$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/323830333a373638303a3a2f33322d3336203d3e203232353431.roa File: 323830333a373638303a3a2f33322d3336203d3e203232353431.roa (raw, json) Hash identifier: 6X08CGGhRGhWgllZCYUlj/xoaQoVPhBafPLUr0DZr68= Subject key identifier: 67:6D:10:16:B7:10:0D:A3:8A:A8:8F:8A:EB:F0:72:71:52:4A:85:9A Certificate issuer: /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D Certificate serial: 2FCB1FEF3AF83604863F15CDAF41971E5C08C8B7 Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/323830333a373638303a3a2f33322d3336203d3e203232353431.roa Signing time: Tue 04 Feb 2025 19:59:20 +0000 ROA not before: Tue 04 Feb 2025 19:54:20 +0000 ROA not after: Tue 03 Feb 2026 19:59:20 +0000 asID: 22541 IP address blocks: 2803:7680::/32 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cb:1f:ef:3a:f8:36:04:86:3f:15:cd:af:41:97:1e:5c:08:c8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D Validity Not Before: Feb 4 19:54:20 2025 GMT Not After : Feb 3 19:59:20 2026 GMT Subject: CN=676D1016B7100DA38AA88F8AEBF07271524A859A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:60:42:ef:77:bf:9d:3e:d7:45:79:c7:38:13: 49:b6:1e:30:05:0a:d9:d5:af:df:90:e4:ec:26:bf: 7e:7d:d6:f1:83:d9:a5:3d:f5:61:80:22:05:88:4b: 22:38:bf:54:99:09:e8:f9:90:12:81:89:08:b8:15: d7:5b:a9:2c:79:80:b4:77:95:2f:ae:84:ce:59:26: e5:71:4b:c6:1c:78:aa:0d:f5:94:39:97:fe:e1:c6: 6b:5f:58:06:df:9e:07:09:5c:b4:fe:90:81:ab:c3: a2:81:4b:fd:3f:13:9b:a4:eb:ad:77:b4:b1:21:75: e9:28:82:e3:4d:c2:68:6b:6d:78:c1:f3:0d:8e:e9: 61:c9:b6:43:02:27:f1:bd:87:d2:f4:aa:be:1e:3e: 54:55:66:08:cc:14:50:ba:a9:03:37:de:c0:4e:28: 61:f8:d5:d9:82:f2:0d:60:17:bf:3d:8c:d9:04:89: d4:52:b8:0d:54:74:de:b4:cd:b2:4b:5a:28:f8:b4: 5b:0f:35:e8:be:fd:be:fa:8c:f3:c2:cc:96:a4:3d: 03:15:fe:16:0f:0e:17:31:82:47:27:cf:1a:80:b6: af:85:c5:55:37:f0:48:62:a3:db:62:47:ec:95:2d: 5a:13:8a:b1:8f:d3:e2:01:6c:5f:4d:9d:39:89:a6: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6D:10:16:B7:10:0D:A3:8A:A8:8F:8A:EB:F0:72:71:52:4A:85:9A X509v3 Authority Key Identifier: keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/323830333a373638303a3a2f33322d3336203d3e203232353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7680::/32 Signature Algorithm: sha256WithRSAEncryption 95:ba:32:ce:52:39:e5:7f:37:37:b1:b3:04:d5:64:ee:8a:dd: 4f:61:68:32:05:ad:76:07:63:e2:0d:12:5d:b0:08:8e:34:b6: a8:a5:72:30:98:08:bd:71:31:51:29:87:5e:a1:10:ce:9b:ec: 01:26:72:b6:62:bb:8e:e6:78:b0:41:15:9c:9b:bc:10:28:49: 61:44:12:39:f5:a5:a9:a5:3b:41:8e:b2:6d:45:7e:bf:8d:ab: c7:ad:0a:55:d4:85:11:2c:86:de:8a:4d:ff:41:da:49:d0:42: e0:d9:a9:d6:21:b8:d5:95:30:74:1f:6f:8d:c0:15:19:ad:4a: 25:b8:4d:02:35:62:74:b4:38:d1:43:d8:17:2e:6c:e4:d4:95: fa:69:57:e5:48:ab:c5:93:1d:db:ca:98:50:be:b2:cd:85:59: 54:91:93:8e:e5:f5:56:01:bc:bb:a1:c1:60:bd:db:e2:b3:e7: 2e:a8:24:19:a4:ed:b1:cb:68:55:e8:42:73:de:0e:a7:b6:dc: d6:eb:00:c1:81:26:53:a0:1a:0c:03:c9:f2:0f:b1:0a:68:a8: 3d:45:27:a9:f0:29:83:0c:17:c7:36:be:05:7e:71:fd:f6:b3: 29:b4:2a:c6:13:01:50:d0:aa:ed:8a:a1:99:63:78:f4:f0:ab: b8:f1:37:a3 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUL8sf7zr4NgSGPxXNr0GXHlwIyLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRDFGREJCRDQ1N0NBMEY5Q0NGQzYzQThCODVDOTlB ODE5QUYzRDAeFw0yNTAyMDQxOTU0MjBaFw0yNjAyMDMxOTU5MjBaMDMxMTAvBgNV BAMTKDY3NkQxMDE2QjcxMDBEQTM4QUE4OEY4QUVCRjA3MjcxNTI0QTg1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsYELvd7+dPtdFecc4E0m2HjAF CtnVr9+Q5Owmv3591vGD2aU99WGAIgWISyI4v1SZCej5kBKBiQi4FddbqSx5gLR3 lS+uhM5ZJuVxS8YceKoN9ZQ5l/7hxmtfWAbfngcJXLT+kIGrw6KBS/0/E5uk6613 tLEhdekoguNNwmhrbXjB8w2O6WHJtkMCJ/G9h9L0qr4ePlRVZgjMFFC6qQM33sBO KGH41dmC8g1gF789jNkEidRSuA1UdN60zbJLWij4tFsPNei+/b76jPPCzJakPQMV /hYPDhcxgkcnzxqAtq+FxVU38Ehio9tiR+yVLVoTirGP0+IBbF9NnTmJpltfAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUZ20QFrcQDaOKqI+K6/BycVJKhZowHwYDVR0j BBgwFoAUYg0f271FfKD5zPxjqLhcmagZrz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUZBMDM5QjlFQUYxM0FERTgxNzg4MkRENEJCRkZBMkJF MUQ0OTE3NjRCRjkzODNFQ0VFOTA4QkQyM0Y0Q0YwLzAvNjIwRDFGREJCRDQ1N0NB MEY5Q0NGQzYzQThCODVDOTlBODE5QUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjBEMUZEQkJENDU3Q0EwRjlD Q0ZDNjNBOEI4NUM5OUE4MTlBRjNELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFGQTAzOUI5RUFGMTNBREU4MTc4ODJERDRCQkZGQTJCRTFENDkxNzY0 QkY5MzgzRUNFRTkwOEJEMjNGNENGMC8wLzMyMzgzMDMzM2EzNzM2MzgzMDNhM2Ey ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzIzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA3aAMA0G CSqGSIb3DQEBCwUAA4IBAQCVujLOUjnlfzc3sbME1WTuit1PYWgyBa12B2PiDRJd sAiONLaopXIwmAi9cTFRKYdeoRDOm+wBJnK2YruO5niwQRWcm7wQKElhRBI59aWp pTtBjrJtRX6/javHrQpV1IURLIbeik3/QdpJ0ELg2anWIbjVlTB0H2+NwBUZrUol uE0CNWJ0tDjRQ9gXLmzk1JX6aVflSKvFkx3byphQvrLNhVlUkZOO5fVWAby7ocFg vdvis+cuqCQZpO2xy2hV6EJz3g6nttzW6wDBgSZToBoMA8nyD7EKaKg9RSep8CmD DBfHNr4FfnH99rMptCrGEwFQ0KrtiqGZY3j08Ku48Tej -----END CERTIFICATE-----Generated at Mon Apr 7 01:52:59 2025 by rpki-client