$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a3a2f33322d3334203d3e20323730313433.roa File: 323830363a3364663a3a2f33322d3334203d3e20323730313433.roa (raw, json) Hash identifier: k2pvi2Kl8chbqrYRdbov9WZeIjKclLveL1nF826mLBw= Subject key identifier: 32:9E:6C:D6:BF:0E:E8:BA:A2:CF:A4:F1:8A:71:0D:3B:4E:75:29:D2 Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C Certificate serial: 3F3BEA21287395119002CB38D32C8A87F1F372AE Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a3a2f33322d3334203d3e20323730313433.roa Signing time: Mon 30 Jun 2025 14:10:00 +0000 ROA not before: Mon 30 Jun 2025 14:05:00 +0000 ROA not after: Mon 29 Jun 2026 14:10:00 +0000 asID: 270143 IP address blocks: 2806:3df::/32 maxlen: 34 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Jul 2025 01:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3b:ea:21:28:73:95:11:90:02:cb:38:d3:2c:8a:87:f1:f3:72:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C Validity Not Before: Jun 30 14:05:00 2025 GMT Not After : Jun 29 14:10:00 2026 GMT Subject: CN=329E6CD6BF0EE8BAA2CFA4F18A710D3B4E7529D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6c:96:28:84:65:fe:74:6b:8e:0f:43:47:02: 63:7b:b6:52:5f:a9:c9:3f:16:fc:7b:cb:8c:4f:23: a3:51:93:5f:d3:71:e0:2a:2a:9b:ab:bc:73:7d:37: cc:a3:d6:f7:4f:a1:a2:5a:1e:f6:71:48:29:92:33: 60:69:52:96:c0:a6:b3:af:b0:65:9a:37:f5:ee:fb: 3c:26:82:04:5d:a6:ae:75:50:c4:8f:5c:c2:b6:c2: fb:40:d2:1d:cf:5f:82:4d:df:88:f1:96:23:74:5f: cb:88:90:69:bb:35:d0:2e:5b:d6:1b:f0:e6:ed:df: ad:f4:29:7d:14:6a:0e:5b:93:62:d5:e9:b9:2a:3b: 41:9f:d1:b1:ce:ce:6b:e4:0f:50:e2:e5:9a:6d:57: b4:b6:09:e0:63:55:fd:7d:e8:23:50:5a:b3:b1:ba: 2c:97:70:6e:2a:ef:9d:5d:f2:43:84:47:30:1a:3a: b3:0a:61:8d:ff:0d:af:0d:10:78:b5:a1:a3:94:00: 11:bb:47:b3:cf:a4:06:27:43:2e:ee:4a:0b:26:7e: d5:f5:02:62:2e:9d:8f:ce:a4:c1:c7:58:f9:2b:91: 32:d1:44:f5:f2:18:4f:7b:b4:b3:e9:fe:8e:7e:b1: 71:c0:d9:00:fc:e0:e0:6d:05:3b:33:60:71:53:5c: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:6C:D6:BF:0E:E8:BA:A2:CF:A4:F1:8A:71:0D:3B:4E:75:29:D2 X509v3 Authority Key Identifier: keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/323830363a3364663a3a2f33322d3334203d3e20323730313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3df::/32 Signature Algorithm: sha256WithRSAEncryption 68:4d:e4:f4:ca:35:ac:47:f3:dc:33:b9:6f:e3:26:e7:02:c3: 03:95:d8:63:12:ce:17:4a:23:93:d7:7e:21:e0:70:0f:13:3b: 56:02:33:75:50:3e:89:b6:4b:bd:81:4f:29:af:43:b0:14:5d: f2:78:d0:e6:17:84:9f:5c:f9:70:04:eb:c8:43:1b:64:6e:e1: 42:d0:38:4b:ba:c0:14:f1:70:4d:e1:12:b8:86:04:65:86:7b: 5b:52:b8:d4:92:5f:66:e6:db:26:8b:45:63:bf:66:f9:fd:c0: 88:7b:4e:17:61:d3:d2:4e:47:07:f1:80:00:51:fc:0f:76:d3: eb:5c:3a:ee:37:4f:e3:23:f6:d9:c7:70:16:dd:0c:cc:01:31: 4a:37:b5:9b:2d:24:49:6f:0c:3a:3f:1e:7c:7e:16:c2:5c:bf: 25:46:13:a1:02:34:a4:f4:23:fe:22:99:27:95:a0:35:45:0d: 38:25:e4:0a:43:1a:15:44:e5:9c:10:62:c5:00:dc:7e:d3:92: 53:6b:3b:da:de:e9:36:de:55:23:64:ae:0f:d6:fb:68:7e:4b: 59:87:3a:e3:ea:6d:90:b2:c7:aa:4e:7e:ac:3b:59:32:16:ab: 5c:67:5f:24:1b:4a:32:2d:64:fc:36:f5:89:97:70:13:60:24: 91:4c:42:b6 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUPzvqIShzlRGQAss40yyKh/Hzcq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkJBM0UxREY4QUQ2OTFEQjc1NTM3MkQ3MzFERkFC NkUwQ0Q4QzAeFw0yNTA2MzAxNDA1MDBaFw0yNjA2MjkxNDEwMDBaMDMxMTAvBgNV BAMTKDMyOUU2Q0Q2QkYwRUU4QkFBMkNGQTRGMThBNzEwRDNCNEU3NTI5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbJYohGX+dGuOD0NHAmN7tlJf qck/Fvx7y4xPI6NRk1/TceAqKpurvHN9N8yj1vdPoaJaHvZxSCmSM2BpUpbAprOv sGWaN/Xu+zwmggRdpq51UMSPXMK2wvtA0h3PX4JN34jxliN0X8uIkGm7NdAuW9Yb 8Obt3630KX0Uag5bk2LV6bkqO0Gf0bHOzmvkD1Di5ZptV7S2CeBjVf196CNQWrOx uiyXcG4q751d8kOERzAaOrMKYY3/Da8NEHi1oaOUABG7R7PPpAYnQy7uSgsmftX1 AmIunY/OpMHHWPkrkTLRRPXyGE97tLPp/o5+sXHA2QD84OBtBTszYHFTXIOXAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUMp5s1r8O6Lqiz6TxinENO051KdIwHwYDVR0j BBgwFoAUO3+6Ph34rWkdt1U3LXMd+rbgzYwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkM5QzE0MjI3NUQ2RTExQTBFRDlCNEZBQUREQkI4QzJB N0QzRjFDNDZENzUzMjBBNzI1MUM3MTk5NjE4N0YxLzAvM0I3RkJBM0UxREY4QUQ2 OTFEQjc1NTM3MkQ3MzFERkFCNkUwQ0Q4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjdGQkEzRTFERjhBRDY5MURC NzU1MzcyRDczMURGQUI2RTBDRDhDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZDOUMxNDIyNzVENkUxMUEwRUQ5QjRGQUFEREJCOEMyQTdEM0YxQzQ2 RDc1MzIwQTcyNTFDNzE5OTYxODdGMS8wLzMyMzgzMDM2M2EzMzY0NjYzYTNhMmYz MzMyMmQzMzM0MjAzZDNlMjAzMjM3MzAzMTM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPfMA0G CSqGSIb3DQEBCwUAA4IBAQBoTeT0yjWsR/PcM7lv4ybnAsMDldhjEs4XSiOT134h 4HAPEztWAjN1UD6Jtku9gU8pr0OwFF3yeNDmF4SfXPlwBOvIQxtkbuFC0DhLusAU 8XBN4RK4hgRlhntbUrjUkl9m5tsmi0Vjv2b5/cCIe04XYdPSTkcH8YAAUfwPdtPr XDruN0/jI/bZx3AW3QzMATFKN7WbLSRJbww6Px58fhbCXL8lRhOhAjSk9CP+Ipkn laA1RQ04JeQKQxoVROWcEGLFANx+05JTazva3uk23lUjZK4P1vtofktZhzrj6m2Q sseqTn6sO1kyFqtcZ18kG0oyLWT8NvWJl3ATYCSRTEK2 -----END CERTIFICATE-----Generated at Sat Jul 5 09:07:06 2025 by rpki-client