$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa File: 3139302e31342e36342e302f31382d3234203d3e203232353431.roa (raw, json) Hash identifier: DAG4YuWPkPM/tyjyeEkM3qYQx8hA7qv5k3hzePl0pRU= Subject key identifier: 18:49:4C:51:5F:3A:2E:CE:A1:41:8D:57:23:74:E0:FE:68:4A:0C:40 Certificate issuer: /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D Certificate serial: 70D89EA60D77F77C1A0697E082678842F0F10F92 Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa Signing time: Tue 04 Feb 2025 19:59:16 +0000 ROA not before: Tue 04 Feb 2025 19:54:16 +0000 ROA not after: Tue 03 Feb 2026 19:59:16 +0000 asID: 22541 IP address blocks: 190.14.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d8:9e:a6:0d:77:f7:7c:1a:06:97:e0:82:67:88:42:f0:f1:0f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D Validity Not Before: Feb 4 19:54:16 2025 GMT Not After : Feb 3 19:59:16 2026 GMT Subject: CN=18494C515F3A2ECEA1418D572374E0FE684A0C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:33:a7:69:cc:a2:e4:b7:d7:3d:b6:31:ab: 8f:a2:04:bd:8a:a4:69:6a:c7:87:23:17:3b:2e:7c: eb:2e:4c:9a:a5:5f:dc:40:fd:a9:e4:4d:e4:f5:1e: 9f:f4:50:24:0f:14:32:c0:fb:15:45:05:90:0b:f9: d5:63:86:9f:d8:6f:d4:ec:84:1a:80:0a:f6:0a:7c: 18:0d:86:9b:31:94:42:72:1f:9f:b6:24:2e:59:61: 70:15:0f:60:9a:0b:63:12:84:77:ba:92:b9:20:41: c7:6f:26:44:d9:7c:29:a7:eb:15:bf:34:2d:6f:c8: 23:8c:aa:8e:0e:0d:7a:1c:29:96:aa:4b:58:da:47: d7:07:aa:9c:aa:b2:cc:03:ae:bd:9c:56:46:05:9f: a3:86:e3:5f:61:10:a1:7b:f2:e6:3a:fe:be:b8:ef: b5:9a:34:6f:ff:65:2e:fa:cf:75:39:08:ab:d8:c4: 07:8d:38:1a:9a:dd:4c:fa:cc:bb:24:76:ba:92:aa: e7:7b:25:94:c3:a7:6e:17:fe:90:fc:9f:df:59:91: 36:cd:65:46:1e:b1:61:a8:1e:7d:27:56:54:4d:fb: 98:7e:34:11:cd:43:bd:39:ab:0c:da:db:38:c5:83: d9:f2:53:ab:89:de:f6:aa:ab:64:b7:78:2c:44:93: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:49:4C:51:5F:3A:2E:CE:A1:41:8D:57:23:74:E0:FE:68:4A:0C:40 X509v3 Authority Key Identifier: keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.14.64.0/18 Signature Algorithm: sha256WithRSAEncryption 18:71:7a:c2:6a:dd:e0:a7:52:e6:0b:f2:88:54:52:0b:1d:6b: e6:55:25:4f:ff:19:01:bd:74:c3:6a:da:b7:84:c4:a8:8f:1c: a0:6d:5e:d1:ce:95:14:14:12:f0:3d:ba:87:7f:ae:7e:9f:f2: 4b:0b:91:5a:39:be:21:3b:3c:f9:60:a5:0e:f9:cd:8d:ae:f2: 49:90:28:28:89:d2:62:ff:73:a8:7c:4d:8b:03:d8:09:1f:73: d6:fa:81:2e:88:0a:be:0a:48:0d:cf:95:b7:27:85:d9:3f:4a: 6a:3e:a7:16:f5:22:64:8b:78:92:58:81:48:2b:6c:45:cd:37: 38:c7:86:3d:ef:5f:3c:74:fa:d4:61:89:44:53:91:97:43:6c: 80:c6:e3:e9:17:ab:f3:e6:00:a9:f9:a5:72:fa:82:6e:a1:ce: dd:31:95:11:f7:f4:df:6a:a0:7a:fd:b4:9b:e9:db:08:b2:3a: 9b:7c:49:d1:99:64:3e:9e:d8:1f:c2:57:6f:6d:f9:d7:4d:1a: cd:33:a9:fc:e4:72:f8:b1:2c:b7:9e:5b:b5:26:f4:b3:f2:6c: d7:88:53:38:b6:76:f5:f1:15:42:2c:24:44:6d:ab:7c:84:56: 21:53:1b:d2:bc:80:35:fd:80:58:5d:e1:62:86:fb:3c:89:39: 4f:e2:e2:33 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUcNiepg1393waBpfggmeIQvDxD5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRDFGREJCRDQ1N0NBMEY5Q0NGQzYzQThCODVDOTlB ODE5QUYzRDAeFw0yNTAyMDQxOTU0MTZaFw0yNjAyMDMxOTU5MTZaMDMxMTAvBgNV BAMTKDE4NDk0QzUxNUYzQTJFQ0VBMTQxOEQ1NzIzNzRFMEZFNjg0QTBDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxzOnacyi5LfXPbYxq4+iBL2K pGlqx4cjFzsufOsuTJqlX9xA/ankTeT1Hp/0UCQPFDLA+xVFBZAL+dVjhp/Yb9Ts hBqACvYKfBgNhpsxlEJyH5+2JC5ZYXAVD2CaC2MShHe6krkgQcdvJkTZfCmn6xW/ NC1vyCOMqo4ODXocKZaqS1jaR9cHqpyqsswDrr2cVkYFn6OG419hEKF78uY6/r64 77WaNG//ZS76z3U5CKvYxAeNOBqa3Uz6zLskdrqSqud7JZTDp24X/pD8n99ZkTbN ZUYesWGoHn0nVlRN+5h+NBHNQ705qwza2zjFg9nyU6uJ3vaqq2S3eCxEk2URAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUGElMUV86Ls6hQY1XI3Tg/mhKDEAwHwYDVR0j BBgwFoAUYg0f271FfKD5zPxjqLhcmagZrz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUZBMDM5QjlFQUYxM0FERTgxNzg4MkRENEJCRkZBMkJF MUQ0OTE3NjRCRjkzODNFQ0VFOTA4QkQyM0Y0Q0YwLzAvNjIwRDFGREJCRDQ1N0NB MEY5Q0NGQzYzQThCODVDOTlBODE5QUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjBEMUZEQkJENDU3Q0EwRjlD Q0ZDNjNBOEI4NUM5OUE4MTlBRjNELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFGQTAzOUI5RUFGMTNBREU4MTc4ODJERDRCQkZGQTJCRTFENDkxNzY0 QkY5MzgzRUNFRTkwOEJEMjNGNENGMC8wLzMxMzkzMDJlMzEzNDJlMzYzNDJlMzAy ZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzIzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa+DkAwDQYJ KoZIhvcNAQELBQADggEBABhxesJq3eCnUuYL8ohUUgsda+ZVJU//GQG9dMNq2reE xKiPHKBtXtHOlRQUEvA9uod/rn6f8ksLkVo5viE7PPlgpQ75zY2u8kmQKCiJ0mL/ c6h8TYsD2Akfc9b6gS6ICr4KSA3Plbcnhdk/Smo+pxb1ImSLeJJYgUgrbEXNNzjH hj3vXzx0+tRhiURTkZdDbIDG4+kXq/PmAKn5pXL6gm6hzt0xlRH39N9qoHr9tJvp 2wiyOpt8SdGZZD6e2B/CV29t+ddNGs0zqfzkcvixLLeeW7Um9LPybNeIUzi2dvXx FUIsJERtq3yEViFTG9K8gDX9gFhd4WKG+zyJOU/i4jM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:23 2025 by rpki-client