$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS19373.roa File: AS19373.roa (raw, json) Hash identifier: ri/vR4ArHZOgO0lN8KHaJW+3+lE2/aofkxKzkCKS628= Subject key identifier: BE:A0:AE:C2:D0:1B:35:80:3C:2D:94:BC:5C:6F:99:7B:31:DF:81:A5 Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378 Certificate serial: 597739B3B57F714A2718DDAD76A385272BCC9C6A Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS19373.roa Signing time: Thu 20 Feb 2025 22:20:00 +0000 ROA not before: Thu 20 Feb 2025 22:15:00 +0000 ROA not after: Thu 19 Feb 2026 22:20:00 +0000 asID: 19373 IP address blocks: 187.175.226.0/24 maxlen: 24 187.218.4.0/24 maxlen: 24 189.149.252.0/22 maxlen: 24 201.107.0.0/22 maxlen: 24 201.107.4.0/22 maxlen: 24 201.107.8.0/22 maxlen: 24 201.107.12.0/22 maxlen: 24 201.107.16.0/22 maxlen: 24 201.116.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 22:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:77:39:b3:b5:7f:71:4a:27:18:dd:ad:76:a3:85:27:2b:cc:9c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378 Validity Not Before: Feb 20 22:15:00 2025 GMT Not After : Feb 19 22:20:00 2026 GMT Subject: CN=BEA0AEC2D01B35803C2D94BC5C6F997B31DF81A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:07:f3:2f:f5:c9:7a:53:de:c4:49:6c:af:ff: 8c:7c:15:48:33:b8:eb:92:d2:01:41:f7:67:84:65: 6e:f7:f4:d8:53:e6:1c:95:3f:c2:38:6c:64:42:fd: 9c:e0:25:6e:fd:cc:76:69:08:18:24:c2:55:72:e6: bf:41:52:ae:54:e9:1c:e2:6e:80:e8:56:5e:5e:31: ae:de:2a:46:c4:9b:8b:c3:af:ea:61:87:61:6b:c3: 6b:bc:1c:28:81:eb:f0:65:07:b2:ec:34:bf:01:45: 1d:c2:90:5e:55:ed:53:01:c4:9a:45:16:02:1e:d4: a2:9d:d0:a9:99:2a:01:3d:7e:a3:07:e5:c4:78:ef: 8f:ab:18:66:f0:eb:73:fe:da:7c:5d:e5:f9:b5:00: 6a:e4:a6:61:81:27:cc:1f:d0:1a:1a:18:7b:18:0b: 8b:a8:4e:a8:26:bb:ac:0b:91:b8:1c:6d:6c:5c:dc: cf:ab:f8:99:21:71:25:5b:ca:fd:c0:3b:78:d4:dc: 04:6e:6c:c2:71:55:0d:29:d6:6c:a6:f3:e9:f7:5f: ea:cb:94:6d:70:87:ba:42:43:4f:25:09:cc:b1:60: 7b:c4:d7:e7:a2:3d:91:af:8f:10:b0:5a:5c:15:45: f2:3d:24:9c:79:76:02:a7:93:86:3c:64:59:4e:3b: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A0:AE:C2:D0:1B:35:80:3C:2D:94:BC:5C:6F:99:7B:31:DF:81:A5 X509v3 Authority Key Identifier: keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS19373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.175.226.0/24 187.218.4.0/24 189.149.252.0/22 201.107.0.0-201.107.19.255 201.116.88.0/24 Signature Algorithm: sha256WithRSAEncryption bd:dc:47:c9:2d:c3:35:19:18:01:5c:a8:c8:72:54:92:4a:73: 22:9c:d7:65:64:6a:6c:8e:cc:68:86:1d:72:6d:3d:f6:0a:8a: 71:6c:93:1a:2e:e0:dd:63:d4:44:3f:96:f0:2e:59:77:55:95: 29:1f:af:80:a2:8f:95:67:6d:09:39:ac:51:16:6d:2d:72:90: 2f:7c:a3:b3:32:ea:9b:e8:e4:71:65:2a:91:8e:16:4c:b6:24: 65:9a:ae:3d:fa:89:cb:dd:f2:20:8c:49:85:ea:23:4f:ba:2e: 86:18:fd:59:cd:d2:59:e5:e4:93:ec:5d:23:cd:9e:e3:08:83: ed:dc:92:d4:e3:57:88:db:14:98:ec:50:7b:cf:b7:86:76:67: ee:61:cb:06:59:b1:83:73:1a:09:10:5f:8d:01:de:4a:40:a3: 21:9f:9b:ba:58:62:8b:15:c7:d5:14:43:a0:98:55:3b:65:d6: 1c:82:95:63:ed:10:da:91:b5:4f:77:50:b2:b7:de:aa:54:93: ed:04:67:0a:f7:39:9d:ba:a9:8a:0a:f9:0a:f8:6e:f7:9a:57: 88:30:40:3d:15:fa:c6:ac:fc:9f:3e:be:6a:71:1e:fd:72:88: 49:4f:a4:ae:cf:76:e3:f5:2b:15:d6:52:a7:c3:68:a7:5b:90: d3:9b:50:a0 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUWXc5s7V/cUonGN2tdqOFJyvMnGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAzMDQwNjFFQjk5 OEJGNzM3ODAeFw0yNTAyMjAyMjE1MDBaFw0yNjAyMTkyMjIwMDBaMDMxMTAvBgNV BAMTKEJFQTBBRUMyRDAxQjM1ODAzQzJEOTRCQzVDNkY5OTdCMzFERjgxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjB/Mv9cl6U97ESWyv/4x8FUgz uOuS0gFB92eEZW739NhT5hyVP8I4bGRC/ZzgJW79zHZpCBgkwlVy5r9BUq5U6Rzi boDoVl5eMa7eKkbEm4vDr+phh2Frw2u8HCiB6/BlB7LsNL8BRR3CkF5V7VMBxJpF FgIe1KKd0KmZKgE9fqMH5cR474+rGGbw63P+2nxd5fm1AGrkpmGBJ8wf0BoaGHsY C4uoTqgmu6wLkbgcbWxc3M+r+JkhcSVbyv3AO3jU3ARubMJxVQ0p1mym8+n3X+rL lG1wh7pCQ08lCcyxYHvE1+eiPZGvjxCwWlwVRfI9JJx5dgKnk4Y8ZFlOOwnLAgMB AAGjggK3MIICszAdBgNVHQ4EFgQUvqCuwtAbNYA8LZS8XG+ZezHfgaUwHwYDVR0j BBgwFoAUyGjcQiRD+nDndhwDBAYeuZi/c3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0 ODMzRTg1QkU5RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3 MEU3NzYxQzAzMDQwNjFFQjk5OEJGNzM3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODY4REM0MjI0NDNGQTcwRTc3 NjFDMDMwNDA2MUVCOTk4QkY3Mzc4LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5 RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQVMxOTM3My5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA+BggrBgEFBQcBBwEB/wQvMC0wKwQCAAEwJQMEALuv4gME ALvaBAMEAr2V/DALAwMAyWsDBALJaxADBADJdFgwDQYJKoZIhvcNAQELBQADggEB AL3cR8ktwzUZGAFcqMhyVJJKcyKc12VkamyOzGiGHXJtPfYKinFskxou4N1j1EQ/ lvAuWXdVlSkfr4Cij5VnbQk5rFEWbS1ykC98o7My6pvo5HFlKpGOFky2JGWarj36 icvd8iCMSYXqI0+6LoYY/VnN0lnl5JPsXSPNnuMIg+3cktTjV4jbFJjsUHvPt4Z2 Z+5hywZZsYNzGgkQX40B3kpAoyGfm7pYYosVx9UUQ6CYVTtl1hyClWPtENqRtU93 ULK33qpUk+0EZwr3OZ26qYoK+Qr4bveaV4gwQD0V+sas/J8+vmpxHv1yiElPpK7P duP1KxXWUqfDaKdbkNObUKA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:02:35 2025 by rpki-client