$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e35322e3132382e302f32302d3234203d3e203136353331.roa File: 3230302e35322e3132382e302f32302d3234203d3e203136353331.roa (raw, json) Hash identifier: qUy2OLAZvapfc2Yrl+IUqZZqDjL6jHoskXObvTdeSVk= Subject key identifier: 91:F1:4A:DF:2C:4E:85:13:5E:B6:6F:6A:11:E6:AA:26:A3:C7:6B:B2 Certificate issuer: /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Certificate serial: 01ED1AFE6088813E41CDB2B74DFD73AFA209BEF9 Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e35322e3132382e302f32302d3234203d3e203136353331.roa Signing time: Tue 04 Feb 2025 18:29:35 +0000 ROA not before: Tue 04 Feb 2025 18:24:35 +0000 ROA not after: Tue 03 Feb 2026 18:29:35 +0000 asID: 16531 IP address blocks: 200.52.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 23:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ed:1a:fe:60:88:81:3e:41:cd:b2:b7:4d:fd:73:af:a2:09:be:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A Validity Not Before: Feb 4 18:24:35 2025 GMT Not After : Feb 3 18:29:35 2026 GMT Subject: CN=91F14ADF2C4E85135EB66F6A11E6AA26A3C76BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:25:60:c6:88:0b:34:08:66:a7:0b:f0:4d: da:9d:2f:e9:50:6b:77:ef:29:b3:fc:99:f6:6a:d6: af:ed:a0:cb:33:3c:c2:9a:3c:21:f7:84:b7:a7:9b: a7:bf:07:25:69:f8:08:54:62:4f:5d:f5:9d:aa:34: 8f:4f:12:cb:fc:0d:07:90:85:35:61:59:8d:89:38: 6b:f9:d4:52:e7:91:50:11:af:14:5a:5b:18:60:4b: 55:1e:12:72:b8:6b:65:fa:ff:ff:07:ff:0e:77:32: 82:65:c4:79:1c:a8:38:a6:45:43:54:90:53:e7:08: a4:b7:d1:12:11:f0:cc:9d:07:bc:7b:5d:3e:88:f3: 7f:20:c2:14:f2:e0:b7:6d:79:a8:79:5d:f8:7e:5c: 14:e0:09:dd:71:8b:2f:4c:58:0b:2d:85:0e:19:25: c7:02:13:5f:c4:ec:b6:83:f1:23:32:00:c6:40:d9: b3:e4:4a:92:7e:a1:65:fa:1d:51:ab:8a:e8:b2:31: 1d:c5:eb:93:21:db:6c:a8:7f:5b:ba:5c:35:9e:71: 40:82:09:11:de:1b:49:24:d3:8b:cf:e2:ae:79:46: d8:dc:cd:98:bb:29:8e:a7:76:33:7a:93:82:f9:2f: 38:7d:b4:65:1e:ed:5a:b7:ff:db:82:5b:9c:07:e2: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F1:4A:DF:2C:4E:85:13:5E:B6:6F:6A:11:E6:AA:26:A3:C7:6B:B2 X509v3 Authority Key Identifier: keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e35322e3132382e302f32302d3234203d3e203136353331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.52.128.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:88:be:93:49:40:2c:23:17:54:a5:55:2b:44:08:a8:0e:8d: 97:30:8e:ec:fd:83:a0:e0:0b:fc:20:2a:b5:75:34:f0:49:c7: 57:b4:85:d5:7c:b0:1d:c4:29:0e:59:d3:ba:6c:24:bd:2c:e9: e9:8f:42:66:ae:6f:e5:41:2a:00:6b:19:2e:b9:79:0b:a6:b2: 5c:77:df:2a:69:a5:0a:d7:1f:77:a4:cf:c3:94:f8:20:65:e5: 50:e5:6b:01:34:34:cf:93:d9:a5:c8:a3:69:b6:0d:79:f0:f4: e9:30:b3:1a:74:78:e5:cb:11:11:7a:b5:62:1b:13:47:ff:9c: d2:c2:3e:8f:da:b2:cb:ad:bd:08:34:18:a3:d5:6f:1b:37:8c: 2a:e0:7f:2f:c0:5a:75:70:a6:69:d9:41:c9:13:58:79:48:29: 1e:f7:a8:46:c5:60:e2:44:7b:00:21:1d:ca:0c:c3:25:ac:f5: e1:9b:59:10:95:3e:2a:2c:61:10:99:de:64:b3:f7:86:b9:92: 56:74:c6:13:98:79:9e:ba:1a:bd:b4:90:80:14:c6:60:b5:87: b5:f9:b5:79:66:31:9d:67:15:e1:81:a1:d3:f3:62:4a:00:65: 46:a7:7f:f8:30:c6:53:71:aa:73:cf:02:e3:ba:64:7a:29:82: f0:a9:ff:0e -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUAe0a/mCIgT5BzbK3Tf1zr6IJvvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCMDZFQkQyOEZFODNBNTY0RkEzREZDODNGNEY5OEFD NjIwQzk4QTAeFw0yNTAyMDQxODI0MzVaFw0yNjAyMDMxODI5MzVaMDMxMTAvBgNV BAMTKDkxRjE0QURGMkM0RTg1MTM1RUI2NkY2QTExRTZBQTI2QTNDNzZCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1CVgxogLNAhmpwvwTdqdL+lQ a3fvKbP8mfZq1q/toMszPMKaPCH3hLenm6e/ByVp+AhUYk9d9Z2qNI9PEsv8DQeQ hTVhWY2JOGv51FLnkVARrxRaWxhgS1UeEnK4a2X6//8H/w53MoJlxHkcqDimRUNU kFPnCKS30RIR8MydB7x7XT6I838gwhTy4Ldteah5Xfh+XBTgCd1xiy9MWAsthQ4Z JccCE1/E7LaD8SMyAMZA2bPkSpJ+oWX6HVGriuiyMR3F65Mh22yof1u6XDWecUCC CRHeG0kk04vP4q55RtjczZi7KY6ndjN6k4L5Lzh9tGUe7Vq3/9uCW5wH4gmRAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUkfFK3yxOhRNetm9qEeaqJqPHa7IwHwYDVR0j BBgwFoAUL7BuvSj+g6Vk+j38g/T5isYgyYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DOTU0QTg0NjQyMzZGMUJBOEU2MUM3QjZENjcyODZBMDA5 M0ZGRDQwOTM0NDY1M0ZGMEQ5QTc4NjkxRjQ3NDBGLzAvMkZCMDZFQkQyOEZFODNB NTY0RkEzREZDODNGNEY5OEFDNjIwQzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkIwNkVCRDI4RkU4M0E1NjRG QTNERkM4M0Y0Rjk4QUM2MjBDOThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzk1NEE4NDY0MjM2RjFCQThFNjFDN0I2RDY3Mjg2QTAwOTNGRkQ0MDkz NDQ2NTNGRjBEOUE3ODY5MUY0NzQwRi8wLzMyMzAzMDJlMzUzMjJlMzEzMjM4MmUz MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNjM1MzMzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMg0gDAN BgkqhkiG9w0BAQsFAAOCAQEALYi+k0lALCMXVKVVK0QIqA6NlzCO7P2DoOAL/CAq tXU08EnHV7SF1XywHcQpDlnTumwkvSzp6Y9CZq5v5UEqAGsZLrl5C6ayXHffKmml Ctcfd6TPw5T4IGXlUOVrATQ0z5PZpcijabYNefD06TCzGnR45csREXq1YhsTR/+c 0sI+j9qyy629CDQYo9VvGzeMKuB/L8BadXCmadlByRNYeUgpHveoRsVg4kR7ACEd ygzDJaz14ZtZEJU+KixhEJneZLP3hrmSVnTGE5h5nroavbSQgBTGYLWHtfm1eWYx nWcV4YGh0/NiSgBlRqd/+DDGU3Gqc88C47pkeimC8Kn/Dg== -----END CERTIFICATE-----Generated at Wed Apr 16 00:36:08 2025 by rpki-client