$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3132382e302f32342d3234203d3e20323636363838.roa File: 34352e3232392e3132382e302f32342d3234203d3e20323636363838.roa (raw, json) Hash identifier: HZFTKOfYJ/1HadAOBeTH43PHWInv6N/FoyV7BI0QuJQ= Subject key identifier: D4:A0:82:04:7C:AA:D5:31:F1:84:8D:51:14:5F:41:2F:6C:37:0C:89 Certificate issuer: /CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5 Certificate serial: 43BEBF753AED1AABDBD7BCBE677EA8074DF23C23 Authority key identifier: 65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3132382e302f32342d3234203d3e20323636363838.roa Signing time: Tue 04 Feb 2025 18:24:40 +0000 ROA not before: Tue 04 Feb 2025 18:19:40 +0000 ROA not after: Tue 03 Feb 2026 18:24:40 +0000 asID: 266688 IP address blocks: 45.229.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:be:bf:75:3a:ed:1a:ab:db:d7:bc:be:67:7e:a8:07:4d:f2:3c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5 Validity Not Before: Feb 4 18:19:40 2025 GMT Not After : Feb 3 18:24:40 2026 GMT Subject: CN=D4A082047CAAD531F1848D51145F412F6C370C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:3b:f1:db:ac:6b:e4:76:41:5b:3f:00:4e: ba:41:31:2b:80:92:76:75:77:5c:f3:d3:11:3c:6d: 09:16:30:c2:c6:3b:51:64:e6:24:0f:1c:36:37:2d: 3d:78:d2:5a:a9:73:04:81:95:cd:da:1d:79:9e:2b: 7f:48:ab:7a:f4:4a:d2:6d:79:ac:ef:8a:85:c3:45: 3a:7c:ad:45:c6:c8:ef:aa:df:ca:04:31:1b:ac:4f: c3:86:76:e8:66:fc:4b:2c:a4:b9:0d:0a:27:40:d3: 6b:5f:49:22:88:ed:28:d8:4f:ae:9a:d8:30:9f:11: 7c:e7:71:3c:3b:06:0e:0a:98:de:c2:11:71:d1:49: 85:5b:a2:5c:28:4d:3d:0a:08:5f:14:6c:a9:f7:27: ac:89:6e:78:5a:eb:3d:3d:98:5e:55:7f:3f:f2:9d: be:85:50:65:12:20:e5:3a:2a:1b:40:44:72:f2:63: ec:cf:3e:08:de:9b:db:08:f1:c2:29:ae:07:38:8c: 8a:20:2a:16:40:89:90:43:a2:2d:73:bc:82:69:d2: a7:5e:0a:b9:91:e7:c2:c9:ac:2f:f3:4f:24:24:3e: 78:35:5f:3d:3d:8e:00:9f:42:a2:57:09:89:f1:df: f7:dc:20:9e:4e:a7:38:c6:44:70:7d:4b:db:5a:6e: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A0:82:04:7C:AA:D5:31:F1:84:8D:51:14:5F:41:2F:6C:37:0C:89 X509v3 Authority Key Identifier: keyid:65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3132382e302f32342d3234203d3e20323636363838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.128.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:9b:fd:15:59:94:11:75:e7:84:56:88:8b:c1:f6:0a:99:84: 88:f1:7b:22:9b:38:e1:ba:93:73:e5:80:1a:02:ef:d5:66:3a: e8:dd:15:9b:e5:66:8a:0d:0b:12:93:2d:c4:c1:f8:d8:f6:36: e9:96:01:bc:0e:40:e9:7b:e9:f9:c3:f6:5a:34:6e:13:be:3b: 07:36:b0:4c:5b:7f:28:29:e3:1f:56:74:89:ae:15:43:ae:5c: 97:6e:45:58:83:48:55:09:5d:31:b8:51:96:68:0e:91:53:27: 6b:3c:4a:fa:41:f1:f2:ea:02:a0:1b:dd:52:71:4e:47:76:40: ff:61:bb:23:d4:9f:2d:2f:8a:a9:3a:1d:1b:2b:1b:67:11:44: da:b5:f3:2e:68:bb:7e:69:e2:b8:f1:10:0f:70:63:e0:90:40: 31:d5:5b:bd:30:31:36:40:d1:75:6c:ca:fc:fe:84:88:c4:05: 27:7d:98:05:98:81:83:9d:93:64:74:41:47:20:77:6c:21:9e: 74:aa:bc:b5:a5:8f:c5:58:a8:4a:76:a6:00:d7:08:66:67:9d: 33:97:97:49:35:8e:19:ee:25:25:9f:0b:f7:93:41:27:24:41: 86:8e:69:18:62:f1:1f:24:2c:d9:1b:11:21:5f:a3:74:79:5a: 48:59:9e:cf -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUQ76/dTrtGqvb17y+Z36oB03yPCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFQ0VBQzA2Qjg5QTFFNDI0NEE1Njk1QjRDNUZCQTlE M0E5RjhCNTAeFw0yNTAyMDQxODE5NDBaFw0yNjAyMDMxODI0NDBaMDMxMTAvBgNV BAMTKEQ0QTA4MjA0N0NBQUQ1MzFGMTg0OEQ1MTE0NUY0MTJGNkMzNzBDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tzvx26xr5HZBWz8ATrpBMSuA knZ1d1zz0xE8bQkWMMLGO1Fk5iQPHDY3LT140lqpcwSBlc3aHXmeK39Iq3r0StJt eazvioXDRTp8rUXGyO+q38oEMRusT8OGduhm/EsspLkNCidA02tfSSKI7SjYT66a 2DCfEXzncTw7Bg4KmN7CEXHRSYVbolwoTT0KCF8UbKn3J6yJbnha6z09mF5Vfz/y nb6FUGUSIOU6KhtARHLyY+zPPgjem9sI8cIprgc4jIogKhZAiZBDoi1zvIJp0qde CrmR58LJrC/zTyQkPng1Xz09jgCfQqJXCYnx3/fcIJ5OpzjGRHB9S9tabuRbAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU1KCCBHyq1THxhI1RFF9BL2w3DIkwHwYDVR0j BBgwFoAUZezqwGuJoeQkSlaVtMX7qdOp+LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81OTY3MkY2QzU3NjhGREI4RjVCNTNFNEI0RkFCRTgzMTdC OUQ5RjI4ODM1N0RGRUIzODA1NEFBMkRDN0U4QzI5LzAvNjVFQ0VBQzA2Qjg5QTFF NDI0NEE1Njk1QjRDNUZCQTlEM0E5RjhCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUVDRUFDMDZCODlBMUU0MjQ0 QTU2OTVCNEM1RkJBOUQzQTlGOEI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTk2NzJGNkM1NzY4RkRCOEY1QjUzRTRCNEZBQkU4MzE3QjlEOUYyODgz NTdERkVCMzgwNTRBQTJEQzdFOEMyOS8wLzM0MzUyZTMyMzIzOTJlMzEzMjM4MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzYzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeWA MA0GCSqGSIb3DQEBCwUAA4IBAQCam/0VWZQRdeeEVoiLwfYKmYSI8XsimzjhupNz 5YAaAu/VZjro3RWb5WaKDQsSky3EwfjY9jbplgG8DkDpe+n5w/ZaNG4TvjsHNrBM W38oKeMfVnSJrhVDrlyXbkVYg0hVCV0xuFGWaA6RUydrPEr6QfHy6gKgG91ScU5H dkD/Ybsj1J8tL4qpOh0bKxtnEUTatfMuaLt+aeK48RAPcGPgkEAx1Vu9MDE2QNF1 bMr8/oSIxAUnfZgFmIGDnZNkdEFHIHdsIZ50qry1pY/FWKhKdqYA1whmZ50zl5dJ NY4Z7iUlnwv3k0EnJEGGjmkYYvEfJCzZGxEhX6N0eVpIWZ7P -----END CERTIFICATE-----Generated at Sat Apr 5 09:28:21 2025 by rpki-client