$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa File: 34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa (raw, json) Hash identifier: urrLGvm4/CZSvAK6ODX8GdAi6nSG7VprqyvhPJHiTOA= Subject key identifier: B3:D2:A3:D4:ED:11:CA:00:69:EB:D0:03:A0:4B:45:76:D9:A0:D9:A7 Certificate issuer: /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Certificate serial: 40CD210CBC3BCF8DFB617E480AF6B428E4C9F572 Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa Signing time: Fri 24 Jan 2025 17:00:03 +0000 ROA not before: Fri 24 Jan 2025 16:55:03 +0000 ROA not after: Fri 23 Jan 2026 17:00:03 +0000 asID: 266832 IP address blocks: 45.238.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cd:21:0c:bc:3b:cf:8d:fb:61:7e:48:0a:f6:b4:28:e4:c9:f5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54 Validity Not Before: Jan 24 16:55:03 2025 GMT Not After : Jan 23 17:00:03 2026 GMT Subject: CN=B3D2A3D4ED11CA0069EBD003A04B4576D9A0D9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:91:d9:5a:e3:7d:49:4a:d2:bd:28:64:08: 6b:62:6f:67:30:af:b0:64:0b:4b:d1:49:aa:0a:3a: 7d:40:82:fc:ab:0e:e7:eb:1e:60:4a:ca:1e:6c:98: c2:99:17:64:97:24:3a:f2:29:12:06:d9:3a:75:f7: 8f:c1:1a:ed:0c:98:85:5a:9f:0e:59:43:65:1a:99: 83:14:ff:ee:d9:12:54:b7:f0:74:5a:e4:4e:c7:9d: 3f:74:94:21:7c:07:2c:4e:75:2b:83:e4:ee:b2:54: c8:96:44:b7:bd:05:35:b0:32:f1:08:ae:d9:50:59: 9f:9a:e3:50:03:73:7c:7d:b6:6f:f2:b3:c6:c3:03: 2b:c3:49:d5:18:7a:af:67:29:fc:20:87:4d:2e:a3: 4e:f2:1d:3a:10:2c:c8:4c:a3:4d:18:ad:27:51:f6: bf:a8:a5:a2:09:d3:5a:5a:48:d8:78:55:8d:7d:0c: 90:71:e8:36:28:d2:9f:6c:f6:74:ae:8d:91:1b:f7: ea:d1:c9:fc:4e:5e:fd:2f:81:28:39:c5:7d:85:f1: 5e:da:da:88:db:76:0d:f7:31:3f:2f:1e:7d:1e:01: df:3f:b2:de:1b:ca:2f:66:bc:85:89:10:3c:12:9a: 79:4b:bf:ad:c2:0d:13:34:7e:86:cb:e9:47:3b:74: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D2:A3:D4:ED:11:CA:00:69:EB:D0:03:A0:4B:45:76:D9:A0:D9:A7 X509v3 Authority Key Identifier: keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.144.0/22 Signature Algorithm: sha256WithRSAEncryption 35:67:01:50:4c:38:f2:82:21:e1:7c:a3:54:c0:cb:07:82:ef: 58:8f:45:16:2c:c3:ae:39:71:13:e8:f4:7b:74:4b:fc:57:98: 32:18:69:f0:ca:ea:5e:bc:8c:00:ce:e2:e6:87:e7:9f:26:b5: 3d:4d:3d:1c:67:a4:be:57:bb:a0:77:2a:f7:68:f8:3a:56:84: 91:7d:f3:1a:ea:bf:8a:64:ad:36:4f:89:e9:8e:9b:46:63:b9: f2:03:3a:78:f7:3b:9f:fb:74:3a:ac:9a:10:c5:5d:0f:1c:7a: fa:99:bb:9e:ef:71:07:11:0a:38:2f:67:b9:82:06:27:37:58: 65:75:0e:bd:28:cc:a0:3f:c1:ba:be:95:5b:da:6c:cd:0e:e2: bc:60:27:fa:cf:a9:09:89:6b:a2:5c:86:84:a0:5a:f8:f3:4e: 8a:3e:22:cb:d6:04:b8:7f:da:08:e5:92:a9:b7:d7:86:ea:e4: e8:3f:15:db:47:a9:65:38:ad:83:38:69:7f:3a:f1:4f:a3:7e: b3:70:5b:da:5f:9d:4f:ef:33:b1:d9:49:cd:b1:e1:18:70:a9: 88:b3:2a:ec:5e:f2:2c:8a:39:29:b8:c1:5a:57:b0:3b:38:90: f6:7a:a7:ac:40:64:2f:49:ca:fb:53:71:c7:41:35:53:02:d2: ef:47:0d:36 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUQM0hDLw7z437YX5ICva0KOTJ9XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MUNGMjVBRTY4RjBDODU4RkVCNTFGRjcyRDk2NEJF NTY4QUE1NDAeFw0yNTAxMjQxNjU1MDNaFw0yNjAxMjMxNzAwMDNaMDMxMTAvBgNV BAMTKEIzRDJBM0Q0RUQxMUNBMDA2OUVCRDAwM0EwNEI0NTc2RDlBMEQ5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbw5HZWuN9SUrSvShkCGtib2cw r7BkC0vRSaoKOn1AgvyrDufrHmBKyh5smMKZF2SXJDryKRIG2Tp194/BGu0MmIVa nw5ZQ2UamYMU/+7ZElS38HRa5E7HnT90lCF8ByxOdSuD5O6yVMiWRLe9BTWwMvEI rtlQWZ+a41ADc3x9tm/ys8bDAyvDSdUYeq9nKfwgh00uo07yHToQLMhMo00YrSdR 9r+opaIJ01paSNh4VY19DJBx6DYo0p9s9nSujZEb9+rRyfxOXv0vgSg5xX2F8V7a 2ojbdg33MT8vHn0eAd8/st4byi9mvIWJEDwSmnlLv63CDRM0fobL6Uc7dAjlAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUs9Kj1O0RygBp69ADoEtFdtmg2acwHwYDVR0j BBgwFoAUy1HPJa5o8MhY/rUf9y2WS+VoqlQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMENDOEU5MjhDRUZEMDM0MTEwMjNDMEVERTY4OUQxQjdC Nzk2MzY0MjAxQzJBQzlCOTlFNTE1QjgzQTdGNzRELzAvQ0I1MUNGMjVBRTY4RjBD ODU4RkVCNTFGRjcyRDk2NEJFNTY4QUE1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjUxQ0YyNUFFNjhGMEM4NThG RUI1MUZGNzJEOTY0QkU1NjhBQTU0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzBDQzhFOTI4Q0VGRDAzNDExMDIzQzBFREU2ODlEMUI3Qjc5NjM2NDIw MUMyQUM5Qjk5RTUxNUI4M0E3Rjc0RC8wLzM0MzUyZTMyMzMzODJlMzEzNDM0MmUz MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzgzMzMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLe6Q MA0GCSqGSIb3DQEBCwUAA4IBAQA1ZwFQTDjygiHhfKNUwMsHgu9Yj0UWLMOuOXET 6PR7dEv8V5gyGGnwyupevIwAzuLmh+efJrU9TT0cZ6S+V7ugdyr3aPg6VoSRffMa 6r+KZK02T4npjptGY7nyAzp49zuf+3Q6rJoQxV0PHHr6mbue73EHEQo4L2e5ggYn N1hldQ69KMygP8G6vpVb2mzNDuK8YCf6z6kJiWuiXIaEoFr4806KPiLL1gS4f9oI 5ZKpt9eG6uToPxXbR6llOK2DOGl/OvFPo36zcFvaX51P7zOx2UnNseEYcKmIsyrs XvIsijkpuMFaV7A7OJD2eqesQGQvScr7U3HHQTVTAtLvRw02 -----END CERTIFICATE-----Generated at Fri Apr 18 21:59:28 2025 by rpki-client