$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135372e302f32342d3234203d3e203231353735.roa File: 3139302e382e3135372e302f32342d3234203d3e203231353735.roa (raw, json) Hash identifier: 8u2HrsJn6iMyeZ3Ni3GIy+SM5vLSsOH2Ldosf5OqLO4= Subject key identifier: 86:E9:A4:C8:E5:D8:0F:37:88:82:38:51:EC:90:63:43:E5:A3:46:D6 Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5 Certificate serial: 2FA841940EF94EB7D052E1D8153105F5BBE7FA74 Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135372e302f32342d3234203d3e203231353735.roa Signing time: Thu 07 Aug 2025 21:05:01 +0000 ROA not before: Thu 07 Aug 2025 21:00:01 +0000 ROA not after: Thu 06 Aug 2026 21:05:01 +0000 asID: 21575 IP address blocks: 190.8.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a8:41:94:0e:f9:4e:b7:d0:52:e1:d8:15:31:05:f5:bb:e7:fa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5 Validity Not Before: Aug 7 21:00:01 2025 GMT Not After : Aug 6 21:05:01 2026 GMT Subject: CN=86E9A4C8E5D80F3788823851EC906343E5A346D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:bb:3d:dc:99:8a:84:3e:df:4d:11:16:cf: 88:38:d1:14:53:79:3d:fa:5b:b5:91:d8:46:24:59: b8:a5:58:55:d5:bc:29:0e:2c:e7:63:8b:86:a5:b3: e6:80:8e:5f:c1:4f:55:dc:a9:ec:25:aa:26:7d:60: 61:50:37:23:5b:a4:a2:d1:64:b7:5a:97:c9:d8:69: f7:e7:88:c2:6a:66:d5:cd:93:a9:46:15:9d:45:eb: a8:11:a2:2f:d1:72:50:28:c1:6b:e9:14:81:55:73: 38:85:31:f6:cc:dd:0d:90:c5:1c:69:d3:71:c1:1c: 66:39:49:00:50:50:8d:19:4d:19:dd:18:98:2a:71: 53:2e:88:bd:02:49:86:a0:77:e1:d1:8a:10:3f:1d: d8:61:94:2b:4c:24:48:76:e5:63:ac:88:a1:c1:73: e1:ec:bf:f3:db:f4:c9:2b:ec:fd:62:36:95:79:20: 48:bc:3c:fa:7d:5e:10:e4:e7:69:c1:0e:59:be:45: 02:e1:ac:70:52:3a:c0:f6:f0:6d:42:e3:6e:6b:12: a5:ca:e4:6c:52:34:56:24:7e:f8:1d:f3:44:17:38: 6e:e3:f8:48:9a:9e:a0:98:15:42:1f:2c:c0:da:f5: 8f:71:17:5c:b3:e0:05:f5:5d:6a:f1:87:43:35:fc: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:A4:C8:E5:D8:0F:37:88:82:38:51:EC:90:63:43:E5:A3:46:D6 X509v3 Authority Key Identifier: keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e382e3135372e302f32342d3234203d3e203231353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.8.157.0/24 Signature Algorithm: sha256WithRSAEncryption 03:d1:33:75:7f:3f:f4:f8:35:d3:08:ef:5b:f1:dc:93:80:44: ec:98:9f:ff:09:74:10:1e:3d:f5:39:7b:03:7a:16:a2:3f:a7: 7c:e7:fc:49:6a:d9:78:74:d7:d2:28:85:96:01:b2:60:1c:25: 7c:40:b7:bc:a3:dc:cc:0d:5a:20:af:cf:0e:95:1c:62:27:c2: 62:42:0c:09:fa:c4:69:22:24:20:27:dc:e8:fd:71:1a:bc:80: 84:b4:24:dc:5a:3d:01:b6:36:a7:ca:71:00:f8:58:e5:4e:23: 4d:ca:ae:64:64:dd:79:03:97:84:87:b2:b5:77:78:6b:23:dc: ce:39:70:bc:f6:95:44:be:c3:65:88:66:53:05:e9:83:40:bc: b7:87:f3:61:81:9e:01:38:91:a0:cf:c7:bf:18:f6:f4:f3:31: 58:40:32:95:24:db:67:24:e6:2d:19:b8:6b:a2:e5:b0:ed:db: 64:52:a2:f8:c1:1f:96:09:ae:8e:8f:7c:e4:cb:b4:95:bb:ad: 25:ea:38:00:3f:74:c3:6b:c3:60:95:07:3d:0b:06:e3:e7:2f: 3a:fd:49:95:26:d2:e1:52:93:8f:5a:f4:f7:7e:8e:ed:97:0d: 57:2f:df:27:bf:c8:24:5e:bf:5b:8a:35:eb:ff:7e:2c:45:47: 1b:31:c0:21 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUL6hBlA75TrfQUuHYFTEF9bvn+nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC M0E2NzhFNTAeFw0yNTA4MDcyMTAwMDFaFw0yNjA4MDYyMTA1MDFaMDMxMTAvBgNV BAMTKDg2RTlBNEM4RTVEODBGMzc4ODgyMzg1MUVDOTA2MzQzRTVBMzQ2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGB7s93JmKhD7fTREWz4g40RRT eT36W7WR2EYkWbilWFXVvCkOLOdji4als+aAjl/BT1XcqewlqiZ9YGFQNyNbpKLR ZLdal8nYaffniMJqZtXNk6lGFZ1F66gRoi/RclAowWvpFIFVcziFMfbM3Q2QxRxp 03HBHGY5SQBQUI0ZTRndGJgqcVMuiL0CSYagd+HRihA/HdhhlCtMJEh25WOsiKHB c+Hsv/Pb9Mkr7P1iNpV5IEi8PPp9XhDk52nBDlm+RQLhrHBSOsD28G1C425rEqXK 5GxSNFYkfvgd80QXOG7j+EianqCYFUIfLMDa9Y9xF1yz4AX1XWrxh0M1/NslAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUhumkyOXYDzeIgjhR7JBjQ+WjRtYwHwYDVR0j BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0 QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1 NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2 MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzkzMDJlMzgyZTMxMzUzNzJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+CJ0wDQYJ KoZIhvcNAQELBQADggEBAAPRM3V/P/T4NdMI71vx3JOAROyYn/8JdBAePfU5ewN6 FqI/p3zn/Elq2Xh019IohZYBsmAcJXxAt7yj3MwNWiCvzw6VHGInwmJCDAn6xGki JCAn3Oj9cRq8gIS0JNxaPQG2NqfKcQD4WOVOI03KrmRk3XkDl4SHsrV3eGsj3M45 cLz2lUS+w2WIZlMF6YNAvLeH82GBngE4kaDPx78Y9vTzMVhAMpUk22ck5i0ZuGui 5bDt22RSovjBH5YJro6PfOTLtJW7rSXqOAA/dMNrw2CVBz0LBuPnLzr9SZUm0uFS k49a9Pd+ju2XDVcv3ye/yCRev1uKNev/fixFRxsxwCE= -----END CERTIFICATE-----Generated at Sat Nov 1 20:29:38 2025 by rpki-client