$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3430303a3a2f34302d3430203d3e20323732383839.roa File: 323830333a383639303a3430303a3a2f34302d3430203d3e20323732383839.roa (raw, json) Hash identifier: TVc/jO2wLUW1PFJdWDOP+IWktb4CcccRg9K2p/Cf53w= Subject key identifier: 6F:09:5B:49:FE:B7:99:16:78:EB:9A:E3:52:5B:F6:E2:9D:8E:89:36 Certificate issuer: /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD Certificate serial: 4A00A1807366C476D61D0BFD03B936525F002F5D Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3430303a3a2f34302d3430203d3e20323732383839.roa Signing time: Mon 15 Sep 2025 02:46:34 +0000 ROA not before: Mon 15 Sep 2025 02:41:34 +0000 ROA not after: Mon 14 Sep 2026 02:46:34 +0000 asID: 272889 IP address blocks: 2803:8690:400::/40 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:00:a1:80:73:66:c4:76:d6:1d:0b:fd:03:b9:36:52:5f:00:2f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD Validity Not Before: Sep 15 02:41:34 2025 GMT Not After : Sep 14 02:46:34 2026 GMT Subject: CN=6F095B49FEB7991678EB9AE3525BF6E29D8E8936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:ad:a0:8a:3e:ce:5f:9d:0d:fc:87:53:b7: 36:df:b9:2c:d4:06:ca:e9:3c:c6:77:46:92:41:4a: fc:e3:40:3c:55:28:1d:c6:9c:a1:cf:f7:ff:e8:59: 21:cd:73:5d:56:74:e3:24:64:a9:fd:b7:6b:36:f6: 4f:5b:eb:4e:19:fc:5d:1e:d9:c5:43:c8:09:a6:81: 8c:a7:d0:fc:3a:d0:41:3c:ae:09:b1:ac:dc:59:33: 0a:ad:c1:6a:0a:6e:5d:f4:20:39:87:1f:e7:39:d2: d3:ba:a9:6d:b5:d7:47:25:cf:61:9d:69:55:cc:0e: 65:c1:f4:fc:78:66:4e:f0:88:10:d9:aa:79:30:a2: 00:7b:16:7e:b4:f8:fa:9d:45:62:c7:2d:52:11:aa: 1b:0e:aa:c5:66:13:33:38:f3:65:f8:6f:d9:61:7a: 4d:e8:a3:52:e0:50:c1:a7:81:8f:11:2a:4f:85:c4: 1a:17:6f:95:fb:0a:a4:b1:c1:53:21:b8:ee:23:55: 42:ba:53:d0:66:0c:66:a3:97:3a:28:02:5e:ad:75: 13:1c:e9:9c:09:92:20:65:d8:4e:36:73:c4:f3:06: 58:a4:0f:13:e5:16:c2:43:0a:c6:c9:7b:50:46:a3: 79:f2:a8:c4:cd:ef:a8:c9:9b:a2:bd:03:d6:bc:96: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:5B:49:FE:B7:99:16:78:EB:9A:E3:52:5B:F6:E2:9D:8E:89:36 X509v3 Authority Key Identifier: keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3430303a3a2f34302d3430203d3e20323732383839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8690:400::/40 Signature Algorithm: sha256WithRSAEncryption 60:54:af:7e:eb:ad:d4:c3:5e:4e:1f:9d:13:6c:81:29:0f:e5: 09:59:ca:dc:56:e3:4f:24:32:08:c6:9a:3c:1e:b9:b0:67:22: 35:3f:b3:b1:59:6e:6d:6a:0a:31:a9:8d:55:83:81:9f:9a:e4: 9b:5d:5b:be:b5:2f:d3:91:f5:e8:b3:cf:45:c8:4e:03:1e:6c: 0e:c3:8f:cd:88:31:00:f6:49:f1:b9:d5:88:04:92:08:e6:6c: 8e:97:be:2b:78:a4:74:04:37:7b:bc:6c:af:dd:af:a8:db:ee: b4:2b:77:b8:8f:69:44:98:9f:dd:71:f1:dd:e3:b6:86:ce:e0: b8:35:28:f8:b8:a0:af:48:b9:ce:19:90:e7:fd:37:77:62:8c: 3f:e6:2e:98:2b:25:5b:57:c8:81:c6:45:29:05:31:a1:8f:b3: 6d:43:46:c5:5a:f9:9f:65:7e:54:23:ce:98:9b:1c:48:af:a9: 56:16:3b:0c:c6:1b:b5:10:f4:21:9f:2e:e4:1b:73:eb:5e:bf: 35:8b:2d:e3:ad:e5:0e:2d:a5:44:47:19:22:fe:c3:14:76:09: 84:b6:cb:1f:1f:8a:e8:89:ee:c2:4e:8a:30:41:f7:11:b1:e7: ce:3a:0f:67:cd:19:21:1f:d6:b6:b7:01:e3:d4:2b:4a:46:e4: 36:0b:50:c1 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUSgChgHNmxHbWHQv9A7k2Ul8AL10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxMTIzOTVBNjMxREU5QThENTIzM0ZFMTcxMTQ1RDNF NUY2RkNGRDAeFw0yNTA5MTUwMjQxMzRaFw0yNjA5MTQwMjQ2MzRaMDMxMTAvBgNV BAMTKDZGMDk1QjQ5RkVCNzk5MTY3OEVCOUFFMzUyNUJGNkUyOUQ4RTg5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPa2gij7OX50N/IdTtzbfuSzU BsrpPMZ3RpJBSvzjQDxVKB3GnKHP9//oWSHNc11WdOMkZKn9t2s29k9b604Z/F0e 2cVDyAmmgYyn0Pw60EE8rgmxrNxZMwqtwWoKbl30IDmHH+c50tO6qW2110clz2Gd aVXMDmXB9Px4Zk7wiBDZqnkwogB7Fn60+PqdRWLHLVIRqhsOqsVmEzM482X4b9lh ek3oo1LgUMGngY8RKk+FxBoXb5X7CqSxwVMhuO4jVUK6U9BmDGajlzooAl6tdRMc 6ZwJkiBl2E42c8TzBlikDxPlFsJDCsbJe1BGo3nyqMTN76jJm6K9A9a8lrjrAgMB AAGjggLSMIICzjAdBgNVHQ4EFgQUbwlbSf63mRZ465rjUlv24p2OiTYwHwYDVR0j BBgwFoAUOBEjlaYx3pqNUjP+FxFF0+X2/P0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTFCRjZBQjA2MjE1RDg4NzY5RDgyMjkyMDUxNEQzN0Yx NEMwQ0Q4RDQ0MTE3RTY0RjBGNTQyMjk1QTFBQTI5LzAvMzgxMTIzOTVBNjMxREU5 QThENTIzM0ZFMTcxMTQ1RDNFNUY2RkNGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODExMjM5NUE2MzFERTlBOEQ1 MjMzRkUxNzExNDVEM0U1RjZGQ0ZELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUExQkY2QUIwNjIxNUQ4ODc2OUQ4MjI5MjA1MTREMzdGMTRDMENEOEQ0 NDExN0U2NEYwRjU0MjI5NUExQUEyOS8wLzMyMzgzMDMzM2EzODM2MzkzMDNhMzQz MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMyMzgzODM5LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAKAOGkAQwDQYJKoZIhvcNAQELBQADggEBAGBUr37rrdTDXk4fnRNsgSkP5QlZ ytxW408kMgjGmjweubBnIjU/s7FZbm1qCjGpjVWDgZ+a5JtdW761L9OR9eizz0XI TgMebA7Dj82IMQD2SfG51YgEkgjmbI6Xvit4pHQEN3u8bK/dr6jb7rQrd7iPaUSY n91x8d3jtobO4Lg1KPi4oK9Iuc4ZkOf9N3dijD/mLpgrJVtXyIHGRSkFMaGPs21D RsVa+Z9lflQjzpibHEivqVYWOwzGG7UQ9CGfLuQbc+tevzWLLeOt5Q4tpURHGSL+ wxR2CYS2yx8fiuiJ7sJOijBB9xGx5846D2fNGSEf1ra3AePUK0pG5DYLUME= -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:48 2025 by rpki-client