$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa File: 3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa (raw, json) Hash identifier: JgGVqGlq4lHRng+CXkn5nyRcVqvdNP8f0PN6ACtvdMU= Subject key identifier: 41:A4:0A:66:86:CE:77:BC:0B:F1:9C:78:86:58:99:63:43:CD:48:14 Certificate issuer: /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38 Certificate serial: 71947EA436D5514F0E683E6C5A4A1D838CFEE46F Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa Signing time: Tue 04 Feb 2025 18:47:57 +0000 ROA not before: Tue 04 Feb 2025 18:42:57 +0000 ROA not after: Tue 03 Feb 2026 18:47:57 +0000 asID: 32098 IP address blocks: 201.174.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:94:7e:a4:36:d5:51:4f:0e:68:3e:6c:5a:4a:1d:83:8c:fe:e4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38 Validity Not Before: Feb 4 18:42:57 2025 GMT Not After : Feb 3 18:47:57 2026 GMT Subject: CN=41A40A6686CE77BC0BF19C788658996343CD4814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:05:c3:ee:80:d2:b2:50:e7:c6:31:e5:b4: 8c:c2:13:1a:ed:f4:c4:c0:3c:16:7e:32:e9:74:bb: da:4c:38:4d:a7:c5:60:32:ae:e1:66:b1:da:4c:7a: c7:a8:dc:61:ab:b6:06:1a:38:46:24:3a:39:6c:92: 07:57:e0:b3:56:28:dc:79:35:69:21:4d:07:38:12: 75:64:4f:e2:45:4f:fe:14:a9:a3:2f:01:27:1a:fa: 49:5e:31:04:26:69:97:c2:e8:91:ff:12:a3:8d:39: 14:a4:f8:11:99:14:0a:5c:9c:03:7a:0f:fc:e1:89: 9f:d1:79:5e:fb:ba:0d:28:e4:48:34:a2:93:e5:ee: b3:e7:96:93:f5:bf:d6:4e:c0:43:85:73:d5:f7:e8: e5:ca:45:0c:a0:14:b9:08:ea:f6:e0:62:95:86:0b: 05:2b:24:7c:5f:2e:ce:f4:9f:59:8d:1a:a2:8c:a7: 6e:2e:03:fb:74:c9:d8:b4:cf:3c:4d:cb:b8:d3:04: d1:e6:3e:98:52:db:16:c5:5d:8d:a4:43:3f:a2:78: 8d:65:9b:e3:d1:3e:99:44:78:d6:7f:49:7b:9f:85: bb:a6:0c:fd:fe:57:c1:43:fe:29:c4:a9:bd:e5:34: 9e:49:87:cb:ec:cc:59:d2:45:67:39:cd:48:1f:3e: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:0A:66:86:CE:77:BC:0B:F1:9C:78:86:58:99:63:43:CD:48:14 X509v3 Authority Key Identifier: keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.174.112.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:c0:b2:d5:d4:57:53:96:5c:de:0f:ea:da:f3:a5:92:03:e8: c3:72:99:5f:af:bf:f8:c8:69:5b:9a:84:3a:93:f2:4d:80:6f: 1f:83:85:be:9c:c8:d0:9a:31:4f:e7:70:3d:26:a4:8c:6e:a3: a0:03:08:8d:4a:48:08:0c:cb:fb:8e:c3:e5:3f:dc:eb:35:a8: 26:40:c5:76:c4:17:8d:53:19:38:65:ec:57:e3:2f:c9:ab:71: 19:d8:5d:33:5a:15:c5:74:50:bf:a2:cb:82:24:49:10:95:9a: 1f:cf:15:c8:d3:49:c1:e0:79:d7:2f:5c:db:50:a6:49:e2:a9: d9:ec:1b:10:da:a9:ab:fc:84:09:e4:22:24:1d:f2:e7:af:56: 27:3d:db:55:bb:93:26:09:a4:81:8d:9a:a4:f4:8c:0e:de:cf: 02:a2:5b:ed:f8:8d:4d:77:ef:33:83:7b:e0:5c:9c:55:0c:23: 05:2b:4e:5d:6d:26:a2:ab:4c:c1:a1:09:5e:56:47:00:6d:17: 70:98:da:c3:ca:c4:d0:5e:80:6d:ea:56:a4:df:bd:a2:40:80: 8d:75:bf:ee:50:25:d6:4f:f4:c1:16:5c:64:b4:08:3d:f7:40: 5f:5e:b7:27:ff:47:24:a1:88:77:18:11:80:4d:e4:36:d9:c2: 30:31:61:d7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUcZR+pDbVUU8OaD5sWkodg4z+5G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0 QTA3MEQzODAeFw0yNTAyMDQxODQyNTdaFw0yNjAyMDMxODQ3NTdaMDMxMTAvBgNV BAMTKDQxQTQwQTY2ODZDRTc3QkMwQkYxOUM3ODg2NTg5OTYzNDNDRDQ4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKQXD7oDSslDnxjHltIzCExrt 9MTAPBZ+Mul0u9pMOE2nxWAyruFmsdpMeseo3GGrtgYaOEYkOjlskgdX4LNWKNx5 NWkhTQc4EnVkT+JFT/4UqaMvASca+kleMQQmaZfC6JH/EqONORSk+BGZFApcnAN6 D/zhiZ/ReV77ug0o5Eg0opPl7rPnlpP1v9ZOwEOFc9X36OXKRQygFLkI6vbgYpWG CwUrJHxfLs70n1mNGqKMp24uA/t0ydi0zzxNy7jTBNHmPphS2xbFXY2kQz+ieI1l m+PRPplEeNZ/SXufhbumDP3+V8FD/inEqb3lNJ5Jh8vszFnSRWc5zUgfPq3rAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUQaQKZobOd7wL8Zx4hliZY0PNSBQwHwYDVR0j BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1 NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1 QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMTMxMzIy ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMzMyMzAzOTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEya5w MA0GCSqGSIb3DQEBCwUAA4IBAQCPwLLV1FdTllzeD+ra86WSA+jDcplfr7/4yGlb moQ6k/JNgG8fg4W+nMjQmjFP53A9JqSMbqOgAwiNSkgIDMv7jsPlP9zrNagmQMV2 xBeNUxk4ZexX4y/Jq3EZ2F0zWhXFdFC/osuCJEkQlZofzxXI00nB4HnXL1zbUKZJ 4qnZ7BsQ2qmr/IQJ5CIkHfLnr1YnPdtVu5MmCaSBjZqk9IwO3s8Colvt+I1Nd+8z g3vgXJxVDCMFK05dbSaiq0zBoQleVkcAbRdwmNrDysTQXoBt6lak372iQICNdb/u UCXWT/TBFlxktAg990BfXrcn/0ckoYh3GBGATeQ22cIwMWHX -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:32 2025 by rpki-client