$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa File: 3230302e32382e302e302f32302d3234203d3e2037303034.roa (raw, json) Hash identifier: xd1D3UtN6mObI2iVQcglGQgFwqNIZtRjKMhPJihbh4c= Subject key identifier: 21:14:7A:53:3A:D3:2E:BF:A2:F8:BF:F6:A5:52:D0:7E:07:31:77:FF Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 7ACE696EFA33F71CECFB384A8F16302BB6636EB7 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa Signing time: Tue 04 Feb 2025 18:29:57 +0000 ROA not before: Tue 04 Feb 2025 18:24:57 +0000 ROA not after: Tue 03 Feb 2026 18:29:57 +0000 asID: 7004 IP address blocks: 200.28.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 13:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ce:69:6e:fa:33:f7:1c:ec:fb:38:4a:8f:16:30:2b:b6:63:6e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Feb 4 18:24:57 2025 GMT Not After : Feb 3 18:29:57 2026 GMT Subject: CN=21147A533AD32EBFA2F8BFF6A552D07E073177FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:63:c9:cc:ea:0d:91:40:f3:c0:5a:cf:97:9e: 50:0a:c7:8f:ad:08:27:96:47:02:34:ed:28:a5:f5: 9f:9d:fa:69:56:81:38:87:8a:1a:da:2b:de:1a:92: 33:ec:c0:56:52:dc:65:df:b9:62:fe:a8:1e:bf:23: ee:49:42:63:b3:b4:6d:d6:27:8d:f7:9e:24:5b:f1: 1e:4d:80:aa:f8:e5:b5:6f:42:ee:3d:fb:03:d7:ac: b7:7b:da:73:3f:ab:d2:76:fd:0c:1a:76:64:11:1e: 78:a8:60:38:a4:0a:8f:fe:80:6b:8e:97:ea:46:b1: 09:2f:f5:d2:aa:46:32:dd:49:f3:7b:96:6e:dc:b4: 28:a7:68:4f:d4:ef:35:38:92:d5:df:cf:6f:ab:72: 07:42:31:3a:78:8d:5a:84:d5:07:cf:be:97:5a:a2: dc:a9:7c:18:94:bc:56:aa:1c:8e:43:74:33:fc:3f: 7d:1e:b0:03:72:6d:28:38:d8:20:f8:9e:26:4f:33: af:43:2b:ac:eb:89:4f:09:6c:9f:b5:71:b3:fb:32: 09:75:72:27:6d:40:f2:c1:0c:cb:96:43:e6:91:0c: 34:57:8b:0b:4a:5b:fa:f1:6f:c9:6e:82:0b:11:19: 6d:03:dd:19:bf:a8:2d:17:e5:03:d7:ea:79:fb:df: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:7A:53:3A:D3:2E:BF:A2:F8:BF:F6:A5:52:D0:7E:07:31:77:FF X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.28.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:85:fe:ff:0e:91:77:9a:2f:e1:8e:5f:d2:43:56:ec:57:8c: d6:45:ba:86:04:25:40:b5:29:e3:bf:8e:60:0a:ec:08:6c:89: 34:94:31:4f:a9:38:cb:76:0c:68:14:07:9b:70:81:32:ec:88: dc:df:3e:f7:67:9e:d0:80:2a:9d:00:2b:8b:ee:3f:d9:71:6d: d9:00:70:20:0f:64:a8:81:e4:27:8e:5a:8b:dc:36:ae:7d:7f: 5c:7c:41:2b:1b:7c:cb:ef:c7:04:5d:59:1f:e7:e8:8d:1f:dc: 7b:e4:13:03:36:ad:1b:d9:9f:13:7a:63:49:1e:c1:c4:5a:6e: f1:55:39:d0:06:cd:cf:65:79:65:9e:88:97:38:50:e4:cb:83: 63:d2:fe:55:93:9f:6d:f4:60:73:8a:b8:93:81:97:93:74:5b: cd:87:33:af:46:bb:6a:13:7c:ed:f9:4b:db:89:a1:46:16:32: 22:fd:4b:33:64:3e:cd:7b:fa:bc:0d:22:6d:d7:41:68:92:81: d0:15:ef:19:f5:e5:eb:4d:03:6e:7b:61:2b:76:6a:69:30:56: 5c:8a:d0:0d:a4:e5:cf:06:51:1b:62:e0:b4:68:d8:d1:80:e1: 6a:fd:70:1e:b6:01:d9:fc:19:f4:1f:6b:17:9c:97:a3:57:41: d8:7e:8a:07 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIUes5pbvoz9xzs+zhKjxYwK7ZjbrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNTAyMDQxODI0NTdaFw0yNjAyMDMxODI5NTdaMDMxMTAvBgNV BAMTKDIxMTQ3QTUzM0FEMzJFQkZBMkY4QkZGNkE1NTJEMDdFMDczMTc3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcY8nM6g2RQPPAWs+XnlAKx4+t CCeWRwI07Sil9Z+d+mlWgTiHihraK94akjPswFZS3GXfuWL+qB6/I+5JQmOztG3W J433niRb8R5NgKr45bVvQu49+wPXrLd72nM/q9J2/QwadmQRHnioYDikCo/+gGuO l+pGsQkv9dKqRjLdSfN7lm7ctCinaE/U7zU4ktXfz2+rcgdCMTp4jVqE1QfPvpda otypfBiUvFaqHI5DdDP8P30esANybSg42CD4niZPM69DK6zriU8JbJ+1cbP7Mgl1 cidtQPLBDMuWQ+aRDDRXiwtKW/rxb8luggsRGW0D3Rm/qC0X5QPX6nn732cpAgMB AAGjggLCMIICvjAdBgNVHQ4EFgQUIRR6UzrTLr+i+L/2pVLQfgcxd/8wHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzODJlMzAyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMgcADANBgkqhkiG 9w0BAQsFAAOCAQEAboX+/w6Rd5ov4Y5f0kNW7FeM1kW6hgQlQLUp47+OYArsCGyJ NJQxT6k4y3YMaBQHm3CBMuyI3N8+92ee0IAqnQAri+4/2XFt2QBwIA9kqIHkJ45a i9w2rn1/XHxBKxt8y+/HBF1ZH+fojR/ce+QTAzatG9mfE3pjSR7BxFpu8VU50AbN z2V5ZZ6IlzhQ5MuDY9L+VZOfbfRgc4q4k4GXk3RbzYczr0a7ahN87flL24mhRhYy Iv1LM2Q+zXv6vA0ibddBaJKB0BXvGfXl600DbnthK3ZqaTBWXIrQDaTlzwZRG2Lg tGjY0YDhav1wHrYB2fwZ9B9rF5yXo1dB2H6KBw== -----END CERTIFICATE-----Generated at Sat Oct 25 16:55:22 2025 by rpki-client