$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa File: 323830303a3730303a3a2f33322d3438203d3e203532323636.roa (raw, json) Hash identifier: YA259OfcIFMt75sjDpUWVjXCd50btOB7vHJcy6QdyYo= Subject key identifier: 01:02:45:57:01:A0:1F:C9:53:11:98:BB:47:9F:6C:DF:D7:B9:AA:11 Certificate issuer: /CN=B5F100D6FEF4DD1887095595838207E669CA7479 Certificate serial: D3AE3F4D41D4499D04CDD62F7E1CAB2051100D Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa Signing time: Wed 22 Oct 2025 18:25:01 +0000 ROA not before: Wed 22 Oct 2025 18:20:01 +0000 ROA not after: Wed 21 Oct 2026 18:25:01 +0000 asID: 52266 IP address blocks: 2800:700::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d3:ae:3f:4d:41:d4:49:9d:04:cd:d6:2f:7e:1c:ab:20:51:10:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479 Validity Not Before: Oct 22 18:20:01 2025 GMT Not After : Oct 21 18:25:01 2026 GMT Subject: CN=0102455701A01FC9531198BB479F6CDFD7B9AA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:81:69:d1:47:b7:93:cf:04:86:04:87:80: 03:ab:9b:b1:7f:55:b0:19:49:bf:f8:89:64:ec:19: 16:a6:9e:05:37:1b:f1:ba:51:3c:de:af:4e:50:2d: b5:97:0d:b5:42:dd:62:93:db:05:91:1b:fc:16:7f: 5b:bd:c8:c3:f3:99:d8:54:f0:37:e7:68:46:5b:c6: 8e:e2:b3:95:44:eb:f2:92:ce:f4:4e:36:af:dc:4a: e8:e0:ac:20:3d:ca:38:90:a6:0e:9f:04:e1:e3:b4: ac:c2:8c:1f:d2:2b:3d:e3:29:1e:72:05:0a:ab:ce: 9b:ae:af:06:ee:43:6b:61:5c:dd:7e:c7:6b:be:38: eb:a7:58:51:1a:ab:3a:b6:67:bf:91:ea:69:67:e1: 00:1f:d6:9e:17:1c:7b:81:19:40:99:2f:51:88:f7: 04:70:84:b0:34:a5:57:b9:e3:4c:65:99:f2:64:0c: e8:75:e1:26:9e:91:f0:e1:36:c7:92:24:22:6b:26: 38:ff:57:bb:a9:50:02:13:1c:18:9c:f1:b2:f3:96: 2d:74:24:75:6f:8d:ca:cb:e2:2c:5f:33:b9:23:9c: 42:1d:b8:68:a5:68:0a:32:8a:d2:ae:88:53:70:2e: 79:30:bb:41:1e:82:84:98:da:95:9c:e6:89:d8:56: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:02:45:57:01:A0:1F:C9:53:11:98:BB:47:9F:6C:DF:D7:B9:AA:11 X509v3 Authority Key Identifier: keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:700::/32 Signature Algorithm: sha256WithRSAEncryption 94:05:5d:28:70:49:4f:b4:8f:c0:e2:57:b7:87:3c:e5:aa:57: 3b:1f:ca:0e:1a:d1:2f:c0:73:02:34:09:3b:0a:ed:3b:60:e6: 79:29:97:35:8e:72:a7:16:79:c4:66:61:6d:51:b1:66:26:aa: 88:d8:f6:27:86:2f:23:87:65:e9:ca:45:cf:13:64:95:bb:9e: da:5d:7f:8e:ff:e1:0e:52:41:c5:4f:67:7a:08:ed:5f:b7:41: 5c:80:18:90:56:c3:a9:ad:02:f3:74:a0:e4:7b:68:6c:ff:00: 58:f9:1e:75:12:39:4b:10:c7:c0:23:0f:22:5e:ed:d0:1d:6a: 04:69:26:19:ab:0b:6e:52:0b:ae:08:a4:b3:25:3a:28:bf:c3: 23:57:b6:6d:7f:b9:91:ab:50:32:af:95:44:b2:77:39:65:3d: 77:93:7e:7d:32:0e:20:c4:85:ae:b0:88:7f:2b:ff:d4:5e:05: 06:03:46:e7:09:d0:45:8a:75:38:66:eb:87:48:7b:c0:25:94: 7f:ca:04:23:d7:44:a7:64:5b:ea:a8:33:f2:b0:c9:65:e3:ef: 1b:ef:74:ba:51:4b:9f:df:eb:8a:59:db:43:bc:29:40:a4:2d: 32:07:64:e1:fa:9d:f2:85:83:db:c0:74:c4:b1:95:cd:b4:43: f6:e9:24:02 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUANOuP01B1EmdBM3WL34cqyBREA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2 OUNBNzQ3OTAeFw0yNTEwMjIxODIwMDFaFw0yNjEwMjExODI1MDFaMDMxMTAvBgNV BAMTKDAxMDI0NTU3MDFBMDFGQzk1MzExOThCQjQ3OUY2Q0RGRDdCOUFBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhIFp0Ue3k88EhgSHgAOrm7F/ VbAZSb/4iWTsGRamngU3G/G6UTzer05QLbWXDbVC3WKT2wWRG/wWf1u9yMPzmdhU 8DfnaEZbxo7is5VE6/KSzvRONq/cSujgrCA9yjiQpg6fBOHjtKzCjB/SKz3jKR5y BQqrzpuurwbuQ2thXN1+x2u+OOunWFEaqzq2Z7+R6mln4QAf1p4XHHuBGUCZL1GI 9wRwhLA0pVe540xlmfJkDOh14SaekfDhNseSJCJrJjj/V7upUAITHBic8bLzli10 JHVvjcrL4ixfM7kjnEIduGilaAoyitKuiFNwLnkwu0EegoSY2pWc5onYVhNFAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUAQJFVwGgH8lTEZi7R59s39e5qhEwHwYDVR0j BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4 MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0 QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzgzMDMwM2EzNzMwMzAzYTNhMmYz MzMyMmQzNDM4MjAzZDNlMjAzNTMyMzIzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAHADANBgkq hkiG9w0BAQsFAAOCAQEAlAVdKHBJT7SPwOJXt4c85apXOx/KDhrRL8BzAjQJOwrt O2DmeSmXNY5ypxZ5xGZhbVGxZiaqiNj2J4YvI4dl6cpFzxNklbue2l1/jv/hDlJB xU9negjtX7dBXIAYkFbDqa0C83Sg5HtobP8AWPkedRI5SxDHwCMPIl7t0B1qBGkm GasLblILrgiksyU6KL/DI1e2bX+5katQMq+VRLJ3OWU9d5N+fTIOIMSFrrCIfyv/ 1F4FBgNG5wnQRYp1OGbrh0h7wCWUf8oEI9dEp2Rb6qgz8rDJZePvG+90ulFLn9/r ilnbQ7wpQKQtMgdk4fqd8oWD28B0xLGVzbRD9ukkAg== -----END CERTIFICATE-----Generated at Sun Oct 26 14:26:56 2025 by rpki-client