$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa File: 34352e372e3230382e302f32342d3234203d3e20323635373239.roa (raw, json) Hash identifier: 8RneuREV71QyMQy/cw4hzdNXSxHbHDHsPO4/YBs0U6g= Subject key identifier: A4:FE:B9:DE:53:BA:8B:F6:56:09:B2:0B:A8:9E:F4:E5:81:8B:BF:79 Certificate issuer: /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A Certificate serial: 38C15A1CA288400220B35A0B998D39CADF2EC892 Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa Signing time: Tue 04 Feb 2025 19:59:43 +0000 ROA not before: Tue 04 Feb 2025 19:54:43 +0000 ROA not after: Tue 03 Feb 2026 19:59:43 +0000 asID: 265729 IP address blocks: 45.7.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 09:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c1:5a:1c:a2:88:40:02:20:b3:5a:0b:99:8d:39:ca:df:2e:c8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A Validity Not Before: Feb 4 19:54:43 2025 GMT Not After : Feb 3 19:59:43 2026 GMT Subject: CN=A4FEB9DE53BA8BF65609B20BA89EF4E5818BBF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:94:ff:3e:68:9a:98:e3:71:24:03:68:64: a3:9e:a9:3b:c3:ac:27:d6:af:ce:be:67:63:32:9f: 1d:54:59:25:16:fd:e8:da:9f:93:d5:22:7f:e4:d9: 24:95:04:ce:05:3d:90:80:74:39:a0:79:d8:49:dd: b3:e1:47:e5:12:00:e4:88:96:77:15:a4:87:aa:1b: 88:6c:2f:ec:24:af:0b:9d:57:85:01:b2:bb:18:10: 82:fc:ee:35:86:f0:14:1f:61:5a:a6:a3:40:64:ab: 13:25:3e:b3:39:dd:a3:d0:1a:6b:89:f8:1f:46:e7: 0f:5f:cf:96:70:b5:66:d3:02:a2:33:e7:90:a6:5e: 3b:ba:0c:8e:96:15:9f:b6:3a:9b:92:2a:3d:78:e9: 46:f0:53:38:23:5c:bf:79:55:2a:ee:b6:a6:3c:ba: 12:06:08:56:5a:4b:91:26:c3:a1:fd:30:80:5f:ef: 73:da:11:04:e1:b4:d3:8e:98:67:0d:8a:2c:cf:50: a5:7b:64:2c:02:1d:80:9a:02:c5:68:19:58:78:ff: d9:9a:9b:7a:e6:ad:76:49:f0:c1:94:ec:99:ed:6b: 15:b0:d3:5f:5b:b2:cd:d1:66:28:86:7c:ad:ea:8b: 27:99:e4:4d:42:fd:2b:ee:dd:2a:41:e7:64:00:68: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FE:B9:DE:53:BA:8B:F6:56:09:B2:0B:A8:9E:F4:E5:81:8B:BF:79 X509v3 Authority Key Identifier: keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.208.0/24 Signature Algorithm: sha256WithRSAEncryption a9:92:91:83:7a:16:0a:08:fd:d6:0b:4e:19:c8:e8:14:e4:06: fd:b1:5a:3d:09:d3:63:06:13:23:9d:94:ad:bd:f3:b8:4c:61: 51:d1:4c:2e:59:6b:82:fd:50:5e:ae:5c:4d:6c:bc:d3:e7:52: 12:e8:81:ed:a9:7c:ab:5f:a0:5d:0a:97:44:cc:65:fd:66:38: a6:f5:0e:2e:eb:ad:bb:57:17:a4:bd:19:1b:5b:63:46:c1:a6: bd:d8:ef:ce:2d:d7:09:dd:9b:eb:8d:9a:61:46:97:78:d1:53: 50:0d:20:fe:84:ab:bd:fe:37:6a:8f:e9:bf:04:87:56:b3:b7: 7b:18:38:d3:60:58:63:0b:12:1c:0d:65:2d:a1:55:30:d3:1c: 3b:23:31:88:29:f1:ee:9b:9b:ab:a3:ec:b8:bf:8d:53:f8:c9: e5:79:18:42:65:9a:0e:da:88:8d:62:d8:67:9a:c7:17:50:09: f2:0f:33:eb:d7:2f:c3:13:5c:7f:64:68:2c:0f:a8:50:e8:aa: a4:8f:60:0e:1b:6f:a8:85:1c:fa:52:d1:b5:60:6d:aa:5d:e1: 7f:d0:d9:74:f4:37:17:33:6f:fc:93:30:b1:a6:6f:c4:e0:c2: 46:25:f4:0a:6a:fc:1d:e3:0c:da:60:76:41:7d:35:ae:9d:29: 46:98:4a:34 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUOMFaHKKIQAIgs1oLmY05yt8uyJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3NDhFNjdFN0MzOUE3QTE5NkQyN0NCMkY0REU2QzlC ODNENDI3QTAeFw0yNTAyMDQxOTU0NDNaFw0yNjAyMDMxOTU5NDNaMDMxMTAvBgNV BAMTKEE0RkVCOURFNTNCQThCRjY1NjA5QjIwQkE4OUVGNEU1ODE4QkJGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAZT/PmiamONxJANoZKOeqTvD rCfWr86+Z2Mynx1UWSUW/ejan5PVIn/k2SSVBM4FPZCAdDmgedhJ3bPhR+USAOSI lncVpIeqG4hsL+wkrwudV4UBsrsYEIL87jWG8BQfYVqmo0BkqxMlPrM53aPQGmuJ +B9G5w9fz5ZwtWbTAqIz55CmXju6DI6WFZ+2OpuSKj146UbwUzgjXL95VSrutqY8 uhIGCFZaS5Emw6H9MIBf73PaEQThtNOOmGcNiizPUKV7ZCwCHYCaAsVoGVh4/9ma m3rmrXZJ8MGU7JntaxWw019bss3RZiiGfK3qiyeZ5E1C/Svu3SpB52QAaAcZAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUpP653lO6i/ZWCbILqJ705YGLv3kwHwYDVR0j BBgwFoAUOnSOZ+fDmnoZbSfLL03mybg9QnowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRjlGMjY2OURDQTI4RTUyNTkxOUU0NEU0RkVEQ0Q1RkZE MEZERjBGRUVBQTQyMzAyNTc0OUEzQ0FBMkM1NUZCLzAvM0E3NDhFNjdFN0MzOUE3 QTE5NkQyN0NCMkY0REU2QzlCODNENDI3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTc0OEU2N0U3QzM5QTdBMTk2 RDI3Q0IyRjRERTZDOUI4M0Q0MjdBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Y5RjI2NjlEQ0EyOEU1MjU5MTlFNDRFNEZFRENENUZGRDBGREYwRkVF QUE0MjMwMjU3NDlBM0NBQTJDNTVGQi8wLzM0MzUyZTM3MmUzMjMwMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtB9AwDQYJ KoZIhvcNAQELBQADggEBAKmSkYN6FgoI/dYLThnI6BTkBv2xWj0J02MGEyOdlK29 87hMYVHRTC5Za4L9UF6uXE1svNPnUhLoge2pfKtfoF0Kl0TMZf1mOKb1Di7rrbtX F6S9GRtbY0bBpr3Y784t1wndm+uNmmFGl3jRU1ANIP6Eq73+N2qP6b8Eh1azt3sY ONNgWGMLEhwNZS2hVTDTHDsjMYgp8e6bm6uj7Li/jVP4yeV5GEJlmg7aiI1i2Gea xxdQCfIPM+vXL8MTXH9kaCwPqFDoqqSPYA4bb6iFHPpS0bVgbapd4X/Q2XT0Nxcz b/yTMLGmb8TgwkYl9Apq/B3jDNpgdkF9Na6dKUaYSjQ= -----END CERTIFICATE-----Generated at Wed Apr 23 07:39:30 2025 by rpki-client