$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3131332e302f32342d3234203d3e20323732333233.roa File: 3134382e3230382e3131332e302f32342d3234203d3e20323732333233.roa (raw, json) Hash identifier: q+x5cbNIfJtUsWBPZYRIGsAyjmbB2p4jrW0z+wtawmQ= Subject key identifier: C1:5A:6F:B9:8B:DF:53:19:9A:05:4E:D2:C3:2F:7B:1A:33:46:5D:09 Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB Certificate serial: 59BBFD3FBFC180A96827714054C9F7617832473B Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3131332e302f32342d3234203d3e20323732333233.roa Signing time: Mon 06 Jan 2025 04:05:00 +0000 ROA not before: Mon 06 Jan 2025 04:00:00 +0000 ROA not after: Mon 05 Jan 2026 04:05:00 +0000 asID: 272323 IP address blocks: 148.208.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bb:fd:3f:bf:c1:80:a9:68:27:71:40:54:c9:f7:61:78:32:47:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB Validity Not Before: Jan 6 04:00:00 2025 GMT Not After : Jan 5 04:05:00 2026 GMT Subject: CN=C15A6FB98BDF53199A054ED2C32F7B1A33465D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:3a:d1:c8:16:32:a5:1f:21:87:e7:1d:81: e5:2a:28:96:55:a7:7d:66:32:55:3e:81:23:da:cf: 39:0b:83:5e:85:50:27:0f:25:a0:34:92:08:12:35: 1d:b2:85:c8:0f:71:42:c2:e1:1f:46:5e:e3:d4:78: cf:7c:1a:ae:15:8e:98:f8:82:7c:61:80:1e:98:aa: 4c:58:93:50:ac:95:10:6b:28:9c:d1:28:5e:1c:ef: b5:ea:df:f9:fd:75:0c:67:32:f6:cf:09:7b:ce:7e: 60:50:00:da:3e:63:4d:e7:02:ff:10:3d:82:ef:39: d2:37:bb:64:11:ad:f7:d6:05:5f:cb:73:ee:88:21: c1:c3:ae:98:05:c0:41:4f:02:0c:6a:d1:11:ef:da: aa:9d:56:49:34:f6:05:d9:4d:22:59:32:84:4f:a8: b5:1c:fc:fe:97:fb:84:d3:fc:33:d8:84:ab:cd:07: 78:f9:5e:ba:83:e1:e5:2f:d9:e9:3a:4a:3f:21:7a: 7b:7a:94:c7:13:b1:ed:dc:81:06:ab:12:f4:5a:bb: 9c:6e:ee:33:e4:7c:fd:31:e5:ea:00:1e:f0:85:91: bd:8e:e3:80:d8:ed:25:bd:6f:94:a8:f6:80:b2:51: 90:94:14:37:b1:d8:2c:4f:76:bb:69:23:9e:c5:bb: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5A:6F:B9:8B:DF:53:19:9A:05:4E:D2:C3:2F:7B:1A:33:46:5D:09 X509v3 Authority Key Identifier: keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3131332e302f32342d3234203d3e20323732333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.208.113.0/24 Signature Algorithm: sha256WithRSAEncryption 38:bc:e7:dd:7a:b8:ec:18:ec:3a:0f:d1:77:6c:84:dd:92:69: 9d:0c:e0:1c:a9:9b:43:05:a8:c1:ca:62:70:a1:cb:1b:9e:43: a3:7a:9f:3f:06:cb:39:7c:04:25:59:a3:7d:1b:33:7c:91:64: e8:22:f7:98:23:e8:6e:b2:a0:91:d5:ae:b7:e9:81:02:7b:15: fe:ea:85:2f:09:8a:f1:71:9a:fa:66:f7:bd:a3:bb:20:91:0a: 13:ed:e4:0c:19:85:51:e0:60:2d:51:66:95:74:2c:aa:4b:b4: cc:c7:9b:6b:21:48:56:01:d2:bd:99:7d:08:b9:f6:f6:68:62: b3:63:52:3b:38:35:c5:d2:f7:fb:d1:c6:08:3c:e6:9b:d4:82: e9:34:be:b0:6f:b2:db:70:59:e4:eb:8f:12:75:84:ac:1c:3c: d5:07:4a:28:c2:43:a0:db:9f:76:ca:07:34:e8:49:17:2d:88: f0:e8:83:8a:c2:ea:ab:bf:52:8f:e2:3d:ec:d3:fb:5b:b8:fb: 47:c4:6b:2a:5f:b2:c9:b5:05:48:13:f0:e5:16:82:ae:9c:9e: c6:0e:2d:90:43:d8:6f:a6:27:b3:16:fd:2a:0e:0f:d6:d9:ec: 87:0b:f4:dc:8f:7f:ae:a3:f6:de:f0:8b:ff:7e:42:2d:e0:c6: 2f:7a:26:6d -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUWbv9P7/BgKloJ3FAVMn3YXgyRzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4 QzM3OTFEQjAeFw0yNTAxMDYwNDAwMDBaFw0yNjAxMDUwNDA1MDBaMDMxMTAvBgNV BAMTKEMxNUE2RkI5OEJERjUzMTk5QTA1NEVEMkMzMkY3QjFBMzM0NjVEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FTrRyBYypR8hh+cdgeUqKJZV p31mMlU+gSPazzkLg16FUCcPJaA0kggSNR2yhcgPcULC4R9GXuPUeM98Gq4Vjpj4 gnxhgB6YqkxYk1CslRBrKJzRKF4c77Xq3/n9dQxnMvbPCXvOfmBQANo+Y03nAv8Q PYLvOdI3u2QRrffWBV/Lc+6IIcHDrpgFwEFPAgxq0RHv2qqdVkk09gXZTSJZMoRP qLUc/P6X+4TT/DPYhKvNB3j5XrqD4eUv2ek6Sj8hent6lMcTse3cgQarEvRau5xu 7jPkfP0x5eoAHvCFkb2O44DY7SW9b5So9oCyUZCUFDex2CxPdrtpI57Fu5tXAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUwVpvuYvfUxmaBU7Swy97GjNGXQkwHwYDVR0j BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1 NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMxMzQzODJlMzIzMDM4MmUzMTMxMzMy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMzMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU 0HEwDQYJKoZIhvcNAQELBQADggEBADi85916uOwY7DoP0XdshN2SaZ0M4Bypm0MF qMHKYnChyxueQ6N6nz8Gyzl8BCVZo30bM3yRZOgi95gj6G6yoJHVrrfpgQJ7Ff7q hS8JivFxmvpm972juyCRChPt5AwZhVHgYC1RZpV0LKpLtMzHm2shSFYB0r2ZfQi5 9vZoYrNjUjs4NcXS9/vRxgg85pvUguk0vrBvsttwWeTrjxJ1hKwcPNUHSijCQ6Db n3bKBzToSRctiPDog4rC6qu/Uo/iPezT+1u4+0fEaypfssm1BUgT8OUWgq6cnsYO LZBD2G+mJ7MW/SoOD9bZ7IcL9NyPf66j9t7wi/9+Qi3gxi96Jm0= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:05 2025 by rpki-client