$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/3136382e3232382e3130382e302f32322d3234203d3e203134303830.roa File: 3136382e3232382e3130382e302f32322d3234203d3e203134303830.roa (raw, json) Hash identifier: bqd121Wxroa7r8lLYM2nZjqFUhGeowChkpmVzBwnZz4= Subject key identifier: EB:B9:A1:A1:FE:F4:A8:A6:5E:0B:6F:80:D5:C4:8D:7B:4D:DF:1F:22 Certificate issuer: /CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8 Certificate serial: 19D96ED34E687828F8BB8E55E74EFAB533672748 Authority key identifier: CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/3136382e3232382e3130382e302f32322d3234203d3e203134303830.roa Signing time: Tue 04 Feb 2025 20:06:47 +0000 ROA not before: Tue 04 Feb 2025 20:01:47 +0000 ROA not after: Tue 03 Feb 2026 20:06:47 +0000 asID: 14080 IP address blocks: 168.228.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d9:6e:d3:4e:68:78:28:f8:bb:8e:55:e7:4e:fa:b5:33:67:27:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8 Validity Not Before: Feb 4 20:01:47 2025 GMT Not After : Feb 3 20:06:47 2026 GMT Subject: CN=EBB9A1A1FEF4A8A65E0B6F80D5C48D7B4DDF1F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:25:1c:e6:a8:c3:92:00:fe:e1:12:fe:45: 50:11:d6:e6:ee:be:01:29:78:83:34:3e:6a:61:4e: 18:43:42:a1:6d:a0:75:1c:d5:e5:0b:f2:78:7e:93: 6b:a7:3d:52:5b:10:cc:69:b8:18:f9:47:4b:d4:0c: 59:51:8e:5f:2f:fb:bd:04:9c:92:97:c0:49:be:f0: 47:46:dd:ce:fb:62:50:8c:59:60:57:20:75:a8:4b: 2f:ba:85:14:be:c3:77:b8:3b:b3:90:52:3a:f9:7a: f5:f9:44:3a:a3:5d:cf:32:b2:3a:9f:82:55:32:03: df:fb:59:d1:f4:f0:b6:bc:4e:2f:6b:ee:b0:d0:86: ff:bf:13:77:c4:1c:63:cb:bf:a9:b3:db:54:2d:9c: 29:1b:0f:61:fc:f2:67:95:21:f0:17:16:fb:5a:9e: c6:99:e1:9c:20:03:6b:c1:48:a2:fb:58:1d:b1:fc: 5b:35:0c:d3:d5:05:56:ef:fe:2b:2a:e7:27:19:2e: a4:f4:e9:5a:20:47:b2:da:82:72:e2:c5:93:1c:a2: 3b:8c:ef:9c:80:c4:d0:ee:37:02:d3:62:90:8d:4d: e4:92:4e:28:25:26:a7:e8:5c:ec:2f:16:df:0b:b1: 66:48:2d:de:74:b6:3a:7c:cb:92:74:b8:94:31:2c: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B9:A1:A1:FE:F4:A8:A6:5E:0B:6F:80:D5:C4:8D:7B:4D:DF:1F:22 X509v3 Authority Key Identifier: keyid:CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/3136382e3232382e3130382e302f32322d3234203d3e203134303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.108.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:57:42:44:2a:11:25:e2:ef:08:89:d4:7c:e9:7a:07:15:2a: 11:93:4c:ff:a1:3c:70:47:73:13:5f:e3:9b:f3:49:68:66:72: 60:43:4e:51:67:e4:79:71:52:25:77:d0:77:dc:95:c0:0c:31: 46:bb:6b:f9:b1:b2:01:4b:87:1a:31:dc:e1:d0:ae:ad:41:c1: e9:14:aa:d3:f8:f1:a5:08:fc:d1:36:3d:33:ed:31:72:c5:4b: 6b:a8:6d:06:e8:f8:49:e2:46:e9:07:ec:a2:72:20:05:f7:9e: 97:cd:05:38:f2:10:89:d0:94:96:aa:ef:fd:93:f5:a0:34:30: fa:dc:6d:e7:8a:be:96:54:33:9f:5c:2d:b2:10:40:37:1a:d0: 44:9b:3f:12:0b:de:e0:e1:85:5e:19:b2:b5:7f:50:4a:59:c9: ca:50:1e:a7:8f:c0:52:76:ab:0a:7c:68:a6:eb:b3:33:a2:bf: 91:e8:85:d1:60:44:c3:93:88:3e:3b:f5:95:02:41:f1:81:9b: a0:f5:b6:76:4b:42:08:31:cb:66:1d:8f:05:22:6c:34:44:c8: 5a:66:52:79:d5:a6:7d:5d:37:c2:8b:cb:c3:a6:08:17:10:1f: b1:80:45:0d:d0:c2:5d:5c:de:31:9d:b9:76:20:98:37:42:68: 70:d6:a2:45 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUGdlu005oeCj4u45V5076tTNnJ0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFQzk1QzA0MkY3MThDRkRFRkQzOEJDODVDNEFGQkEz RTdBOUFGODAeFw0yNTAyMDQyMDAxNDdaFw0yNjAyMDMyMDA2NDdaMDMxMTAvBgNV BAMTKEVCQjlBMUExRkVGNEE4QTY1RTBCNkY4MEQ1QzQ4RDdCNERERjFGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJCUc5qjDkgD+4RL+RVAR1ubu vgEpeIM0PmphThhDQqFtoHUc1eUL8nh+k2unPVJbEMxpuBj5R0vUDFlRjl8v+70E nJKXwEm+8EdG3c77YlCMWWBXIHWoSy+6hRS+w3e4O7OQUjr5evX5RDqjXc8ysjqf glUyA9/7WdH08La8Ti9r7rDQhv+/E3fEHGPLv6mz21QtnCkbD2H88meVIfAXFvta nsaZ4ZwgA2vBSKL7WB2x/Fs1DNPVBVbv/isq5ycZLqT06VogR7LagnLixZMcojuM 75yAxNDuNwLTYpCNTeSSTiglJqfoXOwvFt8LsWZILd50tjp8y5J0uJQxLCmfAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU67mhof70qKZeC2+A1cSNe03fHyIwHwYDVR0j BBgwFoAUz+yVwEL3GM/e/Ti8hcSvuj56mvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMTQxRUI2MUFBOTc3ODk4RjU2MzgxMjgwNTY1MTAyNTdB MUVCNEYxODA0MkUzNTNDRTJFRjg4NkU4RDIwOTgzLzAvQ0ZFQzk1QzA0MkY3MThD RkRFRkQzOEJDODVDNEFGQkEzRTdBOUFGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkVDOTVDMDQyRjcxOENGREVG RDM4QkM4NUM0QUZCQTNFN0E5QUY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjE0MUVCNjFBQTk3Nzg5OEY1NjM4MTI4MDU2NTEwMjU3QTFFQjRGMTgw NDJFMzUzQ0UyRUY4ODZFOEQyMDk4My8wLzMxMzYzODJlMzIzMjM4MmUzMTMwMzgy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqORs MA0GCSqGSIb3DQEBCwUAA4IBAQBrV0JEKhEl4u8IidR86XoHFSoRk0z/oTxwR3MT X+Ob80loZnJgQ05RZ+R5cVIld9B33JXADDFGu2v5sbIBS4caMdzh0K6tQcHpFKrT +PGlCPzRNj0z7TFyxUtrqG0G6PhJ4kbpB+yiciAF956XzQU48hCJ0JSWqu/9k/Wg NDD63G3nir6WVDOfXC2yEEA3GtBEmz8SC97g4YVeGbK1f1BKWcnKUB6nj8BSdqsK fGim67Mzor+R6IXRYETDk4g+O/WVAkHxgZug9bZ2S0IIMctmHY8FImw0RMhaZlJ5 1aZ9XTfCi8vDpggXEB+xgEUN0MJdXN4xnbl2IJg3Qmhw1qJF -----END CERTIFICATE-----Generated at Mon Apr 14 23:28:03 2025 by rpki-client