$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa File: 3230302e302e32312e302f32342d3235203d3e203238303137.roa (raw, json) Hash identifier: cdHwN+EJbvvLguE4cra2ECaHzSaFwJD8Q4sq1tmcpiM= Subject key identifier: 28:D8:17:91:D7:07:EA:5F:F9:30:F4:42:B0:86:CC:07:7A:5D:4D:F2 Certificate issuer: /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4 Certificate serial: 0806D542B7CE950475FDFAC95D84CDFE7031E625 Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa Signing time: Tue 04 Feb 2025 18:47:51 +0000 ROA not before: Tue 04 Feb 2025 18:42:51 +0000 ROA not after: Tue 03 Feb 2026 18:47:51 +0000 asID: 28017 IP address blocks: 200.0.21.0/24 maxlen: 25 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:06:d5:42:b7:ce:95:04:75:fd:fa:c9:5d:84:cd:fe:70:31:e6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4 Validity Not Before: Feb 4 18:42:51 2025 GMT Not After : Feb 3 18:47:51 2026 GMT Subject: CN=28D81791D707EA5FF930F442B086CC077A5D4DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:62:e7:55:a1:b6:b2:7e:27:59:78:0c:0f: cf:1a:19:9e:ba:a9:11:63:f3:2b:d7:ba:67:58:bd: 91:b2:a2:c6:83:58:7e:5b:3b:6e:67:25:41:71:ec: b6:65:fa:f2:46:72:17:ef:c1:02:34:04:36:48:6b: b4:09:12:a8:6c:65:c5:23:8a:f3:84:46:46:9d:d9: 06:a4:55:10:21:f1:7c:53:86:f6:3c:c5:b2:ef:b6: 28:c3:18:8b:6b:30:ba:92:d3:da:d9:a4:3c:d1:7a: 6f:b2:61:6a:48:49:54:c8:a0:eb:94:0d:4e:e0:a4: 6c:a4:82:23:48:60:06:1e:e2:1c:11:d5:19:14:b0: ae:24:2a:60:65:5b:ae:aa:54:0e:d3:4a:64:3f:3f: 87:71:cf:1b:12:34:11:59:95:1d:e3:2d:08:82:fd: ab:a8:30:d2:cb:31:f4:a6:4f:96:e2:9e:1c:68:8b: a9:18:d4:f8:f4:8e:e6:0e:69:7b:55:10:95:d7:fb: 2f:81:d0:c5:2e:31:4a:e3:9e:4d:fe:c8:22:73:fc: 62:db:16:79:6b:6f:2e:a1:75:f6:80:be:ed:2d:6d: 63:bf:a1:03:ab:da:0a:a9:64:30:09:7d:ef:a9:a2: 00:1c:a0:99:f2:7c:f3:8d:da:d5:9d:23:13:3e:e9: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:17:91:D7:07:EA:5F:F9:30:F4:42:B0:86:CC:07:7A:5D:4D:F2 X509v3 Authority Key Identifier: keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.21.0/24 Signature Algorithm: sha256WithRSAEncryption 46:d8:5c:34:c2:5c:13:f5:19:84:3e:a0:95:3d:74:ac:e3:2c: 32:91:3a:5b:58:90:cd:b6:6e:dc:ac:bd:95:96:dd:11:7a:ff: 0d:b1:e0:af:07:11:f3:35:65:72:9e:d4:43:34:37:83:05:55: 6b:bc:8f:ee:34:aa:0f:80:1f:d8:94:74:b2:9b:7d:7d:9b:35: 2d:b8:1c:16:11:c6:3f:69:78:0e:a5:c8:74:62:3c:99:ba:0a: 8e:67:ac:3b:bc:72:e1:b2:9e:b9:c4:77:01:8c:c9:60:20:50: 8a:f9:d7:e3:4b:0e:84:93:aa:72:4e:4d:2c:d7:d7:1b:26:5a: 3c:71:34:da:d1:4c:bb:7f:62:95:c4:fd:2d:d7:f7:6f:72:98: c4:37:6a:d6:d4:a2:70:5d:a7:01:48:18:90:f1:4b:f0:5f:6f: f5:e7:28:bd:8d:a8:b1:79:0e:f5:26:e4:85:a5:c8:1d:b1:fa: 3d:53:64:6c:ed:54:d0:ee:a6:dd:04:cd:28:28:57:52:b8:52: f9:3c:46:69:07:cc:a3:85:23:a5:4f:d3:69:df:d5:75:d7:c6: 74:93:3d:f7:ba:f1:8b:78:e9:e4:34:71:a6:72:bf:1c:8e:5d: 0b:24:f0:b2:cb:b5:4b:bb:ce:60:b3:3b:85:03:54:35:f1:65: 5c:a4:92:b8 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUCAbVQrfOlQR1/frJXYTN/nAx5iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5N0QyNzAyOEVEREQxMjQwRDUxMTUwRjQ1MDYyRDRD RTBFODdGNDAeFw0yNTAyMDQxODQyNTFaFw0yNjAyMDMxODQ3NTFaMDMxMTAvBgNV BAMTKDI4RDgxNzkxRDcwN0VBNUZGOTMwRjQ0MkIwODZDQzA3N0E1RDRERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4GLnVaG2sn4nWXgMD88aGZ66 qRFj8yvXumdYvZGyosaDWH5bO25nJUFx7LZl+vJGchfvwQI0BDZIa7QJEqhsZcUj ivOERkad2QakVRAh8XxThvY8xbLvtijDGItrMLqS09rZpDzRem+yYWpISVTIoOuU DU7gpGykgiNIYAYe4hwR1RkUsK4kKmBlW66qVA7TSmQ/P4dxzxsSNBFZlR3jLQiC /auoMNLLMfSmT5binhxoi6kY1Pj0juYOaXtVEJXX+y+B0MUuMUrjnk3+yCJz/GLb Fnlrby6hdfaAvu0tbWO/oQOr2gqpZDAJfe+pogAcoJnyfPON2tWdIxM+6YVTAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUKNgXkdcH6l/5MPRCsIbMB3pdTfIwHwYDVR0j BBgwFoAU0JfScCjt3RJA1RFQ9FBi1M4Oh/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMDU5ODQ0MjA5MzBGMkU1QzA0ODJENEFCOEZFRUY2M0U1 MzBDOTY2M0UwQURDM0IxNjFDNjM2NUI1RjkzQzhELzAvRDA5N0QyNzAyOEVEREQx MjQwRDUxMTUwRjQ1MDYyRDRDRTBFODdGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk3RDI3MDI4RURERDEyNDBE NTExNTBGNDUwNjJENENFMEU4N0Y0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTA1OTg0NDIwOTMwRjJFNUMwNDgyRDRBQjhGRUVGNjNFNTMwQzk2NjNF MEFEQzNCMTYxQzYzNjVCNUY5M0M4RC8wLzMyMzAzMDJlMzAyZTMyMzEyZTMwMmYz MjM0MmQzMjM1MjAzZDNlMjAzMjM4MzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAAVMA0GCSqG SIb3DQEBCwUAA4IBAQBG2Fw0wlwT9RmEPqCVPXSs4ywykTpbWJDNtm7crL2Vlt0R ev8NseCvBxHzNWVyntRDNDeDBVVrvI/uNKoPgB/YlHSym319mzUtuBwWEcY/aXgO pch0YjyZugqOZ6w7vHLhsp65xHcBjMlgIFCK+dfjSw6Ek6pyTk0s19cbJlo8cTTa 0Uy7f2KVxP0t1/dvcpjEN2rW1KJwXacBSBiQ8UvwX2/15yi9jaixeQ71JuSFpcgd sfo9U2Rs7VTQ7qbdBM0oKFdSuFL5PEZpB8yjhSOlT9Np39V118Z0kz33uvGLeOnk NHGmcr8cjl0LJPCyy7VLu85gszuFA1Q18WVcpJK4 -----END CERTIFICATE-----Generated at Sat Nov 1 21:34:25 2025 by rpki-client