$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a3a2f33322d3438203d3e203236323130.roa File: 323830303a38383a3a2f33322d3438203d3e203236323130.roa (raw, json) Hash identifier: LImroISAZc/fn4UXn/r2qcyW+ceuf7dYFsjrDBCpH1I= Subject key identifier: 8E:CA:49:B3:CD:9C:40:EE:98:56:6A:D6:2C:5C:60:26:2F:D3:79:25 Certificate issuer: /CN=0E2398E228CAF8263D654C1F35A155213634B840 Certificate serial: 0FD050FB45A8048AA2296A4EB3136462CE57D97B Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a3a2f33322d3438203d3e203236323130.roa Signing time: Fri 24 Apr 2026 17:10:00 +0000 ROA not before: Fri 24 Apr 2026 17:05:00 +0000 ROA not after: Fri 23 Apr 2027 17:10:00 +0000 asID: 26210 IP address blocks: 2800:88::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 01 May 2026 01:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:50:fb:45:a8:04:8a:a2:29:6a:4e:b3:13:64:62:ce:57:d9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840 Validity Not Before: Apr 24 17:05:00 2026 GMT Not After : Apr 23 17:10:00 2027 GMT Subject: CN=8ECA49B3CD9C40EE98566AD62C5C60262FD37925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:17:b4:9b:e9:36:40:da:96:29:e9:a8:c2: 7d:ed:c5:1f:7b:8d:5b:a6:d1:ec:51:cd:c6:fc:ba: 8e:2f:4a:93:e7:15:42:a7:9e:7f:93:46:53:d2:59: 14:0e:36:7a:fd:39:52:69:51:cd:13:b6:df:ad:52: b8:e8:55:22:b1:ce:8a:8c:12:81:12:d5:3a:f4:c3: 38:fa:d3:42:85:aa:fd:fd:61:b3:ed:f9:07:a5:d3: 80:56:4c:c4:16:4d:85:f5:91:2b:e3:98:ca:19:10: f1:f2:77:2a:9c:e1:06:40:ac:1b:73:35:d3:92:90: 96:89:81:98:f3:ec:3c:b0:f9:77:f8:04:b3:fd:02: da:1c:ca:be:d8:db:75:62:ac:2e:a6:c2:27:42:40: b1:a9:53:81:20:90:0d:fd:12:69:ca:cf:b3:53:02: bf:24:a9:35:71:a6:a4:47:17:81:d3:55:c9:78:03: 6b:36:b1:a2:37:67:be:f1:d8:47:48:56:3d:12:32: d8:d3:18:5c:0a:ba:4a:4e:cd:04:9f:fb:b1:64:6d: ef:26:0c:3f:e1:e4:a7:ae:f6:b8:cb:85:4a:fe:12: 13:44:ea:ab:85:de:77:00:47:27:96:e8:27:25:5a: 13:5d:5d:f4:f1:b9:73:cc:c4:57:f1:07:3d:6d:19: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CA:49:B3:CD:9C:40:EE:98:56:6A:D6:2C:5C:60:26:2F:D3:79:25 X509v3 Authority Key Identifier: keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a3a2f33322d3438203d3e203236323130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:88::/32 Signature Algorithm: sha256WithRSAEncryption b8:75:90:bc:f8:2f:f4:91:ed:af:25:5c:24:9b:7d:7e:e9:3b: 8b:25:ef:de:bf:9f:52:74:7b:fe:0d:17:2a:2c:2b:6f:6b:fe: cc:3c:13:b1:e6:53:9b:81:db:20:cf:40:58:45:0f:3e:ba:29: 1d:23:a0:37:dd:1a:dd:0c:fb:4d:03:1d:e2:14:ce:eb:24:a4: 38:10:06:4f:ef:ec:79:13:97:c7:62:c1:eb:72:8c:07:dd:6e: ac:84:5f:b6:ce:95:a5:b3:34:c3:66:09:fc:c4:7b:15:7f:f2: 47:65:e4:51:b4:d1:22:ba:fc:92:d1:99:c7:4a:3e:c6:6e:cf: 8b:15:67:41:08:6d:e7:94:e6:34:85:c2:cf:72:1e:fe:2e:9f: c8:e6:fa:5a:73:21:b4:9e:c7:30:7b:85:9e:18:e9:d8:f2:e9: f3:82:cc:e6:dc:64:9a:02:10:66:af:6b:0c:87:6a:d3:5b:57: 33:f5:27:93:40:f3:55:74:19:27:06:f2:0f:41:f7:b5:93:4d: 36:16:2b:94:4c:f1:eb:5c:4c:d5:f3:c7:96:0b:f3:af:06:44: 54:7c:f1:a5:ce:09:3b:83:2d:8f:18:d1:40:ee:2a:62:89:1f: a3:bc:8e:50:f0:8f:2f:78:04:76:1a:a2:75:44:d7:ae:99:41: 3c:ed:8b:a2 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUD9BQ+0WoBIqiKWpOsxNkYs5X2XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyMzk4RTIyOENBRjgyNjNENjU0QzFGMzVBMTU1MjEz NjM0Qjg0MDAeFw0yNjA0MjQxNzA1MDBaFw0yNzA0MjMxNzEwMDBaMDMxMTAvBgNV BAMTKDhFQ0E0OUIzQ0Q5QzQwRUU5ODU2NkFENjJDNUM2MDI2MkZEMzc5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtxe0m+k2QNqWKemown3txR97 jVum0exRzcb8uo4vSpPnFUKnnn+TRlPSWRQONnr9OVJpUc0Ttt+tUrjoVSKxzoqM EoES1Tr0wzj600KFqv39YbPt+Qel04BWTMQWTYX1kSvjmMoZEPHydyqc4QZArBtz NdOSkJaJgZjz7Dyw+Xf4BLP9Atocyr7Y23VirC6mwidCQLGpU4EgkA39EmnKz7NT Ar8kqTVxpqRHF4HTVcl4A2s2saI3Z77x2EdIVj0SMtjTGFwKukpOzQSf+7Fkbe8m DD/h5Keu9rjLhUr+EhNE6quF3ncARyeW6CclWhNdXfTxuXPMxFfxBz1tGWljAgMB AAGjggLDMIICvzAdBgNVHQ4EFgQUjspJs82cQO6YVmrWLFxgJi/TeSUwHwYDVR0j BBgwFoAUDiOY4ijK+CY9ZUwfNaFVITY0uEAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRUNERTc1MDQ3QUFEMTM1QzBBNDdGRTFERTZENkIwRDNG RTFCMDY3MUREQjVFRjkzQTEyNTQ0NDk3Qzk0NDE1LzAvMEUyMzk4RTIyOENBRjgy NjNENjU0QzFGMzVBMTU1MjEzNjM0Qjg0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTIzOThFMjI4Q0FGODI2M0Q2 NTRDMUYzNUExNTUyMTM2MzRCODQwLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0VDREU3NTA0N0FBRDEzNUMwQTQ3RkUxREU2RDZCMEQzRkUxQjA2NzFE REI1RUY5M0ExMjU0NDQ5N0M5NDQxNS8wLzMyMzgzMDMwM2EzODM4M2EzYTJmMzMz MjJkMzQzODIwM2QzZTIwMzIzNjMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgAAIgwDQYJKoZI hvcNAQELBQADggEBALh1kLz4L/SR7a8lXCSbfX7pO4sl796/n1J0e/4NFyosK29r /sw8E7HmU5uB2yDPQFhFDz66KR0joDfdGt0M+00DHeIUzuskpDgQBk/v7HkTl8di wetyjAfdbqyEX7bOlaWzNMNmCfzEexV/8kdl5FG00SK6/JLRmcdKPsZuz4sVZ0EI beeU5jSFws9yHv4un8jm+lpzIbSexzB7hZ4Y6djy6fOCzObcZJoCEGavawyHatNb VzP1J5NA81V0GScG8g9B97WTTTYWK5RM8etcTNXzx5YL868GRFR88aXOCTuDLY8Y 0UDuKmKJH6O8jlDwjy94BHYaonVE166ZQTzti6I= -----END CERTIFICATE-----Generated at Mon Apr 27 09:45:01 2026 by rpki-client