$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830303a6365303a3a2f33322d3536203d3e203134373039.roa File: 323830303a6365303a3a2f33322d3536203d3e203134373039.roa (raw, json) Hash identifier: Cps7e0UAVRwZg835E1crFq05BtHWvmw+rjsfON40pS4= Subject key identifier: 38:04:CD:C4:3F:15:BC:B7:2B:6E:5B:2B:A1:DE:5E:5E:A4:53:7D:5E Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 580F9FF4FCCF6BC85E48F9D56F2FFEA7CFD2C016 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830303a6365303a3a2f33322d3536203d3e203134373039.roa Signing time: Fri 24 Oct 2025 14:35:20 +0000 ROA not before: Fri 24 Oct 2025 14:30:20 +0000 ROA not after: Fri 23 Oct 2026 14:35:20 +0000 asID: 14709 IP address blocks: 2800:ce0::/32 maxlen: 56 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0f:9f:f4:fc:cf:6b:c8:5e:48:f9:d5:6f:2f:fe:a7:cf:d2:c0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Oct 24 14:30:20 2025 GMT Not After : Oct 23 14:35:20 2026 GMT Subject: CN=3804CDC43F15BCB72B6E5B2BA1DE5E5EA4537D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:db:43:7c:8a:68:31:f1:96:44:03:e1:9a: 88:72:3d:9f:5e:b1:87:7f:91:b6:27:d3:0a:f0:51: e0:ee:e6:49:a6:cf:cb:88:37:45:01:4a:7e:39:a2: e4:ce:f2:be:22:67:75:d7:b1:e6:50:04:62:0a:a5: aa:04:d6:af:16:10:d1:25:26:dc:00:85:75:f3:48: 88:a3:2a:47:eb:6d:1e:84:ff:e9:de:d3:a1:22:93: 08:6b:aa:5d:26:85:d6:b1:b8:06:45:8f:48:98:e2: 0b:f7:c1:db:65:f8:db:0e:e2:e3:f1:84:ad:b0:0f: 9d:d7:df:ad:5e:c8:57:67:b3:f2:98:0a:9e:36:51: 50:e8:51:41:33:a4:61:2a:72:54:f4:05:05:60:3b: 25:04:2a:53:22:03:46:14:0d:5f:02:00:08:3b:15: 23:72:9e:87:1b:06:37:5f:8f:5b:37:6c:f3:26:cf: 03:8c:f4:af:ab:e8:8f:d9:73:38:17:f4:bf:2f:73: ce:d3:4b:4b:b7:a7:a1:e4:17:a0:e6:1f:4d:da:88: b6:50:ab:ab:f5:21:73:6b:b8:6b:f8:ab:1b:0e:7e: b7:45:59:ea:44:70:27:bb:f9:77:e8:32:4f:b6:fa: 5b:a2:7b:c7:66:2e:4e:c8:d1:ae:da:6e:c4:94:a5: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:CD:C4:3F:15:BC:B7:2B:6E:5B:2B:A1:DE:5E:5E:A4:53:7D:5E X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/323830303a6365303a3a2f33322d3536203d3e203134373039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:ce0::/32 Signature Algorithm: sha256WithRSAEncryption 90:86:7d:a2:de:c2:43:7b:a8:d2:d6:e3:0e:af:9f:07:97:81: 17:a8:07:5c:a0:bb:0e:53:f1:ba:28:af:12:98:d6:04:93:ff: 86:b9:27:ad:f8:88:f9:5d:a4:96:89:bd:4d:8d:67:06:c4:09: ef:1c:18:18:74:4a:05:c8:b5:46:29:36:32:d0:5c:71:20:5d: f0:fb:fc:2f:61:8e:10:80:d8:d0:f7:ed:80:8d:97:e4:83:3d: 39:e1:11:37:a1:7d:9a:e1:82:d5:59:71:f2:01:97:71:f3:e9: 25:49:9a:5a:9e:20:bd:77:a2:78:95:19:af:d8:38:bf:5d:03: f9:11:8a:6d:44:95:38:a7:9a:6e:13:8c:ba:d3:d3:7c:62:f3: c0:12:e3:96:67:e6:3f:74:36:b7:a8:dd:3f:4f:cf:74:8a:68: ab:24:9e:2d:c1:57:1c:b4:e2:8e:15:dc:62:bf:9a:9a:7b:a6: 1a:8f:9d:1e:24:48:37:f0:01:ed:d5:a6:8e:13:e7:57:d7:1b: 1c:84:b4:aa:f6:91:44:8f:bd:a1:10:1f:ee:82:6a:de:56:4d: b5:35:8a:f0:2e:ce:88:11:20:0a:53:72:67:c8:c6:15:a3:f6: 85:e3:00:c6:7e:cd:2b:4a:48:ba:82:e6:a4:95:9c:03:f1:58: f6:42:22:a4 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUWA+f9PzPa8heSPnVby/+p8/SwBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMjBaFw0yNjEwMjMxNDM1MjBaMDMxMTAvBgNV BAMTKDM4MDRDREM0M0YxNUJDQjcyQjZFNUIyQkExREU1RTVFQTQ1MzdENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2NtDfIpoMfGWRAPhmohyPZ9e sYd/kbYn0wrwUeDu5kmmz8uIN0UBSn45ouTO8r4iZ3XXseZQBGIKpaoE1q8WENEl JtwAhXXzSIijKkfrbR6E/+ne06Eikwhrql0mhdaxuAZFj0iY4gv3wdtl+NsO4uPx hK2wD53X361eyFdns/KYCp42UVDoUUEzpGEqclT0BQVgOyUEKlMiA0YUDV8CAAg7 FSNynocbBjdfj1s3bPMmzwOM9K+r6I/ZczgX9L8vc87TS0u3p6HkF6DmH03aiLZQ q6v1IXNruGv4qxsOfrdFWepEcCe7+XfoMk+2+luie8dmLk7I0a7absSUpUHFAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUOATNxD8VvLcrblsrod5eXqRTfV4wHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzgzMDMwM2E2MzY1MzAzYTNhMmYz MzMyMmQzNTM2MjAzZDNlMjAzMTM0MzczMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAM4DANBgkq hkiG9w0BAQsFAAOCAQEAkIZ9ot7CQ3uo0tbjDq+fB5eBF6gHXKC7DlPxuiivEpjW BJP/hrknrfiI+V2klom9TY1nBsQJ7xwYGHRKBci1Rik2MtBccSBd8Pv8L2GOEIDY 0PftgI2X5IM9OeERN6F9muGC1Vlx8gGXcfPpJUmaWp4gvXeieJUZr9g4v10D+RGK bUSVOKeabhOMutPTfGLzwBLjlmfmP3Q2t6jdP0/PdIpoqySeLcFXHLTijhXcYr+a mnumGo+dHiRIN/AB7dWmjhPnV9cbHIS0qvaRRI+9oRAf7oJq3lZNtTWK8C7OiBEg ClNyZ8jGFaP2heMAxn7NK0pIuoLmpJWcA/FY9kIipA== -----END CERTIFICATE-----Generated at Thu Nov 6 16:59:27 2025 by rpki-client