$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32332d3233203d3e20323636373634.roa File: 34352e3233342e3138302e302f32332d3233203d3e20323636373634.roa (raw, json) Hash identifier: jvUHLTtI8EO8M3/yyd3dEc5sL6ZMaRBgjym+49DlRz4= Subject key identifier: E2:C3:2D:1C:FF:68:E6:A8:48:8A:DA:25:18:B6:A6:65:56:38:FD:6A Certificate issuer: /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C Certificate serial: 34A1B9482E016705D7269C1EF35090CFA5A69C90 Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32332d3233203d3e20323636373634.roa Signing time: Tue 07 Oct 2025 15:49:45 +0000 ROA not before: Tue 07 Oct 2025 15:44:45 +0000 ROA not after: Tue 06 Oct 2026 15:49:45 +0000 asID: 266764 IP address blocks: 45.234.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Oct 2025 08:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a1:b9:48:2e:01:67:05:d7:26:9c:1e:f3:50:90:cf:a5:a6:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C Validity Not Before: Oct 7 15:44:45 2025 GMT Not After : Oct 6 15:49:45 2026 GMT Subject: CN=E2C32D1CFF68E6A8488ADA2518B6A6655638FD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:fe:1d:9f:f6:3e:ac:86:d3:f3:10:e5:74: ab:66:46:81:e0:63:42:c9:e1:1c:d8:06:cb:ec:ea: f3:3a:72:3c:fe:ba:87:68:1a:2c:20:f1:bc:31:7d: 69:c8:5d:aa:86:6e:56:83:cc:ff:8e:14:83:97:fc: a0:2d:e6:53:10:8a:14:1e:1c:d4:b5:59:a5:1c:79: 49:4f:bb:01:da:00:cc:bd:ff:37:f5:9d:b2:6f:c9: 3f:b2:ae:89:7a:a2:11:2d:78:d0:c3:55:22:58:46: d5:01:bb:c7:bf:dc:3f:ea:6a:50:64:48:1a:3f:16: 2e:43:93:17:31:38:69:21:04:76:8a:59:7c:d0:c5: 52:6e:12:00:e4:56:84:99:3a:9c:37:f1:94:6c:4c: d2:4f:8f:d8:e8:63:a2:29:0f:9a:c7:d0:57:bf:9b: 04:73:22:c4:f9:79:6c:d2:40:41:56:d7:ab:2e:62: c8:88:a1:a4:e6:00:17:67:e3:10:f8:6b:0f:80:91: 49:28:34:34:80:e3:e5:aa:be:96:04:cc:77:a2:a6: a6:76:c2:ce:8f:72:43:e2:09:17:a8:10:2f:39:c8: a8:f0:4c:20:a6:c0:a6:7a:de:92:43:25:09:64:59: 31:32:65:65:6a:d6:54:fc:83:aa:9a:28:f6:84:b8: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C3:2D:1C:FF:68:E6:A8:48:8A:DA:25:18:B6:A6:65:56:38:FD:6A X509v3 Authority Key Identifier: keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32332d3233203d3e20323636373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.180.0/23 Signature Algorithm: sha256WithRSAEncryption 19:f0:c1:9e:9b:35:21:0c:89:6a:70:fd:50:b9:16:50:d4:92: 63:11:09:64:7d:e1:05:f8:c7:b3:7f:d9:37:cb:4f:16:07:a0: b9:82:59:9e:a8:de:89:38:01:6f:4c:98:a6:f1:6f:af:38:fa: c0:07:24:6e:27:11:9c:7a:6f:84:6d:7d:76:a8:f0:3d:13:f7: 0d:70:72:9e:26:30:92:7a:30:63:81:29:8d:e2:70:9e:6b:5e: 30:ed:5d:5f:58:05:55:34:d9:0a:6f:34:24:9e:e2:0c:1a:fa: a4:45:d0:90:20:3c:03:7f:fe:11:84:57:6e:09:b6:46:ac:f0: f8:31:79:09:8e:b6:70:b7:b7:96:01:a9:cd:eb:fe:89:07:07: f9:94:0e:bf:fa:bd:fc:f4:61:11:5c:87:ae:d3:38:73:9d:26: f5:dc:e1:6d:fe:8b:03:20:a4:3b:b2:f4:db:b8:ba:9e:b3:36: 59:d5:bb:b6:b7:0b:a8:0d:63:3c:c6:df:9c:d5:b9:6a:5f:bd: f3:b2:44:60:5f:a5:17:c8:20:1a:97:7e:9e:d0:9f:fc:60:ab: 2a:77:b2:5f:97:4c:f3:23:c6:5c:ad:cc:0c:20:9e:cd:01:c3: f9:6f:85:88:a6:c6:0d:73:59:70:c9:6c:3b:c6:bd:e2:46:9f: c7:f9:a9:16 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUNKG5SC4BZwXXJpwe81CQz6WmnJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2RkE4NzZFQzNGQkI3QjA0MzEwQUJDNEIzMTIzQUZC RTg4QTIwQzAeFw0yNTEwMDcxNTQ0NDVaFw0yNjEwMDYxNTQ5NDVaMDMxMTAvBgNV BAMTKEUyQzMyRDFDRkY2OEU2QTg0ODhBREEyNTE4QjZBNjY1NTYzOEZENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uP4dn/Y+rIbT8xDldKtmRoHg Y0LJ4RzYBsvs6vM6cjz+uodoGiwg8bwxfWnIXaqGblaDzP+OFIOX/KAt5lMQihQe HNS1WaUceUlPuwHaAMy9/zf1nbJvyT+yrol6ohEteNDDVSJYRtUBu8e/3D/qalBk SBo/Fi5DkxcxOGkhBHaKWXzQxVJuEgDkVoSZOpw38ZRsTNJPj9joY6IpD5rH0Fe/ mwRzIsT5eWzSQEFW16suYsiIoaTmABdn4xD4aw+AkUkoNDSA4+WqvpYEzHeipqZ2 ws6PckPiCReoEC85yKjwTCCmwKZ63pJDJQlkWTEyZWVq1lT8g6qaKPaEuDBlAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU4sMtHP9o5qhIitolGLamZVY4/WowHwYDVR0j BBgwFoAUym+oduw/u3sEMQq8SzEjr76IogwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQ0ZGMjc3NjlBNDM5NjA1REEyN0Q3Mjk1QjJBODY1MDRC NUI2RjZBQjRBQjhDNERENDQwNTJERTA3ODAxMzcxLzAvQ0E2RkE4NzZFQzNGQkI3 QjA0MzEwQUJDNEIzMTIzQUZCRTg4QTIwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTZGQTg3NkVDM0ZCQjdCMDQz MTBBQkM0QjMxMjNBRkJFODhBMjBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRENGRjI3NzY5QTQzOTYwNURBMjdENzI5NUIyQTg2NTA0QjVCNkY2QUI0 QUI4QzRERDQ0MDUyREUwNzgwMTM3MS8wLzM0MzUyZTMyMzMzNDJlMzEzODMwMmUz MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2MzczNjM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLeq0 MA0GCSqGSIb3DQEBCwUAA4IBAQAZ8MGemzUhDIlqcP1QuRZQ1JJjEQlkfeEF+Mez f9k3y08WB6C5glmeqN6JOAFvTJim8W+vOPrAByRuJxGcem+EbX12qPA9E/cNcHKe JjCSejBjgSmN4nCea14w7V1fWAVVNNkKbzQknuIMGvqkRdCQIDwDf/4RhFduCbZG rPD4MXkJjrZwt7eWAanN6/6JBwf5lA6/+r389GERXIeu0zhznSb13OFt/osDIKQ7 svTbuLqeszZZ1bu2twuoDWM8xt+c1blqX73zskRgX6UXyCAal36e0J/8YKsqd7Jf l0zzI8ZcrcwMIJ7NAcP5b4WIpsYNc1lwyWw7xr3iRp/H+akW -----END CERTIFICATE-----Generated at Tue Oct 21 09:36:50 2025 by rpki-client