$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS21599.roa File: AS21599.roa (raw, json) Hash identifier: dEHj4HuVj+oWK6Eyl7qAfpX5/2f7C7i38tuEOT6JR9I= Subject key identifier: E1:97:51:7E:9F:B0:26:4C:92:57:27:B0:ED:D6:16:20:21:52:FD:6C Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 6E33FB7867029C1E6DCFFE99C3B57CB12298EE27 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS21599.roa Signing time: Tue 04 Feb 2025 18:02:43 +0000 ROA not before: Tue 04 Feb 2025 17:57:43 +0000 ROA not after: Tue 03 Feb 2026 18:02:43 +0000 asID: 21599 IP address blocks: 190.5.224.0/19 maxlen: 24 190.122.160.0/20 maxlen: 24 200.46.0.0/16 maxlen: 24 200.90.128.0/20 maxlen: 24 200.115.128.0/19 maxlen: 24 201.218.192.0/18 maxlen: 24 2803:600::/32 maxlen: 56 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 03:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:33:fb:78:67:02:9c:1e:6d:cf:fe:99:c3:b5:7c:b1:22:98:ee:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Feb 4 17:57:43 2025 GMT Not After : Feb 3 18:02:43 2026 GMT Subject: CN=E197517E9FB0264C925727B0EDD616202152FD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:b3:44:74:2e:5a:ea:08:03:c0:35:14:f8: 30:e2:4b:00:5c:75:d5:32:35:18:7c:8c:65:16:64: 4e:7e:c3:77:ed:95:0d:05:f7:97:ed:0c:2d:ce:f6: 7f:7a:94:fe:de:84:08:15:ca:5c:da:63:3a:66:0b: ea:df:ea:15:02:79:c1:94:19:46:a0:80:94:be:9b: d2:a8:bc:93:4b:7f:17:12:bd:00:a5:2c:a9:78:cc: 5c:5b:b9:67:c0:a6:cc:a5:a0:11:97:55:88:9b:c4: 8b:cf:7a:58:a7:f0:04:46:1d:85:d0:36:0d:d1:a0: 35:66:86:3b:f1:01:d2:1d:4f:06:23:14:e7:89:93: da:0d:b4:22:60:4b:cc:9c:7d:1b:8a:34:a8:6f:91: b6:c8:8b:34:96:8b:f3:03:24:a0:bb:3e:09:db:0a: 04:55:42:ce:7c:0b:24:16:43:05:2b:52:32:38:23: 96:63:02:d7:ac:e5:40:8a:d5:4a:d5:d8:39:aa:cf: 8d:32:2a:39:ae:18:eb:6e:39:c5:08:34:68:9b:9b: 9d:09:7b:aa:66:57:d0:c5:75:ca:67:77:3a:94:b2: 9e:00:76:c5:43:b7:4e:49:4d:8d:f8:8e:81:91:16: e4:3e:63:e7:c2:b7:81:29:90:6f:38:2c:e6:c9:1a: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:51:7E:9F:B0:26:4C:92:57:27:B0:ED:D6:16:20:21:52:FD:6C X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS21599.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.5.224.0/19 190.122.160.0/20 200.46.0.0/16 200.90.128.0/20 200.115.128.0/19 201.218.192.0/18 IPv6: 2803:600::/32 Signature Algorithm: sha256WithRSAEncryption 5c:a0:65:be:d3:64:ce:24:6b:38:af:fb:1f:84:30:28:09:5e: bf:49:46:83:78:21:1b:87:ce:15:02:50:3a:a9:97:11:bb:f7: 5d:16:a4:e7:29:84:e7:6c:0b:df:75:f7:39:ba:70:cd:24:17: 5f:9c:ea:ce:7e:25:ed:c6:ce:89:3c:ce:d0:a6:0e:a5:2b:d9: c6:b5:60:19:00:7a:f4:91:a1:4d:78:e8:31:cd:c6:79:53:1f: 52:a0:2a:0d:46:39:60:24:0c:b9:af:9e:b1:5c:92:3c:2b:a7: d2:2d:1c:d3:a5:11:e5:61:c8:8b:fe:c2:8d:e5:68:22:8b:1e: 28:3c:17:98:a0:97:ad:4f:74:90:0a:51:35:5c:7b:e0:6d:ef: 9b:3b:89:5f:92:00:a4:eb:e4:fc:4c:36:87:ef:75:c4:55:aa: 09:a8:e4:d7:1d:29:7b:e0:7e:3c:a2:2a:29:fb:45:30:2b:ae: 20:9a:2c:c3:49:36:1a:fb:cf:c4:4d:0d:4d:ec:3f:8a:27:4c: 71:c8:63:c7:30:58:d4:d2:85:37:6d:3d:cd:0a:26:34:d1:b1: 7f:8e:43:ad:56:6a:d6:be:da:37:e6:b3:5d:a6:9e:11:0d:96: bc:fd:33:6b:80:ab:31:60:d2:f2:63:7b:cf:74:f6:b2:93:0e: a9:c3:d2:16 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUbjP7eGcCnB5tz/6Zw7V8sSKY7icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNTAyMDQxNzU3NDNaFw0yNjAyMDMxODAyNDNaMDMxMTAvBgNV BAMTKEUxOTc1MTdFOUZCMDI2NEM5MjU3MjdCMEVERDYxNjIwMjE1MkZENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDau7NEdC5a6ggDwDUU+DDiSwBc ddUyNRh8jGUWZE5+w3ftlQ0F95ftDC3O9n96lP7ehAgVylzaYzpmC+rf6hUCecGU GUaggJS+m9KovJNLfxcSvQClLKl4zFxbuWfApsyloBGXVYibxIvPelin8ARGHYXQ Ng3RoDVmhjvxAdIdTwYjFOeJk9oNtCJgS8ycfRuKNKhvkbbIizSWi/MDJKC7Pgnb CgRVQs58CyQWQwUrUjI4I5ZjAtes5UCK1UrV2Dmqz40yKjmuGOtuOcUINGibm50J e6pmV9DFdcpndzqUsp4AdsVDt05JTY34joGRFuQ+Y+fCt4EpkG84LObJGuXbAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQU4ZdRfp+wJkySVyew7dYWICFS/WwwHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyMTU5OS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8MDowKQQCAAEwIwMEBb4F4AME BL56oAMDAMguAwQEyFqAAwQFyHOAAwQGydrAMA0EAgACMAcDBQAoAwYAMA0GCSqG SIb3DQEBCwUAA4IBAQBcoGW+02TOJGs4r/sfhDAoCV6/SUaDeCEbh84VAlA6qZcR u/ddFqTnKYTnbAvfdfc5unDNJBdfnOrOfiXtxs6JPM7Qpg6lK9nGtWAZAHr0kaFN eOgxzcZ5Ux9SoCoNRjlgJAy5r56xXJI8K6fSLRzTpRHlYciL/sKN5Wgiix4oPBeY oJetT3SQClE1XHvgbe+bO4lfkgCk6+T8TDaH73XEVaoJqOTXHSl74H48oiop+0Uw K64gmizDSTYa+8/ETQ1N7D+KJ0xxyGPHMFjU0oU3bT3NCiY00bF/jkOtVmrWvto3 5rNdpp4RDZa8/TNrgKsxYNLyY3vPdPaykw6pw9IW -----END CERTIFICATE-----Generated at Sun Apr 6 00:43:29 2025 by rpki-client