$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa File: 3136382e3234332e37322e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: A7M3OcLr1Q6UBmt62hXDHcLKc2zoOH8TqhWizAK+ujk= Subject key identifier: 64:22:34:49:79:4B:4E:1B:AE:15:3E:02:6E:14:4F:A0:7F:8E:94:02 Certificate issuer: /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA Certificate serial: 0B83054750389727C992E9DDE48F787181DE13F2 Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa Signing time: Tue 01 Apr 2025 14:05:00 +0000 ROA not before: Tue 01 Apr 2025 14:00:00 +0000 ROA not after: Tue 31 Mar 2026 14:05:00 +0000 asID: 834 IP address blocks: 168.243.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:83:05:47:50:38:97:27:c9:92:e9:dd:e4:8f:78:71:81:de:13:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA Validity Not Before: Apr 1 14:00:00 2025 GMT Not After : Mar 31 14:05:00 2026 GMT Subject: CN=64223449794B4E1BAE153E026E144FA07F8E9402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:87:76:57:e2:7d:80:74:d3:9e:99:15:c0: 0b:e7:40:fd:ab:7c:f8:fd:a0:4e:22:e0:13:c4:f0: b1:be:c7:61:dd:3d:52:f8:a0:8e:66:3c:f5:7f:92: a4:7f:d1:38:d1:68:5b:69:65:6b:03:06:cc:b3:0a: d6:b3:ce:81:b5:90:7e:b1:c7:b1:45:b9:23:b5:23: 95:32:14:84:7e:23:55:f0:ac:d7:92:b6:1c:3e:51: 0b:ab:a1:fd:cf:61:b6:db:07:44:02:27:d1:c7:37: ea:f4:20:99:fd:f8:f8:ff:db:63:89:ee:8c:7c:c3: d5:b7:e3:c8:fd:c2:48:36:1b:cd:86:89:59:ce:94: b3:f4:65:dc:c8:59:c2:ca:94:92:6e:81:12:4d:fe: b5:66:53:6d:69:31:82:8b:e9:0a:39:8b:92:67:7a: 35:19:a3:07:06:32:22:37:2b:a7:8f:91:23:1a:a0: 38:9a:ff:95:05:fe:e8:81:6d:f3:9c:c6:a7:59:2f: 02:9b:51:17:c1:bc:bf:4c:9a:5b:5d:88:59:e9:cc: c2:f1:94:b7:12:70:d0:5c:c8:ee:dd:88:de:6d:88: ac:0a:fe:b7:93:fc:78:f1:24:8c:82:d7:30:12:6b: e3:b9:d0:5d:25:3f:05:e1:30:f9:f9:45:ca:89:41: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:22:34:49:79:4B:4E:1B:AE:15:3E:02:6E:14:4F:A0:7F:8E:94:02 X509v3 Authority Key Identifier: keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.243.72.0/21 Signature Algorithm: sha256WithRSAEncryption 56:61:0a:80:0d:0b:39:e0:72:d3:cf:35:02:84:b4:95:59:cc: bb:66:98:8b:84:46:e7:90:e6:4a:36:5f:0b:67:f2:02:37:a5: 37:8a:3e:91:d5:d7:cb:3b:c4:b7:8b:38:48:b3:8a:6d:9a:a3: 24:d8:4d:52:37:d2:58:c0:cb:d3:04:cf:ff:b3:1d:94:b3:d2: 15:33:2b:a0:07:6f:b0:1a:54:94:ed:20:57:88:37:c8:6a:77: ab:ce:ac:db:a4:4c:c2:09:56:fb:c7:65:97:8d:91:1a:74:fa: 72:2d:e5:66:db:75:59:20:d9:8f:4d:b7:e3:e6:58:6c:07:9f: ac:e0:b5:fb:e4:52:7c:23:4e:18:03:b7:8a:d3:d0:1a:ef:06: 7f:32:8d:95:54:34:86:bc:42:ea:3b:e3:74:d5:63:52:cb:7e: 9d:d8:de:00:fa:5f:c7:3a:d5:71:ba:2d:b8:2e:f4:88:ea:bb: de:3e:5e:af:67:28:1b:e3:cd:99:69:84:4a:b4:b9:c5:9e:76: e3:f1:89:d6:73:58:71:a2:00:76:fb:80:4a:a6:53:35:a8:bf: 4a:23:92:af:8e:0e:4b:74:06:76:50:4d:70:ac:4b:55:a3:43: 26:af:15:78:2b:d0:4f:9e:02:a6:57:95:d5:ce:71:b3:d7:15: 52:0e:40:36 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUC4MFR1A4lyfJkund5I94cYHeE/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC NjIzNkFGQTAeFw0yNTA0MDExNDAwMDBaFw0yNjAzMzExNDA1MDBaMDMxMTAvBgNV BAMTKDY0MjIzNDQ5Nzk0QjRFMUJBRTE1M0UwMjZFMTQ0RkEwN0Y4RTk0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfod2V+J9gHTTnpkVwAvnQP2r fPj9oE4i4BPE8LG+x2HdPVL4oI5mPPV/kqR/0TjRaFtpZWsDBsyzCtazzoG1kH6x x7FFuSO1I5UyFIR+I1XwrNeSthw+UQurof3PYbbbB0QCJ9HHN+r0IJn9+Pj/22OJ 7ox8w9W348j9wkg2G82GiVnOlLP0ZdzIWcLKlJJugRJN/rVmU21pMYKL6Qo5i5Jn ejUZowcGMiI3K6ePkSMaoDia/5UF/uiBbfOcxqdZLwKbURfBvL9MmltdiFnpzMLx lLcScNBcyO7diN5tiKwK/reT/HjxJIyC1zASa+O50F0lPwXhMPn5RcqJQTALAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUZCI0SXlLThuuFT4CbhRPoH+OlAIwHwYDVR0j BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3 MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3 RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzNzMyMmUz MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqPNIMA0GCSqG SIb3DQEBCwUAA4IBAQBWYQqADQs54HLTzzUChLSVWcy7ZpiLhEbnkOZKNl8LZ/IC N6U3ij6R1dfLO8S3izhIs4ptmqMk2E1SN9JYwMvTBM//sx2Us9IVMyugB2+wGlSU 7SBXiDfIanerzqzbpEzCCVb7x2WXjZEadPpyLeVm23VZINmPTbfj5lhsB5+s4LX7 5FJ8I04YA7eK09Aa7wZ/Mo2VVDSGvELqO+N01WNSy36d2N4A+l/HOtVxui24LvSI 6rvePl6vZygb482ZaYRKtLnFnnbj8YnWc1hxogB2+4BKplM1qL9KI5Kvjg5LdAZ2 UE1wrEtVo0MmrxV4K9BPngKmV5XVznGz1xVSDkA2 -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:44 2025 by rpki-client