$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa File: 3230302e32382e302e302f32302d3234203d3e2037303034.roa (raw, json) Hash identifier: Ic82RU0Iwu05xzOUiq460FyGD61BwLSniY4yBa2BSFM= Subject key identifier: 68:E8:71:44:DC:CE:68:3E:CB:BA:F9:D3:A3:71:17:5E:11:F1:AC:98 Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 31113526CB6C560537F2326EE5A3042C1F2952C4 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa Signing time: Tue 05 Mar 2024 17:52:25 +0000 ROA not before: Tue 05 Mar 2024 17:47:25 +0000 ROA not after: Tue 04 Mar 2025 17:52:25 +0000 asID: 7004 IP address blocks: 200.28.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 May 2024 03:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:11:35:26:cb:6c:56:05:37:f2:32:6e:e5:a3:04:2c:1f:29:52:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Mar 5 17:47:25 2024 GMT Not After : Mar 4 17:52:25 2025 GMT Subject: CN=68E87144DCCE683ECBBAF9D3A371175E11F1AC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:af:6c:28:31:d1:ea:5a:55:c3:f7:3e:eb: c1:f3:51:74:ca:a3:51:e6:1e:0c:11:6a:21:ff:69: 2b:ff:9e:ce:6f:c9:ee:f8:a7:07:db:92:8c:82:38: 89:89:c2:79:f9:3d:76:e1:39:00:24:17:40:7e:24: 94:a1:7d:2e:c5:3c:60:35:c0:9f:1e:89:c5:59:c3: 8d:de:86:c3:65:d7:d9:0c:72:1b:0e:6f:fc:95:8f: e3:0b:84:5b:28:62:7b:e8:8c:b4:6e:71:45:5d:69: cf:20:13:f3:e1:82:90:1c:b1:5d:b1:87:30:75:e0: e8:7d:24:9c:fc:db:2d:48:7b:54:4e:a9:0c:c7:10: 3d:f1:0e:5b:91:5d:a6:b8:a5:9c:44:77:81:7d:c1: 9d:8f:53:14:4b:d6:9c:98:fa:aa:d7:97:92:11:a2: 88:ce:d4:c3:8b:a7:d7:8e:b1:55:6d:c5:68:e0:c9: 86:2d:ad:ec:bc:5e:39:25:2b:63:70:4d:8f:7a:30: b8:a0:5f:af:d5:1c:a0:c9:41:2d:69:4b:27:4f:b7: ba:82:fe:04:a0:39:29:b8:48:01:6f:27:a8:a2:75: 83:52:03:cb:c9:a2:66:e0:fa:63:42:7f:a5:70:26: 10:b0:36:d2:95:6e:d0:26:66:b4:0b:c4:12:d3:a8: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E8:71:44:DC:CE:68:3E:CB:BA:F9:D3:A3:71:17:5E:11:F1:AC:98 X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.28.0.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:67:90:05:ae:5c:97:66:69:13:66:71:07:c1:c3:b2:d3:a4: 83:d3:f3:11:ca:78:6f:f7:82:70:4a:84:43:87:e8:0b:af:a8: 25:bc:94:c6:1d:bc:15:74:b5:2f:07:35:87:e5:44:82:3b:71: 2b:3a:10:9b:62:25:5a:20:37:dd:14:5c:32:48:9b:2f:fd:9e: 8f:c3:65:90:24:6f:83:3d:99:5b:41:e7:90:28:e5:ed:20:23: 0c:26:a8:c5:6b:58:dd:d7:a4:a7:b6:dc:9c:a9:5f:e8:4b:14: 91:85:a4:6c:76:e2:16:aa:1e:99:7f:94:70:b9:d8:61:58:44: 2d:4e:d6:09:f8:ec:09:7a:db:93:8a:92:e8:89:21:92:5a:4d: 62:51:f2:66:84:15:c7:36:1a:c7:34:e8:c5:df:d4:1f:06:ac: d7:ef:d8:c0:e4:5a:91:7e:26:76:c2:d2:6d:29:3f:95:a1:18: 62:6e:96:2f:15:f3:69:46:c5:72:a2:ce:08:07:84:21:90:4d: f8:48:85:c3:30:e0:84:3e:67:07:5a:71:88:e7:f7:8a:be:f2: e8:63:fc:40:dd:af:53:a0:e6:68:11:3f:61:d0:ca:c4:be:2b: e4:cd:6e:b1:bb:61:2c:04:ab:bb:9c:02:a7:6c:e9:58:17:6c: f7:9b:aa:b5 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIUMRE1JstsVgU38jJu5aMELB8pUsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MjVaFw0yNTAzMDQxNzUyMjVaMDMxMTAvBgNV BAMTKDY4RTg3MTQ0RENDRTY4M0VDQkJBRjlEM0EzNzExNzVFMTFGMUFDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXa9sKDHR6lpVw/c+68HzUXTK o1HmHgwRaiH/aSv/ns5vye74pwfbkoyCOImJwnn5PXbhOQAkF0B+JJShfS7FPGA1 wJ8eicVZw43ehsNl19kMchsOb/yVj+MLhFsoYnvojLRucUVdac8gE/PhgpAcsV2x hzB14Oh9JJz82y1Ie1ROqQzHED3xDluRXaa4pZxEd4F9wZ2PUxRL1pyY+qrXl5IR oojO1MOLp9eOsVVtxWjgyYYtrey8XjklK2NwTY96MLigX6/VHKDJQS1pSydPt7qC /gSgOSm4SAFvJ6iidYNSA8vJombg+mNCf6VwJhCwNtKVbtAmZrQLxBLTqGvrAgMB AAGjggLCMIICvjAdBgNVHQ4EFgQUaOhxRNzOaD7LuvnTo3EXXhHxrJgwHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzODJlMzAyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMgcADANBgkqhkiG 9w0BAQsFAAOCAQEAi2eQBa5cl2ZpE2ZxB8HDstOkg9PzEcp4b/eCcEqEQ4foC6+o JbyUxh28FXS1Lwc1h+VEgjtxKzoQm2IlWiA33RRcMkibL/2ej8NlkCRvgz2ZW0Hn kCjl7SAjDCaoxWtY3dekp7bcnKlf6EsUkYWkbHbiFqoemX+UcLnYYVhELU7WCfjs CXrbk4qS6IkhklpNYlHyZoQVxzYaxzToxd/UHwas1+/YwORakX4mdsLSbSk/laEY Ym6WLxXzaUbFcqLOCAeEIZBN+EiFwzDghD5nB1pxiOf3ir7y6GP8QN2vU6DmaBE/ YdDKxL4r5M1usbthLASru5wCp2zpWBds95uqtQ== -----END CERTIFICATE-----Generated at Sun May 5 00:13:58 2024 by rpki-client on console-ams.rpki-client.org