$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535333a3a2f34382d3438203d3e203532343233.roa File: 323830333a363930303a3535333a3a2f34382d3438203d3e203532343233.roa (raw, json) Hash identifier: OwizQqbG+AD7s9NNB7lj6p1iQb4IL4uR3d4LsTK5/ME= Subject key identifier: D8:A8:6E:52:8A:72:FA:EC:14:79:3E:15:94:92:42:8D:6D:7F:16:06 Certificate issuer: /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB Certificate serial: 219FA2DE16BC0DD6B6D15329A339787D73A8EEC2 Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535333a3a2f34382d3438203d3e203532343233.roa Signing time: Tue 04 Feb 2025 18:20:49 +0000 ROA not before: Tue 04 Feb 2025 18:15:49 +0000 ROA not after: Tue 03 Feb 2026 18:20:49 +0000 asID: 52423 IP address blocks: 2803:6900:553::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9f:a2:de:16:bc:0d:d6:b6:d1:53:29:a3:39:78:7d:73:a8:ee:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB Validity Not Before: Feb 4 18:15:49 2025 GMT Not After : Feb 3 18:20:49 2026 GMT Subject: CN=D8A86E528A72FAEC14793E159492428D6D7F1606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:74:dc:d7:16:4f:4e:ec:f2:c4:eb:ca:75: ee:a7:f2:ba:56:c0:d2:24:19:ed:7e:9e:91:51:24: d9:23:c0:8e:f8:5c:c3:7e:8f:1e:7f:08:ac:4d:e5: a3:77:96:2d:cb:1c:68:e6:04:8c:93:93:6b:a0:a8: 76:c4:1b:6f:44:0f:c9:bf:6f:ad:5c:ec:0a:87:25: 16:15:de:e4:c4:d3:80:8d:00:30:b8:db:75:65:e8: d5:ff:7b:9b:64:6e:35:c1:6f:e9:41:e7:09:dd:70: d5:e3:6a:51:f9:10:1c:7b:66:40:45:d4:2f:a8:3a: 58:8c:1f:8c:94:fe:1d:3f:0d:a5:f6:fc:b9:ee:55: b5:a7:9c:25:c4:ed:13:d6:e6:74:9b:46:57:66:0d: fe:06:aa:be:79:a9:35:ea:93:bd:94:70:ed:52:65: 7b:36:63:f2:ab:31:4b:21:0c:73:53:12:a5:18:e4: b1:60:09:19:30:bd:6b:f9:b2:a6:af:c5:4b:15:af: 3f:7d:09:85:b3:1e:fa:b7:32:b1:17:d5:82:94:f9: e3:1d:50:da:be:98:35:e8:08:cf:4a:73:a3:6b:c0: 20:72:59:f7:14:d3:00:16:8b:22:27:9e:b1:e7:f7: bd:bf:42:16:ae:d2:cd:9f:a7:a9:03:ec:65:82:37: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A8:6E:52:8A:72:FA:EC:14:79:3E:15:94:92:42:8D:6D:7F:16:06 X509v3 Authority Key Identifier: keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535333a3a2f34382d3438203d3e203532343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6900:553::/48 Signature Algorithm: sha256WithRSAEncryption 21:9e:c2:8b:88:7f:54:2b:55:be:9b:7b:9c:fa:b2:c6:02:46: 8c:e9:1b:c6:99:9d:35:c0:8f:72:a5:41:74:42:b9:04:8b:ed: 59:58:eb:ec:88:86:0b:32:96:ef:5c:99:2f:62:97:5e:56:b5: 7c:e5:f8:4c:c6:15:5a:70:0b:8c:c4:49:17:73:11:4e:3e:6f: a1:2a:b9:5a:76:ce:55:2f:01:34:70:af:ef:d1:ca:8e:20:07: cc:bc:3f:cb:68:bc:7f:65:e7:95:9e:95:39:ea:36:74:cc:b6: 1b:74:ac:ec:60:f5:a5:4d:dd:cb:2a:6a:48:7f:9c:a4:70:9e: 15:72:67:6a:d1:af:1b:47:5c:e3:f3:53:07:77:05:8e:2f:93: fa:33:9b:9c:2a:9f:a2:8e:9b:41:9b:97:e1:a7:c5:4e:6f:31: 33:b6:04:d9:64:c7:5c:0f:f3:14:e1:e2:95:bf:3b:e0:d3:11: 51:71:80:65:ed:3c:f4:b6:70:7b:27:fc:21:c5:f0:e7:b2:a1: 1a:50:2a:49:e6:7b:8f:85:7c:72:20:43:ce:1c:27:b1:28:5e: f5:a7:42:b8:67:8d:a4:7e:ef:ee:e2:6e:34:ee:5f:2e:f9:ce: a1:85:b4:e7:6f:d5:cc:09:85:cd:7e:4d:92:38:38:93:ed:4a: 5b:77:9c:f4 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUIZ+i3ha8Dda20VMpozl4fXOo7sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1 OTAyNzZBQjAeFw0yNTAyMDQxODE1NDlaFw0yNjAyMDMxODIwNDlaMDMxMTAvBgNV BAMTKEQ4QTg2RTUyOEE3MkZBRUMxNDc5M0UxNTk0OTI0MjhENkQ3RjE2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelHTc1xZPTuzyxOvKde6n8rpW wNIkGe1+npFRJNkjwI74XMN+jx5/CKxN5aN3li3LHGjmBIyTk2ugqHbEG29ED8m/ b61c7AqHJRYV3uTE04CNADC423Vl6NX/e5tkbjXBb+lB5wndcNXjalH5EBx7ZkBF 1C+oOliMH4yU/h0/DaX2/LnuVbWnnCXE7RPW5nSbRldmDf4Gqr55qTXqk72UcO1S ZXs2Y/KrMUshDHNTEqUY5LFgCRkwvWv5sqavxUsVrz99CYWzHvq3MrEX1YKU+eMd UNq+mDXoCM9Kc6NrwCByWfcU0wAWiyInnrHn972/Qhau0s2fp6kD7GWCNwIVAgMB AAGjggLRMIICzTAdBgNVHQ4EFgQU2KhuUopy+uwUeT4VlJJCjW1/FgYwHwYDVR0j BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMyMzgzMDMzM2EzNjM5MzAzMDNhMzUz NTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM0MzIzMy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACgDaQAFUzANBgkqhkiG9w0BAQsFAAOCAQEAIZ7Ci4h/VCtVvpt7nPqyxgJGjOkb xpmdNcCPcqVBdEK5BIvtWVjr7IiGCzKW71yZL2KXXla1fOX4TMYVWnALjMRJF3MR Tj5voSq5WnbOVS8BNHCv79HKjiAHzLw/y2i8f2XnlZ6VOeo2dMy2G3Ss7GD1pU3d yypqSH+cpHCeFXJnatGvG0dc4/NTB3cFji+T+jObnCqfoo6bQZuX4afFTm8xM7YE 2WTHXA/zFOHilb874NMRUXGAZe089LZweyf8IcXw57KhGlAqSeZ7j4V8ciBDzhwn sShe9adCuGeNpH7v7uJuNO5fLvnOoYW052/VzAmFzX5Nkjg4k+1KW3ec9A== -----END CERTIFICATE-----Generated at Sat Apr 5 23:06:09 2025 by rpki-client