$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313130303a3a2f34302d3430203d3e20323633363831.roa File: 323830333a633234303a313130303a3a2f34302d3430203d3e20323633363831.roa (raw, json) Hash identifier: 4X/wQqP3IQVudcIZN0qzP3CYmLyvKAzpVCEXfcGBt30= Subject key identifier: C4:D9:30:CF:37:21:DE:22:AB:0F:38:B3:33:26:3A:78:67:3C:79:B5 Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6 Certificate serial: 4FCD577D7EFA73F1ADCC8D7C87023E6BD753180C Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313130303a3a2f34302d3430203d3e20323633363831.roa Signing time: Wed 27 Aug 2025 16:30:00 +0000 ROA not before: Wed 27 Aug 2025 16:25:00 +0000 ROA not after: Wed 26 Aug 2026 16:30:00 +0000 asID: 263681 IP address blocks: 2803:c240:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 03 Sep 2025 23:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cd:57:7d:7e:fa:73:f1:ad:cc:8d:7c:87:02:3e:6b:d7:53:18:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6 Validity Not Before: Aug 27 16:25:00 2025 GMT Not After : Aug 26 16:30:00 2026 GMT Subject: CN=C4D930CF3721DE22AB0F38B333263A78673C79B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:78:d8:b1:13:ff:1f:f2:02:28:b1:1f:e9: ec:e8:2c:ef:89:32:ec:d7:9a:3f:d8:2d:46:26:66: a8:d2:e4:0f:f9:f2:e6:45:3a:c5:ff:c8:b9:77:13: ca:92:cc:38:3b:2e:c6:0c:e4:57:e0:a8:b7:09:6e: 20:64:c2:b2:c3:5b:c3:25:8f:6f:e0:29:32:6d:76: de:74:4f:14:dc:2b:fd:a4:df:74:9e:b4:3f:21:eb: 03:fc:94:23:d7:54:37:23:aa:7a:fd:f5:f2:ba:f0: 02:31:26:f1:c4:3c:ac:d8:ae:8a:4f:43:06:45:60: 4d:40:24:6a:e5:e4:14:66:35:c7:a3:70:d2:45:dd: cd:6e:1b:45:8f:f6:da:37:ec:61:c0:27:80:f1:a4: 8d:bd:44:00:8e:77:bc:03:a8:35:cc:e9:0b:eb:90: bd:4b:46:4b:4d:1c:99:81:fa:fb:25:b9:74:ad:2a: 19:50:b7:5d:ac:3c:88:a3:90:9b:a6:b2:4c:63:ca: 11:52:58:19:22:aa:bf:8f:84:80:18:d8:67:59:4c: 90:64:7a:25:49:ec:58:8f:8a:f4:dc:75:f5:b7:b3: 50:76:d8:ca:83:83:e7:16:94:ca:78:8b:3a:8f:56: a1:c2:1f:42:48:0e:2c:e5:99:d3:c3:30:00:6f:c1: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D9:30:CF:37:21:DE:22:AB:0F:38:B3:33:26:3A:78:67:3C:79:B5 X509v3 Authority Key Identifier: keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/323830333a633234303a313130303a3a2f34302d3430203d3e20323633363831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c240:1100::/40 Signature Algorithm: sha256WithRSAEncryption 32:10:95:29:ea:bc:d1:f5:f9:18:bc:6f:21:02:68:a6:ae:4b: 6e:2c:27:04:6f:38:33:15:0b:d6:73:34:19:91:57:56:54:a5: 82:aa:18:7b:9a:de:d0:f5:85:90:b8:55:a4:d0:29:95:29:5e: 5c:55:4c:64:47:4a:d7:2d:0a:58:a5:18:f0:04:ad:6c:c0:20: aa:da:01:5a:9b:3b:5c:a8:37:45:a2:eb:8b:6b:db:b7:c3:41: fa:71:a1:3f:48:3d:9f:3f:24:e8:01:ee:82:d3:5d:59:63:39: a8:f5:50:cc:0a:64:b1:2b:fc:ef:be:81:00:70:f4:aa:29:bd: 93:b4:94:b3:26:34:f7:09:49:39:b8:06:bc:70:a1:81:2c:d7: 52:43:a0:30:3e:b0:91:3d:96:8b:d4:73:04:bd:ac:8b:08:4c: d7:ee:f4:38:be:fd:78:31:9e:74:57:01:0e:cd:12:3d:cf:67: f9:a3:47:bd:02:51:61:99:c3:20:37:ae:40:4f:b5:38:3d:eb: c4:86:46:2c:ae:77:e6:8c:db:c1:48:18:77:63:cd:f3:09:24: 18:6f:0b:17:6b:ad:c2:57:fe:c6:ac:c0:d8:1c:a8:32:45:2e: 3f:0e:b7:b1:77:37:1b:6c:16:58:bc:98:5d:d5:08:d5:73:0d: 13:7a:28:82 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUT81XfX76c/GtzI18hwI+a9dTGAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5QjVBNjBFN0ZG MkQzNTVDNjAeFw0yNTA4MjcxNjI1MDBaFw0yNjA4MjYxNjMwMDBaMDMxMTAvBgNV BAMTKEM0RDkzMENGMzcyMURFMjJBQjBGMzhCMzMzMjYzQTc4NjczQzc5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bHjYsRP/H/ICKLEf6ezoLO+J MuzXmj/YLUYmZqjS5A/58uZFOsX/yLl3E8qSzDg7LsYM5FfgqLcJbiBkwrLDW8Ml j2/gKTJtdt50TxTcK/2k33SetD8h6wP8lCPXVDcjqnr99fK68AIxJvHEPKzYropP QwZFYE1AJGrl5BRmNcejcNJF3c1uG0WP9to37GHAJ4DxpI29RACOd7wDqDXM6Qvr kL1LRktNHJmB+vsluXStKhlQt12sPIijkJumskxjyhFSWBkiqr+PhIAY2GdZTJBk eiVJ7FiPivTcdfW3s1B22MqDg+cWlMp4izqPVqHCH0JIDizlmdPDMABvwZMfAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUxNkwzzch3iKrDzizMyY6eGc8ebUwHwYDVR0j BBgwFoAU3NPw5O4EPFuphYqJtaYOf/LTVcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZD NUU2RUVBRDhERThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1 QkE5ODU4QTg5QjVBNjBFN0ZGMkQzNTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0QzRjBFNEVFMDQzQzVCQTk4 NThBODlCNUE2MEU3RkYyRDM1NUM2LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3RTBBQjUyMjE2QzVFNkVFQUQ4 REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wLzMyMzgzMDMzM2E2MzMyMzQzMDNhMzEz MTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzMzNjM4MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8JAETANBgkqhkiG9w0BAQsFAAOCAQEAMhCVKeq80fX5GLxvIQJopq5L biwnBG84MxUL1nM0GZFXVlSlgqoYe5re0PWFkLhVpNAplSleXFVMZEdK1y0KWKUY 8AStbMAgqtoBWps7XKg3RaLri2vbt8NB+nGhP0g9nz8k6AHugtNdWWM5qPVQzApk sSv8776BAHD0qim9k7SUsyY09wlJObgGvHChgSzXUkOgMD6wkT2Wi9RzBL2siwhM 1+70OL79eDGedFcBDs0SPc9n+aNHvQJRYZnDIDeuQE+1OD3rxIZGLK535ozbwUgY d2PN8wkkGG8LF2utwlf+xqzA2ByoMkUuPw63sXc3G2wWWLyYXdUI1XMNE3oogg== -----END CERTIFICATE-----Generated at Sun Aug 31 19:04:33 2025 by rpki-client