$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/323830313a3164313a3a2f34342d3434203d3e203138373437.roa File: 323830313a3164313a3a2f34342d3434203d3e203138373437.roa (raw, json) Hash identifier: ftKHcSfpwQNd+d7zzQvY0xm8Gjb0+BFSUkcC3SewXkc= Subject key identifier: 06:2A:4F:47:42:EA:24:4C:0C:49:E6:77:DE:42:DB:76:72:5D:D5:D1 Certificate issuer: /CN=FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200 Certificate serial: 185A1C62D61770E33A7956D634D8BC6813C7AFD7 Authority key identifier: FA:B4:AB:C6:BA:EF:7B:58:EE:B7:F4:B7:CD:17:88:4F:8D:AA:12:00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/323830313a3164313a3a2f34342d3434203d3e203138373437.roa Signing time: Wed 25 Mar 2026 17:35:55 +0000 ROA not before: Wed 25 Mar 2026 17:30:55 +0000 ROA not after: Wed 24 Mar 2027 17:35:55 +0000 asID: 18747 IP address blocks: 2801:1d1::/44 maxlen: 44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.crl rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5a:1c:62:d6:17:70:e3:3a:79:56:d6:34:d8:bc:68:13:c7:af:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200 Validity Not Before: Mar 25 17:30:55 2026 GMT Not After : Mar 24 17:35:55 2027 GMT Subject: CN=062A4F4742EA244C0C49E677DE42DB76725DD5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:83:0f:64:ab:1b:c4:e3:f1:75:59:30:b9: e3:27:83:63:91:0f:66:8d:75:d0:67:14:75:90:cf: 20:16:7d:ea:a3:b3:27:9b:20:58:48:8e:ae:86:4d: 30:68:34:ac:69:8f:59:b2:31:60:36:b1:98:d9:c3: ad:d4:17:20:54:08:5b:90:81:c6:eb:c0:d0:e7:4f: 7a:e3:c5:ed:68:3a:c8:41:42:af:51:c7:af:82:56: 31:b3:e1:c3:77:87:0b:d3:62:7a:b2:5b:39:57:66: 1c:6e:b8:10:8d:0f:54:87:a8:14:a6:6a:1a:87:c5: 27:6e:c9:50:4c:46:49:fd:3e:e9:df:62:a8:ab:82: f4:21:80:34:96:be:c2:0a:64:93:3b:1a:5b:ac:97: 0a:c3:44:d9:4b:ea:39:5c:e8:76:36:b2:f4:0a:50: 90:9c:6d:44:a8:0a:3f:04:7d:ac:60:fe:02:4a:01: 54:57:dc:b3:42:43:46:cc:f1:58:05:0d:4f:4e:38: 1b:ac:6a:a9:86:fe:2b:a4:5e:4a:2a:24:34:01:e2: 3f:70:79:6b:21:c6:54:e5:73:ed:14:66:ff:4d:09: 63:4b:66:9b:26:f9:28:13:3f:63:71:c9:4f:77:c7: ec:54:1e:85:a2:e9:9f:ae:91:0d:05:52:dd:bb:1a: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2A:4F:47:42:EA:24:4C:0C:49:E6:77:DE:42:DB:76:72:5D:D5:D1 X509v3 Authority Key Identifier: keyid:FA:B4:AB:C6:BA:EF:7B:58:EE:B7:F4:B7:CD:17:88:4F:8D:AA:12:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAB4ABC6BAEF7B58EEB7F4B7CD17884F8DAA1200.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E25D865D80668E2D281E1CD82BF521CFD36931BE39F24A0B5214E2BEBA55697/0/323830313a3164313a3a2f34342d3434203d3e203138373437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1d1::/44 Signature Algorithm: sha256WithRSAEncryption 37:f8:ba:a8:72:b6:b4:9e:b0:44:03:b1:aa:9b:73:a8:34:3e: b1:18:13:ca:ab:f5:2c:a3:c5:34:55:38:34:01:1e:29:07:ce: 90:b8:40:a2:83:53:2f:a5:b0:7e:13:ba:d7:fd:e9:4d:03:95: 8e:35:f4:bc:6f:9d:c0:8e:49:64:77:4b:3b:2c:37:84:1c:b6: 26:82:d4:16:30:c1:97:89:b6:aa:a6:c6:fb:51:66:bd:54:40: 99:d8:a9:4d:bf:15:6a:34:56:df:4d:fa:3a:b5:56:9b:de:93: 84:eb:84:06:40:6b:74:ab:7b:83:c5:eb:24:f6:c1:b5:be:4c: 1b:2e:d9:d3:bc:a1:0f:21:d4:94:1c:6a:84:c8:cc:1f:57:f6: cd:f2:ff:f9:ef:31:b8:b6:10:0b:c1:75:69:df:c8:fe:ff:af: dc:a3:f2:78:e8:c6:7b:5d:c8:f3:62:ff:25:2c:2b:c3:10:40: e6:23:39:50:4d:5b:ef:1c:57:86:88:12:fc:21:c3:c0:9b:8a: 01:e5:46:93:a9:a7:c0:5b:51:26:be:52:cd:91:a9:91:50:31: 45:8f:23:e4:00:7b:42:0e:ff:64:4f:17:74:87:4e:b9:a3:8c: 21:16:f0:64:5e:b8:e0:4f:f3:42:37:25:5a:38:67:f4:7f:9b: aa:51:0f:61 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUGFocYtYXcOM6eVbWNNi8aBPHr9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCNEFCQzZCQUVGN0I1OEVFQjdGNEI3Q0QxNzg4NEY4 REFBMTIwMDAeFw0yNjAzMjUxNzMwNTVaFw0yNzAzMjQxNzM1NTVaMDMxMTAvBgNV BAMTKDA2MkE0RjQ3NDJFQTI0NEMwQzQ5RTY3N0RFNDJEQjc2NzI1REQ1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJp4MPZKsbxOPxdVkwueMng2OR D2aNddBnFHWQzyAWfeqjsyebIFhIjq6GTTBoNKxpj1myMWA2sZjZw63UFyBUCFuQ gcbrwNDnT3rjxe1oOshBQq9Rx6+CVjGz4cN3hwvTYnqyWzlXZhxuuBCND1SHqBSm ahqHxSduyVBMRkn9PunfYqirgvQhgDSWvsIKZJM7GluslwrDRNlL6jlc6HY2svQK UJCcbUSoCj8Efaxg/gJKAVRX3LNCQ0bM8VgFDU9OOBusaqmG/iukXkoqJDQB4j9w eWshxlTlc+0UZv9NCWNLZpsm+SgTP2NxyU93x+xUHoWi6Z+ukQ0FUt27GqyvAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUBipPR0LqJEwMSeZ33kLbdnJd1dEwHwYDVR0j BBgwFoAU+rSrxrrve1jut/S3zReIT42qEgAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RTI1RDg2NUQ4MDY2OEUyRDI4MUUxQ0Q4MkJGNTIxQ0ZE MzY5MzFCRTM5RjI0QTBCNTIxNEUyQkVCQTU1Njk3LzAvRkFCNEFCQzZCQUVGN0I1 OEVFQjdGNEI3Q0QxNzg4NEY4REFBMTIwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQUI0QUJDNkJBRUY3QjU4RUVC N0Y0QjdDRDE3ODg0RjhEQUExMjAwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEUyNUQ4NjVEODA2NjhFMkQyODFFMUNEODJCRjUyMUNGRDM2OTMxQkUz OUYyNEEwQjUyMTRFMkJFQkE1NTY5Ny8wLzMyMzgzMDMxM2EzMTY0MzEzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMTM4MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEB0QAAMA0G CSqGSIb3DQEBCwUAA4IBAQA3+Lqocra0nrBEA7Gqm3OoND6xGBPKq/Uso8U0VTg0 AR4pB86QuECig1MvpbB+E7rX/elNA5WONfS8b53Ajklkd0s7LDeEHLYmgtQWMMGX ibaqpsb7UWa9VECZ2KlNvxVqNFbfTfo6tVab3pOE64QGQGt0q3uDxesk9sG1vkwb LtnTvKEPIdSUHGqEyMwfV/bN8v/57zG4thALwXVp38j+/6/co/J46MZ7XcjzYv8l LCvDEEDmIzlQTVvvHFeGiBL8IcPAm4oB5UaTqafAW1EmvlLNkamRUDFFjyPkAHtC Dv9kTxd0h065o4whFvBkXrjgT/NCNyVaOGf0f5uqUQ9h -----END CERTIFICATE-----Generated at Thu Mar 26 20:16:45 2026 by rpki-client