$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323065303a3a2f34332d3634203d3e203634313230.roa File: 323830333a663038303a323065303a3a2f34332d3634203d3e203634313230.roa (raw, json) Hash identifier: wYAjRBg+OqzLRN3JPYkoJlk6OKcrbeZxdLUfsCX6OO0= Subject key identifier: 61:C9:E0:84:69:7F:B9:36:78:DA:3B:37:46:FB:3E:43:74:17:C3:C2 Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD Certificate serial: 3D7E034A29D6ECA40B809C2BD777B1063405A05A Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323065303a3a2f34332d3634203d3e203634313230.roa Signing time: Sat 16 Aug 2025 17:45:00 +0000 ROA not before: Sat 16 Aug 2025 17:40:00 +0000 ROA not after: Sat 15 Aug 2026 17:45:00 +0000 asID: 64120 IP address blocks: 2803:f080:20e0::/43 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 23:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7e:03:4a:29:d6:ec:a4:0b:80:9c:2b:d7:77:b1:06:34:05:a0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD Validity Not Before: Aug 16 17:40:00 2025 GMT Not After : Aug 15 17:45:00 2026 GMT Subject: CN=61C9E084697FB93678DA3B3746FB3E437417C3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:94:e3:b7:ad:7d:65:32:22:24:bc:ca:5e: f5:c7:15:32:87:38:e4:cb:13:05:f9:d2:ea:8b:e3: 42:60:1c:bc:6e:ab:85:6d:f5:6b:3c:bd:54:e7:e9: fe:70:c4:d0:44:25:00:4e:59:cf:9a:97:6d:81:da: 6f:93:00:a7:ef:09:44:bf:20:e4:2e:57:63:28:68: 5c:f4:9f:f5:d8:36:42:d1:7c:01:09:8f:b0:4d:14: d5:43:51:8e:ab:a2:08:69:4c:e9:ba:2a:19:dc:34: 6d:ac:b7:83:21:b7:d3:97:a9:72:c7:d2:c0:b5:16: 4d:6a:27:a9:c2:76:32:aa:37:d7:5d:7b:e5:34:36: c0:a2:b9:96:e3:24:6b:ad:71:ff:fc:37:82:1b:ca: b0:0c:10:9c:5d:75:08:2b:bd:78:18:4e:9c:27:df: 69:f5:1f:3a:0f:d1:4e:60:46:57:32:f6:74:0f:05: 59:86:e9:c8:44:b6:5c:56:d1:f1:5f:32:ec:1a:9a: c5:36:c2:6d:b8:87:df:05:95:8b:73:d6:8e:9f:02: c3:0d:f7:4f:27:ad:28:73:f1:b8:87:9f:5b:6e:1f: 41:30:7c:c7:bb:dd:3f:6e:70:4a:43:f1:fd:2e:b2: 2e:c3:0e:e5:33:9d:9a:af:e5:46:93:00:5d:3a:73: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:E0:84:69:7F:B9:36:78:DA:3B:37:46:FB:3E:43:74:17:C3:C2 X509v3 Authority Key Identifier: keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323065303a3a2f34332d3634203d3e203634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f080:20e0::/43 Signature Algorithm: sha256WithRSAEncryption 28:57:fd:80:69:a2:62:42:fd:10:2a:c6:4c:99:02:8e:15:e5: 4b:f6:0f:ad:6a:59:42:2d:47:c4:6b:6a:e4:eb:f1:7a:14:33: ae:1d:3f:85:ff:4b:7c:73:13:81:df:ec:ec:35:31:ce:d1:35: 7d:b0:a2:0f:1d:ac:a3:db:f3:b2:40:69:4d:56:ee:a7:65:aa: 85:39:ed:1d:4f:d8:46:b8:2d:6f:69:45:c9:d9:7d:bc:d8:06: 70:e8:95:4d:2b:27:ad:5f:fb:84:a6:8c:ec:f9:28:ba:ba:34: f8:63:a7:27:63:2f:78:f7:90:e7:c4:ab:b6:8e:78:66:46:06: c7:a7:b0:95:d6:d9:dd:ea:7b:00:d3:11:9f:97:da:a9:81:8b: b3:e2:db:e5:39:04:a7:2d:81:d9:58:54:fe:cc:0d:03:e8:ec: d8:17:5e:75:66:65:5d:c4:fa:a8:1d:ce:98:52:51:da:fc:78: f6:64:d7:6f:61:92:f8:78:bc:06:c2:7b:9c:9c:3d:f6:5f:a2: bc:9b:f7:97:49:93:76:b2:4c:5b:25:0e:6e:98:c8:30:5e:f3: 92:18:22:d3:d9:c0:ec:cb:32:8c:6e:33:52:36:65:09:30:f7: 49:a5:f0:fa:36:9c:16:da:88:94:4b:4e:2b:4c:f9:66:d8:6c: 0a:3a:eb:c3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPX4DSinW7KQLgJwr13exBjQFoFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy NEVBQzJBRDAeFw0yNTA4MTYxNzQwMDBaFw0yNjA4MTUxNzQ1MDBaMDMxMTAvBgNV BAMTKDYxQzlFMDg0Njk3RkI5MzY3OERBM0IzNzQ2RkIzRTQzNzQxN0MzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMCpTjt619ZTIiJLzKXvXHFTKH OOTLEwX50uqL40JgHLxuq4Vt9Ws8vVTn6f5wxNBEJQBOWc+al22B2m+TAKfvCUS/ IOQuV2MoaFz0n/XYNkLRfAEJj7BNFNVDUY6roghpTOm6KhncNG2st4Mht9OXqXLH 0sC1Fk1qJ6nCdjKqN9dde+U0NsCiuZbjJGutcf/8N4IbyrAMEJxddQgrvXgYTpwn 32n1HzoP0U5gRlcy9nQPBVmG6chEtlxW0fFfMuwamsU2wm24h98FlYtz1o6fAsMN 908nrShz8biHn1tuH0EwfMe73T9ucEpD8f0usi7DDuUznZqv5UaTAF06c1/hAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYcnghGl/uTZ42js3Rvs+Q3QXw8IwHwYDVR0j BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMyMzgzMDMzM2E2NjMwMzgzMDNhMzIz MDY1MzAzYTNhMmYzNDMzMmQzNjM0MjAzZDNlMjAzNjM0MzEzMjMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcFKAPwgCDgMA0GCSqGSIb3DQEBCwUAA4IBAQAoV/2AaaJiQv0QKsZMmQKOFeVL 9g+tallCLUfEa2rk6/F6FDOuHT+F/0t8cxOB3+zsNTHO0TV9sKIPHayj2/OyQGlN Vu6nZaqFOe0dT9hGuC1vaUXJ2X282AZw6JVNKyetX/uEpozs+Si6ujT4Y6cnYy94 95DnxKu2jnhmRgbHp7CV1tnd6nsA0xGfl9qpgYuz4tvlOQSnLYHZWFT+zA0D6OzY F151ZmVdxPqoHc6YUlHa/Hj2ZNdvYZL4eLwGwnucnD32X6K8m/eXSZN2skxbJQ5u mMgwXvOSGCLT2cDsyzKMbjNSNmUJMPdJpfD6NpwW2oiUS04rTPlm2GwKOuvD -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:41 2025 by rpki-client