$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa File: 3230302e35392e32342e302f32312d3234203d3e203238303838.roa (raw, json) Hash identifier: rCY3/y+8UQL/7qYblcmKvrHH0ENrLybSfJDpGOX4y6E= Subject key identifier: AB:F2:31:89:98:79:2D:55:F0:95:67:43:1F:4A:67:AE:F4:1A:01:60 Certificate issuer: /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227 Certificate serial: 6F1F16CBA84757F73B1B942F9E1487D9F4563FD2 Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa Signing time: Tue 04 Feb 2025 18:30:16 +0000 ROA not before: Tue 04 Feb 2025 18:25:16 +0000 ROA not after: Tue 03 Feb 2026 18:30:16 +0000 asID: 28088 IP address blocks: 200.59.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 00:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1f:16:cb:a8:47:57:f7:3b:1b:94:2f:9e:14:87:d9:f4:56:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227 Validity Not Before: Feb 4 18:25:16 2025 GMT Not After : Feb 3 18:30:16 2026 GMT Subject: CN=ABF2318998792D55F09567431F4A67AEF41A0160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:c2:78:24:bf:55:a8:24:57:b9:a6:67:8c: eb:6b:53:4e:11:35:6f:72:88:12:d0:41:ce:78:1b: 31:4b:ef:fd:4a:28:2b:3b:e0:d3:55:f6:88:d7:0e: 62:52:6a:e5:b8:5e:39:4e:5f:a9:48:8d:42:1b:a8: 2b:56:bc:03:79:db:a0:e2:2a:5e:dc:a4:a2:61:f7: 46:79:ee:f9:3d:7b:46:1d:a6:40:eb:cb:00:d0:aa: 41:b4:8a:02:a7:d0:9a:e2:72:13:a4:79:e8:dd:c2: f1:1a:98:e7:81:40:e5:45:b5:fb:e2:a8:d8:dc:f2: d7:8e:33:cd:13:84:39:88:bb:51:43:7d:e9:3a:d1: 4c:bd:0f:9e:6a:c4:1a:43:3e:14:7d:c5:16:a4:d0: d2:2f:7f:eb:6a:09:cb:2e:48:04:ed:6d:f4:2c:02: a5:4b:db:f5:3a:06:17:ad:00:ba:ff:da:2a:70:f3: 00:52:3f:98:5c:7c:c2:0f:09:67:9b:ea:ea:cb:13: 25:14:6b:ad:cf:1c:ef:3b:49:dc:78:8c:fc:d7:22: 74:05:4e:f0:ec:27:4e:bb:f9:db:6b:80:e6:04:c1: 93:62:54:f0:58:6b:50:83:9c:1e:48:0c:93:cb:57: e6:e4:88:c8:8a:0f:e1:9d:d9:7c:cf:7e:16:74:9b: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F2:31:89:98:79:2D:55:F0:95:67:43:1F:4A:67:AE:F4:1A:01:60 X509v3 Authority Key Identifier: keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.59.24.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:b9:db:1b:c9:20:c4:07:86:28:d1:ff:ea:91:09:49:76:9e: 5c:23:cc:4f:b9:ca:33:6e:6f:18:71:94:79:ec:76:54:63:5d: f0:1a:10:fd:59:4c:d8:94:5c:ff:7f:0b:35:83:a1:c4:e1:15: 7f:3b:87:01:d4:d3:46:23:cd:33:1b:09:71:83:f1:7d:34:36: 31:60:b1:53:2f:87:61:56:cc:45:0b:f4:7d:c2:a1:3b:fc:be: dd:96:9f:70:f0:bd:eb:2d:0d:46:ac:3b:09:21:bd:d7:ac:58: fa:e2:12:7f:a0:11:1f:d7:eb:be:0b:aa:f2:8e:12:a9:04:62: 3e:17:2c:9a:7b:d6:82:1a:72:a9:75:c8:2b:46:f5:51:96:c9: c9:7d:3c:09:7f:3a:36:20:aa:b6:61:4b:86:16:bd:20:5a:4d: b1:94:bc:01:97:8e:01:a4:21:6e:6f:c8:42:fc:26:1f:a6:dd: bf:84:6f:99:65:5f:ed:a2:55:7d:9e:25:21:53:00:f4:b1:22: 3e:7c:95:7e:5a:36:33:ee:f0:f6:10:73:f1:e7:3e:76:e4:34: 67:f4:b5:1f:4b:15:1c:3e:aa:e0:6e:fe:bb:07:41:48:dd:9c: aa:ff:6d:24:c1:9b:ee:7e:08:7a:43:84:3f:18:9c:12:5d:3a: 3c:12:08:56 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUbx8Wy6hHV/c7G5QvnhSH2fRWP9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVENDJERkYxOTZGM0YxMUI4MjQ2NERFMUZCN0RERDE3 OTNERDIyNzAeFw0yNTAyMDQxODI1MTZaFw0yNjAyMDMxODMwMTZaMDMxMTAvBgNV BAMTKEFCRjIzMTg5OTg3OTJENTVGMDk1Njc0MzFGNEE2N0FFRjQxQTAxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQE8J4JL9VqCRXuaZnjOtrU04R NW9yiBLQQc54GzFL7/1KKCs74NNV9ojXDmJSauW4XjlOX6lIjUIbqCtWvAN526Di Kl7cpKJh90Z57vk9e0YdpkDrywDQqkG0igKn0JrichOkeejdwvEamOeBQOVFtfvi qNjc8teOM80ThDmIu1FDfek60Uy9D55qxBpDPhR9xRak0NIvf+tqCcsuSATtbfQs AqVL2/U6BhetALr/2ipw8wBSP5hcfMIPCWeb6urLEyUUa63PHO87Sdx4jPzXInQF TvDsJ067+dtrgOYEwZNiVPBYa1CDnB5IDJPLV+bkiMiKD+Gd2XzPfhZ0m/ZpAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUq/IxiZh5LVXwlWdDH0pnrvQaAWAwHwYDVR0j BBgwFoAULtQt/xlvPxG4JGTeH7fd0Xk90icwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FM0E0QkY3RDE4MzcyMEREOTU3Q0E5M0M0RTA3RjRERUZC MTAzODhGQzU5RkU4MEUzRUE4RjE1QzQwOTQ0NjFCLzAvMkVENDJERkYxOTZGM0Yx MUI4MjQ2NERFMUZCN0RERDE3OTNERDIyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUQ0MkRGRjE5NkYzRjExQjgy NDY0REUxRkI3REREMTc5M0REMjI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTNBNEJGN0QxODM3MjBERDk1N0NBOTNDNEUwN0Y0REVGQjEwMzg4RkM1 OUZFODBFM0VBOEYxNUM0MDk0NDYxQi8wLzMyMzAzMDJlMzUzOTJlMzIzNDJlMzAy ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzgzMDM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIOxgwDQYJ KoZIhvcNAQELBQADggEBAB652xvJIMQHhijR/+qRCUl2nlwjzE+5yjNubxhxlHns dlRjXfAaEP1ZTNiUXP9/CzWDocThFX87hwHU00YjzTMbCXGD8X00NjFgsVMvh2FW zEUL9H3CoTv8vt2Wn3DwvestDUasOwkhvdesWPriEn+gER/X674LqvKOEqkEYj4X LJp71oIacql1yCtG9VGWycl9PAl/OjYgqrZhS4YWvSBaTbGUvAGXjgGkIW5vyEL8 Jh+m3b+Eb5llX+2iVX2eJSFTAPSxIj58lX5aNjPu8PYQc/HnPnbkNGf0tR9LFRw+ quBu/rsHQUjdnKr/bSTBm+5+CHpDhD8YnBJdOjwSCFY= -----END CERTIFICATE-----Generated at Wed Nov 5 20:11:16 2025 by rpki-client