$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137312e302f32342d3234203d3e203237383238.roa File: 3230302e372e3137312e302f32342d3234203d3e203237383238.roa (raw, json) Hash identifier: vzQm7/ycKoxLZjHw0dwUsqPD5S1FgL1oRrG1BerxJZs= Subject key identifier: 8D:69:AC:10:77:0D:59:30:93:CD:22:6D:5D:E2:E8:E5:51:BC:CC:D7 Certificate issuer: /CN=5D81157E960567670F7461B44557EFEA818501D2 Certificate serial: 33A0569F0F79FEE96EB494E916D26ED40294756F Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137312e302f32342d3234203d3e203237383238.roa Signing time: Fri 27 Mar 2026 18:15:01 +0000 ROA not before: Fri 27 Mar 2026 18:10:01 +0000 ROA not after: Fri 26 Mar 2027 18:15:01 +0000 asID: 27828 IP address blocks: 200.7.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 22:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a0:56:9f:0f:79:fe:e9:6e:b4:94:e9:16:d2:6e:d4:02:94:75:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2 Validity Not Before: Mar 27 18:10:01 2026 GMT Not After : Mar 26 18:15:01 2027 GMT Subject: CN=8D69AC10770D593093CD226D5DE2E8E551BCCCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:2c:dc:cc:e6:8d:8a:80:f2:b7:6b:21:d3: 95:77:6b:9f:9f:d4:09:9b:b1:eb:72:b5:2d:49:59: 68:6a:04:83:3a:51:49:e9:2d:b2:9d:9a:8d:1c:38: 59:b1:ec:07:61:3e:71:41:77:29:0b:3b:19:c0:dc: 4d:45:bc:3e:7d:53:f3:3c:f6:f5:65:f8:d1:d2:86: 5e:3b:cf:f9:24:84:df:ef:a4:de:57:13:47:52:1f: f5:c4:d7:c5:17:60:56:dc:f2:ab:94:41:29:7d:b3: e7:36:99:2c:63:f9:12:ed:d2:25:fb:d1:2f:58:34: 71:28:da:99:6e:3d:fd:c7:58:d2:d4:8e:f2:1a:a0: 23:94:1f:ae:68:7f:fb:58:f5:fb:a1:8e:13:0d:6f: 22:23:1d:3c:57:da:10:7b:f7:ac:0f:67:9f:2e:f5: ae:fe:c1:4d:ad:a0:1b:f0:86:37:a2:2b:cd:15:90: 4c:57:21:ce:07:db:85:fa:8d:06:5f:53:06:7b:09: e7:a4:1f:49:9a:ad:1f:5a:b8:73:68:44:e7:ec:ea: 98:d4:52:ac:c5:ec:80:22:32:af:e9:5a:f4:40:06: 5f:60:a5:4f:3b:55:f9:cf:d8:35:8f:38:b3:b3:98: 53:48:b2:c5:e1:ab:ef:ed:ed:ea:b9:82:de:16:49: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:AC:10:77:0D:59:30:93:CD:22:6D:5D:E2:E8:E5:51:BC:CC:D7 X509v3 Authority Key Identifier: keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137312e302f32342d3234203d3e203237383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.7.171.0/24 Signature Algorithm: sha256WithRSAEncryption 57:55:d5:1d:e8:66:24:28:8f:03:13:05:fb:3c:a0:0a:bb:87: 40:1d:f2:5f:79:5d:25:c3:f2:1d:da:fa:f8:58:8e:bf:b9:04: e6:ee:77:05:47:88:21:98:62:c8:ac:26:b6:3b:9a:5f:9c:4a: 4e:14:9d:47:f9:aa:89:cd:a2:ee:99:1b:db:f1:6a:c8:46:43: 46:85:64:c8:1f:43:fe:ba:09:dc:6d:72:52:3a:48:e6:2a:a8: 82:66:50:72:30:99:dc:ce:bb:bc:db:fb:d9:c4:ca:c2:e7:c2: b5:89:70:ac:1f:ab:ec:d2:a8:23:84:89:c3:6c:48:ef:b0:4e: 54:52:a6:66:a4:e2:c8:83:97:78:b1:5b:15:98:66:e3:ca:9b: da:3c:36:1e:cf:91:2f:cc:a1:4c:d6:6d:86:81:97:1c:2f:e2: 3c:d7:71:d4:5c:a5:d1:0c:be:b1:67:ee:7d:c0:c7:8e:6c:ff: 6a:2e:41:68:69:6a:f4:f3:5c:66:8a:8e:2a:71:7f:4c:21:5a: b7:da:1e:c8:a9:9e:b3:34:69:fe:7d:f1:50:17:19:fc:67:f2: aa:6b:56:29:48:c9:76:03:0e:c3:bb:b1:44:2b:01:dd:89:13: 58:1c:a3:d3:45:05:a9:d5:7c:78:4f:43:24:f0:8a:d3:e6:ef: 5f:a3:7c:58 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUM6BWnw95/ulutJTpFtJu1AKUdW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4 MTg1MDFEMjAeFw0yNjAzMjcxODEwMDFaFw0yNzAzMjYxODE1MDFaMDMxMTAvBgNV BAMTKDhENjlBQzEwNzcwRDU5MzA5M0NEMjI2RDVERTJFOEU1NTFCQ0NDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdCzczOaNioDyt2sh05V3a5+f 1AmbsetytS1JWWhqBIM6UUnpLbKdmo0cOFmx7AdhPnFBdykLOxnA3E1FvD59U/M8 9vVl+NHShl47z/kkhN/vpN5XE0dSH/XE18UXYFbc8quUQSl9s+c2mSxj+RLt0iX7 0S9YNHEo2pluPf3HWNLUjvIaoCOUH65of/tY9fuhjhMNbyIjHTxX2hB796wPZ58u 9a7+wU2toBvwhjeiK80VkExXIc4H24X6jQZfUwZ7CeekH0marR9auHNoROfs6pjU UqzF7IAiMq/pWvRABl9gpU87VfnP2DWPOLOzmFNIssXhq+/t7eq5gt4WSUfpAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUjWmsEHcNWTCTzSJtXeLo5VG8zNcwHwYDVR0j BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2 NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3 NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzczMTJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIB6swDQYJ KoZIhvcNAQELBQADggEBAFdV1R3oZiQojwMTBfs8oAq7h0Ad8l95XSXD8h3a+vhY jr+5BObudwVHiCGYYsisJrY7ml+cSk4UnUf5qonNou6ZG9vxashGQ0aFZMgfQ/66 CdxtclI6SOYqqIJmUHIwmdzOu7zb+9nEysLnwrWJcKwfq+zSqCOEicNsSO+wTlRS pmak4siDl3ixWxWYZuPKm9o8Nh7PkS/MoUzWbYaBlxwv4jzXcdRcpdEMvrFn7n3A x45s/2ouQWhpavTzXGaKjipxf0whWrfaHsipnrM0af598VAXGfxn8qprVilIyXYD DsO7sUQrAd2JE1gco9NFBanVfHhPQyTwitPm71+jfFg= -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:24 2026 by rpki-client