$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa File: 3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa (raw, json) Hash identifier: 0Wd+N1OxyiT+giVmzUi4K7PEJn/DPnTuvs3SrPP6bYA= Subject key identifier: D4:E4:26:5A:95:D5:1F:CE:3D:75:94:38:E3:F1:0E:8B:A5:FB:88:A8 Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 60EFC3EB05DBBBE1254A1BD1252DB20C89A38E42 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa Signing time: Fri 24 Oct 2025 14:35:20 +0000 ROA not before: Fri 24 Oct 2025 14:30:20 +0000 ROA not after: Fri 23 Oct 2026 14:35:20 +0000 asID: 27819 IP address blocks: 201.218.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ef:c3:eb:05:db:bb:e1:25:4a:1b:d1:25:2d:b2:0c:89:a3:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Oct 24 14:30:20 2025 GMT Not After : Oct 23 14:35:20 2026 GMT Subject: CN=D4E4265A95D51FCE3D759438E3F10E8BA5FB88A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:dd:c3:43:90:eb:09:7d:ec:9f:00:8d:32: b8:5e:a0:9d:b4:70:76:84:2f:c9:99:e6:b1:1e:88: 10:cb:07:58:d8:f9:ee:a3:34:01:9e:dd:15:91:ff: 35:3f:b3:6b:6a:9e:ba:6c:c8:76:07:88:01:b7:40: 77:c2:18:fd:01:69:75:b3:57:b5:ae:de:e2:c6:48: d6:14:ad:2e:aa:e9:99:b5:47:39:a1:8b:84:e0:52: 3c:b9:9d:be:89:66:65:f7:c7:cf:3e:1b:f1:49:97: b2:d7:c0:c1:62:6c:8f:05:ba:d7:f3:3d:34:4f:7a: 10:94:d2:c1:4d:73:3c:63:a3:b8:af:2d:d5:bb:bd: b4:0d:1a:4a:9c:62:3f:8e:84:b0:10:3b:6f:7f:3c: c0:ad:b3:59:0f:92:0f:ff:8a:fb:43:72:5d:b7:95: 9a:09:21:c1:5b:00:3d:e7:14:7a:a0:2c:cb:5d:aa: 2b:43:2a:12:e6:3d:46:ff:62:b0:e3:65:da:42:bc: 15:45:39:d5:c4:80:d9:b3:7d:3e:b2:3b:a0:6e:3e: 88:62:d5:a4:f3:72:9d:1e:d6:1d:1e:35:96:84:4b: 3d:eb:53:8c:84:5d:d1:2f:77:ef:cb:8b:91:02:3d: 8a:37:37:91:92:f8:2c:7c:0a:7c:a8:f2:31:45:6c: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E4:26:5A:95:D5:1F:CE:3D:75:94:38:E3:F1:0E:8B:A5:FB:88:A8 X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3139342e302f32342d3234203d3e203237383139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.218.194.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:88:dc:b4:de:d2:95:80:e4:05:f0:2f:1e:c4:6e:7e:63:67: 80:64:54:19:93:d0:89:fb:fe:24:7b:40:f4:d7:46:03:1d:7f: 25:4e:69:ca:22:7a:e1:03:1e:63:19:b9:ae:0a:81:af:b4:ca: 3a:bf:86:f2:61:39:41:13:d9:5b:99:74:9d:52:9c:2a:85:a7: fe:2b:cb:63:b2:8d:41:6e:4e:69:c1:91:1d:10:82:bf:c4:ae: 93:90:0a:a3:1c:25:dd:8e:29:48:eb:2f:95:48:58:62:e8:68: 02:46:bd:aa:a0:38:85:70:77:fa:ed:c5:cd:01:08:68:d1:b6: 0b:0e:dc:af:0d:a9:09:b9:8f:15:c0:9e:7c:14:0b:85:31:02: 1c:be:b2:f1:1a:86:df:01:12:f5:c2:87:90:8a:b4:8e:5d:3d: b3:a6:6d:e5:3d:9a:a4:59:e5:4d:eb:a2:2a:25:b4:9b:77:66: 1c:63:60:10:27:1e:58:5e:25:4d:b4:7b:ae:44:ec:23:45:62: 40:a7:c2:96:fd:5f:37:83:0f:bb:5c:47:db:4d:4d:27:c7:de: f3:f1:b0:bb:72:eb:73:be:a9:fa:e1:e3:a8:f4:5c:2e:1c:c0: 19:fa:87:fc:5b:e0:20:6c:7c:c0:a0:64:5f:de:03:91:91:99: 90:64:7e:30 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUYO/D6wXbu+ElShvRJS2yDImjjkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMjBaFw0yNjEwMjMxNDM1MjBaMDMxMTAvBgNV BAMTKEQ0RTQyNjVBOTVENTFGQ0UzRDc1OTQzOEUzRjEwRThCQTVGQjg4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2N3DQ5DrCX3snwCNMrheoJ20 cHaEL8mZ5rEeiBDLB1jY+e6jNAGe3RWR/zU/s2tqnrpsyHYHiAG3QHfCGP0BaXWz V7Wu3uLGSNYUrS6q6Zm1Rzmhi4TgUjy5nb6JZmX3x88+G/FJl7LXwMFibI8Futfz PTRPehCU0sFNczxjo7ivLdW7vbQNGkqcYj+OhLAQO29/PMCts1kPkg//ivtDcl23 lZoJIcFbAD3nFHqgLMtdqitDKhLmPUb/YrDjZdpCvBVFOdXEgNmzfT6yO6BuPohi 1aTzcp0e1h0eNZaESz3rU4yEXdEvd+/Li5ECPYo3N5GS+Cx8Cnyo8jFFbMkpAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU1OQmWpXVH849dZQ44/EOi6X7iKgwHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMTJlMzIzMTM4MmUzMTM5MzQy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAydrC MA0GCSqGSIb3DQEBCwUAA4IBAQBaiNy03tKVgOQF8C8exG5+Y2eAZFQZk9CJ+/4k e0D010YDHX8lTmnKInrhAx5jGbmuCoGvtMo6v4byYTlBE9lbmXSdUpwqhaf+K8tj so1Bbk5pwZEdEIK/xK6TkAqjHCXdjilI6y+VSFhi6GgCRr2qoDiFcHf67cXNAQho 0bYLDtyvDakJuY8VwJ58FAuFMQIcvrLxGobfARL1woeQirSOXT2zpm3lPZqkWeVN 66IqJbSbd2YcY2AQJx5YXiVNtHuuROwjRWJAp8KW/V83gw+7XEfbTU0nx97z8bC7 cutzvqn64eOo9FwuHMAZ+of8W+AgbHzAoGRf3gORkZmQZH4w -----END CERTIFICATE-----Generated at Thu Nov 6 17:06:38 2025 by rpki-client