$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130323a3a2f34382d3634203d3e20323637383233.roa File: 323830333a313836303a323130323a3a2f34382d3634203d3e20323637383233.roa (raw, json) Hash identifier: kj2Yfccq0+nFNEnom/b9htpmjjyq5mcT77T+zQXgy7M= Subject key identifier: D2:2A:A9:59:9D:F7:C2:DA:2D:45:A7:7A:C6:5A:42:B7:60:92:5A:27 Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Certificate serial: 2FA12C9EC3B4EAE8FEF8700446123433B1022FAC Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130323a3a2f34382d3634203d3e20323637383233.roa Signing time: Tue 03 Mar 2026 16:25:06 +0000 ROA not before: Tue 03 Mar 2026 16:20:06 +0000 ROA not after: Tue 02 Mar 2027 16:25:06 +0000 asID: 267823 IP address blocks: 2803:1860:2102::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a1:2c:9e:c3:b4:ea:e8:fe:f8:70:04:46:12:34:33:b1:02:2f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9 Validity Not Before: Mar 3 16:20:06 2026 GMT Not After : Mar 2 16:25:06 2027 GMT Subject: CN=D22AA9599DF7C2DA2D45A77AC65A42B760925A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:e0:8f:90:b6:fb:e1:db:17:fa:63:2d:28: 01:ca:d9:f5:18:09:20:88:f8:4b:05:95:d7:d6:91: cd:07:bd:71:37:c2:f3:76:49:c7:97:e8:6d:83:2e: b2:5c:e8:06:24:ae:30:69:f9:d4:61:f2:9e:c5:fb: 54:cb:28:9a:c3:15:2c:9c:4f:9a:46:09:e9:7c:70: 1e:be:e3:b9:85:64:a6:4f:bf:51:59:1a:b0:53:1e: ec:3b:47:ed:d2:53:ee:66:9b:31:5a:8f:d9:6e:7d: 74:57:e9:cb:52:85:7f:b7:7c:2a:39:63:7b:73:f6: b2:20:ea:b3:13:60:13:60:40:2b:5e:ec:0a:21:57: 84:a3:ee:4a:3c:9b:2e:1b:25:0f:94:10:db:ef:cf: 23:7b:19:7e:df:73:c5:11:26:d4:8d:fd:95:e1:1b: 0e:f3:95:54:de:40:b3:66:a3:09:d3:ca:2d:e7:d8: 30:fb:43:9f:cb:ca:92:58:76:90:57:d8:fc:80:11: 65:a0:ab:ed:34:c2:9a:7b:ec:8d:02:81:a5:b3:82: a5:77:41:b8:4f:e0:d6:25:f3:96:8a:e8:61:ed:14: fd:4b:44:80:7d:26:79:a9:8f:79:42:05:72:c4:8f: 87:20:99:15:56:9c:fa:a8:12:16:de:9a:f3:8c:58: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2A:A9:59:9D:F7:C2:DA:2D:45:A7:7A:C6:5A:42:B7:60:92:5A:27 X509v3 Authority Key Identifier: keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/323830333a313836303a323130323a3a2f34382d3634203d3e20323637383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1860:2102::/48 Signature Algorithm: sha256WithRSAEncryption a2:0f:7d:e7:cb:24:45:50:6c:77:4c:ac:29:3e:e1:66:9e:75: 4a:ac:d2:2c:bf:48:f9:c9:87:a6:d5:b1:19:7c:5b:2d:1c:8a: 01:9d:3a:41:1f:be:c9:54:60:94:2b:e3:07:ae:d1:f2:9c:0f: 05:89:da:56:84:b2:21:a2:50:e8:bd:4f:35:67:c4:1f:60:0a: 5f:51:18:ec:26:55:bd:73:41:74:99:58:4c:b8:dc:6f:52:77: 25:67:09:5d:fd:e9:87:e6:6b:7f:8d:f5:c4:7b:4c:f5:d4:9c: 56:33:4c:69:4a:7a:16:0b:ee:a1:75:e4:68:3a:f6:e5:10:dd: c8:b7:41:59:68:df:b4:8f:b5:4d:fb:30:54:d1:bc:ed:1d:c9: 54:ab:53:d3:7a:a7:69:e3:00:b5:5e:fa:d8:e3:93:6b:4e:7f: c8:b8:84:b8:46:6f:58:ce:1c:0a:14:70:e5:3b:c3:20:f7:a5: 0e:30:b8:b3:2c:c8:30:cf:77:63:90:48:de:95:91:e2:a2:5e: 92:14:51:41:2c:67:7e:a7:ef:9d:53:b1:17:67:74:4e:d4:80: 40:c8:6c:75:d6:de:76:77:7a:86:e0:f8:31:a9:e7:dc:c8:b1: c9:79:23:24:53:d9:37:1e:eb:ed:a6:0a:fd:fd:93:c0:88:a1: 8c:be:77:68 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUL6EsnsO06uj++HAERhI0M7ECL6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwOURGRkQ2QkQ4NEI2MTcxQjc2MjdGQkNGMTI4N0RB QzREQzlFOTAeFw0yNjAzMDMxNjIwMDZaFw0yNzAzMDIxNjI1MDZaMDMxMTAvBgNV BAMTKEQyMkFBOTU5OURGN0MyREEyRDQ1QTc3QUM2NUE0MkI3NjA5MjVBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhoOCPkLb74dsX+mMtKAHK2fUY CSCI+EsFldfWkc0HvXE3wvN2SceX6G2DLrJc6AYkrjBp+dRh8p7F+1TLKJrDFSyc T5pGCel8cB6+47mFZKZPv1FZGrBTHuw7R+3SU+5mmzFaj9lufXRX6ctShX+3fCo5 Y3tz9rIg6rMTYBNgQCte7AohV4Sj7ko8my4bJQ+UENvvzyN7GX7fc8URJtSN/ZXh Gw7zlVTeQLNmownTyi3n2DD7Q5/LypJYdpBX2PyAEWWgq+00wpp77I0CgaWzgqV3 QbhP4NYl85aK6GHtFP1LRIB9Jnmpj3lCBXLEj4cgmRVWnPqoEhbemvOMWAHlAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQU0iqpWZ33wtotRad6xlpCt2CSWicwHwYDVR0j BBgwFoAUzAnf/WvYS2Fxt2J/vPEofaxNyekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODVBOEE4QzVGRjFDMDEwOEREMzc3ODI2NzhFNTEwQ0Y5 ODU0MUQ5NjI3ODcwQzZEM0ZDNDEzQ0I3MEJGM0M5LzAvQ0MwOURGRkQ2QkQ4NEI2 MTcxQjc2MjdGQkNGMTI4N0RBQzREQzlFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzA5REZGRDZCRDg0QjYxNzFC NzYyN0ZCQ0YxMjg3REFDNERDOUU5LmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg1QThBOEM1RkYxQzAxMDhERDM3NzgyNjc4RTUxMENGOTg1NDFEOTYy Nzg3MEM2RDNGQzQxM0NCNzBCRjNDOS8wLzMyMzgzMDMzM2EzMTM4MzYzMDNhMzIz MTMwMzIzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMjM2MzczODMyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoAxhgIQIwDQYJKoZIhvcNAQELBQADggEBAKIPfefLJEVQbHdMrCk+4Wae dUqs0iy/SPnJh6bVsRl8Wy0cigGdOkEfvslUYJQr4weu0fKcDwWJ2laEsiGiUOi9 TzVnxB9gCl9RGOwmVb1zQXSZWEy43G9SdyVnCV396Yfma3+N9cR7TPXUnFYzTGlK ehYL7qF15Gg69uUQ3ci3QVlo37SPtU37MFTRvO0dyVSrU9N6p2njALVe+tjjk2tO f8i4hLhGb1jOHAoUcOU7wyD3pQ4wuLMsyDDPd2OQSN6VkeKiXpIUUUEsZ36n751T sRdndE7UgEDIbHXW3nZ3eobg+DGp59zIscl5IyRT2Tce6+2mCv39k8CIoYy+d2g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:14 2026 by rpki-client