$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139322e302f31382d3234203d3e203231353939.roa File: 3230312e3231382e3139322e302f31382d3234203d3e203231353939.roa (raw, json) Hash identifier: 6tSCcHLYTXGa+yqM4jhTJbCPIgW3v8IE54JYlXq/1rE= Subject key identifier: DD:BF:E2:6F:D3:C9:B0:A7:A6:C5:65:E2:F8:B4:B7:89:F7:C6:92:82 Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 044989387DCE96509E26C64646F0697F065D267B Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139322e302f31382d3234203d3e203231353939.roa Signing time: Fri 24 Oct 2025 14:35:05 +0000 ROA not before: Fri 24 Oct 2025 14:30:05 +0000 ROA not after: Fri 23 Oct 2026 14:35:05 +0000 asID: 21599 IP address blocks: 201.218.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:49:89:38:7d:ce:96:50:9e:26:c6:46:46:f0:69:7f:06:5d:26:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Oct 24 14:30:05 2025 GMT Not After : Oct 23 14:35:05 2026 GMT Subject: CN=DDBFE26FD3C9B0A7A6C565E2F8B4B789F7C69282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:b0:86:38:40:a1:25:61:d0:57:a9:74:02: 3a:c8:c1:4c:99:f7:2a:11:2d:c3:58:bb:a7:df:63: 79:69:44:ec:ef:0f:89:f6:72:02:77:80:90:9f:6e: 95:16:16:0c:c5:2a:a7:53:e7:89:9c:e6:8c:82:6c: 10:8e:90:a0:ab:f0:9e:0d:24:a3:ae:ae:12:c8:df: 66:0d:63:d9:9f:89:8a:8a:3f:27:27:66:e9:6c:50: e3:01:16:b5:34:98:ad:29:25:b2:f6:df:fd:bb:d5: ca:73:1f:67:1a:8d:63:60:5e:14:db:c5:5c:df:2e: 8c:7a:fc:25:97:19:5b:da:e1:47:dc:c9:a8:01:4e: ad:a6:1d:dd:55:05:72:c4:3f:61:9d:b9:b3:5e:0d: cc:d8:46:df:53:ec:6c:88:72:be:df:62:44:31:a4: e1:be:31:6d:03:91:0d:99:4e:c1:dd:b1:31:43:eb: f9:3b:09:39:b3:3e:01:15:1f:6d:dd:11:a6:14:21: 5e:52:03:46:dd:ee:05:0c:13:20:83:ca:15:12:00: de:e9:75:c5:38:b2:31:66:d8:c9:16:a1:b5:17:6f: 21:ae:78:ca:5d:98:b0:db:c4:0a:e6:4b:ad:31:28: 9c:a8:56:29:e5:5b:7e:cf:56:56:78:ad:40:a6:ad: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:E2:6F:D3:C9:B0:A7:A6:C5:65:E2:F8:B4:B7:89:F7:C6:92:82 X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139322e302f31382d3234203d3e203231353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.218.192.0/18 Signature Algorithm: sha256WithRSAEncryption 7d:53:6b:94:d8:ba:19:0e:21:57:45:06:5b:fd:8f:b0:3a:7a: 38:a6:38:06:52:64:b7:83:7f:a0:42:96:70:6e:38:62:cf:5a: b1:ff:89:e5:9d:e7:7a:91:e0:3f:a8:b6:b6:b7:23:6d:7c:6a: 40:e8:9c:95:a5:28:e9:1f:45:7f:8a:c6:5a:ec:45:0a:22:3d: 78:14:e5:99:6c:99:67:43:f8:8a:ce:00:ad:0b:58:97:a7:39: 06:cd:ed:6d:43:8a:95:9b:d8:7a:b8:c1:f5:ed:65:a2:1b:fa: 42:80:56:fa:48:32:f0:1c:6d:c6:fd:c0:43:cf:21:e2:7e:b6: 8b:6e:63:88:92:ea:50:47:69:e6:93:4e:8e:b1:00:16:ed:e5: c7:f5:4d:5d:65:56:62:7e:5f:b5:58:9b:76:30:c0:13:51:02: 20:b7:40:4c:d5:7d:83:8a:2a:2d:13:11:3a:c9:ae:ef:0e:9c: d5:c5:8b:e3:02:f6:f1:d8:d4:a8:ed:c4:32:49:b5:81:2c:46: 3e:28:df:e4:33:cf:99:92:e9:1b:7e:bd:23:d6:53:12:d0:23: 03:7f:5a:95:6a:32:43:44:79:52:6b:74:dc:7c:b8:58:e8:04: 06:8d:13:ef:6a:e7:28:c5:12:a1:d4:e7:8c:64:5a:5f:05:53: 40:49:ab:cb -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUBEmJOH3OllCeJsZGRvBpfwZdJnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMDVaFw0yNjEwMjMxNDM1MDVaMDMxMTAvBgNV BAMTKEREQkZFMjZGRDNDOUIwQTdBNkM1NjVFMkY4QjRCNzg5RjdDNjkyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOLbCGOEChJWHQV6l0AjrIwUyZ 9yoRLcNYu6ffY3lpROzvD4n2cgJ3gJCfbpUWFgzFKqdT54mc5oyCbBCOkKCr8J4N JKOurhLI32YNY9mfiYqKPycnZulsUOMBFrU0mK0pJbL23/271cpzH2cajWNgXhTb xVzfLox6/CWXGVva4UfcyagBTq2mHd1VBXLEP2GdubNeDczYRt9T7GyIcr7fYkQx pOG+MW0DkQ2ZTsHdsTFD6/k7CTmzPgEVH23dEaYUIV5SA0bd7gUMEyCDyhUSAN7p dcU4sjFm2MkWobUXbyGueMpdmLDbxArmS60xKJyoVinlW37PVlZ4rUCmrbeJAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU3b/ib9PJsKemxWXi+LS3iffGkoIwHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMTJlMzIzMTM4MmUzMTM5MzIy ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMjMxMzUzOTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGydrA MA0GCSqGSIb3DQEBCwUAA4IBAQB9U2uU2LoZDiFXRQZb/Y+wOno4pjgGUmS3g3+g QpZwbjhiz1qx/4nlned6keA/qLa2tyNtfGpA6JyVpSjpH0V/isZa7EUKIj14FOWZ bJlnQ/iKzgCtC1iXpzkGze1tQ4qVm9h6uMH17WWiG/pCgFb6SDLwHG3G/cBDzyHi fraLbmOIkupQR2nmk06OsQAW7eXH9U1dZVZifl+1WJt2MMATUQIgt0BM1X2Diiot ExE6ya7vDpzVxYvjAvbx2NSo7cQySbWBLEY+KN/kM8+Zkukbfr0j1lMS0CMDf1qV ajJDRHlSa3TcfLhY6AQGjRPvaucoxRKh1OeMZFpfBVNASavL -----END CERTIFICATE-----Generated at Thu Nov 6 16:58:05 2025 by rpki-client