$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa File: 323830313a3163323a3a2f34342d3434203d3e203133343839.roa (raw, json) Hash identifier: qcrgEML1r6HNgZMtsjFoYssgiItMtjuICQrIZZ2mbXc= Subject key identifier: 82:22:E8:14:07:01:43:AE:A3:13:22:93:02:FC:14:07:25:88:37:2E Certificate issuer: /CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Certificate serial: 67AD114880877376FE590DF6929DD926D8621171 Authority key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa Signing time: Tue 04 Feb 2025 18:36:42 +0000 ROA not before: Tue 04 Feb 2025 18:31:42 +0000 ROA not after: Tue 03 Feb 2026 18:36:42 +0000 asID: 13489 IP address blocks: 2801:1c2::/44 maxlen: 44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ad:11:48:80:87:73:76:fe:59:0d:f6:92:9d:d9:26:d8:62:11:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF Validity Not Before: Feb 4 18:31:42 2025 GMT Not After : Feb 3 18:36:42 2026 GMT Subject: CN=8222E814070143AEA313229302FC14072588372E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:b6:bc:66:df:50:e4:d1:29:a9:f3:33:41: 89:6b:a9:c5:5e:9c:cd:82:cb:8a:ce:a0:a4:c1:f5: 78:68:f9:22:f9:9f:cc:f6:31:17:3b:e1:b8:a3:9d: c3:e9:b2:7d:20:cd:82:46:74:51:7e:c6:47:1c:eb: 5f:65:b7:4a:ac:c4:16:07:59:fb:65:63:0b:8b:f4: a6:55:da:6f:53:a0:4c:c3:99:ce:41:20:7f:1e:df: be:3c:0b:38:f1:48:7b:9b:b5:bf:70:94:9e:58:a0: 52:93:e4:da:41:54:dd:98:62:23:08:e4:35:67:7e: 6d:4a:b5:f4:d9:ff:be:07:6c:c0:e9:00:52:6c:54: 2a:35:fa:6e:26:ef:9c:eb:b8:00:95:65:dd:f7:e9: 25:02:96:fb:43:5b:30:22:62:8d:29:0e:64:bf:87: 3c:69:15:38:90:eb:69:63:65:da:ce:61:6b:22:a4: 91:7b:4d:b1:ce:c6:d3:45:9e:de:5b:27:03:d3:fb: 4d:28:e8:56:44:21:ef:4e:b2:37:52:c6:d8:8a:c8: 83:d5:de:68:d8:48:02:ba:d9:e8:a0:0c:3c:c0:0e: de:3c:79:c5:f6:2a:83:bb:6f:fb:64:ca:12:80:8b: c2:f2:ce:9f:9a:4b:a2:99:aa:6b:60:14:33:fc:42: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:E8:14:07:01:43:AE:A3:13:22:93:02:FC:14:07:25:88:37:2E X509v3 Authority Key Identifier: keyid:1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/323830313a3163323a3a2f34342d3434203d3e203133343839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1c2::/44 Signature Algorithm: sha256WithRSAEncryption a6:b0:20:d6:10:3c:c0:71:92:45:ae:b9:5b:52:44:65:96:03: f0:a6:06:05:51:7f:b5:2c:c5:15:d9:c2:1f:1d:2f:22:d5:22: e7:4b:63:a9:be:91:65:56:56:c7:ce:19:4b:b1:ed:20:f3:e0: c6:9c:7f:42:e8:10:86:c7:17:ac:0b:49:3a:27:61:e0:9d:ce: 8d:d9:dd:51:e0:df:76:ac:89:9e:bb:9d:8f:fa:b6:b0:0f:b5: 86:38:06:57:19:e2:e5:67:e2:9c:e0:d7:40:f4:45:01:fa:d0: 08:ab:4e:e7:42:43:11:9c:6c:cc:dc:48:41:3b:40:a8:22:3c: 83:02:e7:cc:02:05:f4:35:79:50:4f:1d:a5:80:37:af:06:8b: 0f:f6:9c:c6:05:f6:5d:d3:9e:4a:1f:bc:1d:75:f0:be:ce:a6: 0d:4e:50:2d:6c:5e:97:ef:33:19:d4:64:d3:66:e9:39:11:62: 52:7c:c6:3c:a1:aa:88:19:9b:71:aa:85:c6:f9:97:20:09:a3: 73:08:5d:1c:d1:99:c9:02:95:ca:1b:6d:33:29:d7:4d:f9:66: a7:f2:ae:6c:28:96:8e:2e:1d:0b:68:c1:65:54:29:92:fa:b7: 33:05:45:16:52:47:e6:a4:a6:08:39:b1:33:c8:4e:7f:ea:17: fd:8f:1b:c2 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUZ60RSICHc3b+WQ32kp3ZJthiEXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCNkVGM0NDNTQyMUFDM0FGNzFDQ0RDREY0M0JCMDU1 NkU2QkVGRjAeFw0yNTAyMDQxODMxNDJaFw0yNjAyMDMxODM2NDJaMDMxMTAvBgNV BAMTKDgyMjJFODE0MDcwMTQzQUVBMzEzMjI5MzAyRkMxNDA3MjU4ODM3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoLa8Zt9Q5NEpqfMzQYlrqcVe nM2Cy4rOoKTB9Xho+SL5n8z2MRc74bijncPpsn0gzYJGdFF+xkcc619lt0qsxBYH WftlYwuL9KZV2m9ToEzDmc5BIH8e3748CzjxSHubtb9wlJ5YoFKT5NpBVN2YYiMI 5DVnfm1KtfTZ/74HbMDpAFJsVCo1+m4m75zruACVZd336SUClvtDWzAiYo0pDmS/ hzxpFTiQ62ljZdrOYWsipJF7TbHOxtNFnt5bJwPT+00o6FZEIe9OsjdSxtiKyIPV 3mjYSAK62eigDDzADt48ecX2KoO7b/tkyhKAi8Lyzp+aS6KZqmtgFDP8QsjVAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUgiLoFAcBQ66jEyKTAvwUByWINy4wHwYDVR0j BBgwFoAUHrbvPMVCGsOvcczc30O7BVbmvv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREMxMEZGRTI5MEMyNjcwRkIzM0Y4MTI3N0Y3NUEzRTg1 NkM5RTJBNTA0MjFCNEExQjZGQ0RFQjNEM0IwMTQyLzAvMUVCNkVGM0NDNTQyMUFD M0FGNzFDQ0RDREY0M0JCMDU1NkU2QkVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUI2RUYzQ0M1NDIxQUMzQUY3 MUNDRENERjQzQkIwNTU2RTZCRUZGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RDMTBGRkUyOTBDMjY3MEZCMzNGODEyNzdGNzVBM0U4NTZDOUUyQTUw NDIxQjRBMUI2RkNERUIzRDNCMDE0Mi8wLzMyMzgzMDMxM2EzMTYzMzIzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBwgAAMA0G CSqGSIb3DQEBCwUAA4IBAQCmsCDWEDzAcZJFrrlbUkRllgPwpgYFUX+1LMUV2cIf HS8i1SLnS2OpvpFlVlbHzhlLse0g8+DGnH9C6BCGxxesC0k6J2Hgnc6N2d1R4N92 rImeu52P+rawD7WGOAZXGeLlZ+Kc4NdA9EUB+tAIq07nQkMRnGzM3EhBO0CoIjyD AufMAgX0NXlQTx2lgDevBosP9pzGBfZd055KH7wddfC+zqYNTlAtbF6X7zMZ1GTT Zuk5EWJSfMY8oaqIGZtxqoXG+ZcgCaNzCF0c0ZnJApXKG20zKddN+Wan8q5sKJaO Lh0LaMFlVCmS+rczBUUWUkfmpKYIObEzyE5/6hf9jxvC -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:15 2025 by rpki-client