$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233392e302f32342d3234203d3e203532333639.roa File: 3139302e3138342e3233392e302f32342d3234203d3e203532333639.roa (raw, json) Hash identifier: 4akjtLuDxK90JmbuFN0xJfgWYjdR2oCqSPuzkWEgrsU= Subject key identifier: 13:DA:E2:38:21:0A:24:38:66:88:E0:E3:3C:3B:9E:41:3C:0E:0A:03 Certificate issuer: /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84 Certificate serial: 4C65523B388F072E8F776B81F1D91D3D77B5F607 Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233392e302f32342d3234203d3e203532333639.roa Signing time: Sun 02 Mar 2025 04:11:07 +0000 ROA not before: Sun 02 Mar 2025 04:06:07 +0000 ROA not after: Sun 01 Mar 2026 04:11:07 +0000 asID: 52369 IP address blocks: 190.184.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:65:52:3b:38:8f:07:2e:8f:77:6b:81:f1:d9:1d:3d:77:b5:f6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84 Validity Not Before: Mar 2 04:06:07 2025 GMT Not After : Mar 1 04:11:07 2026 GMT Subject: CN=13DAE238210A24386688E0E33C3B9E413C0E0A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:84:13:8c:dd:e6:33:6b:ce:21:89:56:4c:3c: e6:e3:6d:25:12:72:93:e8:36:4d:5a:ee:de:fb:9a: 22:1a:80:e3:44:f7:3f:7c:58:6b:24:96:40:3e:2b: 46:34:db:a1:fd:b0:17:16:db:47:4f:e3:06:39:3b: be:d2:1c:d3:43:78:60:06:a5:99:cf:59:72:31:1e: 81:a0:d5:46:fb:69:b0:42:b0:22:77:72:f9:3f:eb: a1:d7:73:8b:a8:98:fe:7d:5a:10:47:d5:eb:b6:d6: 41:a4:cc:dc:f3:8c:10:6b:bb:b6:f5:ca:49:d1:cf: cb:c7:e4:d7:f0:2d:7c:9c:c0:b5:29:35:09:5e:8a: 98:80:6a:69:a8:94:ab:6d:5c:53:82:00:57:3e:c5: 3d:0c:41:5b:85:54:f4:37:d7:13:2d:e0:8c:dd:aa: e4:c8:ce:be:19:e5:32:88:21:f7:81:27:19:5b:0e: f2:d7:50:57:11:a4:76:34:42:fb:05:6c:7c:5a:12: 91:86:c7:3c:81:47:fc:f4:be:52:5b:cb:13:99:73: 33:17:4a:a4:fa:d2:95:6c:a3:ff:51:88:b7:ea:99: 03:d2:30:74:f8:91:d1:1f:f5:aa:fc:9e:ce:d7:34: 64:38:12:3e:19:ed:ce:8e:29:a2:14:ab:de:32:40: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DA:E2:38:21:0A:24:38:66:88:E0:E3:3C:3B:9E:41:3C:0E:0A:03 X509v3 Authority Key Identifier: keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233392e302f32342d3234203d3e203532333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.184.239.0/24 Signature Algorithm: sha256WithRSAEncryption 46:b1:42:b9:3a:71:e3:ca:33:4a:13:22:0f:be:5f:4b:22:3f: e2:df:32:bb:1b:fd:f3:1b:e3:85:90:01:ef:5b:b1:da:5d:f1: de:cb:ea:b3:2c:eb:15:7e:9c:1b:93:5e:c6:b6:16:49:45:01: f5:2d:5e:4e:56:59:e1:06:16:fc:e0:5d:d2:24:f9:7e:72:87: 85:87:5f:d1:ec:99:a3:f4:e9:06:20:2c:9b:5b:d3:60:9b:09: 94:36:5a:08:b9:b6:82:df:85:26:c3:92:e2:9d:4e:f2:e3:0c: 5b:68:54:33:75:12:d6:39:46:7c:ec:e0:2b:fb:3e:9c:9c:5b: f2:e4:1e:31:3b:4e:f5:6a:e0:c8:f3:fd:46:74:72:27:ea:80: bb:c7:29:38:cf:5f:9e:a9:df:ad:04:62:ae:bd:ab:98:af:5e: d9:08:ac:51:fa:64:5f:50:18:2e:08:3c:da:90:35:dc:dc:54: 99:b7:65:d3:8d:cd:70:4a:5d:03:6e:aa:0c:cb:42:97:b8:d8: bd:c4:23:cd:2e:0e:65:93:67:32:fa:a3:33:ba:94:03:94:c9: 26:e6:a8:27:8d:d7:2b:3f:f4:eb:3c:b4:8e:06:70:9a:33:36: 17:67:03:40:28:b1:ed:70:8b:0a:4e:65:9b:f5:3c:46:59:12: 88:16:ae:c3 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUTGVSOziPBy6Pd2uB8dkdPXe19gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVGOUM3RDY1QTRDQkFGNUQyMUExNUZBMkMyMzdERDg3 RkY3RUY4NDAeFw0yNTAzMDIwNDA2MDdaFw0yNjAzMDEwNDExMDdaMDMxMTAvBgNV BAMTKDEzREFFMjM4MjEwQTI0Mzg2Njg4RTBFMzNDM0I5RTQxM0MwRTBBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUhBOM3eYza84hiVZMPObjbSUS cpPoNk1a7t77miIagONE9z98WGsklkA+K0Y026H9sBcW20dP4wY5O77SHNNDeGAG pZnPWXIxHoGg1Ub7abBCsCJ3cvk/66HXc4uomP59WhBH1eu21kGkzNzzjBBru7b1 yknRz8vH5NfwLXycwLUpNQleipiAammolKttXFOCAFc+xT0MQVuFVPQ31xMt4Izd quTIzr4Z5TKIIfeBJxlbDvLXUFcRpHY0QvsFbHxaEpGGxzyBR/z0vlJbyxOZczMX SqT60pVso/9RiLfqmQPSMHT4kdEf9ar8ns7XNGQ4Ej4Z7c6OKaIUq94yQE6hAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUE9riOCEKJDhmiODjPDueQTwOCgMwHwYDVR0j BBgwFoAUjvnH1lpMuvXSGhX6LCN92H/374QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNkVDNERCQ0IxREE4NjZBQUYzNzExMjYyOTA5QjFCM0Q1 NTNBOUZBRTkxMTkyMTI2OEYyNTk2MkY1NUQ1QTFDLzAvOEVGOUM3RDY1QTRDQkFG NUQyMUExNUZBMkMyMzdERDg3RkY3RUY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUY5QzdENjVBNENCQUY1RDIx QTE1RkEyQzIzN0REODdGRjdFRjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTZFQzREQkNCMURBODY2QUFGMzcxMTI2MjkwOUIxQjNENTUzQTlGQUU5 MTE5MjEyNjhGMjU5NjJGNTVENUExQy8wLzMxMzkzMDJlMzEzODM0MmUzMjMzMzky ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvrjv MA0GCSqGSIb3DQEBCwUAA4IBAQBGsUK5OnHjyjNKEyIPvl9LIj/i3zK7G/3zG+OF kAHvW7HaXfHey+qzLOsVfpwbk17GthZJRQH1LV5OVlnhBhb84F3SJPl+coeFh1/R 7Jmj9OkGICybW9NgmwmUNloIubaC34Umw5LinU7y4wxbaFQzdRLWOUZ87OAr+z6c nFvy5B4xO071auDI8/1GdHIn6oC7xyk4z1+eqd+tBGKuvauYr17ZCKxR+mRfUBgu CDzakDXc3FSZt2XTjc1wSl0DbqoMy0KXuNi9xCPNLg5lk2cy+qMzupQDlMkm5qgn jdcrP/TrPLSOBnCaMzYXZwNAKLHtcIsKTmWb9TxGWRKIFq7D -----END CERTIFICATE-----Generated at Sat Apr 5 14:07:10 2025 by rpki-client