$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3133382e3138362e38382e302f32322d3234203d3e203134373039.roa File: 3133382e3138362e38382e302f32322d3234203d3e203134373039.roa (raw, json) Hash identifier: jWT159PeDB8xEAdyJv61HGSwQ0EhpX37jhsiLtIyznM= Subject key identifier: B0:71:FE:62:0B:23:BE:5B:2B:88:69:F4:C2:3A:B3:12:F1:1B:87:49 Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 178B81D7863B53BCBAF906347F0281952DA65773 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3133382e3138362e38382e302f32322d3234203d3e203134373039.roa Signing time: Fri 24 Oct 2025 14:35:08 +0000 ROA not before: Fri 24 Oct 2025 14:30:08 +0000 ROA not after: Fri 23 Oct 2026 14:35:08 +0000 asID: 14709 IP address blocks: 138.186.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8b:81:d7:86:3b:53:bc:ba:f9:06:34:7f:02:81:95:2d:a6:57:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Oct 24 14:30:08 2025 GMT Not After : Oct 23 14:35:08 2026 GMT Subject: CN=B071FE620B23BE5B2B8869F4C23AB312F11B8749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:39:da:26:f3:b6:37:1b:87:4d:09:3e:9d: 1a:35:34:d6:cc:36:7a:07:0f:31:f2:17:cd:a1:f5: b9:dd:f6:6e:d4:5b:be:f4:b6:25:f0:9a:4a:49:4d: f3:f9:c5:5b:b8:e4:31:f2:fe:f4:16:5f:3a:cc:af: ce:8a:c1:d5:04:3b:d7:19:a0:70:89:fd:dc:09:6d: f8:14:9f:a6:21:c2:92:31:2a:6a:8b:fb:9e:ea:81: e9:28:48:51:89:eb:93:52:96:9d:07:d0:e5:dd:26: 85:e8:e3:d5:9a:19:a8:f5:73:92:36:66:9c:61:0b: eb:a7:1e:aa:36:f5:a6:03:6e:e0:4f:24:d5:45:2b: a6:55:32:e8:70:42:24:f4:7d:aa:74:8f:f7:77:fb: 53:f1:43:fa:ee:e1:6a:c1:56:2c:15:c1:ec:58:9d: bf:06:6f:85:02:e7:e7:2a:2c:2c:47:14:4c:1d:6b: b8:6e:95:fc:96:79:e4:63:b8:14:6b:2c:d2:02:d1: c5:f6:1d:59:7e:f0:47:28:eb:5c:73:a6:34:12:57: 0f:6e:6e:5e:ef:f3:fc:44:f8:25:bd:a7:1e:5c:f4: 1e:95:dd:c4:a4:f7:dd:c3:b3:14:8a:13:26:42:67: cb:db:9f:e0:fe:a2:08:57:9d:82:27:82:d7:8e:bc: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:71:FE:62:0B:23:BE:5B:2B:88:69:F4:C2:3A:B3:12:F1:1B:87:49 X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3133382e3138362e38382e302f32322d3234203d3e203134373039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.88.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:19:61:e5:ec:ad:f4:5a:38:22:36:f7:65:99:29:43:ef:63: 9a:93:91:b3:22:8f:01:fe:0f:5d:84:a8:2f:6b:94:03:a0:8e: 77:1f:96:80:72:7c:0b:fd:80:5c:e8:a5:54:33:27:75:a3:d4: 57:b0:cd:7c:75:1e:90:e2:97:bb:c2:db:24:6a:8a:91:23:f9: a5:5e:8e:22:71:ec:bd:db:56:9d:12:fb:91:69:b6:1f:06:ba: 5d:49:63:09:3c:91:02:1f:57:f6:2a:22:7c:66:1d:b9:c1:a6: 85:f2:62:a5:2b:85:53:33:cc:4d:9a:ad:67:c9:45:e4:98:ef: d2:7d:42:5b:e7:aa:9f:6c:21:65:13:bb:dc:7d:84:28:ff:7a: 44:13:09:80:e2:29:cc:cd:c2:a2:b3:32:cf:6d:71:e3:85:b8: 4c:ee:71:5a:2b:e7:86:91:50:a5:a0:c1:46:b1:0f:20:9e:75: ea:b7:7f:36:70:39:dc:19:20:66:73:70:9a:9a:ec:85:05:81: 3c:98:7e:5d:bd:06:7d:5c:53:74:95:bb:d3:a0:5b:aa:2d:9c: 2a:ee:f2:32:76:7a:32:d9:70:79:9d:f6:9d:59:5c:ff:2f:78: b5:e9:16:60:d8:80:c6:0f:1f:be:7a:75:c5:f3:bb:6e:eb:b9: 8e:7e:4f:fc -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIUF4uB14Y7U7y6+QY0fwKBlS2mV3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMDhaFw0yNjEwMjMxNDM1MDhaMDMxMTAvBgNV BAMTKEIwNzFGRTYyMEIyM0JFNUIyQjg4NjlGNEMyM0FCMzEyRjExQjg3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRjnaJvO2NxuHTQk+nRo1NNbM NnoHDzHyF82h9bnd9m7UW770tiXwmkpJTfP5xVu45DHy/vQWXzrMr86KwdUEO9cZ oHCJ/dwJbfgUn6YhwpIxKmqL+57qgekoSFGJ65NSlp0H0OXdJoXo49WaGaj1c5I2 ZpxhC+unHqo29aYDbuBPJNVFK6ZVMuhwQiT0fap0j/d3+1PxQ/ru4WrBViwVwexY nb8Gb4UC5+cqLCxHFEwda7hulfyWeeRjuBRrLNIC0cX2HVl+8Eco61xzpjQSVw9u bl7v8/xE+CW9px5c9B6V3cSk993DsxSKEyZCZ8vbn+D+oghXnYIngteOvCzzAgMB AAGjggLIMIICxDAdBgNVHQ4EFgQUsHH+YgsjvlsriGn0wjqzEvEbh0kwHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMxMzMzODJlMzEzODM2MmUzODM4MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq6WDAN BgkqhkiG9w0BAQsFAAOCAQEAOhlh5eyt9Fo4Ijb3ZZkpQ+9jmpORsyKPAf4PXYSo L2uUA6COdx+WgHJ8C/2AXOilVDMndaPUV7DNfHUekOKXu8LbJGqKkSP5pV6OInHs vdtWnRL7kWm2Hwa6XUljCTyRAh9X9ioifGYducGmhfJipSuFUzPMTZqtZ8lF5Jjv 0n1CW+eqn2whZRO73H2EKP96RBMJgOIpzM3CorMyz21x44W4TO5xWivnhpFQpaDB RrEPIJ516rd/NnA53BkgZnNwmprshQWBPJh+Xb0GfVxTdJW706Bbqi2cKu7yMnZ6 MtlweZ32nVlc/y94tekWYNiAxg8fvnp1xfO7buu5jn5P/A== -----END CERTIFICATE-----Generated at Thu Nov 6 17:01:07 2025 by rpki-client