$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS14709.roa File: AS14709.roa (raw, json) Hash identifier: xr5kjpuip8Kr4S5eHb2XRQRip/GCZajF96OYs82M1qo= Subject key identifier: 91:C4:47:77:90:A1:93:85:D5:0B:9A:D6:A9:2C:F8:FF:F3:9D:97:02 Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 26F67B65FD23165B9C8453BFF39101EBE111C75A Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS14709.roa Signing time: Tue 04 Feb 2025 18:02:49 +0000 ROA not before: Tue 04 Feb 2025 17:57:49 +0000 ROA not after: Tue 03 Feb 2026 18:02:49 +0000 asID: 14709 IP address blocks: 138.186.88.0/22 maxlen: 24 181.197.52.0/22 maxlen: 24 181.197.124.0/22 maxlen: 24 190.57.32.0/20 maxlen: 24 190.140.250.0/24 maxlen: 24 190.141.31.0/24 maxlen: 24 190.141.172.0/24 maxlen: 24 200.46.1.0/24 maxlen: 24 200.108.32.0/19 maxlen: 24 2800:ce0::/32 maxlen: 56 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 03:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f6:7b:65:fd:23:16:5b:9c:84:53:bf:f3:91:01:eb:e1:11:c7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Feb 4 17:57:49 2025 GMT Not After : Feb 3 18:02:49 2026 GMT Subject: CN=91C4477790A19385D50B9AD6A92CF8FFF39D9702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:51:dc:21:c2:a0:10:b4:3a:4e:5b:4a:1b: 2a:f7:cd:b5:b3:df:13:76:26:5b:91:78:9b:9b:6b: a5:02:83:53:e9:c0:2c:e6:b3:c4:e8:d3:59:db:47: 3f:98:ed:e2:7f:1b:bd:85:d0:23:88:6d:ee:0f:09: d4:e0:0c:47:77:35:c1:77:27:c0:7a:1a:37:4e:88: bd:5f:d0:57:09:d1:3c:b4:3b:68:8e:4c:85:0d:db: 76:0d:c4:78:03:db:91:2b:16:66:3d:50:27:0d:79: 35:bd:b4:08:50:bf:2d:f0:e7:a4:2b:33:ab:11:09: 86:f1:34:c2:02:db:af:70:cb:91:8b:6b:24:ac:87: d1:ae:1f:5c:37:b1:34:e4:e7:bc:7d:3e:b6:50:7a: 48:51:51:ae:4e:6f:ae:fc:9c:a5:db:95:0e:6e:8e: 46:7a:7a:b6:dc:36:6e:ea:46:75:71:22:6f:13:8f: dc:d3:4e:1f:64:54:fd:30:a4:5f:85:d6:f4:26:e2: 58:42:3e:22:ea:3f:f8:82:77:b5:2c:f8:6c:91:3b: 09:2f:45:88:07:02:ee:0c:36:78:65:25:ef:66:ec: 21:7a:35:04:78:89:3c:78:e0:a1:e2:e4:ef:3b:87: 99:b3:52:2c:20:d3:64:72:62:51:7e:00:7f:1a:1b: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C4:47:77:90:A1:93:85:D5:0B:9A:D6:A9:2C:F8:FF:F3:9D:97:02 X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS14709.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.88.0/22 181.197.52.0/22 181.197.124.0/22 190.57.32.0/20 190.140.250.0/24 190.141.31.0/24 190.141.172.0/24 200.46.1.0/24 200.108.32.0/19 IPv6: 2800:ce0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:7e:08:a3:10:17:e1:79:e7:06:12:de:c5:4c:e1:25:52:2a: 3e:e0:7a:f1:8a:00:a2:e6:f0:ec:29:3f:b7:29:52:eb:e7:cd: 1c:23:cc:70:04:8f:91:a8:0b:04:c7:06:dd:67:f0:b4:85:8c: f6:58:49:cc:76:e7:43:82:78:11:74:08:bd:26:e6:46:e7:4c: 51:30:1e:20:cc:1b:de:77:79:31:6c:d6:6a:3c:af:c2:38:c0: e7:36:e5:1d:8e:b8:df:b8:d0:a8:10:bb:0c:5b:12:a6:3a:ac: 92:65:6a:d3:d7:77:b5:5a:d9:8a:b7:27:5e:c0:3f:12:9f:68: f4:7c:ac:e3:9e:c7:ed:ff:07:18:f4:33:a4:8f:52:2c:38:64: cb:5d:34:d0:61:c3:7d:bd:87:e2:b8:b7:25:48:01:fa:ca:5b: d9:be:bf:14:a5:33:53:d8:77:a7:c4:3c:25:93:db:43:dc:ca: 80:bb:58:97:5a:a6:dc:b9:db:84:85:38:87:54:59:39:28:6b: 0c:d8:da:49:5c:9a:01:3e:41:c6:1a:22:bd:9e:a2:dc:6b:22: 20:9c:d0:9c:b5:00:71:b7:6e:7a:5a:fe:61:81:27:d5:a8:0e: 53:43:66:11:0b:a5:88:92:93:a8:3c:ce:41:8c:b9:4c:eb:65: c3:85:5d:64 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUJvZ7Zf0jFluchFO/85EB6+ERx1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTAyMDQxNzU3NDlaFw0yNjAyMDMxODAyNDlaMDMxMTAvBgNV BAMTKDkxQzQ0Nzc3OTBBMTkzODVENTBCOUFENkE5MkNGOEZGRjM5RDk3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksVHcIcKgELQ6TltKGyr3zbWz 3xN2JluReJuba6UCg1PpwCzms8To01nbRz+Y7eJ/G72F0COIbe4PCdTgDEd3NcF3 J8B6GjdOiL1f0FcJ0Ty0O2iOTIUN23YNxHgD25ErFmY9UCcNeTW9tAhQvy3w56Qr M6sRCYbxNMIC269wy5GLaySsh9GuH1w3sTTk57x9PrZQekhRUa5Ob678nKXblQ5u jkZ6erbcNm7qRnVxIm8Tj9zTTh9kVP0wpF+F1vQm4lhCPiLqP/iCd7Us+GyROwkv RYgHAu4MNnhlJe9m7CF6NQR4iTx44KHi5O87h5mzUiwg02RyYlF+AH8aG5lVAgMB AAGjggLXMIIC0zAdBgNVHQ4EFgQUkcRHd5Chk4XVC5rWqSz4//OdlwIwHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMxNDcwOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBeBggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAoq6WAME ArXFNAMEArXFfAMEBL45IAMEAL6M+gMEAL6NHwMEAL6NrAMEAMguAQMEBchsIDAN BAIAAjAHAwUAKAAM4DANBgkqhkiG9w0BAQsFAAOCAQEASn4IoxAX4XnnBhLexUzh JVIqPuB68YoAoubw7Ck/tylS6+fNHCPMcASPkagLBMcG3WfwtIWM9lhJzHbnQ4J4 EXQIvSbmRudMUTAeIMwb3nd5MWzWajyvwjjA5zblHY6437jQqBC7DFsSpjqskmVq 09d3tVrZircnXsA/Ep9o9Hys457H7f8HGPQzpI9SLDhky1000GHDfb2H4ri3JUgB +spb2b6/FKUzU9h3p8Q8JZPbQ9zKgLtYl1qm3LnbhIU4h1RZOShrDNjaSVyaAT5B xhoivZ6i3GsiIJzQnLUAcbduelr+YYEn1agOU0NmEQuliJKTqDzOQYy5TOtlw4Vd ZA== -----END CERTIFICATE-----Generated at Sat Apr 5 16:36:30 2025 by rpki-client