$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa File: 323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa (raw, json) Hash identifier: O37eDpuygs32uquQ0kI0tIEA8FrNxkV1PeG0DvTpSKk= Subject key identifier: CB:FF:86:22:AD:6B:9E:89:E7:6D:01:F2:87:90:6F:C6:90:B5:75:AD Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD Certificate serial: 5C77FD602C93966201FD7BC8D1E7CAA6883BAB34 Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa Signing time: Mon 15 Sep 2025 02:46:35 +0000 ROA not before: Mon 15 Sep 2025 02:41:35 +0000 ROA not after: Mon 14 Sep 2026 02:46:35 +0000 asID: 272889 IP address blocks: 2803:8690:100::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:77:fd:60:2c:93:96:62:01:fd:7b:c8:d1:e7:ca:a6:88:3b:ab:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD Validity Not Before: Sep 15 02:41:35 2025 GMT Not After : Sep 14 02:46:35 2026 GMT Subject: CN=CBFF8622AD6B9E89E76D01F287906FC690B575AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6c:3b:3c:0b:3f:b5:ee:56:68:34:f5:2d:58: f5:2d:fd:c2:06:83:4a:a6:c6:a4:f6:b3:2a:b4:b9: 2e:68:a2:2e:81:3a:16:e3:57:8f:e3:e6:45:77:2f: 93:33:b5:ee:f5:14:76:5e:b7:9a:ee:da:5c:7a:8a: 30:32:5c:76:19:83:45:e0:d0:d8:5a:9c:d6:91:71: b9:c4:e5:df:dc:51:aa:a7:14:a8:96:20:ee:b3:33: 24:26:2c:23:12:46:39:41:4c:77:d3:4c:dd:75:5a: 8f:7f:6d:3f:5a:a1:ea:0d:8d:2c:73:78:c9:32:3a: dd:70:a0:95:9a:53:1e:73:38:a9:c8:80:76:52:c8: ac:23:c4:1f:23:45:6f:03:3c:4f:b2:fc:5a:e9:e7: 65:59:70:56:ea:4e:d9:e4:c1:49:08:70:34:88:fb: ff:e9:7e:9a:fc:53:af:33:e2:ac:8e:2a:21:14:87: 20:45:67:6a:aa:fd:21:6b:82:55:30:ab:1b:36:67: c8:7a:80:1c:2e:9c:27:d8:58:ab:03:bb:0c:db:86: ad:de:8b:fa:30:63:e0:59:34:80:5d:e8:1f:bb:fe: bf:fa:72:67:60:46:f2:f6:c5:6f:58:27:d8:31:32: 4d:9b:da:89:c1:47:3e:d8:67:79:58:42:8d:27:78: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:86:22:AD:6B:9E:89:E7:6D:01:F2:87:90:6F:C6:90:B5:75:AD X509v3 Authority Key Identifier: keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3130303a3a2f34302d3430203d3e20323732383839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8690:100::/40 Signature Algorithm: sha256WithRSAEncryption c0:ea:64:e2:29:48:14:2a:f5:e6:54:fb:d3:0f:ed:69:cb:f7: e9:d6:b1:c2:ac:28:e9:2a:92:af:a8:d6:d6:16:ce:86:a5:22: 4a:4d:27:71:d9:d7:f7:dc:4b:1e:8f:36:19:a8:04:38:7e:e2: d5:e5:c7:48:c4:39:ac:dd:e2:1b:c3:94:42:f6:01:d4:e9:2b: 57:8c:5c:80:b8:93:da:b0:53:4e:27:e0:27:fe:ed:6c:df:f5: c8:ea:4a:56:fd:0e:30:39:c1:d2:a6:44:a2:16:e4:b0:40:50: 89:23:1d:cc:dd:3c:b7:13:e3:18:a4:c6:c8:e0:6c:44:ec:ca: b1:f3:69:fa:3c:da:60:ce:2a:78:1e:fd:da:b9:57:04:24:3d: f6:76:d2:b9:18:b1:61:2b:a8:18:c6:4f:f9:1b:63:9d:52:81: 05:bc:d3:7c:33:e6:e0:f6:bf:da:54:fe:49:70:61:bd:09:8a: e3:c7:81:a3:0e:d0:8b:a8:28:93:5d:3c:58:73:97:f7:07:03: 96:bd:96:80:0b:92:c2:c8:1b:4f:eb:5d:b2:ab:53:70:6a:2d: 74:d1:d6:c1:9e:a4:47:2a:34:a1:e3:97:ef:4c:a1:07:ee:d7: 6a:4f:16:cc:76:3d:21:a2:a0:1f:5c:c0:d9:c6:ea:33:a5:0b: cd:57:ab:ab -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUXHf9YCyTlmIB/XvI0efKpog7qzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxMTIzOTVBNjMxREU5QThENTIzM0ZFMTcxMTQ1RDNF NUY2RkNGRDAeFw0yNTA5MTUwMjQxMzVaFw0yNjA5MTQwMjQ2MzVaMDMxMTAvBgNV BAMTKENCRkY4NjIyQUQ2QjlFODlFNzZEMDFGMjg3OTA2RkM2OTBCNTc1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUbDs8Cz+17lZoNPUtWPUt/cIG g0qmxqT2syq0uS5ooi6BOhbjV4/j5kV3L5Mzte71FHZet5ru2lx6ijAyXHYZg0Xg 0NhanNaRcbnE5d/cUaqnFKiWIO6zMyQmLCMSRjlBTHfTTN11Wo9/bT9aoeoNjSxz eMkyOt1woJWaUx5zOKnIgHZSyKwjxB8jRW8DPE+y/Frp52VZcFbqTtnkwUkIcDSI +//pfpr8U68z4qyOKiEUhyBFZ2qq/SFrglUwqxs2Z8h6gBwunCfYWKsDuwzbhq3e i/owY+BZNIBd6B+7/r/6cmdgRvL2xW9YJ9gxMk2b2onBRz7YZ3lYQo0neF/nAgMB AAGjggLSMIICzjAdBgNVHQ4EFgQUy/+GIq1rnonnbQHyh5BvxpC1da0wHwYDVR0j BBgwFoAUOBEjlaYx3pqNUjP+FxFF0+X2/P0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTFCRjZBQjA2MjE1RDg4NzY5RDgyMjkyMDUxNEQzN0Yx NEMwQ0Q4RDQ0MTE3RTY0RjBGNTQyMjk1QTFBQTI5LzAvMzgxMTIzOTVBNjMxREU5 QThENTIzM0ZFMTcxMTQ1RDNFNUY2RkNGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODExMjM5NUE2MzFERTlBOEQ1 MjMzRkUxNzExNDVEM0U1RjZGQ0ZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUExQkY2QUIwNjIxNUQ4ODc2OUQ4MjI5MjA1MTREMzdGMTRDMENEOEQ0 NDExN0U2NEYwRjU0MjI5NUExQUEyOS8wLzMyMzgzMDMzM2EzODM2MzkzMDNhMzEz MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzODM5LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAKAOGkAEwDQYJKoZIhvcNAQELBQADggEBAMDqZOIpSBQq9eZU+9MP7WnL9+nW scKsKOkqkq+o1tYWzoalIkpNJ3HZ1/fcSx6PNhmoBDh+4tXlx0jEOazd4hvDlEL2 AdTpK1eMXIC4k9qwU04n4Cf+7Wzf9cjqSlb9DjA5wdKmRKIW5LBAUIkjHczdPLcT 4xikxsjgbETsyrHzafo82mDOKnge/dq5VwQkPfZ20rkYsWErqBjGT/kbY51SgQW8 03wz5uD2v9pU/klwYb0JiuPHgaMO0IuoKJNdPFhzl/cHA5a9loALksLIG0/rXbKr U3BqLXTR1sGepEcqNKHjl+9MoQfu12pPFsx2PSGioB9cwNnG6jOlC81Xq6s= -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:14 2025 by rpki-client