$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa File: 3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa (raw, json) Hash identifier: 2SPSiLGHiakidaxYB+8jUejmKZtl/At2rKTKS18UzxI= Subject key identifier: 6B:DD:19:48:2E:03:94:86:BA:94:1A:25:1B:8A:38:AB:6A:1C:C7:53 Certificate issuer: /CN=5CD3515583757EA0B20F8D85166821CBE4204EE9 Certificate serial: 1C69F486EA652834390E64F3C0BB087E3C70FC81 Authority key identifier: 5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa Signing time: Tue 04 Feb 2025 18:27:52 +0000 ROA not before: Tue 04 Feb 2025 18:22:52 +0000 ROA not after: Tue 03 Feb 2026 18:27:52 +0000 asID: 271872 IP address blocks: 128.201.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:69:f4:86:ea:65:28:34:39:0e:64:f3:c0:bb:08:7e:3c:70:fc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD3515583757EA0B20F8D85166821CBE4204EE9 Validity Not Before: Feb 4 18:22:52 2025 GMT Not After : Feb 3 18:27:52 2026 GMT Subject: CN=6BDD19482E039486BA941A251B8A38AB6A1CC753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:63:dd:42:7a:34:7c:ff:32:d6:95:1a:70: 44:43:23:4e:81:90:f1:be:27:11:fa:46:a2:fd:c6: 0e:5c:a8:f5:fe:24:65:cd:fc:a9:7b:4d:1c:f5:65: 56:ee:d5:d6:33:94:79:90:80:c4:6a:16:8f:4c:d3: 83:4d:5a:50:23:b7:30:ee:27:20:aa:47:08:7c:b5: 20:c4:b3:e8:e4:dc:94:92:df:65:00:a8:43:5d:31: 17:a8:6c:1f:a6:94:69:aa:b9:24:5a:29:0c:2b:78: 67:44:65:dd:d8:79:3d:2b:14:25:83:f2:fc:60:46: 1e:72:fc:f5:9f:92:2e:33:83:5b:3c:35:83:48:02: 29:89:85:0d:72:fc:a9:f6:2f:32:2c:0c:8d:76:b5: 36:17:de:66:e3:8d:6e:41:69:a3:19:ce:06:75:82: 4c:82:6d:b9:a2:f4:68:ee:48:cb:b0:3f:19:49:c4: a2:2a:57:68:43:9e:d8:e6:d9:dc:65:b0:3c:6c:c1: a2:51:aa:94:70:42:82:3c:3a:95:a4:25:0a:c5:d6: 65:8d:0c:5f:a9:60:23:c0:05:36:c1:9d:45:fb:2c: 54:01:a9:96:22:1c:86:61:5f:26:d0:c1:b1:9e:c8: f1:38:25:d3:53:53:18:29:29:0e:98:da:e9:81:21: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DD:19:48:2E:03:94:86:BA:94:1A:25:1B:8A:38:AB:6A:1C:C7:53 X509v3 Authority Key Identifier: keyid:5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.224.0/22 Signature Algorithm: sha256WithRSAEncryption ae:73:ae:6c:22:4b:4c:13:97:63:a0:fd:f7:97:b5:ee:32:26: c7:19:5b:b9:4b:31:56:99:33:0e:76:2f:1a:de:a1:c3:4a:96: 33:f2:49:ab:50:22:26:ba:95:a1:12:3a:ca:70:16:5d:e5:d8: ce:aa:5f:bf:19:e6:92:1d:aa:e2:58:a4:a3:e1:20:f8:ed:a5: a0:da:ed:1d:88:a5:ba:82:24:1a:2b:3a:5d:cc:60:5c:bc:d4: f2:26:cf:cb:3b:38:4d:e5:a5:f3:67:49:f0:1a:82:62:49:b1: a7:14:36:13:ae:7d:07:c8:83:bf:b6:79:6c:6f:af:58:28:26: 95:cc:11:68:be:14:4c:c7:99:e2:36:31:bb:92:4e:da:48:c2: 4a:c3:29:6c:ac:36:84:b5:39:b8:13:78:af:86:de:10:bf:26: 82:7b:cd:c7:53:c5:95:2f:34:6d:c2:c2:65:d0:f2:75:16:69: 51:ce:ee:de:7f:5b:d1:5e:76:1d:5c:85:34:81:2d:0a:94:20: d0:69:b3:a0:26:9e:10:c3:b4:4c:56:7d:27:b4:ff:50:20:6a: 83:37:c0:86:bd:5a:f3:e7:22:5e:b6:29:6f:e0:11:60:72:d1: 1c:f4:d8:04:66:0f:7e:7b:cd:ce:e4:a4:b0:b6:14:96:d8:dc: fc:ae:68:ac -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUHGn0huplKDQ5DmTzwLsIfjxw/IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEMzUxNTU4Mzc1N0VBMEIyMEY4RDg1MTY2ODIxQ0JF NDIwNEVFOTAeFw0yNTAyMDQxODIyNTJaFw0yNjAyMDMxODI3NTJaMDMxMTAvBgNV BAMTKDZCREQxOTQ4MkUwMzk0ODZCQTk0MUEyNTFCOEEzOEFCNkExQ0M3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5v2PdQno0fP8y1pUacERDI06B kPG+JxH6RqL9xg5cqPX+JGXN/Kl7TRz1ZVbu1dYzlHmQgMRqFo9M04NNWlAjtzDu JyCqRwh8tSDEs+jk3JSS32UAqENdMReobB+mlGmquSRaKQwreGdEZd3YeT0rFCWD 8vxgRh5y/PWfki4zg1s8NYNIAimJhQ1y/Kn2LzIsDI12tTYX3mbjjW5BaaMZzgZ1 gkyCbbmi9GjuSMuwPxlJxKIqV2hDntjm2dxlsDxswaJRqpRwQoI8OpWkJQrF1mWN DF+pYCPABTbBnUX7LFQBqZYiHIZhXybQwbGeyPE4JdNTUxgpKQ6Y2umBIdv/AgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUa90ZSC4DlIa6lBolG4o4q2ocx1MwHwYDVR0j BBgwFoAUXNNRVYN1fqCyD42FFmghy+QgTukwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DREE2MDFGNjE0RDhDQ0UwMzgzRkZEQTRCMzY0MUYxNjVF MzVFRjhGNDFEOENDNkM5QkI5QzcyODNGMDE1RDU0LzAvNUNEMzUxNTU4Mzc1N0VB MEIyMEY4RDg1MTY2ODIxQ0JFNDIwNEVFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Q0QzNTE1NTgzNzU3RUEwQjIw RjhEODUxNjY4MjFDQkU0MjA0RUU5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0RBNjAxRjYxNEQ4Q0NFMDM4M0ZGREE0QjM2NDFGMTY1RTM1RUY4RjQx RDhDQzZDOUJCOUM3MjgzRjAxNUQ1NC8wLzMxMzIzODJlMzIzMDMxMmUzMjMyMzQy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEzODM3MzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKA yeAwDQYJKoZIhvcNAQELBQADggEBAK5zrmwiS0wTl2Og/feXte4yJscZW7lLMVaZ Mw52LxreocNKljPySatQIia6laESOspwFl3l2M6qX78Z5pIdquJYpKPhIPjtpaDa 7R2IpbqCJBorOl3MYFy81PImz8s7OE3lpfNnSfAagmJJsacUNhOufQfIg7+2eWxv r1goJpXMEWi+FEzHmeI2MbuSTtpIwkrDKWysNoS1ObgTeK+G3hC/JoJ7zcdTxZUv NG3CwmXQ8nUWaVHO7t5/W9Fedh1chTSBLQqUINBps6AmnhDDtExWfSe0/1AgaoM3 wIa9WvPnIl62KW/gEWBy0Rz02ARmD357zc7kpLC2FJbY3PyuaKw= -----END CERTIFICATE-----Generated at Fri Apr 18 22:41:04 2025 by rpki-client