$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/3133382e39372e3233362e302f32322d3234203d3e203238313030.roa File: 3133382e39372e3233362e302f32322d3234203d3e203238313030.roa (raw, json) Hash identifier: VVk5r8T92bVE2YlJ5zpM1vr9Jh6mo06jNQHxOf3Mj28= Subject key identifier: CE:AD:67:FC:B0:DE:EF:60:51:CE:84:64:EC:A4:D0:0C:74:9A:4D:97 Certificate issuer: /CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0 Certificate serial: 6AD041E98BE651BC529C758717E1644A6DA06D6D Authority key identifier: CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/3133382e39372e3233362e302f32322d3234203d3e203238313030.roa Signing time: Tue 04 Feb 2025 18:43:43 +0000 ROA not before: Tue 04 Feb 2025 18:38:43 +0000 ROA not after: Tue 03 Feb 2026 18:43:43 +0000 asID: 28100 IP address blocks: 138.97.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 12:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d0:41:e9:8b:e6:51:bc:52:9c:75:87:17:e1:64:4a:6d:a0:6d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0 Validity Not Before: Feb 4 18:38:43 2025 GMT Not After : Feb 3 18:43:43 2026 GMT Subject: CN=CEAD67FCB0DEEF6051CE8464ECA4D00C749A4D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:a3:7e:50:a6:d4:0b:0a:91:bd:12:e9:5f: 6d:f6:bb:7e:a0:3d:a5:59:0c:8c:6a:be:41:78:fc: fc:db:d0:ef:5d:de:0a:67:dc:e1:d5:34:59:93:de: 5c:30:4f:e8:2f:c9:9a:1e:ce:62:a8:0d:41:40:03: 13:e7:10:22:0e:73:7e:7f:22:24:f0:9a:29:92:7a: 2a:40:61:2c:33:b7:61:83:0a:28:e1:a4:c3:30:e3: 98:bd:9b:3b:33:7e:3b:5a:f5:77:2a:7a:42:6b:0f: 27:ca:9e:5c:1e:4a:50:27:9e:63:8f:68:1e:46:9d: f6:48:69:1b:ea:79:d3:e2:f9:07:52:b5:bc:98:a4: 1d:70:b2:4a:32:ba:e0:d2:54:6e:71:4a:e4:0e:e0: 50:d5:18:8f:5f:e6:ca:9a:5c:22:dd:c9:3a:a9:c7: 27:da:a4:6f:75:dd:49:76:43:a9:ba:f3:2f:26:c4: 7e:c5:8e:70:22:9d:b6:bb:e2:23:58:d1:1e:3b:70: 5f:d9:ec:0b:82:c8:fb:44:06:b5:82:60:4f:a3:04: 09:a4:6b:a9:40:02:b0:03:21:89:46:76:b4:83:d9: d3:86:ce:60:7a:b6:34:41:a9:97:9e:32:9a:47:96: f4:04:f1:f2:07:6a:4d:29:f7:da:4f:50:b2:86:62: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AD:67:FC:B0:DE:EF:60:51:CE:84:64:EC:A4:D0:0C:74:9A:4D:97 X509v3 Authority Key Identifier: keyid:CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/3133382e39372e3233362e302f32322d3234203d3e203238313030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.236.0/22 Signature Algorithm: sha256WithRSAEncryption 22:d0:5b:83:24:e2:da:bc:4b:da:1c:ab:e6:13:07:24:c7:13: 56:60:8f:fe:14:2a:4f:68:41:4a:10:11:37:23:02:b6:77:46: 75:16:a7:ca:71:02:41:36:13:f5:ff:82:a0:d2:21:3f:1f:a8: 88:24:c6:88:96:71:d4:33:e6:52:71:6d:79:a5:47:88:e9:b5: 6f:32:fa:2c:6f:f7:0a:d3:11:a1:3d:7b:55:e4:ff:4a:c3:c5: f7:d9:31:64:70:07:90:01:26:e2:75:73:c4:71:45:9a:1a:58: 88:25:f6:50:a0:0d:89:c7:55:24:93:cc:51:1e:b0:b3:af:8f: ea:a7:f9:c4:78:44:32:9a:01:fd:01:f4:9c:80:70:0d:64:ce: d6:b2:0c:71:1d:7e:fe:bc:82:ba:eb:84:ee:7f:26:14:0a:66: 29:3f:f3:7f:da:1f:fb:b1:4b:e3:fa:11:a9:95:c6:d6:9e:26: 15:75:05:14:b7:66:e7:29:d2:61:12:b6:71:8e:73:0b:2c:dc: f8:b1:f0:97:ec:ac:f6:b4:71:df:17:83:5b:28:56:6d:c2:6e: 5c:55:24:12:e4:3c:07:29:98:17:ae:6b:cf:d1:db:e7:08:7a: 9c:a5:b2:75:af:0c:7a:14:85:b1:ee:aa:a5:23:53:e1:90:0d: 12:a4:cc:ae -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUatBB6YvmUbxSnHWHF+FkSm2gbW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCN0NFQzZCMjUxNTkxMjk1Q0MwNEVBNDI3NDE0MEY2 RkI2NTJFMDAeFw0yNTAyMDQxODM4NDNaFw0yNjAyMDMxODQzNDNaMDMxMTAvBgNV BAMTKENFQUQ2N0ZDQjBERUVGNjA1MUNFODQ2NEVDQTREMDBDNzQ5QTREOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nqN+UKbUCwqRvRLpX232u36g PaVZDIxqvkF4/Pzb0O9d3gpn3OHVNFmT3lwwT+gvyZoezmKoDUFAAxPnECIOc35/ IiTwmimSeipAYSwzt2GDCijhpMMw45i9mzszfjta9XcqekJrDyfKnlweSlAnnmOP aB5GnfZIaRvqedPi+QdStbyYpB1wskoyuuDSVG5xSuQO4FDVGI9f5sqaXCLdyTqp xyfapG913Ul2Q6m68y8mxH7FjnAinba74iNY0R47cF/Z7AuCyPtEBrWCYE+jBAmk a6lAArADIYlGdrSD2dOGzmB6tjRBqZeeMppHlvQE8fIHak0p99pPULKGYoExAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUzq1n/LDe72BRzoRk7KTQDHSaTZcwHwYDVR0j BBgwFoAUy7fOxrJRWRKVzATqQnQUD2+2UuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQzM0MTNFNjUwNUJEMjJERUEwMTQzMEVDMkQ5NjVBMjlB Q0ExRDZCRkVGMjQ0OTM0MUM0OEE3MkJENEVCNEYxLzAvQ0JCN0NFQzZCMjUxNTkx Mjk1Q0MwNEVBNDI3NDE0MEY2RkI2NTJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI3Q0VDNkIyNTE1OTEyOTVD QzA0RUE0Mjc0MTQwRjZGQjY1MkUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUMzNDEzRTY1MDVCRDIyREVBMDE0MzBFQzJEOTY1QTI5QUNBMUQ2QkZF RjI0NDkzNDFDNDhBNzJCRDRFQjRGMS8wLzMxMzMzODJlMzkzNzJlMzIzMzM2MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoph7DAN BgkqhkiG9w0BAQsFAAOCAQEAItBbgyTi2rxL2hyr5hMHJMcTVmCP/hQqT2hBShAR NyMCtndGdRanynECQTYT9f+CoNIhPx+oiCTGiJZx1DPmUnFteaVHiOm1bzL6LG/3 CtMRoT17VeT/SsPF99kxZHAHkAEm4nVzxHFFmhpYiCX2UKANicdVJJPMUR6ws6+P 6qf5xHhEMpoB/QH0nIBwDWTO1rIMcR1+/ryCuuuE7n8mFApmKT/zf9of+7FL4/oR qZXG1p4mFXUFFLdm5ynSYRK2cY5zCyzc+LHwl+ys9rRx3xeDWyhWbcJuXFUkEuQ8 BymYF65rz9Hb5wh6nKWyda8MehSFse6qpSNT4ZANEqTMrg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:55:14 2025 by rpki-client