$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa File: 3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa (raw, json) Hash identifier: KbWX/hpFwVIAGgF3Fg9P3+xRzZ0uPrW49FFsz06Kvd0= Subject key identifier: 85:6C:3C:79:C5:A5:11:E7:F5:FB:A8:A9:AB:6A:73:78:86:24:9C:A7 Certificate issuer: /CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6 Certificate serial: 02B875CFEBC0CAC14ABC165909357499AC29A283 Authority key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa Signing time: Tue 15 Sep 2026 13:30:20 +0000 ROA not before: Tue 15 Sep 2026 13:25:20 +0000 ROA not after: Tue 14 Sep 2027 13:30:20 +0000 asID: 52266 IP address blocks: 201.219.252.16/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b8:75:cf:eb:c0:ca:c1:4a:bc:16:59:09:35:74:99:ac:29:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6 Validity Not Before: Sep 15 13:25:20 2026 GMT Not After : Sep 14 13:30:20 2027 GMT Subject: CN=856C3C79C5A511E7F5FBA8A9AB6A737886249CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:22:2c:4d:c5:81:73:eb:68:1d:25:30:f8:36: de:dd:a7:43:be:9c:c1:17:38:fa:3a:b4:a9:f8:00: 74:3c:b8:aa:ef:3c:14:13:72:01:76:c5:32:1d:1e: 31:3a:66:f8:78:06:53:5d:0c:16:60:62:f7:e1:db: f9:9e:ea:78:8b:81:c0:01:1e:79:2c:5d:fb:06:6f: 8b:b4:0a:6e:24:73:a1:c4:1e:c3:b7:01:6a:b9:fa: 42:30:1a:dd:55:7b:9b:a4:ff:4c:bd:40:5f:8c:e5: fa:40:e1:df:1c:f5:0e:dd:5e:79:27:16:8a:21:2a: b2:54:1c:67:a0:62:89:e1:70:14:73:cb:53:49:dd: 5e:d3:10:48:4e:2f:ad:6e:84:1e:5f:f0:59:ce:a5: e6:d3:f1:7f:30:de:4d:40:f2:12:27:bf:18:36:48: 4d:66:61:b0:3b:8c:84:8d:31:a8:15:7d:ef:a2:ab: 0c:04:9e:12:5f:c3:91:e9:28:9b:c0:b1:2e:0a:59: 2a:f0:24:f9:7d:04:68:16:d8:b5:73:a6:a0:53:33: 23:30:c0:dd:c5:f7:ac:a7:9c:54:85:1b:20:30:70: fc:fd:c7:a0:f0:2a:0d:af:52:99:5d:c7:01:ff:32: 51:f2:26:5e:d6:ba:5f:4f:b6:b9:5c:cf:15:53:09: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:3C:79:C5:A5:11:E7:F5:FB:A8:A9:AB:6A:73:78:86:24:9C:A7 X509v3 Authority Key Identifier: keyid:28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.219.252.16/32 Signature Algorithm: sha256WithRSAEncryption aa:f2:03:b6:b4:43:05:6c:50:74:9e:90:b6:b5:2b:5b:24:27: 27:10:b8:35:cb:3e:1f:b5:4f:38:24:ba:18:62:ef:5a:72:65: dc:36:23:b3:16:46:d4:29:4c:25:4a:c6:98:29:87:7c:b0:65: 6b:f6:c4:32:ab:b3:28:aa:74:ae:0c:ab:da:58:84:5f:ea:ad: 92:2f:9b:dd:d0:53:d3:84:40:a5:97:3f:a7:61:b1:59:60:80: 8b:2e:34:a0:e0:d7:16:5c:a1:c9:34:67:37:b9:58:24:95:3a: c9:38:32:d4:07:dc:3e:f6:4d:97:37:28:4b:e0:bc:03:7b:75: 18:b0:0f:bc:d5:c1:6e:05:0b:5a:e8:49:3c:07:a6:b1:be:d2: 99:50:d8:6b:74:4d:08:55:6c:0c:fd:10:fc:ef:44:db:ac:f7: ce:00:bd:d4:04:79:b6:e8:01:40:2c:23:27:45:7c:40:72:40: 2a:47:48:db:08:ce:0c:d3:67:73:f8:c2:39:97:ec:6a:d3:5f: cc:a6:09:6a:8e:f1:f6:8a:43:ca:5d:c3:bd:a7:9f:b1:ef:3f: 21:e8:6e:03:b2:18:03:85:60:b9:e1:b8:25:bb:a3:54:15:3c: d8:6b:c7:9e:45:71:c4:a1:40:42:07:0b:63:da:7d:df:aa:f5: eb:20:e2:f5 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUArh1z+vAysFKvBZZCTV0mawpooMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMwMzU2RkRCMUU2 NTY0RENGNjAeFw0yNjA5MTUxMzI1MjBaFw0yNzA5MTQxMzMwMjBaMDMxMTAvBgNV BAMTKDg1NkMzQzc5QzVBNTExRTdGNUZCQThBOUFCNkE3Mzc4ODYyNDlDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIixNxYFz62gdJTD4Nt7dp0O+ nMEXOPo6tKn4AHQ8uKrvPBQTcgF2xTIdHjE6Zvh4BlNdDBZgYvfh2/me6niLgcAB HnksXfsGb4u0Cm4kc6HEHsO3AWq5+kIwGt1Ve5uk/0y9QF+M5fpA4d8c9Q7dXnkn FoohKrJUHGegYonhcBRzy1NJ3V7TEEhOL61uhB5f8FnOpebT8X8w3k1A8hInvxg2 SE1mYbA7jISNMagVfe+iqwwEnhJfw5HpKJvAsS4KWSrwJPl9BGgW2LVzpqBTMyMw wN3F96ynnFSFGyAwcPz9x6DwKg2vUpldxwH/MlHyJl7Wul9PtrlczxVTCY7JAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQUhWw8ecWlEef1+6ipq2pzeIYknKcwHwYDVR0j BBgwFoAUKL1yzGJtQ04VpZDANW/bHmVk3PYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4 MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0 RTE1QTU5MEMwMzU2RkRCMUU2NTY0RENGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEJENzJDQzYyNkQ0MzRFMTVB NTkwQzAzNTZGREIxRTY1NjREQ0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0 QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy ZTMxMzYyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ 2/wQMA0GCSqGSIb3DQEBCwUAA4IBAQCq8gO2tEMFbFB0npC2tStbJCcnELg1yz4f tU84JLoYYu9acmXcNiOzFkbUKUwlSsaYKYd8sGVr9sQyq7MoqnSuDKvaWIRf6q2S L5vd0FPThECllz+nYbFZYICLLjSg4NcWXKHJNGc3uVgklTrJODLUB9w+9k2XNyhL 4LwDe3UYsA+81cFuBQta6Ek8B6axvtKZUNhrdE0IVWwM/RD870TbrPfOAL3UBHm2 6AFALCMnRXxAckAqR0jbCM4M02dz+MI5l+xq01/MpglqjvH2ikPKXcO9p5+x7z8h 6G4DshgDhWC54bglu6NUFTzYa8eeRXHEoUBCBwtj2n3fqvXrIOL1 -----END CERTIFICATE-----Generated at Fri Sep 18 20:07:58 2026 by rpki-client