4gihZBFp6N YUo+Ob1nKy2lEt6Atfug01C9QuDCH/cY/+ONoRx1djkvh+uBRSzhLH52BRrd -----END CERTIFICATE-----Generated at Sat Jul 26 07:01:13 2025 by rpki-client