$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa File: 3230302e31332e34322e302f32332d3233203d3e203532323735.roa (raw, json) Hash identifier: hKajImXsHWe0VOSNK5Xv/vSa9ql+7zm/E51cHJllOOU= Subject key identifier: D3:F1:2E:22:A1:98:F1:24:84:5C:8F:DF:91:41:D3:AD:07:CD:53:80 Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F Certificate serial: 3ED03F6377CB8E398B6CD1E018737F49C87152FC Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa Signing time: Tue 04 Feb 2025 18:37:13 +0000 ROA not before: Tue 04 Feb 2025 18:32:13 +0000 ROA not after: Tue 03 Feb 2026 18:37:13 +0000 asID: 52275 IP address blocks: 200.13.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d0:3f:63:77:cb:8e:39:8b:6c:d1:e0:18:73:7f:49:c8:71:52:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F Validity Not Before: Feb 4 18:32:13 2025 GMT Not After : Feb 3 18:37:13 2026 GMT Subject: CN=D3F12E22A198F124845C8FDF9141D3AD07CD5380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:58:40:66:3f:1d:4f:65:a0:5c:27:24:45: a5:9d:cf:31:ba:b3:24:d1:53:a6:d6:60:16:70:0c: 77:63:51:92:0b:f8:bc:31:97:5d:da:e6:35:d8:c4: c5:b4:55:5b:4b:18:7e:3b:ac:96:fb:a0:ac:65:d7: 28:75:43:1c:44:79:65:05:4f:8f:b6:cf:25:9e:48: 94:06:01:3f:a9:6e:4b:88:79:c9:5a:e5:da:69:64: 25:9a:44:22:06:fc:2b:60:7d:85:85:4f:30:d1:cb: 9a:35:86:d5:73:40:9f:f4:bb:0c:6e:bb:19:1f:d6: b3:ee:b5:db:2a:24:2e:e1:7c:75:8f:8b:0e:31:35: b1:5b:80:c3:9f:88:ee:e0:5d:20:28:01:db:f5:c6: 12:22:a5:e5:e1:81:9b:8b:4a:87:b7:eb:5b:fc:de: be:84:e8:13:b6:1a:49:a4:da:90:7e:d7:07:d7:97: 12:b7:3d:5b:f4:87:08:dd:b9:7a:1d:32:61:3e:00: 7c:84:08:77:09:f0:a0:be:32:70:1d:c7:8a:1c:46: 5b:ba:11:f5:d7:48:b0:9e:b0:05:73:7a:c7:5f:2d: f9:e6:07:50:2b:66:51:ac:64:7a:cf:34:f2:b3:4f: 20:97:7a:bc:70:f2:da:21:56:7d:89:14:7c:7a:1f: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:2E:22:A1:98:F1:24:84:5C:8F:DF:91:41:D3:AD:07:CD:53:80 X509v3 Authority Key Identifier: keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3233203d3e203532323735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.13.42.0/23 Signature Algorithm: sha256WithRSAEncryption 78:9b:77:68:32:ef:dc:75:c3:70:00:b5:83:a1:e5:f0:5e:39: 95:eb:33:5f:33:ff:6d:4f:bc:cf:fb:60:34:d6:84:d4:14:cf: 76:1e:30:e3:ef:eb:41:9b:2f:3a:32:df:25:f3:8d:87:c9:b7: 06:5b:34:4f:e7:29:d0:05:bb:3b:62:f1:0c:1d:67:8e:97:41: da:5f:ee:35:f1:f5:9a:f3:9d:40:37:b6:6e:c3:67:87:07:c5: 11:55:5f:7b:c5:ce:ff:d8:bc:ad:4f:c6:06:c8:7c:8f:52:2d: ee:c6:b9:89:99:07:81:d2:04:4d:22:63:65:6d:d0:43:c7:0c: 7e:97:35:68:89:d5:2a:5d:92:99:dc:4e:4e:9d:29:11:b1:09: 58:22:9d:3c:0b:4e:ec:d7:66:93:88:51:d6:04:90:1a:84:a7: b7:7c:80:3a:cb:2b:29:4a:c8:0e:f7:54:11:e4:1e:ca:25:86: 5f:92:e0:52:73:6c:a6:54:36:5f:0a:15:cd:32:30:f3:ac:2f: 36:37:51:78:f9:b8:02:0c:46:70:ed:4c:1a:19:c1:12:f9:db: eb:53:86:be:c6:90:2d:12:9b:d0:57:84:a1:e8:65:98:f7:d2: ea:46:78:d5:9d:c1:3a:37:5b:d8:77:4a:c2:69:96:5f:9b:2c: 12:5d:20:2c -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUPtA/Y3fLjjmLbNHgGHN/SchxUvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG QzdBNTc3RjAeFw0yNTAyMDQxODMyMTNaFw0yNjAyMDMxODM3MTNaMDMxMTAvBgNV BAMTKEQzRjEyRTIyQTE5OEYxMjQ4NDVDOEZERjkxNDFEM0FEMDdDRDUzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJbVhAZj8dT2WgXCckRaWdzzG6 syTRU6bWYBZwDHdjUZIL+Lwxl13a5jXYxMW0VVtLGH47rJb7oKxl1yh1QxxEeWUF T4+2zyWeSJQGAT+pbkuIecla5dppZCWaRCIG/CtgfYWFTzDRy5o1htVzQJ/0uwxu uxkf1rPutdsqJC7hfHWPiw4xNbFbgMOfiO7gXSAoAdv1xhIipeXhgZuLSoe361v8 3r6E6BO2Gkmk2pB+1wfXlxK3PVv0hwjduXodMmE+AHyECHcJ8KC+MnAdx4ocRlu6 EfXXSLCesAVzesdfLfnmB1ArZlGsZHrPNPKzTyCXerxw8tohVn2JFHx6H5pDAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQU0/EuIqGY8SSEXI/fkUHTrQfNU4AwHwYDVR0j BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5 QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2 MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0 N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzAzMDJlMzEzMzJlMzQzMjJlMzAy ZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIDSowDQYJ KoZIhvcNAQELBQADggEBAHibd2gy79x1w3AAtYOh5fBeOZXrM18z/21PvM/7YDTW hNQUz3YeMOPv60GbLzoy3yXzjYfJtwZbNE/nKdAFuzti8QwdZ46XQdpf7jXx9Zrz nUA3tm7DZ4cHxRFVX3vFzv/YvK1PxgbIfI9SLe7GuYmZB4HSBE0iY2Vt0EPHDH6X NWiJ1SpdkpncTk6dKRGxCVginTwLTuzXZpOIUdYEkBqEp7d8gDrLKylKyA73VBHk Hsolhl+S4FJzbKZUNl8KFc0yMPOsLzY3UXj5uAIMRnDtTBoZwRL52+tThr7GkC0S m9BXhKHoZZj30upGeNWdwTo3W9h3SsJpll+bLBJdICw= -----END CERTIFICATE-----Generated at Sat Nov 1 00:50:14 2025 by rpki-client