$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231302e302f32342d3234203d3e203237383630.roa File: 3230312e3231382e3231302e302f32342d3234203d3e203237383630.roa (raw, json) Hash identifier: yqMAziE+AfyNADZ28/RPSGFGhK90m3z21chXRbWuhDY= Subject key identifier: 40:C3:F1:D4:DD:0B:E9:E9:63:A3:03:6C:81:98:A3:13:9F:9A:04:9D Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 62E17E04D5D2A7FA6FCC20B1D11EF152ECF338A2 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231302e302f32342d3234203d3e203237383630.roa Signing time: Fri 24 Oct 2025 14:35:10 +0000 ROA not before: Fri 24 Oct 2025 14:30:10 +0000 ROA not after: Fri 23 Oct 2026 14:35:10 +0000 asID: 27860 IP address blocks: 201.218.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 18:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e1:7e:04:d5:d2:a7:fa:6f:cc:20:b1:d1:1e:f1:52:ec:f3:38:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Oct 24 14:30:10 2025 GMT Not After : Oct 23 14:35:10 2026 GMT Subject: CN=40C3F1D4DD0BE9E963A3036C8198A3139F9A049D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:b9:2a:10:62:25:bc:1a:e4:f3:01:f4:f7: cf:30:ca:af:e4:41:79:83:f3:f3:a6:e7:2a:41:e7: 7c:3b:ff:8a:99:49:d1:26:e2:f2:33:3f:51:3b:2d: a0:cc:c2:ec:29:cd:10:79:95:1c:15:4e:28:6a:5d: 55:6c:d5:fe:3c:ab:21:72:f6:c9:3c:6f:dc:35:e3: 3b:8b:0c:4c:52:8b:1e:86:cc:b0:3c:33:94:f0:ef: d0:2f:4f:d5:b7:de:5a:c6:7c:aa:f3:04:7d:ce:49: 3c:a8:4d:61:92:3c:f3:8c:79:37:a2:f4:ad:50:f3: d5:3f:e5:07:41:e6:b9:60:61:e2:51:a2:0a:55:b9: b8:a2:6e:4f:d2:25:bd:6e:9c:89:7a:0f:7b:60:2a: 2b:11:82:d1:d3:8a:27:77:7c:9f:e0:7b:32:2d:77: 76:37:cd:ae:65:1a:ad:a6:bb:2d:2a:65:e5:e4:c3: ba:e3:03:d9:f7:6e:20:37:84:77:81:c5:25:36:12: bb:71:d7:c8:7f:53:0d:fc:d3:43:7b:f6:56:d5:53: 9b:38:7c:6d:5a:c7:81:3c:63:fc:90:75:7b:f5:d0: 58:4c:e8:bf:87:c6:e0:21:0e:2e:62:99:bc:ac:09: be:10:f2:db:25:c3:68:fb:f0:3d:f8:29:0e:28:15: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:F1:D4:DD:0B:E9:E9:63:A3:03:6C:81:98:A3:13:9F:9A:04:9D X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3230312e3231382e3231302e302f32342d3234203d3e203237383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.218.210.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:5e:e5:74:50:34:60:45:6b:08:0c:21:26:dd:36:c4:1e:bb: aa:9c:e8:ae:ee:f1:99:a6:e2:8d:d6:02:c4:fc:aa:ed:a8:40: 2b:57:c1:2a:9c:7f:be:92:3d:4e:56:6a:5b:51:44:93:25:ad: 28:9c:d9:be:51:23:3d:5b:55:38:4f:32:5e:07:ff:b0:93:68: eb:81:ba:28:75:33:ce:56:6b:74:d3:2a:02:26:66:ea:a3:71: df:29:08:e3:6c:12:0d:02:16:44:a2:50:ac:57:b0:82:5c:16: ec:99:b3:e6:6b:9c:c4:45:d1:64:a3:bb:22:1d:f2:3d:d4:64: 19:3c:92:1d:0a:12:55:15:67:09:42:28:dd:50:f3:74:e8:24: 75:93:50:fe:58:51:d0:f8:e7:3f:8c:21:29:b7:f1:f5:1a:3e: 1f:52:be:78:1d:86:5a:ea:47:7d:7f:15:ef:c5:29:e6:b3:f5: 67:b4:64:db:94:e5:6a:0a:5f:da:51:28:1c:a2:b8:b8:92:0a: 43:b9:18:4b:7a:ff:96:c1:ba:9a:70:f8:7b:83:af:3f:6b:a5: ad:0c:c0:9b:c7:bc:9c:0e:ac:07:4b:24:9e:4a:37:10:f1:5a: 63:13:f4:f9:6e:c7:df:70:bd:b9:78:3d:e9:ef:7e:55:14:d4: 82:24:d0:43 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUYuF+BNXSp/pvzCCx0R7xUuzzOKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTEwMjQxNDMwMTBaFw0yNjEwMjMxNDM1MTBaMDMxMTAvBgNV BAMTKDQwQzNGMUQ0REQwQkU5RTk2M0EzMDM2QzgxOThBMzEzOUY5QTA0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLrkqEGIlvBrk8wH0988wyq/k QXmD8/Om5ypB53w7/4qZSdEm4vIzP1E7LaDMwuwpzRB5lRwVTihqXVVs1f48qyFy 9sk8b9w14zuLDExSix6GzLA8M5Tw79AvT9W33lrGfKrzBH3OSTyoTWGSPPOMeTei 9K1Q89U/5QdB5rlgYeJRogpVubiibk/SJb1unIl6D3tgKisRgtHTiid3fJ/gezIt d3Y3za5lGq2muy0qZeXkw7rjA9n3biA3hHeBxSU2Ertx18h/Uw3800N79lbVU5s4 fG1ax4E8Y/yQdXv10FhM6L+HxuAhDi5imbysCb4Q8tslw2j78D34KQ4oFbSDAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUQMPx1N0L6eljowNsgZijE5+aBJ0wHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1QTE1Mjk2MDhGQzI5MzI4QjBC RkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzMyMzAzMTJlMzIzMTM4MmUzMjMxMzAy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzNjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAydrS MA0GCSqGSIb3DQEBCwUAA4IBAQBsXuV0UDRgRWsIDCEm3TbEHruqnOiu7vGZpuKN 1gLE/KrtqEArV8EqnH++kj1OVmpbUUSTJa0onNm+USM9W1U4TzJeB/+wk2jrgboo dTPOVmt00yoCJmbqo3HfKQjjbBINAhZEolCsV7CCXBbsmbPma5zERdFko7siHfI9 1GQZPJIdChJVFWcJQijdUPN06CR1k1D+WFHQ+Oc/jCEpt/H1Gj4fUr54HYZa6kd9 fxXvxSnms/VntGTblOVqCl/aUSgcori4kgpDuRhLev+WwbqacPh7g68/a6WtDMCb x7ycDqwHSySeSjcQ8VpjE/T5bsffcL25eD3p735VFNSCJNBD -----END CERTIFICATE-----Generated at Thu Nov 6 17:06:37 2025 by rpki-client