$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/323830363a3331613a3a2f33322d3438203d3e203238333934.roa File: 323830363a3331613a3a2f33322d3438203d3e203238333934.roa (raw, json) Hash identifier: LYae6E4+xuGKXOOpNU0GbfgI22Vew+Y88jUqdMgpQhE= Subject key identifier: C2:2A:91:50:DF:20:7E:E4:AD:8A:98:5E:90:6C:55:68:33:B8:DC:C8 Certificate issuer: /CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720 Certificate serial: 0B33FDD223FFA85C217612245E616DF99777B5BC Authority key identifier: 4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/323830363a3331613a3a2f33322d3438203d3e203238333934.roa Signing time: Tue 22 Jul 2025 01:26:09 +0000 ROA not before: Tue 22 Jul 2025 01:21:09 +0000 ROA not after: Tue 21 Jul 2026 01:26:09 +0000 asID: 28394 IP address blocks: 2806:31a::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:33:fd:d2:23:ff:a8:5c:21:76:12:24:5e:61:6d:f9:97:77:b5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720 Validity Not Before: Jul 22 01:21:09 2025 GMT Not After : Jul 21 01:26:09 2026 GMT Subject: CN=C22A9150DF207EE4AD8A985E906C556833B8DCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e0:97:b0:dc:5d:74:ca:0d:59:08:56:4a:ba: 62:29:53:3c:d7:be:63:3a:37:a8:63:b5:de:da:c5: 7f:75:e0:fc:5b:e7:94:3c:3e:f0:ce:e4:36:77:d0: 7e:0a:33:d4:9a:88:e1:b4:73:b3:69:32:ac:72:16: 68:df:32:1b:c6:73:25:e8:1c:44:76:57:2d:93:9a: 94:bd:22:dd:fd:bb:65:02:cf:19:25:af:c2:82:8e: 6f:3a:6e:54:83:44:0e:c6:a1:c8:c2:19:e3:af:14: cc:e4:90:a2:5d:33:04:ab:86:31:52:8a:66:50:45: a8:df:89:dc:ef:73:a0:dc:06:d7:45:12:3e:64:44: e6:2f:64:d2:74:7b:de:0c:62:0e:bf:f4:53:28:35: 9f:37:f1:75:bd:86:73:77:17:50:36:7d:48:39:ee: b0:2e:03:ae:0c:1d:86:b0:a4:1d:30:f0:72:dd:f8: 1a:69:54:5b:c2:cc:d0:a7:48:a3:03:c0:88:b5:29: 3f:60:15:b9:88:8e:97:5a:ef:e5:0a:7a:66:b0:ac: 67:81:e9:46:40:5f:89:e2:e0:5a:5d:ae:1f:d3:b6: 1c:05:f1:49:f5:99:55:aa:aa:d2:ea:38:f7:f3:8b: f4:1b:8a:04:a4:23:13:32:5a:74:1b:6e:9b:b0:f5: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:91:50:DF:20:7E:E4:AD:8A:98:5E:90:6C:55:68:33:B8:DC:C8 X509v3 Authority Key Identifier: keyid:4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/323830363a3331613a3a2f33322d3438203d3e203238333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:31a::/32 Signature Algorithm: sha256WithRSAEncryption 46:91:ca:ed:cc:07:0f:6c:be:93:98:96:0f:87:2c:08:ac:de: aa:fe:2c:03:c5:9d:6d:08:d5:7e:6a:6f:89:b2:72:69:97:4d: f2:74:22:a0:bb:1c:ef:6a:61:3d:9c:52:c5:f3:50:3b:00:d8: d2:a0:94:c5:8f:6d:fc:40:a9:ea:a7:74:2a:af:59:e9:7c:dc: 9d:e7:a6:9a:1f:4c:b6:18:10:a3:d1:9a:55:4e:f8:8c:13:47: ab:83:8c:2d:b3:0c:00:bb:5f:9a:72:eb:3d:74:66:14:0d:d9: b2:12:6d:db:26:a7:94:87:6e:0c:9f:d9:d6:b9:7d:79:5b:ca: b7:72:e9:d9:e6:63:2e:95:59:0e:27:62:cf:80:f9:03:9f:2d: a5:63:10:1c:4c:55:57:b9:18:00:1c:c4:83:b9:2b:ea:63:2f: 0c:67:bb:2d:d5:98:6d:fd:b4:06:30:53:62:2b:91:bd:a3:6d: a2:32:a9:a7:19:b6:aa:21:06:59:fb:31:00:02:f6:ae:78:dc: 71:bd:0f:86:da:d7:e0:fc:4c:d4:9d:16:82:17:c6:5b:27:72: 2b:ec:09:86:d6:46:a9:53:42:d2:5d:dd:09:96:da:07:ae:e5: 10:96:ec:42:51:0a:3e:6e:40:70:da:1f:0d:ef:56:c9:b3:8d: 43:6e:a6:a1 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUCzP90iP/qFwhdhIkXmFt+Zd3tbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMjkyMUQxQjMwQTNFMEY2OUFCMkUxQTBGOTdCMDJC QTU5MDcyMDAeFw0yNTA3MjIwMTIxMDlaFw0yNjA3MjEwMTI2MDlaMDMxMTAvBgNV BAMTKEMyMkE5MTUwREYyMDdFRTRBRDhBOTg1RTkwNkM1NTY4MzNCOERDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL4Jew3F10yg1ZCFZKumIpUzzX vmM6N6hjtd7axX914Pxb55Q8PvDO5DZ30H4KM9SaiOG0c7NpMqxyFmjfMhvGcyXo HER2Vy2TmpS9It39u2UCzxklr8KCjm86blSDRA7GocjCGeOvFMzkkKJdMwSrhjFS imZQRajfidzvc6DcBtdFEj5kROYvZNJ0e94MYg6/9FMoNZ838XW9hnN3F1A2fUg5 7rAuA64MHYawpB0w8HLd+BppVFvCzNCnSKMDwIi1KT9gFbmIjpda7+UKemawrGeB 6UZAX4ni4Fpdrh/TthwF8Un1mVWqqtLqOPfzi/QbigSkIxMyWnQbbpuw9VA1AgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUwiqRUN8gfuStiphekGxVaDO43MgwHwYDVR0j BBgwFoAUTtKSHRswo+D2mrLhoPl7ArpZByAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRTk2M0E3NEFDMUQyNDFFOEUxRTk3NUI4QzlDMUNCRTNG QkFCRkMxMTMzNjMyMTgxRUQ4NTRFOUVCREFBOTQwLzAvNEVEMjkyMUQxQjMwQTNF MEY2OUFCMkUxQTBGOTdCMDJCQTU5MDcyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RUQyOTIxRDFCMzBBM0UwRjY5 QUIyRTFBMEY5N0IwMkJBNTkwNzIwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0U5NjNBNzRBQzFEMjQxRThFMUU5NzVCOEM5QzFDQkUzRkJBQkZDMTEz MzYzMjE4MUVEODU0RTlFQkRBQTk0MC8wLzMyMzgzMDM2M2EzMzMxNjEzYTNhMmYz MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDGjANBgkq hkiG9w0BAQsFAAOCAQEARpHK7cwHD2y+k5iWD4csCKzeqv4sA8WdbQjVfmpvibJy aZdN8nQioLsc72phPZxSxfNQOwDY0qCUxY9t/ECp6qd0Kq9Z6Xzcneemmh9MthgQ o9GaVU74jBNHq4OMLbMMALtfmnLrPXRmFA3ZshJt2yanlIduDJ/Z1rl9eVvKt3Lp 2eZjLpVZDidiz4D5A58tpWMQHExVV7kYABzEg7kr6mMvDGe7LdWYbf20BjBTYiuR vaNtojKppxm2qiEGWfsxAAL2rnjccb0PhtrX4PxM1J0WghfGWydyK+wJhtZGqVNC 0l3dCZbaB67lEJbsQlEKPm5AcNofDe9WybONQ26moQ== -----END CERTIFICATE-----Generated at Fri Aug 1 18:26:34 2025 by rpki-client