$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34322e302f32342d3234203d3e20323639393830.roa File: 3133382e3131372e34322e302f32342d3234203d3e20323639393830.roa (raw, json) Hash identifier: M6t8SBZZVGjVAcAJvxnrGZU6s2cBCLiIIojXT+mMLP8= Subject key identifier: 5C:EF:83:7E:60:68:56:99:71:05:54:E9:04:D5:59:35:67:F3:8C:32 Certificate issuer: /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654 Certificate serial: 6F637B9A4671C16F718000524F4838B231F9DD3A Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34322e302f32342d3234203d3e20323639393830.roa Signing time: Fri 21 Feb 2025 21:45:00 +0000 ROA not before: Fri 21 Feb 2025 21:40:00 +0000 ROA not after: Fri 20 Feb 2026 21:45:00 +0000 asID: 269980 IP address blocks: 138.117.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 23:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:63:7b:9a:46:71:c1:6f:71:80:00:52:4f:48:38:b2:31:f9:dd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654 Validity Not Before: Feb 21 21:40:00 2025 GMT Not After : Feb 20 21:45:00 2026 GMT Subject: CN=5CEF837E60685699710554E904D5593567F38C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:bb:10:7e:f2:b1:6d:5a:7e:aa:49:a6:6a: 1a:ad:b5:43:c5:29:e0:02:01:b1:c7:e8:24:1f:89: 25:37:14:d2:6e:34:75:ee:a9:60:5f:fe:c7:a5:9e: d6:cf:ae:1a:e9:4a:d2:35:a2:b7:fd:c8:a4:92:78: 48:ba:3b:8f:f5:73:94:cf:ee:8a:a1:7a:9a:35:89: df:f7:6a:c5:e0:a8:87:e0:97:08:4d:e0:77:28:c3: 44:99:e9:09:7a:d8:b9:41:07:84:af:20:4e:fa:a3: d0:b4:56:d4:4f:a7:5c:c7:a7:26:67:02:14:0c:fe: 8d:4a:96:ca:89:3b:08:1e:c7:15:0c:05:8a:cc:c1: 0f:7d:50:61:7f:69:91:f7:ba:0e:16:2d:4d:b5:b5: 5e:1b:9c:92:e0:a5:64:b8:93:2e:d3:64:3b:83:6d: 54:e9:1a:e5:f1:2c:e4:0e:f1:a6:5a:37:48:3d:9d: 06:40:04:b2:c3:02:b9:4c:29:1b:70:2f:f2:d8:89: aa:ff:0d:e6:ae:78:36:b6:9c:f9:d7:5c:1a:b7:39: 4f:39:20:94:f0:56:3e:5d:90:cf:c4:5b:ee:48:02: f0:eb:96:f7:cd:cc:e3:1e:45:83:00:9d:fd:e4:42: 96:94:1c:f3:80:1d:58:89:c1:2f:34:5a:2d:4a:0f: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EF:83:7E:60:68:56:99:71:05:54:E9:04:D5:59:35:67:F3:8C:32 X509v3 Authority Key Identifier: keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34322e302f32342d3234203d3e20323639393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.42.0/24 Signature Algorithm: sha256WithRSAEncryption 29:78:d3:c3:24:cf:ed:7f:0d:37:d6:60:40:a6:f2:48:ba:ab: 95:85:16:39:01:51:9a:d7:45:f0:7b:5a:3f:bd:46:88:26:12: 56:d1:ef:66:45:e5:51:41:4a:9d:41:6e:f8:8e:e0:fc:47:e8: b3:b8:d3:d7:90:7e:e2:4d:63:a2:c2:a2:96:a3:ad:aa:bf:16: 7d:1f:41:2b:fb:79:6c:45:79:67:a1:2d:4a:e0:61:7e:08:69: 56:ea:0e:e0:d7:96:ae:ed:7d:94:a5:10:cc:67:2b:13:93:d4: e4:30:56:9c:56:d0:87:62:58:db:7e:5a:35:1c:00:cd:a6:18: 77:44:d5:2b:02:05:ea:03:5f:59:e9:d3:5d:f5:e1:35:49:f0: 37:f3:e9:40:e8:4c:67:8d:4d:eb:e0:e2:1a:0c:fe:8b:cf:04: cc:0b:c1:d8:2d:2c:2d:06:06:80:28:37:82:73:26:e7:d1:5f: 1b:1c:78:2e:63:90:f6:94:ef:cb:7b:fb:17:11:49:1e:f9:d1: a6:e9:8f:17:78:08:c9:39:21:b5:07:68:7b:bc:43:aa:7e:6c: 15:43:5a:e1:4d:55:b1:93:3b:3c:d6:c3:05:de:3e:dd:f2:b5: 1e:80:96:a5:b4:10:39:a3:07:a6:25:ae:36:e4:21:7f:0d:e8: 3b:0c:56:2a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUb2N7mkZxwW9xgABST0g4sjH53TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEODI1QTI3QjJCMzQ3RjgwNkMyQ0FDREY0OTIwOUQx N0JCRjY1NDAeFw0yNTAyMjEyMTQwMDBaFw0yNjAyMjAyMTQ1MDBaMDMxMTAvBgNV BAMTKDVDRUY4MzdFNjA2ODU2OTk3MTA1NTRFOTA0RDU1OTM1NjdGMzhDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTR7sQfvKxbVp+qkmmahqttUPF KeACAbHH6CQfiSU3FNJuNHXuqWBf/selntbPrhrpStI1orf9yKSSeEi6O4/1c5TP 7oqhepo1id/3asXgqIfglwhN4Hcow0SZ6Ql62LlBB4SvIE76o9C0VtRPp1zHpyZn AhQM/o1KlsqJOwgexxUMBYrMwQ99UGF/aZH3ug4WLU21tV4bnJLgpWS4ky7TZDuD bVTpGuXxLOQO8aZaN0g9nQZABLLDArlMKRtwL/LYiar/DeaueDa2nPnXXBq3OU85 IJTwVj5dkM/EW+5IAvDrlvfNzOMeRYMAnf3kQpaUHPOAHViJwS80Wi1KD1txAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUXO+DfmBoVplxBVTpBNVZNWfzjDIwHwYDVR0j BBgwFoAUL9glonsrNH+AbCys30kgnRe79lQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRTUyQUM5MEM1MEZEMjJGRTI1MjFFNUQ1NEJCQzZBNUIz MDc4MUYzMzQ1MEE2MkRFREREQUYzQUIzRjcwNUVELzAvMkZEODI1QTI3QjJCMzQ3 RjgwNkMyQ0FDREY0OTIwOUQxN0JCRjY1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkQ4MjVBMjdCMkIzNDdGODA2 QzJDQUNERjQ5MjA5RDE3QkJGNjU0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkU1MkFDOTBDNTBGRDIyRkUyNTIxRTVENTRCQkM2QTVCMzA3ODFGMzM0 NTBBNjJERUREREFGM0FCM0Y3MDVFRC8wLzMxMzMzODJlMzEzMTM3MmUzNDMyMmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzODMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinUq MA0GCSqGSIb3DQEBCwUAA4IBAQApeNPDJM/tfw031mBApvJIuquVhRY5AVGa10Xw e1o/vUaIJhJW0e9mReVRQUqdQW74juD8R+izuNPXkH7iTWOiwqKWo62qvxZ9H0Er +3lsRXlnoS1K4GF+CGlW6g7g15au7X2UpRDMZysTk9TkMFacVtCHYljbflo1HADN phh3RNUrAgXqA19Z6dNd9eE1SfA38+lA6ExnjU3r4OIaDP6LzwTMC8HYLSwtBgaA KDeCcybn0V8bHHguY5D2lO/Le/sXEUke+dGm6Y8XeAjJOSG1B2h7vEOqfmwVQ1rh TVWxkzs81sMF3j7d8rUegJaltBA5owemJa425CF/Deg7DFYq -----END CERTIFICATE-----Generated at Fri Apr 18 22:06:23 2025 by rpki-client