$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a373030313a3a2f34382d3438203d3e20323636363833.roa File: 323830333a633532303a373030313a3a2f34382d3438203d3e20323636363833.roa (raw, json) Hash identifier: 1sel+Hf+0Zv39hygNTj+u0wd1iGbUhKBQRLib8DOBrc= Subject key identifier: BC:F9:AC:22:07:D0:A8:AA:15:80:53:83:C3:9D:4E:D3:BA:64:B7:F7 Certificate issuer: /CN=67695A57A246E7FEEC5E99692566E43D7F039663 Certificate serial: 0252FF70DB44308FBEE608E75B6C7071AD8B3B63 Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a373030313a3a2f34382d3438203d3e20323636363833.roa Signing time: Mon 12 May 2025 21:18:32 +0000 ROA not before: Mon 12 May 2025 21:13:32 +0000 ROA not after: Mon 11 May 2026 21:18:32 +0000 asID: 266683 IP address blocks: 2803:c520:7001::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:52:ff:70:db:44:30:8f:be:e6:08:e7:5b:6c:70:71:ad:8b:3b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663 Validity Not Before: May 12 21:13:32 2025 GMT Not After : May 11 21:18:32 2026 GMT Subject: CN=BCF9AC2207D0A8AA15805383C39D4ED3BA64B7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:a2:24:14:56:47:b1:15:82:bc:2a:81:3a: 4b:a7:c6:04:8d:4d:c4:4b:b8:2a:3a:7b:5b:8e:3c: b4:b8:b1:fb:cd:b4:7d:c7:78:c0:40:8f:3d:05:e3: 39:6c:3f:f5:a0:cd:bd:90:29:f6:fc:3e:fb:14:41: 23:f0:fc:0e:d9:7e:b2:78:14:f3:2a:ad:4d:8e:8b: 2a:f3:f0:fd:f8:02:4c:51:cc:04:63:e2:15:94:84: 69:ef:e6:90:db:fb:a4:0a:6c:f4:ee:b9:28:6f:aa: e0:47:6d:6f:c8:e5:d9:da:9e:3d:0c:93:d3:44:92: 48:e6:67:fe:cc:e6:61:83:77:70:fc:db:0d:e7:8b: f6:25:01:ab:76:42:fc:5b:2d:40:e5:39:4e:43:fe: 40:52:02:65:bf:49:1a:1a:ea:0b:54:7f:7d:ad:5b: 39:77:6d:45:1f:49:ec:56:58:a3:29:a0:59:7a:c0: 74:97:de:d3:e1:1a:3f:c4:e1:bf:38:5f:ea:5e:4a: 45:3f:28:3b:70:d6:05:cf:d0:50:9d:6d:84:5a:46: e0:55:02:3a:c9:ca:b1:ab:fc:85:dc:b6:c9:fe:90: 32:c5:ce:15:3e:54:26:6f:c2:9f:83:c0:68:1f:c9: ad:7f:eb:cb:f1:c7:d0:ef:24:6f:12:8c:00:fc:a5: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F9:AC:22:07:D0:A8:AA:15:80:53:83:C3:9D:4E:D3:BA:64:B7:F7 X509v3 Authority Key Identifier: keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/323830333a633532303a373030313a3a2f34382d3438203d3e20323636363833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c520:7001::/48 Signature Algorithm: sha256WithRSAEncryption 3b:2f:30:2c:b8:4b:23:8e:b1:89:78:ab:d7:bb:24:2c:e5:94: 52:c4:ff:a4:b7:52:8c:b0:50:44:51:de:5c:53:83:d4:97:bb: 4b:75:02:17:83:6b:2d:58:d7:13:41:63:fb:6f:1e:b5:55:9e: ac:02:ad:d2:35:46:1c:16:36:a0:0f:f6:e0:5d:9a:5c:6d:07: e1:79:18:60:a0:22:5f:37:b5:55:51:ed:c8:7d:19:9f:83:83: 6e:11:e6:69:f4:d6:73:4c:d8:f7:52:83:6d:4a:a1:bc:c0:c3: 63:17:e5:f7:b8:88:3b:36:ee:90:a0:7c:7d:5b:33:75:27:32: da:94:04:af:2c:95:3f:bf:32:d3:6c:48:ca:33:58:28:66:80: 39:c9:61:0b:87:53:15:e5:15:46:a3:71:7f:71:eb:e7:18:22: 28:3c:20:9b:e3:d0:d3:00:c2:47:13:10:02:1a:65:60:31:4b: bc:f3:26:db:8e:90:54:72:69:75:97:08:8e:01:25:c0:30:fb: b5:12:7a:1c:94:88:3b:bf:d1:f7:ea:04:b5:f3:ac:4f:88:2c: 12:55:05:86:df:9c:10:9a:6e:17:c5:92:0d:15:6f:42:65:bd: 37:a6:89:26:0d:8d:82:32:80:48:9c:0a:11:cc:72:07:33:98: 03:e5:3b:a5 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUAlL/cNtEMI++5gjnW2xwca2LO2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2OTVBNTdBMjQ2RTdGRUVDNUU5OTY5MjU2NkU0M0Q3 RjAzOTY2MzAeFw0yNTA1MTIyMTEzMzJaFw0yNjA1MTEyMTE4MzJaMDMxMTAvBgNV BAMTKEJDRjlBQzIyMDdEMEE4QUExNTgwNTM4M0MzOUQ0RUQzQkE2NEI3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOaIkFFZHsRWCvCqBOkunxgSN TcRLuCo6e1uOPLS4sfvNtH3HeMBAjz0F4zlsP/Wgzb2QKfb8PvsUQSPw/A7ZfrJ4 FPMqrU2Oiyrz8P34AkxRzARj4hWUhGnv5pDb+6QKbPTuuShvquBHbW/I5dnanj0M k9NEkkjmZ/7M5mGDd3D82w3ni/YlAat2QvxbLUDlOU5D/kBSAmW/SRoa6gtUf32t Wzl3bUUfSexWWKMpoFl6wHSX3tPhGj/E4b84X+peSkU/KDtw1gXP0FCdbYRaRuBV AjrJyrGr/IXctsn+kDLFzhU+VCZvwp+DwGgfya1/68vxx9DvJG8SjAD8pS9nAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUvPmsIgfQqKoVgFODw51O07pkt/cwHwYDVR0j BBgwFoAUZ2laV6JG5/7sXplpJWbkPX8DlmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTdEMjI3NzBFQTQ3ODU0NDY1NTk1OUU2NUIwREFENkEz OTgzNTdGQTY3MzA5QTc2NEFBRDcxQTREMzk0MUEyLzAvNjc2OTVBNTdBMjQ2RTdG RUVDNUU5OTY5MjU2NkU0M0Q3RjAzOTY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzY5NUE1N0EyNDZFN0ZFRUM1 RTk5NjkyNTY2RTQzRDdGMDM5NjYzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDE3RDIyNzcwRUE0Nzg1NDQ2NTU5NTlFNjVCMERBRDZBMzk4MzU3RkE2 NzMwOUE3NjRBQUQ3MUE0RDM5NDFBMi8wLzMyMzgzMDMzM2E2MzM1MzIzMDNhMzcz MDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzYzNjM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA8UgcAEwDQYJKoZIhvcNAQELBQADggEBADsvMCy4SyOOsYl4q9e7JCzl lFLE/6S3UoywUERR3lxTg9SXu0t1AheDay1Y1xNBY/tvHrVVnqwCrdI1RhwWNqAP 9uBdmlxtB+F5GGCgIl83tVVR7ch9GZ+Dg24R5mn01nNM2PdSg21KobzAw2MX5fe4 iDs27pCgfH1bM3UnMtqUBK8slT+/MtNsSMozWChmgDnJYQuHUxXlFUajcX9x6+cY Iig8IJvj0NMAwkcTEAIaZWAxS7zzJtuOkFRyaXWXCI4BJcAw+7USehyUiDu/0ffq BLXzrE+ILBJVBYbfnBCabhfFkg0Vb0JlvTemiSYNjYIygEicChHMcgczmAPlO6U= -----END CERTIFICATE-----Generated at Sun May 18 03:32:32 2025 by rpki-client