$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/323830333a6164303a3a2f33322d3332203d3e20323734303634.roa File: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (raw, json) Hash identifier: DHa6ditwZtXxLeFd36RN4E+BZavo/NTHMbYI6UBbsnM= Subject key identifier: 8F:BA:21:C4:0B:5C:F5:E7:1A:C0:80:26:6B:71:07:30:DC:34:32:71 Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Certificate serial: 311DFC9E10642B898B5FEC018F69888D15BCB4AA Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/323830333a6164303a3a2f33322d3332203d3e20323734303634.roa Signing time: Tue 17 Mar 2026 13:34:12 +0000 ROA not before: Tue 17 Mar 2026 13:29:12 +0000 ROA not after: Tue 16 Mar 2027 13:34:12 +0000 asID: 274064 IP address blocks: 2803:ad0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1d:fc:9e:10:64:2b:89:8b:5f:ec:01:8f:69:88:8d:15:bc:b4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Validity Not Before: Mar 17 13:29:12 2026 GMT Not After : Mar 16 13:34:12 2027 GMT Subject: CN=8FBA21C40B5CF5E71AC080266B710730DC343271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:7d:22:36:91:c3:96:b0:71:c9:3a:e6:11: 3e:0a:3e:32:c6:4b:b2:46:9f:c3:61:ed:94:8f:aa: 69:13:a9:6b:08:aa:36:8d:b5:69:b3:b0:a5:f8:9c: 0d:cf:64:17:f0:e1:9e:47:a0:93:0f:0b:c9:df:e9: 42:7a:13:02:e0:55:d9:a6:43:4c:1e:c9:5b:33:15: f0:f4:98:b5:ce:50:3a:87:2e:03:27:68:06:ad:da: ac:8e:bb:7d:67:d5:f7:2b:d9:8b:c6:cb:60:55:6d: 73:57:2b:04:8e:5d:0d:70:98:c3:2e:ab:f3:d4:57: 08:08:1d:6d:32:0a:ec:dd:65:54:47:d0:1b:45:25: 7e:ca:2c:32:a6:97:b2:8f:c6:46:be:7a:3d:6b:89: a9:50:5a:8f:04:e2:85:7d:58:46:18:e3:d0:3b:31: 24:04:26:c7:b6:f2:0f:65:8f:e7:bf:96:cc:ca:2b: 8d:c3:1e:f3:9d:9c:37:80:76:fe:fc:ca:e3:e9:61: 7a:a1:ba:5d:02:c2:f0:09:c4:ba:73:18:d9:3c:52: 54:d4:31:54:9b:5e:ed:b3:92:cb:dd:04:1d:d6:ec: 9c:41:5c:0c:4c:d4:44:b6:7a:41:1d:bb:1d:bd:04: 30:88:2f:52:1f:74:ca:26:55:a0:d0:11:d8:5a:4b: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BA:21:C4:0B:5C:F5:E7:1A:C0:80:26:6B:71:07:30:DC:34:32:71 X509v3 Authority Key Identifier: keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/323830333a6164303a3a2f33322d3332203d3e20323734303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ad0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:1d:f4:a6:7e:e7:18:0c:01:de:f8:34:bf:f8:33:68:1b:bb: 61:3e:fc:4e:54:f6:d9:06:a0:99:54:cf:d1:29:a8:ff:09:c0: 4a:ec:da:0f:31:50:37:a9:30:31:98:b1:b8:52:62:5d:ef:b7: 4f:fd:b2:8e:92:30:54:70:3a:49:00:a9:c2:e6:f3:79:e1:b0: a8:4d:88:51:7d:58:d6:98:e5:99:04:56:7d:0c:cb:57:65:f3: 37:bc:70:2e:3d:dc:28:d9:56:63:39:ab:fc:e8:a9:28:fb:28: a7:4b:e1:da:d3:e1:44:0f:96:06:1f:4b:c4:ca:78:c5:ab:c9: fd:55:86:fd:a4:6c:63:c2:d2:aa:e0:13:ea:2f:49:f3:51:a4: 6f:f2:d9:54:86:04:22:cd:dc:6f:d2:1f:2f:9f:f6:c0:02:5e: c0:df:3c:a2:69:67:f2:07:e3:ea:f4:c8:77:18:52:9e:11:47: bb:04:c4:60:8d:fd:16:38:b0:80:90:5f:36:ca:9e:39:9c:be: da:0e:1c:c2:74:2a:ea:25:0b:f1:de:81:82:f7:af:9d:1f:54: 40:e0:30:d5:74:45:43:8c:8f:35:18:55:16:32:79:d0:58:5d: 14:a1:a1:3a:a7:bb:f5:05:af:0a:39:23:d3:35:bd:04:f7:2e: 3a:98:c1:4e -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUMR38nhBkK4mLX+wBj2mIjRW8tKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2 NzFCMEE3MjAeFw0yNjAzMTcxMzI5MTJaFw0yNzAzMTYxMzM0MTJaMDMxMTAvBgNV BAMTKDhGQkEyMUM0MEI1Q0Y1RTcxQUMwODAyNjZCNzEwNzMwREMzNDMyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeH0iNpHDlrBxyTrmET4KPjLG S7JGn8Nh7ZSPqmkTqWsIqjaNtWmzsKX4nA3PZBfw4Z5HoJMPC8nf6UJ6EwLgVdmm Q0weyVszFfD0mLXOUDqHLgMnaAat2qyOu31n1fcr2YvGy2BVbXNXKwSOXQ1wmMMu q/PUVwgIHW0yCuzdZVRH0BtFJX7KLDKml7KPxka+ej1rialQWo8E4oV9WEYY49A7 MSQEJse28g9lj+e/lszKK43DHvOdnDeAdv78yuPpYXqhul0CwvAJxLpzGNk8UlTU MVSbXu2zksvdBB3W7JxBXAxM1ES2ekEdux29BDCIL1IfdMomVaDQEdhaS5EZAgMB AAGjggLHMIICwzAdBgNVHQ4EFgQUj7ohxAtc9ecawIAma3EHMNw0MnEwHwYDVR0j BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzMyMzgzMDMzM2E2MTY0MzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzQzMDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwrQMA0G CSqGSIb3DQEBCwUAA4IBAQBPHfSmfucYDAHe+DS/+DNoG7thPvxOVPbZBqCZVM/R Kaj/CcBK7NoPMVA3qTAxmLG4UmJd77dP/bKOkjBUcDpJAKnC5vN54bCoTYhRfVjW mOWZBFZ9DMtXZfM3vHAuPdwo2VZjOav86Kko+yinS+Ha0+FED5YGH0vEynjFq8n9 VYb9pGxjwtKq4BPqL0nzUaRv8tlUhgQizdxv0h8vn/bAAl7A3zyiaWfyB+Pq9Mh3 GFKeEUe7BMRgjf0WOLCAkF82yp45nL7aDhzCdCrqJQvx3oGC96+dH1RA4DDVdEVD jI81GFUWMnnQWF0UoaE6p7v1Ba8KOSPTNb0E9y46mMFO -----END CERTIFICATE-----Generated at Fri Mar 27 02:43:36 2026 by rpki-client