$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BF91DF6B5A9F8E20E6FED86E6D0B166C659D7B43D2939865E8FC5AC023AB1B01/0/34352e36382e3134302e302f32322d3234203d3e203634313734.roa File: 34352e36382e3134302e302f32322d3234203d3e203634313734.roa (raw, json) Hash identifier: k28J+1MXNtNocyiAcFz4CWs6m7nLyh0lAsOni250eAY= Subject key identifier: 50:85:21:EA:A7:C5:E0:CF:D8:E4:DB:99:98:0E:EB:2C:15:31:56:B7 Certificate issuer: /CN=43E52B0856499AFC2634B890C422537714F662BF Certificate serial: 25AB2B37F620259C1C9813A3FE0E0F1E6722B1A5 Authority key identifier: 43:E5:2B:08:56:49:9A:FC:26:34:B8:90:C4:22:53:77:14:F6:62:BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43E52B0856499AFC2634B890C422537714F662BF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF91DF6B5A9F8E20E6FED86E6D0B166C659D7B43D2939865E8FC5AC023AB1B01/0/34352e36382e3134302e302f32322d3234203d3e203634313734.roa Signing time: Thu 03 Sep 2026 21:35:00 +0000 ROA not before: Thu 03 Sep 2026 21:30:00 +0000 ROA not after: Thu 02 Sep 2027 21:35:00 +0000 asID: 64174 IP address blocks: 45.68.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF91DF6B5A9F8E20E6FED86E6D0B166C659D7B43D2939865E8FC5AC023AB1B01/0/43E52B0856499AFC2634B890C422537714F662BF.crl rsync://repository.lacnic.net/rpki/lacnic/BF91DF6B5A9F8E20E6FED86E6D0B166C659D7B43D2939865E8FC5AC023AB1B01/0/43E52B0856499AFC2634B890C422537714F662BF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43E52B0856499AFC2634B890C422537714F662BF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 02:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ab:2b:37:f6:20:25:9c:1c:98:13:a3:fe:0e:0f:1e:67:22:b1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E52B0856499AFC2634B890C422537714F662BF Validity Not Before: Sep 3 21:30:00 2026 GMT Not After : Sep 2 21:35:00 2027 GMT Subject: CN=508521EAA7C5E0CFD8E4DB99980EEB2C153156B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:c6:26:26:27:1b:1c:e5:48:91:ac:bf:d2: bc:f3:5f:6c:3a:6d:f0:fe:57:ad:6a:76:fd:76:09: 01:c2:71:8b:68:39:c1:ab:a7:8e:cb:bc:61:ee:8f: de:72:b4:3a:29:44:26:11:dd:84:c0:a9:60:d6:c9: c1:d5:f9:fd:46:21:84:07:fd:ec:36:6d:4e:40:ba: 6c:ff:31:4d:da:9f:e6:46:b8:15:2f:6e:3f:f1:dd: b0:53:98:8b:50:2c:02:76:10:94:5e:a3:2a:c5:70: 48:3b:6b:de:09:23:ef:2a:6b:99:fc:b6:fb:61:f9: 18:ca:65:59:63:b1:3b:3d:c1:a5:ff:0d:e8:05:66: 9f:07:b5:48:fd:37:21:5b:78:51:1d:aa:78:6f:83: 3f:6e:20:eb:fb:43:d4:90:db:3b:73:49:3d:af:3f: aa:19:f7:3b:27:ec:7e:8d:67:75:af:e4:3e:02:96: 4d:14:95:f6:17:c7:4f:66:86:fa:9d:05:42:1f:c1: f3:a9:fd:5b:6a:1a:5d:9b:3e:03:85:30:85:e5:c0: a6:8d:2e:df:2d:5c:08:e4:07:bb:82:4e:af:07:6c: 28:ed:95:bf:10:2c:75:f5:47:cc:37:b9:f6:11:ba: a0:f5:ee:df:93:3f:e2:44:71:d2:1a:bb:a4:a5:65: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:21:EA:A7:C5:E0:CF:D8:E4:DB:99:98:0E:EB:2C:15:31:56:B7 X509v3 Authority Key Identifier: keyid:43:E5:2B:08:56:49:9A:FC:26:34:B8:90:C4:22:53:77:14:F6:62:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BF91DF6B5A9F8E20E6FED86E6D0B166C659D7B43D2939865E8FC5AC023AB1B01/0/43E52B0856499AFC2634B890C422537714F662BF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43E52B0856499AFC2634B890C422537714F662BF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF91DF6B5A9F8E20E6FED86E6D0B166C659D7B43D2939865E8FC5AC023AB1B01/0/34352e36382e3134302e302f32322d3234203d3e203634313734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.140.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:12:f3:d1:da:73:0a:78:3c:32:a1:0c:29:f7:09:06:d9:a0: a7:3c:1f:15:9e:3c:d1:ae:d6:e7:60:a4:75:94:2a:68:e3:77: 70:b2:c6:e3:df:9f:4e:d9:e3:98:e8:2c:23:56:fe:86:59:af: 79:5c:19:31:bc:be:d6:c4:d2:8b:bb:e8:dd:f1:ef:a4:fb:16: 82:5f:99:18:76:47:f0:29:eb:a8:f9:fe:42:9a:ea:50:46:75: 8b:f5:d0:95:1e:c5:48:55:62:d6:b8:cb:ca:51:48:48:c5:ba: d7:a6:32:7e:9a:b3:60:bf:da:b4:97:7c:82:82:7b:d4:92:4d: ba:db:ad:49:42:8a:fe:f1:b6:55:ac:38:13:21:f5:18:e3:3d: 70:21:87:87:8b:35:f1:d2:3e:cf:6a:91:45:08:40:f7:b2:d2: 2d:8a:96:ea:37:98:32:c4:14:50:d7:d6:b2:6c:7a:00:86:1c: 94:ea:31:fb:0e:2a:80:ea:37:f8:a5:50:cb:d1:6d:1e:94:e6: a6:90:28:d5:3c:87:d3:06:31:2f:3b:27:53:79:ad:04:04:a0: 9e:f7:a6:5b:9b:20:47:ca:ba:29:72:40:4f:01:06:35:37:1e: 20:73:98:e4:99:cb:18:3e:bd:eb:27:1f:39:5e:4d:8b:1a:08: 2e:d1:6b:ae -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUJasrN/YgJZwcmBOj/g4PHmcisaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFNTJCMDg1NjQ5OUFGQzI2MzRCODkwQzQyMjUzNzcx NEY2NjJCRjAeFw0yNjA5MDMyMTMwMDBaFw0yNzA5MDIyMTM1MDBaMDMxMTAvBgNV BAMTKDUwODUyMUVBQTdDNUUwQ0ZEOEU0REI5OTk4MEVFQjJDMTUzMTU2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXsYmJicbHOVIkay/0rzzX2w6 bfD+V61qdv12CQHCcYtoOcGrp47LvGHuj95ytDopRCYR3YTAqWDWycHV+f1GIYQH /ew2bU5Aumz/MU3an+ZGuBUvbj/x3bBTmItQLAJ2EJReoyrFcEg7a94JI+8qa5n8 tvth+RjKZVljsTs9waX/DegFZp8HtUj9NyFbeFEdqnhvgz9uIOv7Q9SQ2ztzST2v P6oZ9zsn7H6NZ3Wv5D4Clk0UlfYXx09mhvqdBUIfwfOp/VtqGl2bPgOFMIXlwKaN Lt8tXAjkB7uCTq8HbCjtlb8QLHX1R8w3ufYRuqD17t+TP+JEcdIau6SlZVWTAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUUIUh6qfF4M/Y5NuZmA7rLBUxVrcwHwYDVR0j BBgwFoAUQ+UrCFZJmvwmNLiQxCJTdxT2Yr8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRjkxREY2QjVBOUY4RTIwRTZGRUQ4NkU2RDBCMTY2QzY1 OUQ3QjQzRDI5Mzk4NjVFOEZDNUFDMDIzQUIxQjAxLzAvNDNFNTJCMDg1NjQ5OUFG QzI2MzRCODkwQzQyMjUzNzcxNEY2NjJCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0U1MkIwODU2NDk5QUZDMjYz NEI4OTBDNDIyNTM3NzE0RjY2MkJGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkY5MURGNkI1QTlGOEUyMEU2RkVEODZFNkQwQjE2NkM2NTlEN0I0M0Qy OTM5ODY1RThGQzVBQzAyM0FCMUIwMS8wLzM0MzUyZTM2MzgyZTMxMzQzMDJlMzAy ZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzQzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItRIwwDQYJ KoZIhvcNAQELBQADggEBAD8S89Hacwp4PDKhDCn3CQbZoKc8HxWePNGu1udgpHWU Kmjjd3CyxuPfn07Z45joLCNW/oZZr3lcGTG8vtbE0ou76N3x76T7FoJfmRh2R/Ap 66j5/kKa6lBGdYv10JUexUhVYta4y8pRSEjFutemMn6as2C/2rSXfIKCe9SSTbrb rUlCiv7xtlWsOBMh9RjjPXAhh4eLNfHSPs9qkUUIQPey0i2Kluo3mDLEFFDX1rJs egCGHJTqMfsOKoDqN/ilUMvRbR6U5qaQKNU8h9MGMS87J1N5rQQEoJ73plubIEfK uilyQE8BBjU3HiBzmOSZyxg+vesnHzleTYsaCC7Ra64= -----END CERTIFICATE-----Generated at Fri Sep 18 21:05:59 2026 by rpki-client