$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233382e302f32342d3234203d3e2033333536.roa File: 3137302e3233382e3233382e302f32342d3234203d3e2033333536.roa (raw, json) Hash identifier: lGKTb131ioI50GWP1ftpKT9iCyuqPcCLejuPg8EHxEY= Subject key identifier: B4:91:20:1D:EA:B4:B3:22:2E:7C:87:C1:D7:42:23:8E:B4:E1:35:5F Certificate issuer: /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA Certificate serial: 1D9BF13F849D0BCA1E1AAC3E8F2D5A9142BF3BA5 Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233382e302f32342d3234203d3e2033333536.roa Signing time: Mon 27 Oct 2025 22:20:00 +0000 ROA not before: Mon 27 Oct 2025 22:15:00 +0000 ROA not after: Mon 26 Oct 2026 22:20:00 +0000 asID: 3356 IP address blocks: 170.238.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9b:f1:3f:84:9d:0b:ca:1e:1a:ac:3e:8f:2d:5a:91:42:bf:3b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA Validity Not Before: Oct 27 22:15:00 2025 GMT Not After : Oct 26 22:20:00 2026 GMT Subject: CN=B491201DEAB4B3222E7C87C1D742238EB4E1355F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:29:5d:28:7a:24:04:5c:ac:32:23:92:ca: 2f:b1:22:89:c9:2d:a3:61:86:9f:81:d5:c6:68:f4: 50:7d:57:e3:e9:df:a8:d2:b2:30:00:3f:e3:18:c2: 85:52:15:ff:6c:47:c7:0d:7e:a0:47:5a:a3:d2:c8: 25:7d:b4:c8:04:7a:10:44:33:ab:78:53:b7:f1:40: 4c:99:0a:ac:be:30:23:96:aa:68:46:a4:8f:ba:7d: d9:71:64:00:5a:75:c1:82:3b:82:f3:57:72:9a:a6: 4b:4b:64:1d:cc:be:09:3e:41:05:3c:01:08:2c:35: 57:95:c6:05:10:87:fd:00:f2:38:2c:a2:6e:6f:3b: 87:e2:7a:40:64:c0:d3:36:22:53:e2:1d:20:0e:be: cb:21:7e:7b:0a:3a:c9:66:c5:ce:60:a3:95:08:72: fa:58:e7:3a:b0:eb:b7:77:b8:8c:20:ea:04:1e:1e: 4e:e3:79:b4:9e:3a:28:64:27:7f:a1:c2:8f:22:6f: 54:8a:66:d6:37:a0:b9:2e:3a:d6:0e:db:2f:6d:35: 35:2f:4d:18:24:c9:27:d8:cb:8b:f3:44:18:9c:85: 92:ee:dc:fb:2a:b1:49:15:f7:f9:50:31:b8:0f:cf: 4a:d1:01:25:17:f5:8a:5e:9d:7f:24:71:e8:9b:d1: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:20:1D:EA:B4:B3:22:2E:7C:87:C1:D7:42:23:8E:B4:E1:35:5F X509v3 Authority Key Identifier: keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233382e302f32342d3234203d3e2033333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.238.0/24 Signature Algorithm: sha256WithRSAEncryption 08:6d:ee:15:04:9f:89:9e:1f:e4:db:bf:a8:35:45:10:a7:20: 55:5c:b2:1c:8a:00:94:d0:fd:9e:3d:c5:21:eb:aa:f6:73:a7: 8a:38:cc:84:7a:38:28:2b:20:75:ab:1b:f2:30:74:a3:9f:d6: a6:c4:92:67:df:0d:5c:3f:06:60:b7:bf:c3:fb:78:61:2c:73: b0:66:93:e9:48:40:98:34:c3:74:f7:e3:ea:e6:4e:f3:16:ed: d7:a0:ea:49:3d:a0:b9:90:86:bf:a7:0b:f8:99:7f:33:1d:79: d8:bc:0e:60:e2:1c:4c:bf:16:f6:27:90:9f:05:4e:a1:21:79: 32:f3:96:3b:f2:ed:13:79:78:1c:83:b7:b3:fb:fe:9f:57:d0: d7:ee:a2:eb:43:9f:e7:c3:f6:32:a7:e8:40:4b:3f:e0:11:72: 91:fa:80:c4:ea:61:cd:db:e3:e2:6c:b2:40:1c:57:fc:91:fa: e3:32:71:fe:96:55:fd:b3:16:bf:f9:25:2d:dd:25:95:14:b2: 3b:f6:af:99:34:7d:7a:00:4f:02:65:4c:79:2f:fc:9c:82:5d: fa:6f:bf:e0:33:e9:61:83:3e:59:49:1f:8d:dc:17:d8:8b:ed: fa:67:f3:a5:7d:68:34:e1:1f:5e:23:a9:e3:88:cc:ca:e8:30: e8:c9:ee:dc -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUHZvxP4SdC8oeGqw+jy1akUK/O6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5RkNCQTlGRkVBNDcxN0FCRjZBOUVGODVCN0M2MzZE OUQyM0JFQTAeFw0yNTEwMjcyMjE1MDBaFw0yNjEwMjYyMjIwMDBaMDMxMTAvBgNV BAMTKEI0OTEyMDFERUFCNEIzMjIyRTdDODdDMUQ3NDIyMzhFQjRFMTM1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHildKHokBFysMiOSyi+xIonJ LaNhhp+B1cZo9FB9V+Pp36jSsjAAP+MYwoVSFf9sR8cNfqBHWqPSyCV9tMgEehBE M6t4U7fxQEyZCqy+MCOWqmhGpI+6fdlxZABadcGCO4LzV3KapktLZB3Mvgk+QQU8 AQgsNVeVxgUQh/0A8jgsom5vO4fiekBkwNM2IlPiHSAOvsshfnsKOslmxc5go5UI cvpY5zqw67d3uIwg6gQeHk7jebSeOihkJ3+hwo8ib1SKZtY3oLkuOtYO2y9tNTUv TRgkySfYy4vzRBichZLu3PsqsUkV9/lQMbgPz0rRASUX9YpenX8kceib0WZRAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUtJEgHeq0syIufIfB10IjjrThNV8wHwYDVR0j BBgwFoAUIZ/Lqf/qRxer9qnvhbfGNtnSO+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjNFNDQxOTVCMTU2MTgyMjZGOTNBRjQyQTJENkNCNTJB NkU3M0JDMUQwMjdDOTY0RUNEOTJBMDIxNkZGNkQ3LzAvMjE5RkNCQTlGRkVBNDcx N0FCRjZBOUVGODVCN0M2MzZEOUQyM0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTlGQ0JBOUZGRUE0NzE3QUJG NkE5RUY4NUI3QzYzNkQ5RDIzQkVBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTYzRTQ0MTk1QjE1NjE4MjI2RjkzQUY0MkEyRDZDQjUyQTZFNzNCQzFE MDI3Qzk2NEVDRDkyQTAyMTZGRjZENy8wLzMxMzczMDJlMzIzMzM4MmUzMjMzMzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKru7jAN BgkqhkiG9w0BAQsFAAOCAQEACG3uFQSfiZ4f5Nu/qDVFEKcgVVyyHIoAlND9nj3F Ieuq9nOnijjMhHo4KCsgdasb8jB0o5/WpsSSZ98NXD8GYLe/w/t4YSxzsGaT6UhA mDTDdPfj6uZO8xbt16DqST2guZCGv6cL+Jl/Mx152LwOYOIcTL8W9ieQnwVOoSF5 MvOWO/LtE3l4HIO3s/v+n1fQ1+6i60Of58P2MqfoQEs/4BFykfqAxOphzdvj4myy QBxX/JH64zJx/pZV/bMWv/klLd0llRSyO/avmTR9egBPAmVMeS/8nIJd+m+/4DPp YYM+WUkfjdwX2Ivt+mfzpX1oNOEfXiOp44jMyugw6Mnu3A== -----END CERTIFICATE-----Generated at Sat Nov 1 19:20:54 2025 by rpki-client