$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa File: 3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa (raw, json) Hash identifier: o0f5IgrDyeiACKa5wfQ+T8o/khpJV11R3kXUIbyFMzI= Subject key identifier: 95:24:A0:A8:05:9B:54:A0:A2:C7:89:FB:13:6C:E3:17:03:7F:23:01 Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Certificate serial: 4ECD9536DF5163E77617F4C4C24439B3EF59FCB5 Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa Signing time: Tue 04 Feb 2025 17:59:51 +0000 ROA not before: Tue 04 Feb 2025 17:54:51 +0000 ROA not after: Tue 03 Feb 2026 17:59:51 +0000 asID: 262166 IP address blocks: 168.234.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cd:95:36:df:51:63:e7:76:17:f4:c4:c2:44:39:b3:ef:59:fc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Validity Not Before: Feb 4 17:54:51 2025 GMT Not After : Feb 3 17:59:51 2026 GMT Subject: CN=9524A0A8059B54A0A2C789FB136CE317037F2301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:e8:f4:fb:62:55:19:e7:ac:75:b9:34:c1: 78:ad:d9:b0:50:3f:a3:49:fe:36:8c:14:d7:30:6f: d2:fe:42:43:19:ff:7c:b0:9e:fe:7b:f0:b3:e5:7f: e8:70:a5:ef:e3:64:f5:af:b3:90:19:57:4e:32:9c: cd:38:c9:fb:05:c2:df:f5:ee:37:f7:a6:7c:5e:79: 86:f4:26:d1:59:f1:d6:9c:33:af:91:1c:6b:a1:ff: 7d:52:53:0c:7f:3b:6b:c5:fc:7e:64:f0:fe:9c:20: 80:55:ce:00:b9:19:05:fa:a3:9a:5c:cd:b0:f3:eb: 56:86:d6:be:c6:e4:cc:a0:6d:3c:dc:80:af:75:fc: 34:ee:02:3a:7c:81:45:4d:7b:a1:fd:95:59:cd:13: dd:8b:55:f4:f6:eb:35:7c:ee:d8:f5:07:ca:f0:cc: 36:62:7d:86:8c:74:12:d9:e8:98:7b:87:45:88:e9: 49:84:80:1f:b0:aa:d2:8a:b2:c9:54:ef:61:60:16: 91:5e:4e:a2:04:0b:af:1e:f8:c4:75:82:88:a5:cc: 6a:66:1f:17:af:24:37:3e:00:00:1e:be:34:52:3c: de:2b:4c:9b:a4:01:bd:8a:af:91:c6:f3:80:42:e5: 8e:6e:7d:71:ee:44:a3:63:69:9b:23:68:f0:0e:ee: 85:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:24:A0:A8:05:9B:54:A0:A2:C7:89:FB:13:6C:E3:17:03:7F:23:01 X509v3 Authority Key Identifier: keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e33322e302f32302d3234203d3e20323632313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.32.0/20 Signature Algorithm: sha256WithRSAEncryption 12:d6:42:ca:98:57:c2:cf:a1:4c:89:c4:90:73:09:d6:d0:75: fc:30:7f:c2:5c:be:60:6b:09:20:e4:70:d0:0b:e7:0c:ca:61: b2:a2:ed:f9:f6:ee:45:f8:6d:b9:2f:10:48:eb:23:95:98:13: 30:5b:0b:c9:25:74:15:66:f1:f0:16:b2:7c:07:68:40:17:03: 44:71:21:81:4b:4d:24:17:df:84:7d:fc:2b:3b:1d:8c:0b:28: 45:ad:3e:c8:1f:08:df:84:a6:50:19:e4:7c:c5:e2:d6:4c:b1: 12:c1:de:bc:e4:8b:1d:12:68:42:9a:2b:b7:71:7c:9b:4a:38: 30:0b:07:2c:4e:ab:de:4f:71:1b:28:01:af:52:e3:2e:6d:c3: 3f:5c:2e:e0:c2:0a:9a:aa:fa:d6:4b:8e:a5:d0:de:a7:c7:a5: f2:e3:3a:b7:7b:5e:94:71:3f:51:6a:04:86:c0:70:4a:7f:9b: 61:9f:f6:4b:25:67:d4:64:fb:8a:39:cb:cc:08:f3:9a:47:62: f5:38:f9:44:65:00:df:44:23:47:16:f9:06:73:05:c4:17:2b: be:8c:d2:3f:71:ad:11:4a:f1:61:33:75:e4:c0:59:e1:b7:c1: 93:43:86:ce:2b:d9:e2:64:fd:b8:c6:52:0a:0a:3b:6c:0f:f7: af:2e:7d:b3 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUTs2VNt9RY+d2F/TEwkQ5s+9Z/LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1 MzkyQkJDMzAeFw0yNTAyMDQxNzU0NTFaFw0yNjAyMDMxNzU5NTFaMDMxMTAvBgNV BAMTKDk1MjRBMEE4MDU5QjU0QTBBMkM3ODlGQjEzNkNFMzE3MDM3RjIzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nOj0+2JVGeesdbk0wXit2bBQ P6NJ/jaMFNcwb9L+QkMZ/3ywnv578LPlf+hwpe/jZPWvs5AZV04ynM04yfsFwt/1 7jf3pnxeeYb0JtFZ8dacM6+RHGuh/31SUwx/O2vF/H5k8P6cIIBVzgC5GQX6o5pc zbDz61aG1r7G5MygbTzcgK91/DTuAjp8gUVNe6H9lVnNE92LVfT26zV87tj1B8rw zDZifYaMdBLZ6Jh7h0WI6UmEgB+wqtKKsslU72FgFpFeTqIEC68e+MR1goilzGpm HxevJDc+AAAevjRSPN4rTJukAb2Kr5HG84BC5Y5ufXHuRKNjaZsjaPAO7oW/AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUlSSgqAWbVKCix4n7E2zjFwN/IwEwHwYDVR0j BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4 RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5 RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5 NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMzMyMmUz MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqOog MA0GCSqGSIb3DQEBCwUAA4IBAQAS1kLKmFfCz6FMicSQcwnW0HX8MH/CXL5gawkg 5HDQC+cMymGyou359u5F+G25LxBI6yOVmBMwWwvJJXQVZvHwFrJ8B2hAFwNEcSGB S00kF9+EffwrOx2MCyhFrT7IHwjfhKZQGeR8xeLWTLESwd685IsdEmhCmiu3cXyb SjgwCwcsTqveT3EbKAGvUuMubcM/XC7gwgqaqvrWS46l0N6nx6Xy4zq3e16UcT9R agSGwHBKf5thn/ZLJWfUZPuKOcvMCPOaR2L1OPlEZQDfRCNHFvkGcwXEFyu+jNI/ ca0RSvFhM3XkwFnht8GTQ4bOK9niZP24xlIKCjtsD/evLn2z -----END CERTIFICATE-----Generated at Sat Apr 5 08:21:12 2025 by rpki-client