$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e203136363239.roa File: 3230312e3232332e302e302f31372d3234203d3e203136363239.roa (raw, json) Hash identifier: zk/rtGFuK8UdbONEdLLl74oRnVGexhOlDqItBSUOuQc= Subject key identifier: 4A:AB:C2:5A:EF:41:42:C3:45:AC:35:0F:D1:A5:6C:7D:38:F4:7B:A9 Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 0433A817E69254DA16802BAA14D40F0DC043C777 Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e203136363239.roa Signing time: Tue 04 Feb 2025 18:30:02 +0000 ROA not before: Tue 04 Feb 2025 18:25:02 +0000 ROA not after: Tue 03 Feb 2026 18:30:02 +0000 asID: 16629 IP address blocks: 201.223.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:33:a8:17:e6:92:54:da:16:80:2b:aa:14:d4:0f:0d:c0:43:c7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Feb 4 18:25:02 2025 GMT Not After : Feb 3 18:30:02 2026 GMT Subject: CN=4AABC25AEF4142C345AC350FD1A56C7D38F47BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:f7:d1:44:3d:71:64:57:29:35:e4:0f:2d: 5c:4d:d5:b6:f0:32:7c:29:da:32:0a:fc:cd:8f:9d: f4:c2:8b:cb:7c:34:c6:40:59:46:3b:e6:25:cf:fd: cc:30:63:1d:ec:89:61:49:46:da:50:a1:ab:61:6b: bf:49:91:25:83:b8:3a:e7:59:1b:9b:24:cd:66:21: 4a:68:85:eb:3e:45:a5:e4:9a:b5:82:45:1f:f2:ab: 2c:55:4e:cd:ed:b6:9a:3c:82:10:3a:87:55:e9:af: ce:17:4b:eb:76:a0:3e:99:8e:cb:cb:02:38:8a:a7: c2:d8:7a:ad:d5:57:cc:1a:0b:6f:98:be:5b:45:8a: fe:c7:f2:00:04:88:6b:5c:69:90:15:00:24:04:ee: 44:8b:4d:03:b9:ea:04:e1:17:d9:85:1b:1f:da:54: 2d:ea:55:8b:a2:19:32:3c:c5:d1:59:60:c2:54:d1: 56:3c:c6:2c:c4:e8:08:51:0c:dc:1b:f5:7c:00:19: bd:80:6e:6f:12:e5:61:54:8d:8c:50:18:12:ce:54: ab:d5:e3:c5:03:98:9a:5b:2b:f4:1c:f6:b5:3e:11: 1a:19:c2:f7:2c:16:75:05:3a:f9:e3:3a:c6:a2:46: 63:b8:21:6b:2c:6d:12:93:19:15:0b:c1:af:d4:75: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:C2:5A:EF:41:42:C3:45:AC:35:0F:D1:A5:6C:7D:38:F4:7B:A9 X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e203136363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.223.0.0/17 Signature Algorithm: sha256WithRSAEncryption a5:52:7e:9b:9a:38:05:50:8c:99:17:16:28:44:ac:3d:29:57: 2a:e3:d2:1d:04:49:bb:54:c2:35:a0:88:cb:48:38:6b:27:b7: dd:55:ae:2a:1f:ab:1d:82:5a:99:b1:dc:91:84:68:ac:65:84: e9:af:d1:84:ea:74:aa:70:49:a2:8f:43:0b:a8:50:02:bb:9f: f3:c9:2b:50:a4:56:73:85:4c:b4:d8:df:ab:a7:82:68:93:73: 2f:89:26:ce:68:67:a9:83:63:39:95:44:12:b5:e1:1d:c9:06: bb:bc:2e:b6:46:df:15:1b:6d:ff:56:ef:43:e4:93:48:9d:22: 6d:3b:dd:59:db:ba:6b:2d:9b:46:5e:a8:05:3d:00:17:7f:c7: b7:c0:d1:4f:ea:8e:12:78:09:03:be:b6:e5:74:28:d6:fd:43: 40:4b:64:02:09:1c:6d:d8:e9:17:fa:6c:7f:b0:ba:9e:67:79: 63:77:c3:3b:67:18:3d:e9:19:ca:0b:e9:4b:da:d6:5e:86:03: 57:11:5f:d4:b1:6d:8c:32:63:5e:9c:b2:2a:86:d1:71:5d:d5: 5f:0a:d1:27:da:21:12:13:32:3c:d7:1f:bd:e7:54:be:76:81: 13:7d:71:f7:22:3b:a9:d9:bd:b2:f6:47:a0:43:b0:f8:5a:7d: 5a:da:0a:f2 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUBDOoF+aSVNoWgCuqFNQPDcBDx3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNTAyMDQxODI1MDJaFw0yNjAyMDMxODMwMDJaMDMxMTAvBgNV BAMTKDRBQUJDMjVBRUY0MTQyQzM0NUFDMzUwRkQxQTU2QzdEMzhGNDdCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHvfRRD1xZFcpNeQPLVxN1bbw Mnwp2jIK/M2PnfTCi8t8NMZAWUY75iXP/cwwYx3siWFJRtpQoatha79JkSWDuDrn WRubJM1mIUpohes+RaXkmrWCRR/yqyxVTs3ttpo8ghA6h1Xpr84XS+t2oD6ZjsvL AjiKp8LYeq3VV8waC2+YvltFiv7H8gAEiGtcaZAVACQE7kSLTQO56gThF9mFGx/a VC3qVYuiGTI8xdFZYMJU0VY8xizE6AhRDNwb9XwAGb2Abm8S5WFUjYxQGBLOVKvV 48UDmJpbK/Qc9rU+ERoZwvcsFnUFOvnjOsaiRmO4IWssbRKTGRULwa/UdSktAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUSqvCWu9BQsNFrDUP0aVsfTj0e6kwHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMTJlMzIzMjMzMmUzMDJlMzAy ZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfJ3wAwDQYJ KoZIhvcNAQELBQADggEBAKVSfpuaOAVQjJkXFihErD0pVyrj0h0ESbtUwjWgiMtI OGsnt91Vriofqx2CWpmx3JGEaKxlhOmv0YTqdKpwSaKPQwuoUAK7n/PJK1CkVnOF TLTY36ungmiTcy+JJs5oZ6mDYzmVRBK14R3JBru8LrZG3xUbbf9W70Pkk0idIm07 3Vnbumstm0ZeqAU9ABd/x7fA0U/qjhJ4CQO+tuV0KNb9Q0BLZAIJHG3Y6Rf6bH+w up5neWN3wztnGD3pGcoL6Uva1l6GA1cRX9SxbYwyY16csiqG0XFd1V8K0SfaIRIT MjzXH73nVL52gRN9cfciO6nZvbL2R6BDsPhafVraCvI= -----END CERTIFICATE-----Generated at Sat Apr 5 13:55:25 2025 by rpki-client