$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa File: 323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa (raw, json) Hash identifier: gmZyWHRuo17+avalH47YyUH8mbeC0wS2dX4cGRnd/nI= Subject key identifier: 9E:7C:6E:4C:38:45:2A:D2:3A:D8:CF:06:EF:2C:A3:CD:DD:51:21:E8 Certificate issuer: /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2 Certificate serial: 60F1FD1144A55646436728A643FBC4492F2EA419 Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa Signing time: Wed 07 May 2025 01:17:51 +0000 ROA not before: Wed 07 May 2025 01:12:51 +0000 ROA not after: Wed 06 May 2026 01:17:51 +0000 asID: 273147 IP address blocks: 2801:195:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f1:fd:11:44:a5:56:46:43:67:28:a6:43:fb:c4:49:2f:2e:a4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2 Validity Not Before: May 7 01:12:51 2025 GMT Not After : May 6 01:17:51 2026 GMT Subject: CN=9E7C6E4C38452AD23AD8CF06EF2CA3CDDD5121E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:05:5a:4c:89:02:09:eb:05:9f:50:72:f9:8a: aa:8d:9f:47:11:b6:02:ba:34:3e:50:05:2c:90:62: f6:3e:e2:f6:cb:f9:bf:2f:e7:08:fe:98:84:e1:7e: 25:5c:f5:d9:6a:48:ce:60:ca:62:14:f6:51:de:da: be:35:c7:28:02:09:74:bb:ac:a2:72:6f:ef:60:f8: 06:01:77:ff:a7:b9:03:d3:82:90:de:b0:70:cf:00: 77:e9:78:a9:2c:94:01:77:f5:ad:bc:cb:d5:3e:3d: 60:22:e6:3b:e6:39:7b:c3:5e:bf:ff:27:3c:5a:44: 10:a5:df:31:59:3c:f1:a5:45:b0:ac:64:8e:d2:3b: c1:7f:01:c0:0b:65:0c:9e:e0:23:bc:ee:15:ad:63: 19:b5:27:e9:06:8a:b1:d1:69:f5:cc:78:c9:d6:0e: 66:04:c2:50:d1:59:e7:f1:d4:c8:b1:9c:f7:9a:9e: cf:e1:1a:ae:bd:5c:44:bb:ea:0a:c2:4e:bc:98:ac: 03:c2:9d:af:46:e4:0b:cf:d1:53:b1:5a:dd:03:a3: 1c:9d:40:53:df:e2:de:b8:49:69:04:75:05:31:47: ff:7b:fd:19:97:c4:88:d5:24:c5:a8:13:dc:4c:79: 7d:ec:a0:ac:7a:7d:4e:89:e0:7e:0b:15:c1:b0:7d: bf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:6E:4C:38:45:2A:D2:3A:D8:CF:06:EF:2C:A3:CD:DD:51:21:E8 X509v3 Authority Key Identifier: keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:195:2::/48 Signature Algorithm: sha256WithRSAEncryption 84:ee:a1:a6:9a:88:07:8c:ba:5a:da:5d:e7:1b:3c:6a:2b:da: 54:82:90:3c:91:81:a3:c8:14:d7:05:3c:2f:f0:b3:b2:42:31: f7:63:fe:48:17:e5:d0:ee:bd:78:bf:c9:d1:59:9c:6b:7c:00: c4:6b:e0:5b:bf:d6:11:68:27:3b:d7:9e:8d:da:c0:ed:b2:da: a7:8a:55:02:11:0b:6d:fb:f9:c2:18:79:68:fd:50:47:2d:45: 4e:18:2f:ea:eb:63:5e:14:14:38:a0:3a:16:08:84:38:5f:ee: cc:75:f8:a8:75:0e:2a:10:bc:f2:62:04:00:2e:36:7e:94:84: e5:1b:a7:da:ae:01:a7:ff:2a:8d:47:62:66:51:c3:a5:c8:9f: 1e:7c:83:33:f1:61:4a:b6:a4:7f:8a:87:e9:ea:2b:15:71:1a: e3:da:93:14:49:7e:52:26:0f:a6:20:94:ee:5d:74:77:42:ae: 5e:9b:4f:ae:2a:64:87:6d:f7:b9:86:7a:fc:12:47:41:6d:bb: 69:ea:93:45:b8:35:48:dd:38:49:c2:a1:a4:3d:79:c4:c9:8d: 1a:d1:48:a0:85:2a:d7:d2:47:bf:b4:48:a4:6e:26:9a:89:f1: 89:9f:d1:fa:22:7a:da:39:c0:0a:20:15:fb:85:de:28:9f:96: cb:a0:a2:d4 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUYPH9EUSlVkZDZyimQ/vESS8upBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZFRDc1RkY2REQwMUYxQzhGNDAzNjk3NEM5QUU3NzI3 MUU2QUZGMjAeFw0yNTA1MDcwMTEyNTFaFw0yNjA1MDYwMTE3NTFaMDMxMTAvBgNV BAMTKDlFN0M2RTRDMzg0NTJBRDIzQUQ4Q0YwNkVGMkNBM0NEREQ1MTIxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBVpMiQIJ6wWfUHL5iqqNn0cR tgK6ND5QBSyQYvY+4vbL+b8v5wj+mIThfiVc9dlqSM5gymIU9lHe2r41xygCCXS7 rKJyb+9g+AYBd/+nuQPTgpDesHDPAHfpeKkslAF39a28y9U+PWAi5jvmOXvDXr// JzxaRBCl3zFZPPGlRbCsZI7SO8F/AcALZQye4CO87hWtYxm1J+kGirHRafXMeMnW DmYEwlDRWefx1MixnPeans/hGq69XES76grCTryYrAPCna9G5AvP0VOxWt0Doxyd QFPf4t64SWkEdQUxR/97/RmXxIjVJMWoE9xMeX3soKx6fU6J4H4LFcGwfb/1AgMB AAGjggLNMIICyTAdBgNVHQ4EFgQUnnxuTDhFKtI62M8G7yyjzd1RIegwHwYDVR0j BBgwFoAUj+11/23QHxyPQDaXTJrncnHmr/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMjY5NUM2OUVCQzY1QzUwNUQ0REJGOERGMjY3QTkwNDMz QjJBNzY1Q0M2N0I0REFDQzg4QUI4NEY4RkM4OUMwLzAvOEZFRDc1RkY2REQwMUYx QzhGNDAzNjk3NEM5QUU3NzI3MUU2QUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkVENzVGRjZERDAxRjFDOEY0 MDM2OTc0QzlBRTc3MjcxRTZBRkYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDI2OTVDNjlFQkM2NUM1MDVENERCRjhERjI2N0E5MDQzM0IyQTc2NUND NjdCNERBQ0M4OEFCODRGOEZDODlDMC8wLzMyMzgzMDMxM2EzMTM5MzUzYTMyM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMzMzEzNDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEB lQACMA0GCSqGSIb3DQEBCwUAA4IBAQCE7qGmmogHjLpa2l3nGzxqK9pUgpA8kYGj yBTXBTwv8LOyQjH3Y/5IF+XQ7r14v8nRWZxrfADEa+Bbv9YRaCc7156N2sDtstqn ilUCEQtt+/nCGHlo/VBHLUVOGC/q62NeFBQ4oDoWCIQ4X+7MdfiodQ4qELzyYgQA LjZ+lITlG6fargGn/yqNR2JmUcOlyJ8efIMz8WFKtqR/iofp6isVcRrj2pMUSX5S Jg+mIJTuXXR3Qq5em0+uKmSHbfe5hnr8EkdBbbtp6pNFuDVI3ThJwqGkPXnEyY0a 0UighSrX0ke/tEikbiaaifGJn9H6InraOcAKIBX7hd4on5bLoKLU -----END CERTIFICATE-----Generated at Sat May 17 07:07:13 2025 by rpki-client