$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e332e3230302e302f32312d3234203d3e203237373535.roa File: 3230302e332e3230302e302f32312d3234203d3e203237373535.roa (raw, json) Hash identifier: VhPRUHS5j5WHqHS5wG/eUfQcWbMsIPfUJY5+2q3vQ3A= Subject key identifier: B5:2C:35:96:75:8B:D1:5F:DD:E5:4B:FB:CC:B0:6F:03:BA:07:44:9D Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 614DBA93E04B1D162F1417D14D67EC1F0008EB0C Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e332e3230302e302f32312d3234203d3e203237373535.roa Signing time: Fri 24 Oct 2025 14:35:05 +0000 ROA not before: Fri 24 Oct 2025 14:30:05 +0000 ROA not after: Fri 23 Oct 2026 14:35:05 +0000 asID: 27755 IP address blocks: 200.3.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4d:ba:93:e0:4b:1d:16:2f:14:17:d1:4d:67:ec:1f:00:08:eb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Oct 24 14:30:05 2025 GMT Not After : Oct 23 14:35:05 2026 GMT Subject: CN=B52C3596758BD15FDDE54BFBCCB06F03BA07449D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:0a:18:34:d3:e2:5b:6a:6a:62:2b:d7:8b: 3b:ac:4c:34:2a:68:c0:d1:97:1e:00:0d:0d:16:79: 8e:04:d7:1a:d7:a0:d9:ab:c9:55:74:d8:74:e6:03: d4:2d:73:a1:97:07:c4:6c:5d:2f:23:41:98:ad:98: 59:08:bb:43:40:47:cf:07:6f:5a:dd:4f:58:1c:6b: ee:3e:a4:25:61:02:a5:15:24:a6:81:c4:47:44:d6: ff:64:41:c5:d5:b6:32:7d:46:f6:e6:8b:29:f5:2f: fc:8e:a4:fd:2b:61:2a:55:19:bb:2a:22:7f:ed:48: 7e:96:db:fc:bb:d6:8c:50:ce:a7:b5:ac:f2:3a:4d: e4:87:1e:a7:d4:40:9c:75:8d:05:66:b7:9e:31:52: e8:fe:97:d4:08:72:90:46:7a:b5:99:be:f9:6a:81: 5c:20:ff:cf:f8:4c:8f:47:06:96:4f:73:7a:47:97: 56:cb:dc:a2:e9:b7:52:55:f2:1d:ca:23:a9:4e:86: 4d:a8:9b:70:14:b4:60:72:12:ca:8c:75:04:b2:d3: 78:8f:6c:7e:d9:d1:5c:6e:9c:0c:6b:43:e8:fd:3f: 1b:8b:10:a5:96:37:62:e8:ca:d2:12:e4:6c:ea:46: 70:ab:f4:79:8c:56:fd:6c:83:4a:46:d0:94:95:5a: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:35:96:75:8B:D1:5F:DD:E5:4B:FB:CC:B0:6F:03:BA:07:44:9D X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230302e332e3230302e302f32312d3234203d3e203237373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.3.200.0/21 Signature Algorithm: sha256WithRSAEncryption 95:d3:6e:3d:65:3c:4e:f1:bb:51:63:4e:15:9a:c6:1b:01:9a: 05:be:85:84:d5:11:63:01:f2:f5:3c:4d:f2:15:eb:fb:84:f7: 1a:96:02:f1:ff:3b:37:3c:54:c4:f8:f3:11:3f:fb:7b:61:fc: 1d:af:a0:a9:25:e1:dd:f9:c2:c0:fd:1b:f7:df:b0:75:5c:78: ab:12:a6:c3:be:a8:a4:12:7a:88:38:c9:37:af:f4:a8:ac:fe: d0:d6:f9:6d:a5:18:e9:77:fd:f7:90:36:f8:cb:45:c0:98:17: 33:be:61:97:7b:4a:f9:b7:01:02:a4:61:05:44:bf:6a:a6:5a: 4e:eb:dd:f2:9a:91:42:64:6a:b0:fd:e6:d3:29:eb:3c:ce:a7: 3c:dd:0c:e8:46:87:bf:e5:60:38:fd:58:88:bc:a6:56:f8:e1: d5:ac:fc:39:44:e2:cc:67:b2:f8:26:2f:d7:1e:b4:8b:03:ff: 98:94:c8:98:68:33:15:ed:75:9c:a7:a6:bb:2a:d5:cd:4f:63: f9:6b:6e:13:5a:9a:27:1d:20:1a:92:8d:81:ae:34:55:b3:88: 3f:6f:81:e6:dd:4e:f7:b9:67:37:66:52:e8:18:13:08:3c:dd: 01:17:5c:ab:7b:1b:b5:ee:64:b9:cb:96:e0:51:60:57:6a:63: e6:e4:18:7f -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUYU26k+BLHRYvFBfRTWfsHwAI6wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMDVaFw0yNjEwMjMxNDM1MDVaMDMxMTAvBgNV BAMTKEI1MkMzNTk2NzU4QkQxNUZEREU1NEJGQkNDQjA2RjAzQkEwNzQ0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstgoYNNPiW2pqYivXizusTDQq aMDRlx4ADQ0WeY4E1xrXoNmryVV02HTmA9Qtc6GXB8RsXS8jQZitmFkIu0NAR88H b1rdT1gca+4+pCVhAqUVJKaBxEdE1v9kQcXVtjJ9Rvbmiyn1L/yOpP0rYSpVGbsq In/tSH6W2/y71oxQzqe1rPI6TeSHHqfUQJx1jQVmt54xUuj+l9QIcpBGerWZvvlq gVwg/8/4TI9HBpZPc3pHl1bL3KLpt1JV8h3KI6lOhk2om3AUtGByEsqMdQSy03iP bH7Z0VxunAxrQ+j9PxuLEKWWN2LoytIS5GzqRnCr9HmMVv1sg0pG0JSVWtCJAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUtSw1lnWL0V/d5Uv7zLBvA7oHRJ0wHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMDJlMzMyZTMyMzAzMDJlMzAy ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczNzM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIA8gwDQYJ KoZIhvcNAQELBQADggEBAJXTbj1lPE7xu1FjThWaxhsBmgW+hYTVEWMB8vU8TfIV 6/uE9xqWAvH/Ozc8VMT48xE/+3th/B2voKkl4d35wsD9G/ffsHVceKsSpsO+qKQS eog4yTev9Kis/tDW+W2lGOl3/feQNvjLRcCYFzO+YZd7Svm3AQKkYQVEv2qmWk7r 3fKakUJkarD95tMp6zzOpzzdDOhGh7/lYDj9WIi8plb44dWs/DlE4sxnsvgmL9ce tIsD/5iUyJhoMxXtdZynprsq1c1PY/lrbhNamicdIBqSjYGuNFWziD9vgebdTve5 ZzdmUugYEwg83QEXXKt7G7XuZLnLluBRYFdqY+bkGH8= -----END CERTIFICATE-----Generated at Thu Nov 6 17:05:06 2025 by rpki-client