$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa File: 3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa (raw, json) Hash identifier: GwiEZh2BZ5Ri5rjSCvkfVflmYu2darlDOdJDd0KvwAc= Subject key identifier: AE:B2:68:DB:13:3B:0F:A7:E9:C6:C1:AC:78:0D:4F:BA:3B:21:05:37 Certificate issuer: /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509 Certificate serial: 07CCAF478C6D00C0EB38C65BA9EF0D6B650A4D06 Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa Signing time: Thu 29 May 2025 21:20:30 +0000 ROA not before: Thu 29 May 2025 21:15:30 +0000 ROA not after: Thu 28 May 2026 21:20:30 +0000 asID: 263750 IP address blocks: 138.99.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 08:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cc:af:47:8c:6d:00:c0:eb:38:c6:5b:a9:ef:0d:6b:65:0a:4d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509 Validity Not Before: May 29 21:15:30 2025 GMT Not After : May 28 21:20:30 2026 GMT Subject: CN=AEB268DB133B0FA7E9C6C1AC780D4FBA3B210537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:65:58:b2:81:93:f1:ac:73:74:70:8d:c2: 5f:74:45:93:75:e9:52:f5:a2:25:f2:71:5f:c5:64: 1e:ad:6e:77:0d:a4:4d:85:2d:10:2e:c3:3f:23:f1: 46:6f:47:47:09:a0:45:bc:a3:13:08:8b:b8:26:77: 00:26:3f:e5:49:c5:68:d6:d8:cb:94:a1:4a:2b:1d: 5d:b3:34:68:48:97:53:9d:13:e6:90:97:1c:8f:20: a4:20:ec:36:0e:8b:61:cd:26:ae:fb:c1:b7:3e:63: 3c:0f:a4:05:68:50:16:92:9e:c5:4f:d1:bb:13:07: 2c:e2:36:a6:11:e3:bd:4b:fe:dc:5b:63:f7:0a:ab: 8e:b7:f2:4f:3b:85:3c:8a:36:b6:e7:24:3c:32:43: 1f:22:13:2f:75:90:bc:46:f3:cc:29:11:8c:fc:2a: 29:56:69:07:1d:81:f7:43:68:8f:15:ff:bb:52:c9: 3c:04:ef:ed:1a:96:63:49:1f:6f:b9:d3:26:3c:d8: 81:b7:a9:b0:8b:b7:95:ea:10:40:13:98:e4:09:73: ce:9c:e1:80:72:2a:bd:bf:e8:92:74:42:dc:12:22: 1e:14:c3:27:f4:c1:f1:ca:a0:a9:1f:b2:e8:0b:c9: d5:81:6b:49:ec:90:c2:8f:46:54:15:67:68:17:e6: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B2:68:DB:13:3B:0F:A7:E9:C6:C1:AC:78:0D:4F:BA:3B:21:05:37 X509v3 Authority Key Identifier: keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.102.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3d:6a:53:41:0c:0c:a2:e6:f0:ee:67:90:f7:f7:05:d3:c5: 02:85:30:2d:59:19:ce:26:77:5d:62:2f:4c:df:e8:9c:4d:27: c3:a7:1d:5d:b9:8c:b9:ed:cb:f7:dc:17:73:85:8e:34:80:26: ab:11:fe:f4:9e:ef:73:dc:91:09:62:90:61:44:28:e6:3e:38: 23:be:ef:d9:ae:65:73:8d:df:91:03:89:3a:78:25:52:d0:80: 94:3c:6a:96:01:34:3c:4d:aa:92:6c:9b:43:51:54:54:34:c7: b7:25:33:e2:07:eb:d9:20:91:39:ef:66:82:cb:7a:ef:88:9d: 4a:2b:48:0d:45:e5:4a:47:ac:c9:e7:09:6b:ee:05:75:dc:84: b9:2e:74:44:3e:40:d7:23:48:fa:02:7f:54:df:e0:24:70:6c: a9:95:c2:af:62:82:c0:1a:22:86:b5:2c:1a:3d:87:df:22:9c: a6:92:a1:26:3a:c3:80:a9:b0:e5:73:11:cc:c3:e8:62:21:32: e1:90:64:1a:d7:2b:ec:61:26:ae:4a:d4:68:1a:b8:44:51:fe: 3c:71:92:a2:93:9d:6a:eb:2d:85:c1:b5:d5:36:e6:79:9d:b7: 05:6e:e3:49:98:d0:00:2e:ec:3d:f2:e8:b6:51:c2:e0:8e:1e: 4a:d2:87:62 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUB8yvR4xtAMDrOMZbqe8Na2UKTQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCNDdCQTAyQURCQzE2MTNEQjIwRjFCNUVDM0ExQUM3 NEM1MjUwOTAeFw0yNTA1MjkyMTE1MzBaFw0yNjA1MjgyMTIwMzBaMDMxMTAvBgNV BAMTKEFFQjI2OERCMTMzQjBGQTdFOUM2QzFBQzc4MEQ0RkJBM0IyMTA1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1WVYsoGT8axzdHCNwl90RZN1 6VL1oiXycV/FZB6tbncNpE2FLRAuwz8j8UZvR0cJoEW8oxMIi7gmdwAmP+VJxWjW 2MuUoUorHV2zNGhIl1OdE+aQlxyPIKQg7DYOi2HNJq77wbc+YzwPpAVoUBaSnsVP 0bsTByziNqYR471L/txbY/cKq4638k87hTyKNrbnJDwyQx8iEy91kLxG88wpEYz8 KilWaQcdgfdDaI8V/7tSyTwE7+0almNJH2+50yY82IG3qbCLt5XqEEATmOQJc86c 4YByKr2/6JJ0QtwSIh4Uwyf0wfHKoKkfsugLydWBa0nskMKPRlQVZ2gX5vAzAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUrrJo2xM7D6fpxsGseA1PujshBTcwHwYDVR0j BBgwFoAUL7R7oCrbwWE9sg8bXsOhrHTFJQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQTc3MkE1RUEyNTI2MjQwNDQ4NDM4MThBQjhEQUI5REZG Q0I3MzQ2QzlEMkUxRTVDQTkzRkRFOUJBQUE5MkI0LzAvMkZCNDdCQTAyQURCQzE2 MTNEQjIwRjFCNUVDM0ExQUM3NEM1MjUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkI0N0JBMDJBREJDMTYxM0RC MjBGMUI1RUMzQTFBQzc0QzUyNTA5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkE3NzJBNUVBMjUyNjI0MDQ0ODQzODE4QUI4REFCOURGRkNCNzM0NkM5 RDJFMUU1Q0E5M0ZERTlCQUFBOTJCNC8wLzMxMzMzODJlMzkzOTJlMzEzMDMyMmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAimNm MA0GCSqGSIb3DQEBCwUAA4IBAQBwPWpTQQwMoubw7meQ9/cF08UChTAtWRnOJndd Yi9M3+icTSfDpx1duYy57cv33BdzhY40gCarEf70nu9z3JEJYpBhRCjmPjgjvu/Z rmVzjd+RA4k6eCVS0ICUPGqWATQ8TaqSbJtDUVRUNMe3JTPiB+vZIJE572aCy3rv iJ1KK0gNReVKR6zJ5wlr7gV13IS5LnREPkDXI0j6An9U3+AkcGyplcKvYoLAGiKG tSwaPYffIpymkqEmOsOAqbDlcxHMw+hiITLhkGQa1yvsYSauStRoGrhEUf48cZKi k51q6y2FwbXVNuZ5nbcFbuNJmNAALuw98ui2UcLgjh5K0odi -----END CERTIFICATE-----Generated at Fri Jun 6 21:49:02 2025 by rpki-client