$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33322e302f31392d3234203d3e203136363239.roa File: 3230302e32392e33322e302f31392d3234203d3e203136363239.roa (raw, json) Hash identifier: VdjNQCDW58qpkdSxhHS0EB+ou6ZCoNsRS3ekA175IK4= Subject key identifier: 22:50:3A:F6:3C:F6:3E:80:1C:F8:DF:4A:76:E6:10:BF:41:04:DE:B5 Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Certificate serial: 6433E024BCD437ECC3475B76708FEC7EF7AE12CD Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33322e302f31392d3234203d3e203136363239.roa Signing time: Mon 12 Oct 2026 20:40:07 +0000 ROA not before: Mon 12 Oct 2026 20:35:07 +0000 ROA not after: Mon 11 Oct 2027 20:40:07 +0000 asID: 16629 IP address blocks: 200.29.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 Oct 2026 03:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:33:e0:24:bc:d4:37:ec:c3:47:5b:76:70:8f:ec:7e:f7:ae:12:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661 Validity Not Before: Oct 12 20:35:07 2026 GMT Not After : Oct 11 20:40:07 2027 GMT Subject: CN=22503AF63CF63E801CF8DF4A76E610BF4104DEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:2c:dd:50:7e:2d:d8:c8:06:6b:64:b1:71: b1:a1:6c:3c:86:bd:56:1a:e5:da:59:31:1e:63:bb: a3:7d:2e:71:0e:e8:bc:27:fd:19:15:8e:a6:ca:e1: 26:ae:63:a0:cd:26:b4:5b:57:8b:7f:8b:fb:1f:85: bd:2e:29:77:a3:4c:39:2e:62:ff:d5:cb:32:da:88: ad:43:c3:12:c4:2c:d6:f6:db:e4:2e:6b:30:dc:8c: 1c:8a:06:4e:d2:28:ab:a2:66:a7:25:97:0f:e6:c8: d8:00:b6:fb:85:40:5f:0e:74:87:44:cf:88:81:91: 18:ea:6b:5a:29:3b:7f:97:b6:d4:db:e9:5f:25:2a: 87:b1:40:ab:5b:c2:a0:97:81:c9:b0:f4:7d:9d:8d: 2b:a3:d9:25:47:d9:67:e4:76:23:86:0e:e0:ce:e7: bb:57:e8:c7:92:27:c8:58:de:5b:20:ca:ea:b8:53: 24:d3:6d:38:d2:08:bd:8f:4c:12:29:75:04:3e:e5: 3f:ab:ec:97:88:1b:90:82:0c:48:eb:c9:42:ee:0a: b1:b5:33:f9:1e:87:86:df:b0:ff:c7:65:a1:26:e8: f3:28:99:43:b9:7b:5e:63:95:47:20:8b:fc:38:84: b2:60:29:4d:83:7f:5e:52:7a:d7:e4:24:e2:16:e8: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:50:3A:F6:3C:F6:3E:80:1C:F8:DF:4A:76:E6:10:BF:41:04:DE:B5 X509v3 Authority Key Identifier: keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33322e302f31392d3234203d3e203136363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.29.32.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:39:ac:44:0d:91:20:72:82:57:bf:1e:b0:0b:f0:67:18:79: 66:78:ad:5a:11:35:38:b6:58:65:1b:b5:94:9c:40:42:ab:57: 6d:dd:ee:64:dd:3a:a9:1b:86:5a:22:66:94:2d:ad:e9:e7:21: ac:89:6b:e9:ec:f9:95:67:36:ff:da:31:20:48:4b:95:d0:4c: 26:40:10:e8:a0:14:51:11:3d:48:1b:c8:8b:71:61:8b:08:a1: cb:49:01:13:1c:b1:48:3d:2a:28:a9:da:93:57:69:0c:c7:cc: d7:b5:b3:57:d4:c5:67:45:07:d6:a2:16:63:46:86:fd:9c:6c: 3f:cf:f0:6c:d9:c7:92:dc:d3:b2:cf:bd:48:77:f6:53:c9:4e: 8d:b5:19:9d:b5:c7:16:d0:9e:c1:01:d4:03:81:7e:a1:e0:9d: 87:9e:14:de:65:37:12:ef:17:30:10:f0:fc:0c:59:73:92:1f: 3f:5a:89:71:a3:60:79:04:ab:69:d2:a5:d5:3c:d0:a1:08:ec: 58:17:c9:63:d5:62:14:8b:d8:01:7b:ae:9b:4a:87:2c:9e:cb: f8:27:2e:c9:61:d0:33:a1:56:28:2f:57:3c:e4:77:1c:29:ce: 25:87:9b:4d:5a:a3:69:df:40:76:5a:84:b7:c1:f1:16:f6:53: a3:69:1f:b1 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUZDPgJLzUN+zDR1t2cI/sfveuEs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0 RTBFMzY2MTAeFw0yNjEwMTIyMDM1MDdaFw0yNzEwMTEyMDQwMDdaMDMxMTAvBgNV BAMTKDIyNTAzQUY2M0NGNjNFODAxQ0Y4REY0QTc2RTYxMEJGNDEwNERFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRSyzdUH4t2MgGa2SxcbGhbDyG vVYa5dpZMR5ju6N9LnEO6Lwn/RkVjqbK4SauY6DNJrRbV4t/i/sfhb0uKXejTDku Yv/VyzLaiK1DwxLELNb22+QuazDcjByKBk7SKKuiZqcllw/myNgAtvuFQF8OdIdE z4iBkRjqa1opO3+XttTb6V8lKoexQKtbwqCXgcmw9H2djSuj2SVH2WfkdiOGDuDO 57tX6MeSJ8hY3lsgyuq4UyTTbTjSCL2PTBIpdQQ+5T+r7JeIG5CCDEjryULuCrG1 M/keh4bfsP/HZaEm6PMomUO5e15jlUcgi/w4hLJgKU2Df15SetfkJOIW6JXRAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUIlA69jz2PoAc+N9KduYQv0EE3rUwHwYDVR0j BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzOTJlMzMzMjJlMzAy ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIHSAwDQYJ KoZIhvcNAQELBQADggEBAE05rEQNkSBygle/HrAL8GcYeWZ4rVoRNTi2WGUbtZSc QEKrV23d7mTdOqkbhloiZpQtrennIayJa+ns+ZVnNv/aMSBIS5XQTCZAEOigFFER PUgbyItxYYsIoctJARMcsUg9Kiip2pNXaQzHzNe1s1fUxWdFB9aiFmNGhv2cbD/P 8GzZx5Lc07LPvUh39lPJTo21GZ21xxbQnsEB1AOBfqHgnYeeFN5lNxLvFzAQ8PwM WXOSHz9aiXGjYHkEq2nSpdU80KEI7FgXyWPVYhSL2AF7rptKhyyey/gnLslh0DOh VigvVzzkdxwpziWHm01ao2nfQHZahLfB8Rb2U6NpH7E= -----END CERTIFICATE-----Generated at Wed Oct 14 17:08:02 2026 by rpki-client