$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa File: 323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa (raw, json) Hash identifier: o1u3iVUA+HZxMSs43a6irHJAHS01QifX433UxTv2hkE= Subject key identifier: DB:71:EB:C5:AB:1A:30:E8:7F:80:5B:A7:6B:97:B5:AA:39:F5:45:7E Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD Certificate serial: 2DC1D45BC6633E819CDFBCC5635C3936C259683A Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa Signing time: Tue 31 Mar 2026 03:36:56 +0000 ROA not before: Tue 31 Mar 2026 03:31:56 +0000 ROA not after: Tue 30 Mar 2027 03:36:56 +0000 asID: 64120 IP address blocks: 2803:f080:8140::/43 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 07:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c1:d4:5b:c6:63:3e:81:9c:df:bc:c5:63:5c:39:36:c2:59:68:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD Validity Not Before: Mar 31 03:31:56 2026 GMT Not After : Mar 30 03:36:56 2027 GMT Subject: CN=DB71EBC5AB1A30E87F805BA76B97B5AA39F5457E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:89:f2:92:c9:61:db:e1:e0:7d:73:6f:d8: bd:22:2f:b7:70:7b:2e:57:e8:85:d4:5d:43:68:75: f0:3c:d2:66:e4:fc:8c:98:9c:59:b8:68:c7:66:82: 91:35:74:cb:8b:17:e9:a3:d5:31:b2:89:10:11:7d: ec:7a:c0:d4:48:ca:75:cf:06:80:73:23:ba:5f:43: c7:2a:5a:6c:b1:a7:8d:48:45:68:98:44:66:42:be: 6a:48:e7:c5:f0:8e:2a:2a:20:db:76:81:a6:17:2b: ad:96:26:db:ba:aa:c7:4d:32:e5:41:91:7e:4e:73: f3:82:b9:96:0d:9c:73:80:ce:dc:b1:f2:3c:f1:28: 41:5d:39:f1:f1:bd:ee:32:14:db:93:cf:0c:fa:e2: 15:42:7f:49:66:2b:6a:48:c1:10:39:cb:c4:db:05: 7d:5b:08:2c:eb:10:25:5a:1f:bc:d7:12:06:b5:65: b1:36:ed:9c:94:c3:a0:5f:eb:41:0d:a2:be:e0:85: f4:aa:2e:91:fe:e1:92:2f:f6:9b:e8:2d:08:d2:5a: d0:fa:40:b8:15:eb:76:89:92:c3:b8:89:09:2d:8f: 9c:bd:76:df:a3:24:6e:b2:e7:33:52:fe:1c:3f:d5: e5:2a:f1:c3:cd:95:aa:f6:3e:43:19:7d:5c:62:3a: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:EB:C5:AB:1A:30:E8:7F:80:5B:A7:6B:97:B5:AA:39:F5:45:7E X509v3 Authority Key Identifier: keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a383134303a3a2f34332d3634203d3e203634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f080:8140::/43 Signature Algorithm: sha256WithRSAEncryption ac:1e:7f:47:97:f9:b6:69:5b:af:40:0f:33:47:a8:82:9a:f6: 2a:9c:59:c1:15:91:07:87:8a:ee:92:7a:e3:bd:e2:d0:c0:ca: be:29:76:08:0d:15:c9:ca:c6:33:cc:a2:19:5e:49:f0:0e:bc: 52:3b:97:f3:c8:62:24:66:5c:dc:31:d6:9b:85:7d:d4:cf:6a: a0:d0:4b:3c:56:8e:8b:88:0f:1b:fa:bc:d2:8a:a9:9a:8d:4e: 70:18:df:38:38:bd:e8:38:ac:7c:15:a8:71:96:b1:e6:db:c4: 08:02:5b:35:7d:1c:42:d7:c7:b0:ba:17:c0:85:f3:93:ab:a6: 1b:09:3d:bc:e4:c2:80:12:9c:f4:83:c7:3d:36:d0:cf:b9:fe: a7:69:05:13:b6:4e:8c:e7:3c:17:e1:02:f0:39:39:91:08:c9: fb:5a:3d:18:4e:a1:78:f9:ad:cd:0c:0b:f1:68:e2:b5:a3:c0: 46:01:4f:c4:48:f4:6b:9a:72:95:1e:0f:9a:87:ab:ed:05:d2: b1:03:28:69:70:28:1f:5a:6c:ad:5c:53:aa:30:50:1c:f6:8e: 1c:8c:da:42:9b:5b:97:20:e7:e7:d2:55:e6:6f:bc:91:b3:5e: 90:31:b8:3b:16:21:86:1c:b9:59:71:9b:34:2c:27:2f:46:8d: 64:46:49:67 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULcHUW8ZjPoGc37zFY1w5NsJZaDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy NEVBQzJBRDAeFw0yNjAzMzEwMzMxNTZaFw0yNzAzMzAwMzM2NTZaMDMxMTAvBgNV BAMTKERCNzFFQkM1QUIxQTMwRTg3RjgwNUJBNzZCOTdCNUFBMzlGNTQ1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79Inykslh2+HgfXNv2L0iL7dw ey5X6IXUXUNodfA80mbk/IyYnFm4aMdmgpE1dMuLF+mj1TGyiRARfex6wNRIynXP BoBzI7pfQ8cqWmyxp41IRWiYRGZCvmpI58XwjioqINt2gaYXK62WJtu6qsdNMuVB kX5Oc/OCuZYNnHOAztyx8jzxKEFdOfHxve4yFNuTzwz64hVCf0lmK2pIwRA5y8Tb BX1bCCzrECVaH7zXEga1ZbE27ZyUw6Bf60ENor7ghfSqLpH+4ZIv9pvoLQjSWtD6 QLgV63aJksO4iQktj5y9dt+jJG6y5zNS/hw/1eUq8cPNlar2PkMZfVxiOnSvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU23HrxasaMOh/gFuna5e1qjn1RX4wHwYDVR0j BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzgz MTM0MzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcFKAPwgIFAMA0GCSqGSIb3DQEBCwUAA4IBAQCsHn9Hl/m2aVuvQA8zR6iCmvYq nFnBFZEHh4ruknrjveLQwMq+KXYIDRXJysYzzKIZXknwDrxSO5fzyGIkZlzcMdab hX3Uz2qg0Es8Vo6LiA8b+rzSiqmajU5wGN84OL3oOKx8FahxlrHm28QIAls1fRxC 18ewuhfAhfOTq6YbCT285MKAEpz0g8c9NtDPuf6naQUTtk6M5zwX4QLwOTmRCMn7 Wj0YTqF4+a3NDAvxaOK1o8BGAU/ESPRrmnKVHg+ah6vtBdKxAyhpcCgfWmytXFOq MFAc9o4cjNpCm1uXIOfn0lXmb7yRs16QMbg7FiGGHLlZcZs0LCcvRo1kRkln -----END CERTIFICATE-----Generated at Sun Apr 5 21:49:31 2026 by rpki-client