$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/34352e3136382e3233322e302f32322d3234203d3e203238333934.roa File: 34352e3136382e3233322e302f32322d3234203d3e203238333934.roa (raw, json) Hash identifier: 6FAzLTO0RSqkT6qWQ+0JBJCN1N4/qhas8EPvVvsICpg= Subject key identifier: 94:0E:4A:68:99:D9:57:3B:F9:7F:86:8A:51:3A:67:44:B4:99:01:81 Certificate issuer: /CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720 Certificate serial: 5786FBDC30AE20811BD402ADE7F725FC772C353A Authority key identifier: 4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/34352e3136382e3233322e302f32322d3234203d3e203238333934.roa Signing time: Tue 22 Jul 2025 01:26:09 +0000 ROA not before: Tue 22 Jul 2025 01:21:09 +0000 ROA not after: Tue 21 Jul 2026 01:26:09 +0000 asID: 28394 IP address blocks: 45.168.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:86:fb:dc:30:ae:20:81:1b:d4:02:ad:e7:f7:25:fc:77:2c:35:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720 Validity Not Before: Jul 22 01:21:09 2025 GMT Not After : Jul 21 01:26:09 2026 GMT Subject: CN=940E4A6899D9573BF97F868A513A6744B4990181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:a3:47:23:83:3d:67:8a:e1:b5:f1:5f:e0: 12:da:d9:1c:f1:3d:f6:e2:25:d4:ef:08:79:f0:1b: 03:98:01:d7:53:1c:ff:84:7f:8d:1c:5a:97:85:84: f1:04:e2:a1:07:72:f3:20:cf:1e:bb:4e:b9:32:86: bd:e0:6e:34:80:74:f9:7d:cf:df:7a:62:e1:c9:bc: 49:d9:e2:c9:4c:48:4d:a4:94:97:cf:27:99:2b:ff: a4:cf:88:b6:d4:9e:e0:5e:c4:3a:e5:2a:17:11:e1: b8:da:3c:4c:c2:1d:0b:b3:5a:50:ad:3e:5f:ec:c1: cd:a0:a8:2c:3c:eb:09:6c:9d:5e:b5:0e:b4:6c:1d: 9f:74:e6:1b:d9:61:44:f6:8e:44:b7:b8:85:f9:05: 52:38:4f:c3:7a:ed:c3:82:8e:1f:d9:70:1c:5c:eb: 29:17:35:ca:46:36:28:d4:7e:82:80:34:de:21:c4: ca:e4:6b:e9:e1:ad:fa:56:2f:ba:cc:b6:86:cb:8f: 61:12:84:bb:37:e6:3f:c8:84:b3:50:cd:f9:d5:43: 37:98:17:f3:e1:2d:73:fb:77:d7:b8:c7:47:11:54: 85:da:3a:6a:f6:c1:2b:03:5f:e6:40:17:66:50:7d: 65:e9:7f:a9:03:36:c0:92:a1:12:1b:09:9d:09:de: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0E:4A:68:99:D9:57:3B:F9:7F:86:8A:51:3A:67:44:B4:99:01:81 X509v3 Authority Key Identifier: keyid:4E:D2:92:1D:1B:30:A3:E0:F6:9A:B2:E1:A0:F9:7B:02:BA:59:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ED2921D1B30A3E0F69AB2E1A0F97B02BA590720.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE963A74AC1D241E8E1E975B8C9C1CBE3FBABFC1133632181ED854E9EBDAA940/0/34352e3136382e3233322e302f32322d3234203d3e203238333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.232.0/22 Signature Algorithm: sha256WithRSAEncryption 24:ee:70:20:7e:40:2e:b0:20:02:32:36:e1:77:43:bf:20:33: 27:ee:b1:e5:b5:11:a6:ad:ef:89:5d:d7:97:23:28:df:0d:e3: d6:c1:9f:6a:06:f7:b4:bd:85:12:ee:95:f6:94:9b:4f:fb:41: 92:70:fa:92:64:37:17:c2:00:fd:91:c4:e2:17:cc:ee:e6:80: 29:c7:e4:80:34:ec:bd:dd:42:32:cb:e5:de:46:41:12:1c:c8: 02:07:4d:0d:26:b3:eb:fa:77:b2:ef:07:82:7c:f2:14:0d:86: f6:82:14:1a:85:7f:78:d2:17:97:fa:f5:f7:20:00:f0:8b:72: ae:17:c4:5a:d3:98:ce:ad:a8:aa:78:82:32:12:2c:74:fc:91: fa:10:a8:d0:6b:d4:20:23:cd:17:f4:45:f0:b0:94:d0:6f:01: 99:e0:65:ac:58:d1:d7:9d:97:5c:8b:7a:f3:e8:23:70:b3:df: 90:02:40:44:74:83:22:91:3d:8c:e8:48:92:91:a9:6b:89:00: 36:ef:ec:69:a9:37:81:59:fc:59:12:1a:24:8b:03:d4:96:83: ab:c1:93:f9:00:0b:a7:17:c2:fc:66:f8:7a:ad:61:f5:9b:96: be:30:9c:27:49:f3:28:ed:67:3d:01:3c:32:d6:c7:71:2a:9f: 30:ed:23:34 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUV4b73DCuIIEb1AKt5/cl/HcsNTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMjkyMUQxQjMwQTNFMEY2OUFCMkUxQTBGOTdCMDJC QTU5MDcyMDAeFw0yNTA3MjIwMTIxMDlaFw0yNjA3MjEwMTI2MDlaMDMxMTAvBgNV BAMTKDk0MEU0QTY4OTlEOTU3M0JGOTdGODY4QTUxM0E2NzQ0QjQ5OTAxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61KNHI4M9Z4rhtfFf4BLa2Rzx PfbiJdTvCHnwGwOYAddTHP+Ef40cWpeFhPEE4qEHcvMgzx67Trkyhr3gbjSAdPl9 z996YuHJvEnZ4slMSE2klJfPJ5kr/6TPiLbUnuBexDrlKhcR4bjaPEzCHQuzWlCt Pl/swc2gqCw86wlsnV61DrRsHZ905hvZYUT2jkS3uIX5BVI4T8N67cOCjh/ZcBxc 6ykXNcpGNijUfoKANN4hxMrka+nhrfpWL7rMtobLj2EShLs35j/IhLNQzfnVQzeY F/PhLXP7d9e4x0cRVIXaOmr2wSsDX+ZAF2ZQfWXpf6kDNsCSoRIbCZ0J3qprAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUlA5KaJnZVzv5f4aKUTpnRLSZAYEwHwYDVR0j BBgwFoAUTtKSHRswo+D2mrLhoPl7ArpZByAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRTk2M0E3NEFDMUQyNDFFOEUxRTk3NUI4QzlDMUNCRTNG QkFCRkMxMTMzNjMyMTgxRUQ4NTRFOUVCREFBOTQwLzAvNEVEMjkyMUQxQjMwQTNF MEY2OUFCMkUxQTBGOTdCMDJCQTU5MDcyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RUQyOTIxRDFCMzBBM0UwRjY5 QUIyRTFBMEY5N0IwMkJBNTkwNzIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0U5NjNBNzRBQzFEMjQxRThFMUU5NzVCOEM5QzFDQkUzRkJBQkZDMTEz MzYzMjE4MUVEODU0RTlFQkRBQTk0MC8wLzM0MzUyZTMxMzYzODJlMzIzMzMyMmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzkzNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2o6DAN BgkqhkiG9w0BAQsFAAOCAQEAJO5wIH5ALrAgAjI24XdDvyAzJ+6x5bURpq3viV3X lyMo3w3j1sGfagb3tL2FEu6V9pSbT/tBknD6kmQ3F8IA/ZHE4hfM7uaAKcfkgDTs vd1CMsvl3kZBEhzIAgdNDSaz6/p3su8HgnzyFA2G9oIUGoV/eNIXl/r19yAA8Ity rhfEWtOYzq2oqniCMhIsdPyR+hCo0GvUICPNF/RF8LCU0G8BmeBlrFjR152XXIt6 8+gjcLPfkAJARHSDIpE9jOhIkpGpa4kANu/saak3gVn8WRIaJIsD1JaDq8GT+QAL pxfC/Gb4eq1h9ZuWvjCcJ0nzKO1nPQE8MtbHcSqfMO0jNA== -----END CERTIFICATE-----Generated at Fri Aug 1 18:26:26 2025 by rpki-client