$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa File: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (raw, json) Hash identifier: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc= Subject key identifier: 43:FB:FC:17:4D:C6:7F:94:33:6F:70:73:44:A8:4B:05:BD:BC:CD:92 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 38C2E68DA2649A9201E89EB777B4870AB648A0D3 Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa Signing time: Tue 04 Feb 2025 18:44:17 +0000 ROA not before: Tue 04 Feb 2025 18:39:17 +0000 ROA not after: Tue 03 Feb 2026 18:44:17 +0000 asID: 272970 IP address blocks: 201.158.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c2:e6:8d:a2:64:9a:92:01:e8:9e:b7:77:b4:87:0a:b6:48:a0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Feb 4 18:39:17 2025 GMT Not After : Feb 3 18:44:17 2026 GMT Subject: CN=43FBFC174DC67F94336F707344A84B05BDBCCD92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:5b:d1:72:d4:00:b6:8a:32:f0:fb:bc:2f: 57:d7:04:14:0d:48:c8:28:30:dc:f3:14:2d:58:5b: 09:ef:a2:68:e5:90:8f:a8:03:a3:dc:d7:b2:82:7e: 64:b5:b1:f6:99:7f:d4:5b:3b:2f:db:fe:47:2d:2c: 13:76:96:e4:4d:6c:e6:6a:e5:27:aa:cc:64:27:d0: d0:5a:66:95:b4:6f:cc:50:60:71:13:43:c5:93:86: 7f:4b:cc:d3:28:5e:cf:db:d6:60:c6:e0:53:bc:6e: 54:30:90:b1:ca:88:c7:3c:3b:3a:f0:2d:20:cc:52: 96:00:51:2b:ef:dd:20:a3:34:75:4c:9b:b8:48:73: f4:24:eb:e6:e8:e2:c0:8d:cb:36:f8:2b:b2:da:c7: fb:2e:c7:9d:12:66:45:32:91:bd:da:ec:31:4c:d0: 8b:59:7c:22:cf:f0:32:3e:c7:f1:91:17:2b:78:76: e7:29:f5:f1:9d:37:ef:c1:3c:32:81:d1:35:3c:4d: 7d:b2:0c:7d:27:8b:82:37:8e:70:95:e2:38:09:f4: 22:33:64:12:0e:d5:f6:46:18:7a:a0:9e:4d:3f:ec: 59:b0:21:9a:77:78:68:38:50:11:1c:93:5d:22:ad: 31:9d:8f:45:25:04:8c:f1:8c:fa:40:7e:b8:c7:86: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:FC:17:4D:C6:7F:94:33:6F:70:73:44:A8:4B:05:BD:BC:CD:92 X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.158.99.0/24 Signature Algorithm: sha256WithRSAEncryption a8:28:9c:53:d5:9b:60:76:ce:ba:a2:1a:e7:f0:50:b3:82:f5: df:03:5e:eb:53:b5:6b:24:67:a3:3e:ae:4a:9b:95:c8:35:0a: 41:b6:9b:77:df:db:10:fe:44:78:ee:e5:b8:52:5d:ee:f6:ad: a7:52:fb:3e:15:2c:87:00:46:e9:45:1b:ee:26:61:71:ef:63: ab:39:3d:9a:f7:5a:e5:b9:69:e8:bd:7e:37:3a:49:f4:e1:d0: bb:59:64:2b:b7:92:e0:b4:bf:99:14:37:4f:99:6f:41:a2:17: 91:de:f8:8d:16:04:44:c4:68:0b:e7:11:d7:5b:a7:ae:3c:99: e1:b5:87:29:a8:b6:3a:eb:08:b1:a2:64:47:ac:4c:91:f4:38: 6e:f6:2d:99:e7:77:f9:c1:39:95:0c:5a:ee:08:7e:a5:4d:69: 66:4f:2e:74:9b:90:56:42:08:6c:15:d4:62:3e:ef:97:f9:84: 58:5b:b7:17:e5:fe:67:7e:ea:1b:4c:03:6e:eb:a0:e8:50:14: 6d:17:de:c5:94:24:bf:01:42:67:58:3e:ca:77:5f:93:b7:d3: ae:f5:43:3e:16:f5:af:61:37:a8:62:12:7e:1e:7f:5f:a3:06: 6e:0d:52:86:80:6a:d3:fa:51:c8:64:5d:90:4c:3c:65:71:3a: 26:69:fa:16 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUOMLmjaJkmpIB6J63d7SHCrZIoNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNTAyMDQxODM5MTdaFw0yNjAyMDMxODQ0MTdaMDMxMTAvBgNV BAMTKDQzRkJGQzE3NERDNjdGOTQzMzZGNzA3MzQ0QTg0QjA1QkRCQ0NEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6R1vRctQAtooy8Pu8L1fXBBQN SMgoMNzzFC1YWwnvomjlkI+oA6Pc17KCfmS1sfaZf9RbOy/b/kctLBN2luRNbOZq 5SeqzGQn0NBaZpW0b8xQYHETQ8WThn9LzNMoXs/b1mDG4FO8blQwkLHKiMc8Ozrw LSDMUpYAUSvv3SCjNHVMm7hIc/Qk6+bo4sCNyzb4K7Lax/sux50SZkUykb3a7DFM 0ItZfCLP8DI+x/GRFyt4ducp9fGdN+/BPDKB0TU8TX2yDH0ni4I3jnCV4jgJ9CIz ZBIO1fZGGHqgnk0/7FmwIZp3eGg4UBEck10irTGdj0UlBIzxjPpAfrjHhifbAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUQ/v8F03Gf5Qzb3BzRKhLBb28zZIwHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wLzMyMzAzMTJlMzEzNTM4MmUzOTM5MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzNzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyZ5j MA0GCSqGSIb3DQEBCwUAA4IBAQCoKJxT1Ztgds66ohrn8FCzgvXfA17rU7VrJGej Pq5Km5XINQpBtpt339sQ/kR47uW4Ul3u9q2nUvs+FSyHAEbpRRvuJmFx72OrOT2a 91rluWnovX43Okn04dC7WWQrt5LgtL+ZFDdPmW9BoheR3viNFgRExGgL5xHXW6eu PJnhtYcpqLY66wixomRHrEyR9Dhu9i2Z53f5wTmVDFruCH6lTWlmTy50m5BWQghs FdRiPu+X+YRYW7cX5f5nfuobTANu66DoUBRtF97FlCS/AUJnWD7Kd1+Tt9Ou9UM+ FvWvYTeoYhJ+Hn9fowZuDVKGgGrT+lHIZF2QTDxlcTomafoW -----END CERTIFICATE-----Generated at Tue May 6 16:49:18 2025 by rpki-client