$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa File: 3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa (raw, json) Hash identifier: dP/sYau23U6o/KzVuxfvEW6Gs9gJYQplp4COcbwtVrc= Subject key identifier: 10:89:9F:A7:B5:27:56:FE:0B:BF:EE:22:54:53:B4:B2:DE:2A:41:6B Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5 Certificate serial: 421375A883C913F50C51469DB540643D99BCBA23 Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa Signing time: Tue 04 Feb 2025 18:05:04 +0000 ROA not before: Tue 04 Feb 2025 18:00:04 +0000 ROA not after: Tue 03 Feb 2026 18:05:04 +0000 asID: 26611 IP address blocks: 191.156.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:13:75:a8:83:c9:13:f5:0c:51:46:9d:b5:40:64:3d:99:bc:ba:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5 Validity Not Before: Feb 4 18:00:04 2025 GMT Not After : Feb 3 18:05:04 2026 GMT Subject: CN=10899FA7B52756FE0BBFEE225453B4B2DE2A416B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:15:92:1a:23:87:9c:8b:ed:04:f0:8f:f4: 5d:d4:86:b7:00:ec:99:bf:5f:e9:3e:9e:26:19:0a: c3:2c:6d:f6:3b:0f:af:f5:cf:70:c3:92:ad:e7:0f: 87:2d:30:74:fb:6b:e0:f1:cb:ae:a4:9b:97:77:af: a9:8e:5a:cf:3a:09:d2:a1:f4:d2:50:17:36:38:e5: a9:99:e0:2f:90:c6:61:1c:e3:45:f9:28:61:60:ce: 9a:bb:ee:48:60:8b:98:83:9c:1c:ca:7c:eb:d2:f6: 8d:dc:82:7b:bb:88:d3:b6:86:56:44:1f:00:e9:44: ef:f8:37:32:ef:fe:a1:65:65:30:31:c8:53:1e:df: f4:70:fe:e4:a9:75:3f:3f:57:bf:79:91:7b:66:6e: 5f:12:cc:73:80:27:6b:1a:5a:17:71:05:ea:45:76: 46:d5:6a:5b:f7:eb:11:67:5b:bb:a5:92:03:c2:79: 4e:09:c3:fa:c3:47:0e:f9:df:08:cc:40:c6:74:50: 69:66:c0:cf:c8:0a:d8:ad:89:97:b0:bf:32:c2:fc: 2e:3a:ef:a9:67:92:fa:8b:2f:67:6d:02:ca:f1:a5: 4a:c9:69:0f:b8:ce:4c:47:c2:07:26:8d:bf:ce:b4: 98:88:9c:8f:62:67:24:21:57:d9:02:64:d6:df:57: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:9F:A7:B5:27:56:FE:0B:BF:EE:22:54:53:B4:B2:DE:2A:41:6B X509v3 Authority Key Identifier: keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3232342e302f31392d3234203d3e203236363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.156.224.0/19 Signature Algorithm: sha256WithRSAEncryption 10:8e:9b:0f:10:b0:f9:c2:04:44:d7:64:a3:84:56:26:c4:37: 2e:9c:70:25:71:56:7d:27:d6:61:3c:21:3f:3a:ad:13:98:6a: 55:9c:c9:b3:b8:5d:13:a6:3f:9b:c1:3e:d9:ae:a6:a0:4d:ad: de:5e:90:07:78:af:0f:ac:04:24:38:c1:85:c7:c2:7d:31:ea: fb:68:6f:b8:72:2b:25:72:04:0f:ad:03:1f:5b:4c:e0:28:be: 9a:9e:d0:d2:7c:84:67:c5:d0:99:35:36:8f:13:4a:a0:fc:c4: be:47:36:8e:56:39:57:01:08:f2:14:7d:ba:4c:01:29:0f:65: 72:b4:48:ea:e5:30:6e:c7:64:67:af:2c:af:79:34:da:8b:ba: 38:5d:77:b7:b8:ca:ce:56:95:9f:4a:17:ef:a5:d0:94:9a:64: 0c:fd:cf:5d:40:23:30:37:c6:64:9c:64:54:c9:a0:da:b8:5f: 27:40:57:40:18:e0:8f:58:d7:0e:e3:85:5a:88:60:4a:91:4a: f5:c0:0d:42:e0:90:10:21:a5:a0:32:c4:28:a5:70:1c:fb:c3: 7e:9e:a8:44:eb:a3:20:5f:b2:6c:37:9b:7e:a0:52:fb:15:75: c1:2f:31:23:b7:da:3b:2d:6e:57:78:8e:d2:32:c8:92:5b:e1: da:7d:70:67 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUQhN1qIPJE/UMUUadtUBkPZm8uiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB RDg2NTNENTAeFw0yNTAyMDQxODAwMDRaFw0yNjAyMDMxODA1MDRaMDMxMTAvBgNV BAMTKDEwODk5RkE3QjUyNzU2RkUwQkJGRUUyMjU0NTNCNEIyREUyQTQxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmxWSGiOHnIvtBPCP9F3UhrcA 7Jm/X+k+niYZCsMsbfY7D6/1z3DDkq3nD4ctMHT7a+Dxy66km5d3r6mOWs86CdKh 9NJQFzY45amZ4C+QxmEc40X5KGFgzpq77khgi5iDnBzKfOvS9o3cgnu7iNO2hlZE HwDpRO/4NzLv/qFlZTAxyFMe3/Rw/uSpdT8/V795kXtmbl8SzHOAJ2saWhdxBepF dkbValv36xFnW7ulkgPCeU4Jw/rDRw753wjMQMZ0UGlmwM/ICtitiZewvzLC/C46 76lnkvqLL2dtAsrxpUrJaQ+4zkxHwgcmjb/OtJiInI9iZyQhV9kCZNbfVyJbAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUEImfp7UnVv4Lv+4iVFO0st4qQWswHwYDVR0j BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3 RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMjMyMzQy ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFv5zg MA0GCSqGSIb3DQEBCwUAA4IBAQAQjpsPELD5wgRE12SjhFYmxDcunHAlcVZ9J9Zh PCE/Oq0TmGpVnMmzuF0Tpj+bwT7ZrqagTa3eXpAHeK8PrAQkOMGFx8J9Mer7aG+4 cislcgQPrQMfW0zgKL6antDSfIRnxdCZNTaPE0qg/MS+RzaOVjlXAQjyFH26TAEp D2VytEjq5TBux2RnryyveTTai7o4XXe3uMrOVpWfShfvpdCUmmQM/c9dQCMwN8Zk nGRUyaDauF8nQFdAGOCPWNcO44VaiGBKkUr1wA1C4JAQIaWgMsQopXAc+8N+nqhE 66MgX7JsN5t+oFL7FXXBLzEjt9o7LW5XeI7SMsiSW+HafXBn -----END CERTIFICATE-----Generated at Sat Apr 5 20:11:10 2025 by rpki-client