$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030303a3a2f34382d3634203d3e20323637383233.roa File: 323830333a313836303a323030303a3a2f34382d3634203d3e20323637383233.roa (raw, json) Hash identifier: ZWROcBdFP+sROQFRQH8v7X8CDV35oILwllORG/rw2hM= Subject key identifier: 4A:49:51:53:4C:A7:A1:7A:0E:80:93:0F:89:6A:FD:37:27:3E:BD:01 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 58F35DAA1978E02F2A28C3F67085504E7FF6661A Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030303a3a2f34382d3634203d3e20323637383233.roa Signing time: Tue 03 Mar 2026 16:25:05 +0000 ROA not before: Tue 03 Mar 2026 16:20:05 +0000 ROA not after: Tue 02 Mar 2027 16:25:05 +0000 asID: 267823 IP address blocks: 2803:1860:2000::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f3:5d:aa:19:78:e0:2f:2a:28:c3:f6:70:85:50:4e:7f:f6:66:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Mar 3 16:20:05 2026 GMT Not After : Mar 2 16:25:05 2027 GMT Subject: CN=4A4951534CA7A17A0E80930F896AFD37273EBD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:cf:9d:58:06:0c:24:d0:49:98:23:0a:b2: 2a:c4:90:ca:e0:c9:f1:38:56:b2:76:76:c8:50:55: 43:50:fa:e4:92:2a:35:bb:7d:b7:8a:77:df:1d:d1: b1:da:0a:89:ef:77:ae:13:b2:ec:82:d1:5f:29:82: 65:88:dd:b3:a0:72:09:59:61:53:4d:92:bb:de:f7: 7d:5c:65:c8:8b:59:4e:ed:e7:6e:d6:79:90:d8:0c: 8e:f6:8a:a5:dd:30:1e:ca:a2:b2:6c:ee:72:95:7e: 98:cc:d5:a8:37:d3:fe:96:94:e4:25:d3:d4:b7:20: da:94:cf:eb:26:3a:46:13:33:75:75:8e:a7:31:c0: b7:fc:e1:d6:54:f4:2e:84:97:51:37:4d:28:c4:c3: 02:e7:52:0e:99:a8:a3:cd:34:b6:57:bf:46:33:f0: f5:8e:dd:c4:31:29:bd:b9:ba:4d:b3:47:7a:c7:3b: 3d:34:0a:8d:5c:8a:f1:28:45:87:1d:4f:ce:4a:4a: 3e:6a:a4:c3:9c:eb:93:3f:43:f3:ab:c0:81:cb:51: 2a:97:4a:6d:ab:c8:dd:0e:72:f2:75:33:d3:e1:c3: 51:be:97:65:f1:27:ef:59:aa:0c:09:64:70:a4:35: f0:7a:fa:4a:7f:11:8c:c7:5a:28:1b:36:6a:39:66: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:51:53:4C:A7:A1:7A:0E:80:93:0F:89:6A:FD:37:27:3E:BD:01 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323030303a3a2f34382d3634203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2000::/48 Signature Algorithm: sha256WithRSAEncryption 5f:d7:56:16:87:4c:1a:84:35:c7:c4:00:97:cd:6d:e6:b9:81: f5:86:d8:fc:a7:60:00:e6:a6:9b:68:f9:f3:8d:6a:85:43:c0: 74:70:5b:7d:d9:01:a2:3a:74:64:ad:2d:84:c1:bc:7e:ba:f7: 33:84:d3:a1:5c:51:c7:0a:cd:ec:53:cc:af:12:68:78:9e:3a: bb:2f:7a:9d:08:18:e9:a4:8f:77:12:80:b1:3f:c1:45:b0:d6: eb:36:74:c3:ad:9c:9b:fe:1a:45:1a:5e:33:4b:49:1c:42:fb: 41:ca:bb:68:1b:70:fe:2e:bf:50:17:bf:c8:cb:e6:45:14:f6: 2e:47:e2:95:8d:6a:e0:15:9d:5a:82:61:f5:78:49:87:d0:11: fc:e9:d9:d7:e9:82:e5:4e:99:31:a7:4b:55:68:9b:7f:18:50: bb:de:f9:77:27:2a:b6:1f:9a:a2:56:c4:e2:55:98:42:14:36: 2f:67:01:04:9f:3c:58:b2:cf:78:5f:5c:9a:e1:73:3f:0e:a7: e6:fa:98:a1:70:29:4b:ce:55:f1:91:b5:05:98:75:9f:c7:a6: 77:66:97:47:c7:49:85:8b:0a:44:eb:97:ac:b6:a6:aa:a2:6b: 3c:96:7b:42:47:1b:e7:a7:b0:5b:1e:a4:d7:82:8f:db:88:a2: 6e:bd:d3:81 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUWPNdqhl44C8qKMP2cIVQTn/2ZhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNjAzMDMxNjIwMDVaFw0yNzAzMDIxNjI1MDVaMDMxMTAvBgNV BAMTKDRBNDk1MTUzNENBN0ExN0EwRTgwOTMwRjg5NkFGRDM3MjczRUJEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncc+dWAYMJNBJmCMKsirEkMrg yfE4VrJ2dshQVUNQ+uSSKjW7fbeKd98d0bHaConvd64TsuyC0V8pgmWI3bOgcglZ YVNNkrve931cZciLWU7t527WeZDYDI72iqXdMB7KorJs7nKVfpjM1ag30/6WlOQl 09S3INqUz+smOkYTM3V1jqcxwLf84dZU9C6El1E3TSjEwwLnUg6ZqKPNNLZXv0Yz 8PWO3cQxKb25uk2zR3rHOz00Co1civEoRYcdT85KSj5qpMOc65M/Q/OrwIHLUSqX Sm2ryN0OcvJ1M9Phw1G+l2XxJ+9ZqgwJZHCkNfB6+kp/EYzHWigbNmo5Zro/AgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUSklRU0ynoXoOgJMPiWr9Nyc+vQEwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MDMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIAAwDQYJKoZIhvcNAQELBQADggEBAF/XVhaHTBqENcfEAJfNbea5 gfWG2PynYADmppto+fONaoVDwHRwW33ZAaI6dGStLYTBvH669zOE06FcUccKzexT zK8SaHieOrsvep0IGOmkj3cSgLE/wUWw1us2dMOtnJv+GkUaXjNLSRxC+0HKu2gb cP4uv1AXv8jL5kUU9i5H4pWNauAVnVqCYfV4SYfQEfzp2dfpguVOmTGnS1Vom38Y ULve+XcnKrYfmqJWxOJVmEIUNi9nAQSfPFiyz3hfXJrhcz8Op+b6mKFwKUvOVfGR tQWYdZ/Hpndml0fHSYWLCkTrl6y2pqqiazyWe0JHG+ensFsepNeCj9uIom6904E= -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:37 2026 by rpki-client