$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323033.roa File: 3134332e3230322e3235322e302f32322d3234203d3e20323033.roa (raw, json) Hash identifier: geTK+X8JYJRzGIU2RE8UXfuZBxUwhnB1/hEKqu1Vvh4= Subject key identifier: 40:F8:6C:02:2D:7D:B6:34:88:2E:86:C7:60:DB:CC:DE:F9:BA:EC:0D Certificate issuer: /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3 Certificate serial: 09D1B7D487387E2145E54D88A7E580A1136276AE Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323033.roa Signing time: Tue 20 May 2025 21:10:00 +0000 ROA not before: Tue 20 May 2025 21:05:00 +0000 ROA not after: Tue 19 May 2026 21:10:00 +0000 asID: 203 IP address blocks: 143.202.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d1:b7:d4:87:38:7e:21:45:e5:4d:88:a7:e5:80:a1:13:62:76:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3 Validity Not Before: May 20 21:05:00 2025 GMT Not After : May 19 21:10:00 2026 GMT Subject: CN=40F86C022D7DB634882E86C760DBCCDEF9BAEC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:d1:f4:0a:5e:98:fc:02:b5:90:ce:b8:cb: 7e:44:f6:98:af:09:af:22:ab:9d:9a:4f:36:7d:93: 1c:75:07:98:f6:8d:86:ea:01:a7:be:3b:4e:12:dc: 6b:7c:5e:c4:e7:a9:69:4d:07:e1:9e:c2:d5:e7:a1: fe:f0:4a:06:12:d3:78:e5:73:3b:5a:b3:f8:c0:fa: 1e:55:90:dd:5b:69:d7:2d:88:90:ad:74:a3:1b:69: c5:a4:55:d5:72:56:f1:fb:5f:a2:d5:f2:c1:5a:39: 59:cf:12:b6:7d:39:41:93:a3:70:33:42:da:81:4b: 94:42:92:5b:39:d0:41:98:55:50:b5:f9:63:a8:b3: 95:57:47:23:6f:49:4b:73:8d:15:87:7d:a5:c3:ec: ff:e2:86:36:eb:7e:88:a5:52:76:47:bb:40:fe:f7: 48:da:8f:ab:19:06:17:06:d9:56:40:fa:ae:fb:0c: de:58:9c:c6:e5:83:33:22:cf:06:83:20:c3:1b:c6: 97:5c:35:22:31:20:fc:22:3c:4e:60:99:42:5e:bb: f3:40:24:10:6a:3e:2f:5f:a2:d9:3c:bc:93:c8:87: 63:5e:2e:f3:99:08:20:54:63:15:41:5b:0b:6d:78: db:92:c2:42:ee:0c:0e:26:a6:a8:3c:93:96:8b:2e: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:6C:02:2D:7D:B6:34:88:2E:86:C7:60:DB:CC:DE:F9:BA:EC:0D X509v3 Authority Key Identifier: keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e20323033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.252.0/22 Signature Algorithm: sha256WithRSAEncryption 65:53:0d:f9:5e:53:f1:9a:80:51:76:f2:52:ce:31:04:6d:0d: 5d:ec:7b:2c:eb:2d:c8:c7:50:90:10:f9:bf:bc:e7:44:02:df: f3:56:6e:20:13:3e:4a:ca:65:7f:f4:3a:e7:8e:04:60:c6:8e: 1a:b4:5f:a5:7f:0d:1c:5f:68:59:7a:da:ab:0d:db:2b:c6:94: b5:03:b9:d1:02:11:02:a0:95:09:39:01:d8:ed:6d:9f:9f:b6: 71:3f:8d:d1:97:6e:a0:82:7a:b1:88:28:fc:cd:1b:42:18:c7: b8:a2:59:2e:68:1c:b3:26:30:22:97:e9:50:a5:d9:22:ca:16: 01:9d:dd:39:77:af:21:45:6a:b9:98:6f:be:64:14:3d:ec:f0: 1d:7c:4b:af:ff:24:85:df:61:c8:99:a3:ba:68:48:25:ae:45: 8f:ff:cd:be:76:05:1a:9d:b8:d4:1b:1f:94:4b:7b:13:98:a4: dd:c0:0a:6d:c0:72:ed:c5:35:e0:54:a6:68:05:45:58:b8:77: 1a:c8:b7:ef:1f:0e:41:6e:87:75:61:a6:db:dc:dc:f3:e4:2c: 4a:c9:1a:a3:3c:b1:47:04:4f:f5:80:67:17:2b:1f:c6:f4:10: 71:63:dd:4e:fc:79:f5:34:b1:6f:e6:a9:2d:30:9e:3e:15:8a: c6:8a:eb:eb -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUCdG31Ic4fiFF5U2Ip+WAoRNidq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI4RjJBODg2MTRDNjEyMkMyNTUxMEY3QTMzNjJDQjhG NDhDRUZCMzAeFw0yNTA1MjAyMTA1MDBaFw0yNjA1MTkyMTEwMDBaMDMxMTAvBgNV BAMTKDQwRjg2QzAyMkQ3REI2MzQ4ODJFODZDNzYwREJDQ0RFRjlCQUVDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV8dH0Cl6Y/AK1kM64y35E9piv Ca8iq52aTzZ9kxx1B5j2jYbqAae+O04S3Gt8XsTnqWlNB+GewtXnof7wSgYS03jl cztas/jA+h5VkN1badctiJCtdKMbacWkVdVyVvH7X6LV8sFaOVnPErZ9OUGTo3Az QtqBS5RCkls50EGYVVC1+WOos5VXRyNvSUtzjRWHfaXD7P/ihjbrfoilUnZHu0D+ 90jaj6sZBhcG2VZA+q77DN5YnMblgzMizwaDIMMbxpdcNSIxIPwiPE5gmUJeu/NA JBBqPi9fotk8vJPIh2NeLvOZCCBUYxVBWwtteNuSwkLuDA4mpqg8k5aLLvcBAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUQPhsAi19tjSILobHYNvM3vm67A0wHwYDVR0j BBgwFoAUko8qiGFMYSLCVRD3ozYsuPSM77MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRjYwMUI1QTNFQ0FFOTY4NkE0RThDMzVCRDlCODM4OTg5 REY4MUY3NDY2Q0Q4ODA4NjNFQjk4OTY5RDFCQzFFLzAvOTI4RjJBODg2MTRDNjEy MkMyNTUxMEY3QTMzNjJDQjhGNDhDRUZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjhGMkE4ODYxNEM2MTIyQzI1 NTEwRjdBMzM2MkNCOEY0OENFRkIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkY2MDFCNUEzRUNBRTk2ODZBNEU4QzM1QkQ5QjgzODk4OURGODFGNzQ2 NkNEODgwODYzRUI5ODk2OUQxQkMxRS8wLzMxMzQzMzJlMzIzMDMyMmUzMjM1MzIy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKPyvwwDQYJ KoZIhvcNAQELBQADggEBAGVTDfleU/GagFF28lLOMQRtDV3seyzrLcjHUJAQ+b+8 50QC3/NWbiATPkrKZX/0OueOBGDGjhq0X6V/DRxfaFl62qsN2yvGlLUDudECEQKg lQk5AdjtbZ+ftnE/jdGXbqCCerGIKPzNG0IYx7iiWS5oHLMmMCKX6VCl2SLKFgGd 3Tl3ryFFarmYb75kFD3s8B18S6//JIXfYciZo7poSCWuRY//zb52BRqduNQbH5RL exOYpN3ACm3Acu3FNeBUpmgFRVi4dxrIt+8fDkFuh3Vhptvc3PPkLErJGqM8sUcE T/WAZxcrH8b0EHFj3U78efU0sW/mqS0wnj4VisaK6+s= -----END CERTIFICATE-----Generated at Sun Jun 22 05:04:22 2025 by rpki-client