$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/34352e3137372e3139362e302f32332d3234203d3e20323633313839.roa File: 34352e3137372e3139362e302f32332d3234203d3e20323633313839.roa (raw, json) Hash identifier: qvNFDnOjDMw+GXxbfPyAU2QS7l50fbmh8b9BcBFp/RQ= Subject key identifier: 31:D5:39:56:57:3C:A1:6C:C5:28:42:AB:EC:79:CE:54:0A:8C:0D:10 Certificate issuer: /CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC Certificate serial: 2BEF69816EC92A3C40DAFE35B2BE27E9749BA770 Authority key identifier: 78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/34352e3137372e3139362e302f32332d3234203d3e20323633313839.roa Signing time: Mon 27 Oct 2025 18:51:07 +0000 ROA not before: Mon 27 Oct 2025 18:46:07 +0000 ROA not after: Mon 26 Oct 2026 18:51:07 +0000 asID: 263189 IP address blocks: 45.177.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ef:69:81:6e:c9:2a:3c:40:da:fe:35:b2:be:27:e9:74:9b:a7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC Validity Not Before: Oct 27 18:46:07 2025 GMT Not After : Oct 26 18:51:07 2026 GMT Subject: CN=31D53956573CA16CC52842ABEC79CE540A8C0D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:00:c7:6d:73:cf:69:70:74:75:b4:cd:05: df:62:9b:7d:b2:1f:76:40:37:b0:dc:e3:81:e6:7f: 12:11:0a:25:05:a9:bf:9a:7e:2e:4b:04:f2:5d:fc: 62:5e:2b:94:52:62:4e:9a:53:db:39:70:2d:43:89: 26:bd:fa:d5:a9:b3:f9:0b:55:9f:e6:0b:68:b0:78: fe:d8:d7:a3:ec:f2:61:1e:11:e9:ef:44:21:d4:a4: 03:36:bd:74:b0:5b:37:c7:bb:a0:50:2a:57:16:c7: b9:75:d1:e7:b8:84:9e:13:10:d5:d9:be:0d:a7:39: 94:ee:19:9c:f8:e1:db:a1:0a:03:01:8a:21:14:91: 01:6d:da:c6:b9:ce:cc:7d:90:69:4a:28:37:79:f5: ad:b8:07:0e:5b:00:04:5b:50:e2:eb:72:68:3a:4d: aa:eb:7c:16:76:dd:07:cc:df:a9:8e:eb:e2:73:17: c9:8e:2d:d6:47:8c:33:65:c7:0c:88:ef:ef:3d:30: 52:ec:0c:1c:f7:12:59:d0:81:e9:f7:5d:7e:8b:25: a5:c2:c7:1c:65:52:19:91:aa:2e:89:9c:7c:4d:e3: 9f:98:64:90:80:f9:a9:f6:6f:dd:3b:93:69:e6:b8: b7:b1:ff:17:c0:ba:4b:92:29:06:5e:7e:c8:d9:3d: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D5:39:56:57:3C:A1:6C:C5:28:42:AB:EC:79:CE:54:0A:8C:0D:10 X509v3 Authority Key Identifier: keyid:78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/34352e3137372e3139362e302f32332d3234203d3e20323633313839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.196.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:85:45:e1:18:88:4c:ba:60:b6:cf:ca:f3:1c:a0:88:da:38: e6:24:18:14:c4:8e:79:fe:f2:64:15:6c:ad:f1:2d:5c:2a:10: d6:1c:fe:a4:59:a6:70:31:dc:d2:24:1f:ab:f1:d1:a6:8d:31: e7:a9:a3:84:12:6a:57:ae:7b:41:f9:cb:86:1c:ab:a1:12:2f: 77:ce:c2:15:cd:09:a8:89:53:3e:d0:89:ff:22:7b:bf:6c:97: 09:21:10:2a:50:a4:a0:73:ff:3e:cb:95:99:04:0d:af:f0:9d: 88:bd:11:5f:b7:1d:e7:85:39:2c:99:b7:41:53:3f:b1:b0:03: 71:31:eb:d1:25:2e:ef:5a:d5:f4:45:9b:a6:7a:ff:ec:22:fb: 15:5c:1d:6a:1c:90:2e:a1:96:a5:24:74:7b:d0:6a:d4:91:22: cd:04:b7:df:6f:87:f5:13:f6:a6:3f:c5:62:22:6d:c0:7e:ec: 7d:7d:96:aa:cb:76:a7:31:5f:dc:b7:78:41:15:f4:38:79:33: 8b:0f:83:8f:4f:a7:a0:53:62:78:88:e6:05:87:93:a5:c0:b5: 72:9a:d3:84:79:1b:73:1d:0a:cb:c3:6d:af:85:67:a8:e7:b3: b8:cf:33:23:71:da:2e:7f:78:f3:fd:12:f8:66:d9:48:17:87: d6:93:f2:23 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUK+9pgW7JKjxA2v41sr4n6XSbp3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3OEQ5RTkwOEQwNTBFOEQ5OUU1NENERkRCODJFNkZG NDVGNkJCQzAeFw0yNTEwMjcxODQ2MDdaFw0yNjEwMjYxODUxMDdaMDMxMTAvBgNV BAMTKDMxRDUzOTU2NTczQ0ExNkNDNTI4NDJBQkVDNzlDRTU0MEE4QzBEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YQDHbXPPaXB0dbTNBd9im32y H3ZAN7Dc44HmfxIRCiUFqb+afi5LBPJd/GJeK5RSYk6aU9s5cC1DiSa9+tWps/kL VZ/mC2iweP7Y16Ps8mEeEenvRCHUpAM2vXSwWzfHu6BQKlcWx7l10ee4hJ4TENXZ vg2nOZTuGZz44duhCgMBiiEUkQFt2sa5zsx9kGlKKDd59a24Bw5bAARbUOLrcmg6 TarrfBZ23QfM36mO6+JzF8mOLdZHjDNlxwyI7+89MFLsDBz3ElnQgen3XX6LJaXC xxxlUhmRqi6JnHxN45+YZJCA+an2b907k2nmuLex/xfAukuSKQZefsjZPdi1AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUMdU5Vlc8oWzFKEKr7HnOVAqMDRAwHwYDVR0j BBgwFoAUeHjZ6QjQUOjZnlTN/bgub/Rfa7wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9COTFERThEMTc2Q0M3OUUxQzcyNDg1MjY0Njk4NTU1MTFE QzRFN0U3M0E0QTVCNDBERkY4RTRCNDBGOTIxMDA0LzAvNzg3OEQ5RTkwOEQwNTBF OEQ5OUU1NENERkRCODJFNkZGNDVGNkJCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc4RDlFOTA4RDA1MEU4RDk5 RTU0Q0RGREI4MkU2RkY0NUY2QkJDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjkxREU4RDE3NkNDNzlFMUM3MjQ4NTI2NDY5ODU1NTExREM0RTdFNzNB NEE1QjQwREZGOEU0QjQwRjkyMTAwNC8wLzM0MzUyZTMxMzczNzJlMzEzOTM2MmUz MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbHE MA0GCSqGSIb3DQEBCwUAA4IBAQBqhUXhGIhMumC2z8rzHKCI2jjmJBgUxI55/vJk FWyt8S1cKhDWHP6kWaZwMdzSJB+r8dGmjTHnqaOEEmpXrntB+cuGHKuhEi93zsIV zQmoiVM+0In/Inu/bJcJIRAqUKSgc/8+y5WZBA2v8J2IvRFftx3nhTksmbdBUz+x sANxMevRJS7vWtX0RZumev/sIvsVXB1qHJAuoZalJHR70GrUkSLNBLffb4f1E/am P8ViIm3Afux9fZaqy3anMV/ct3hBFfQ4eTOLD4OPT6egU2J4iOYFh5OlwLVymtOE eRtzHQrLw22vhWeo57O4zzMjcdouf3jz/RL4ZtlIF4fWk/Ij -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:22 2025 by rpki-client