$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa File: 323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa (raw, json) Hash identifier: AGq16ochLwYcwnQ5z4PXvB8M3jPhzKd+VUntYPGzBcI= Subject key identifier: 0B:01:66:C3:F5:1B:80:39:14:09:DE:FD:A1:04:D9:84:39:E6:12:BE Certificate issuer: /CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3 Certificate serial: 4B7AF2493F4DB20619B684E5F7A84C39500C4458 Authority key identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa Signing time: Mon 04 Aug 2025 17:25:00 +0000 ROA not before: Mon 04 Aug 2025 17:20:00 +0000 ROA not after: Mon 03 Aug 2026 17:25:00 +0000 asID: 274166 IP address blocks: 2803:85d0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7a:f2:49:3f:4d:b2:06:19:b6:84:e5:f7:a8:4c:39:50:0c:44:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3 Validity Not Before: Aug 4 17:20:00 2025 GMT Not After : Aug 3 17:25:00 2026 GMT Subject: CN=0B0166C3F51B80391409DEFDA104D98439E612BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6a:83:e6:e1:72:1e:f8:ed:59:eb:77:1a:de: 20:91:e9:a1:45:dc:2f:c7:15:71:53:c1:a2:a3:0e: 81:6d:a3:de:92:c4:8c:0f:fa:75:1c:62:be:ba:7a: cd:4b:5b:46:b7:83:ae:b9:38:15:41:b1:3f:da:46: 28:2f:b1:99:b4:74:cd:a2:84:b3:c4:4e:a4:84:ad: 15:39:73:63:50:e6:7c:0d:78:d7:0a:de:f5:2c:56: 5f:8b:54:73:3b:7b:bb:e1:e6:3d:00:7e:d8:2f:0a: 50:41:eb:73:1f:ed:94:98:0c:ce:fa:ae:d7:c1:f1: 7a:c0:ad:54:e6:d1:ca:94:eb:bc:a5:7e:8b:dd:68: 05:24:3b:2f:f5:3a:ea:3f:b2:ec:16:57:1a:da:02: 81:4f:89:ba:4a:8f:18:07:3f:79:46:49:f4:a4:e4: bf:2a:ac:90:f5:8b:4d:74:d1:a1:00:7d:be:72:59: 40:58:b8:62:3e:48:02:35:13:51:48:20:08:15:8c: ab:91:d7:26:84:37:a1:ce:0e:49:26:2f:41:86:5d: de:ae:b5:e7:d9:e5:16:4c:82:3c:58:d5:f4:28:35: 70:1b:ae:ee:68:06:97:d9:d7:58:07:32:54:4c:86: aa:2c:f3:94:1f:65:d3:46:ec:6e:2f:ca:c1:37:fb: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:66:C3:F5:1B:80:39:14:09:DE:FD:A1:04:D9:84:39:E6:12:BE X509v3 Authority Key Identifier: keyid:38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/323830333a383564303a383030303a3a2f33332d3333203d3e20323734313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:85d0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 42:3d:e5:f0:01:ee:c3:3a:e5:3e:30:25:16:89:f8:ed:4c:03: cd:9b:e1:e0:34:f5:a0:3d:d7:4b:43:87:95:c8:2e:90:3e:b9: e7:08:a8:bb:2a:6d:34:a4:85:e3:ab:19:11:2c:b5:6e:62:06: 51:e2:59:c7:fa:cd:62:8f:c3:17:1c:4e:a6:2d:3e:c8:9a:67: 30:c7:99:5c:24:97:4a:84:1a:1e:f5:11:f9:b4:a8:c0:4d:42: d2:56:36:8b:bd:2a:3f:57:86:a6:99:0d:6f:99:17:4f:e5:1f: fe:3c:79:ec:50:79:f4:1c:f4:ba:da:86:df:ef:44:44:41:bf: e4:0e:7d:9a:58:78:71:fe:8c:a3:4d:51:b2:a1:4d:ce:74:5e: 28:4c:62:2e:59:84:14:16:a8:db:13:33:17:5d:21:48:b9:3d: 93:e1:ce:f2:fd:b3:b0:9c:8d:83:2a:02:0f:6d:74:35:5f:33: b9:62:24:27:e9:ab:a7:dc:12:f7:27:19:0d:8c:33:82:75:b4: d2:bd:78:0f:cc:ab:9a:87:91:04:97:ca:02:8f:f1:4a:de:26: b0:25:a1:ca:97:8a:6f:ab:34:ea:b3:8d:36:9e:12:65:23:60: c9:d0:9a:be:9f:28:75:1a:b4:67:7b:12:35:9d:1a:53:9b:04: e7:9a:82:62 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUS3ryST9NsgYZtoTl96hMOVAMRFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg0NTg5NEZBNjhCNUJGRkM3NTcwNTc0QzAxNUU4REJB Mzk3N0VCMzAeFw0yNTA4MDQxNzIwMDBaFw0yNjA4MDMxNzI1MDBaMDMxMTAvBgNV BAMTKDBCMDE2NkMzRjUxQjgwMzkxNDA5REVGREExMDREOTg0MzlFNjEyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDraoPm4XIe+O1Z63ca3iCR6aFF 3C/HFXFTwaKjDoFto96SxIwP+nUcYr66es1LW0a3g665OBVBsT/aRigvsZm0dM2i hLPETqSErRU5c2NQ5nwNeNcK3vUsVl+LVHM7e7vh5j0AftgvClBB63Mf7ZSYDM76 rtfB8XrArVTm0cqU67ylfovdaAUkOy/1Ouo/suwWVxraAoFPibpKjxgHP3lGSfSk 5L8qrJD1i0100aEAfb5yWUBYuGI+SAI1E1FIIAgVjKuR1yaEN6HODkkmL0GGXd6u tefZ5RZMgjxY1fQoNXAbru5oBpfZ11gHMlRMhqos85QfZdNG7G4vysE3+/h/AgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUCwFmw/UbgDkUCd79oQTZhDnmEr4wHwYDVR0j BBgwFoAUOEWJT6aLW//HVwV0wBXo26OXfrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FMDg0REZFNDZCQTFEQzE3Qjc5NEJFREMxMDEzOEZENkM4 MUQyNjAwNjMzNDYxNzBCMTY0MjgzMUU1NzgxNzc4LzAvMzg0NTg5NEZBNjhCNUJG RkM3NTcwNTc0QzAxNUU4REJBMzk3N0VCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODQ1ODk0RkE2OEI1QkZGQzc1 NzA1NzRDMDE1RThEQkEzOTc3RUIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTA4NERGRTQ2QkExREMxN0I3OTRCRURDMTAxMzhGRDZDODFEMjYwMDYz MzQ2MTcwQjE2NDI4MzFFNTc4MTc3OC8wLzMyMzgzMDMzM2EzODM1NjQzMDNhMzgz MDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM3MzQzMTM2MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgcoA4XQgDANBgkqhkiG9w0BAQsFAAOCAQEAQj3l8AHuwzrlPjAlFon47UwD zZvh4DT1oD3XS0OHlcgukD655wiouyptNKSF46sZESy1bmIGUeJZx/rNYo/DFxxO pi0+yJpnMMeZXCSXSoQaHvUR+bSowE1C0lY2i70qP1eGppkNb5kXT+Uf/jx57FB5 9Bz0utqG3+9EREG/5A59mlh4cf6Mo01RsqFNznReKExiLlmEFBao2xMzF10hSLk9 k+HO8v2zsJyNgyoCD210NV8zuWIkJ+mrp9wS9ycZDYwzgnW00r14D8yrmoeRBJfK Ao/xSt4msCWhypeKb6s06rONNp4SZSNgydCavp8odRq0Z3sSNZ0aU5sE55qCYg== -----END CERTIFICATE-----Generated at Sun Oct 26 14:26:59 2025 by rpki-client