$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/3133382e3132312e39362e302f32322d3232203d3e20323633373834.roa File: 3133382e3132312e39362e302f32322d3232203d3e20323633373834.roa (raw, json) Hash identifier: mqeH2u0V4t+J8Rg1NVx/ykSe9H/qEra1aAuOhDFlmwg= Subject key identifier: D9:F5:EE:49:17:08:7C:DF:DA:88:52:4B:BE:DB:F3:47:8B:87:2E:C6 Certificate issuer: /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF Certificate serial: 350EAD8F1DB70BB8664131BB549E193380D7C916 Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/3133382e3132312e39362e302f32322d3232203d3e20323633373834.roa Signing time: Tue 04 Feb 2025 18:04:10 +0000 ROA not before: Tue 04 Feb 2025 17:59:10 +0000 ROA not after: Tue 03 Feb 2026 18:04:10 +0000 asID: 263784 IP address blocks: 138.121.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0e:ad:8f:1d:b7:0b:b8:66:41:31:bb:54:9e:19:33:80:d7:c9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF Validity Not Before: Feb 4 17:59:10 2025 GMT Not After : Feb 3 18:04:10 2026 GMT Subject: CN=D9F5EE4917087CDFDA88524BBEDBF3478B872EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:ee:11:b8:db:8b:c5:03:0f:09:47:b6:e7: 51:9e:74:6b:93:bc:ca:bc:d4:4c:65:84:d4:f8:84: a2:0d:8b:a7:a1:71:f3:86:e8:e3:04:81:5d:52:08: 18:dc:fc:83:a9:c9:cf:97:7d:a7:93:7a:b3:65:cc: 6d:a4:63:d8:06:d2:ab:07:3f:d1:40:b7:a5:fd:5b: 11:65:9b:9c:4e:4a:70:b9:d5:1c:78:4e:cf:f0:4a: 83:f5:2c:d8:5d:b1:69:9d:35:4d:cb:68:2c:3f:6f: a3:96:95:a4:33:f1:b0:2b:ef:7f:7e:ed:d2:b5:45: 31:85:1b:b7:3d:03:90:5d:70:45:c0:92:26:5c:ad: be:75:15:9e:67:44:85:ce:d3:3a:58:51:4c:c6:b0: 11:4b:33:6d:3d:d1:86:13:3e:29:f1:0e:d4:3d:1f: e1:4e:16:49:40:08:8b:71:bb:24:4c:5f:a0:ac:9e: 74:ed:81:90:60:84:1d:a6:96:cd:73:b2:dd:4e:b3: dc:52:1f:62:c0:a3:39:c2:22:69:0a:0e:30:04:4b: 19:92:cd:b9:e6:48:a1:d6:8b:d6:af:82:22:1f:b3: f9:ed:1b:4c:fc:1f:f8:7d:0b:36:97:43:8f:92:4f: 85:97:96:1b:9c:be:c3:7e:13:44:81:70:de:4e:c2: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F5:EE:49:17:08:7C:DF:DA:88:52:4B:BE:DB:F3:47:8B:87:2E:C6 X509v3 Authority Key Identifier: keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/3133382e3132312e39362e302f32322d3232203d3e20323633373834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.96.0/22 Signature Algorithm: sha256WithRSAEncryption 85:63:ab:ef:a2:2d:45:b7:22:1b:41:a5:0c:8e:3f:6e:ce:c0: 6c:20:f4:1f:fc:99:06:8a:43:e7:34:fe:d8:57:21:bd:6f:1f: 04:c5:a1:5c:f6:a7:66:9b:dd:b0:95:fe:fc:05:d1:27:86:96: 7a:70:e9:71:e6:a6:42:f6:5b:61:34:4a:b9:93:10:c2:63:a0: 51:19:57:20:29:63:34:be:a0:e3:82:dd:38:bc:3e:b1:86:5f: e9:9a:fd:cd:8b:53:cf:8b:0e:96:eb:8d:93:6c:55:f9:04:2e: a3:08:19:20:0d:51:33:a1:be:7a:f6:18:7e:8d:2b:4b:81:e2: de:4f:53:7e:56:a4:75:9a:14:52:15:11:13:1c:91:f9:8f:ee: e8:2b:c2:48:2e:26:ed:e5:1c:0e:d8:28:58:08:12:b5:b7:ad: a0:98:76:47:b4:e7:3c:3d:da:9b:5e:ce:09:84:09:52:05:04: 5f:8c:7c:c7:36:da:e4:02:ef:2f:0a:23:f9:bb:60:72:39:c9: 25:17:9a:59:7b:c4:6b:7d:76:e9:b5:6e:e6:d0:e0:75:10:0c: cb:57:9a:f6:a9:9a:ca:7c:2c:d4:ff:d3:ad:49:ca:15:a4:94: df:e7:1e:70:b5:8b:e9:30:c7:db:74:10:c2:48:de:4c:d0:3e: b8:d0:1f:84 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUNQ6tjx23C7hmQTG7VJ4ZM4DXyRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDQkRCREUxN0M4MkRFREI2RDVCQjAxRjJGMkNBRTYz MDJGNjlBRjAeFw0yNTAyMDQxNzU5MTBaFw0yNjAyMDMxODA0MTBaMDMxMTAvBgNV BAMTKEQ5RjVFRTQ5MTcwODdDREZEQTg4NTI0QkJFREJGMzQ3OEI4NzJFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Je4RuNuLxQMPCUe251GedGuT vMq81ExlhNT4hKINi6ehcfOG6OMEgV1SCBjc/IOpyc+XfaeTerNlzG2kY9gG0qsH P9FAt6X9WxFlm5xOSnC51Rx4Ts/wSoP1LNhdsWmdNU3LaCw/b6OWlaQz8bAr739+ 7dK1RTGFG7c9A5BdcEXAkiZcrb51FZ5nRIXO0zpYUUzGsBFLM2090YYTPinxDtQ9 H+FOFklACItxuyRMX6CsnnTtgZBghB2mls1zst1Os9xSH2LAoznCImkKDjAESxmS zbnmSKHWi9avgiIfs/ntG0z8H/h9CzaXQ4+ST4WXlhucvsN+E0SBcN5OwvFbAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU2fXuSRcIfN/aiFJLvtvzR4uHLsYwHwYDVR0j BBgwFoAUw8vb3hfILe221bsB8vLK5jAvaa8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRDJGRDRFMUFEQjY4RDMxMUQzRDc3RTUxMjhFMzk4QTA3 MzBGMEZBOTdBMDVDODYzMEVBNTdEQTQ1NDQwMEZBLzAvQzNDQkRCREUxN0M4MkRF REI2RDVCQjAxRjJGMkNBRTYzMDJGNjlBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0NCREJERTE3QzgyREVEQjZE NUJCMDFGMkYyQ0FFNjMwMkY2OUFGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkQyRkQ0RTFBREI2OEQzMTFEM0Q3N0U1MTI4RTM5OEEwNzMwRjBGQTk3 QTA1Qzg2MzBFQTU3REE0NTQ0MDBGQS8wLzMxMzMzODJlMzEzMjMxMmUzOTM2MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzczODM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinlg MA0GCSqGSIb3DQEBCwUAA4IBAQCFY6vvoi1FtyIbQaUMjj9uzsBsIPQf/JkGikPn NP7YVyG9bx8ExaFc9qdmm92wlf78BdEnhpZ6cOlx5qZC9lthNEq5kxDCY6BRGVcg KWM0vqDjgt04vD6xhl/pmv3Ni1PPiw6W642TbFX5BC6jCBkgDVEzob569hh+jStL geLeT1N+VqR1mhRSFRETHJH5j+7oK8JILibt5RwO2ChYCBK1t62gmHZHtOc8Pdqb Xs4JhAlSBQRfjHzHNtrkAu8vCiP5u2ByOcklF5pZe8RrfXbptW7m0OB1EAzLV5r2 qZrKfCzU/9OtScoVpJTf5x5wtYvpMMfbdBDCSN5M0D640B+E -----END CERTIFICATE-----Generated at Mon Nov 3 05:57:49 2025 by rpki-client