$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37342e302f32342d3234203d3e203135303334.roa File: 3230302e36312e37342e302f32342d3234203d3e203135303334.roa (raw, json) Hash identifier: WxAUwkaJZbydTwDNFyMZsvoadB7THGHo27V1ugYOK2M= Subject key identifier: 3F:02:CC:60:D8:6F:00:95:4E:22:17:48:54:CF:29:9E:01:66:61:0C Certificate issuer: /CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F Certificate serial: 24CF7C88511049AF6A12B155F0353D86689D7835 Authority key identifier: F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37342e302f32342d3234203d3e203135303334.roa Signing time: Mon 01 Sep 2025 18:30:02 +0000 ROA not before: Mon 01 Sep 2025 18:25:02 +0000 ROA not after: Mon 31 Aug 2026 18:30:02 +0000 asID: 15034 IP address blocks: 200.61.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cf:7c:88:51:10:49:af:6a:12:b1:55:f0:35:3d:86:68:9d:78:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F Validity Not Before: Sep 1 18:25:02 2025 GMT Not After : Aug 31 18:30:02 2026 GMT Subject: CN=3F02CC60D86F00954E22174854CF299E0166610C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:5f:45:b4:cd:0e:59:f2:4a:78:ce:10:c7: c5:c4:21:92:5e:8c:17:36:ba:b2:fe:2a:60:75:4a: e5:be:1f:4d:52:f3:c4:59:95:c1:2c:ae:cf:2c:fc: ae:7e:c6:47:e1:3c:9f:4b:7b:52:31:d0:88:eb:c9: 39:e5:c4:70:23:3d:e0:9c:5b:f9:f9:47:e6:c3:95: c8:fb:07:0d:91:e8:0f:e4:82:54:f7:bf:14:ef:91: 3f:25:f1:d4:76:af:e1:d5:c8:10:57:8f:98:23:81: 01:22:1c:38:fe:0d:bc:3b:1c:c3:c3:49:bf:9d:6c: cb:57:12:13:09:d8:12:6a:71:7a:52:1d:f7:ab:89: b4:cc:3e:6c:04:46:b9:c6:05:f5:5f:2e:e4:cd:12: 80:83:16:6e:52:ed:a8:d2:ed:44:04:07:c3:c2:3d: e8:4f:02:43:51:91:5f:04:58:c8:4e:7b:df:51:5d: 87:1c:e7:64:6f:f1:de:6d:62:44:3e:85:f6:ca:d6: 63:67:24:45:cd:ff:1e:b4:43:9f:a8:3b:70:fc:a4: b9:73:a4:bc:a7:ac:b2:47:8a:51:9a:9e:40:0a:61: 27:4b:6d:de:f8:e0:9b:35:a9:15:78:03:3e:64:41: 3b:b4:1d:5f:ea:48:7c:f7:e9:ba:09:10:5b:cd:4f: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:02:CC:60:D8:6F:00:95:4E:22:17:48:54:CF:29:9E:01:66:61:0C X509v3 Authority Key Identifier: keyid:F0:D7:9F:5D:97:04:D0:37:A5:FD:37:89:F7:A8:07:BE:09:AC:8B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0D79F5D9704D037A5FD3789F7A807BE09AC8B7F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E21FFE37CF0A0F08CBFD272A7B00A34F48C9B49688F7CDA45CD807CA6D2E854/0/3230302e36312e37342e302f32342d3234203d3e203135303334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.61.74.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:58:4c:f5:d4:17:44:dd:a2:39:1a:7b:64:7a:13:6e:08:0c: 3a:88:18:dc:d6:84:14:52:14:63:f2:cc:af:85:d2:14:b6:0c: 70:e8:d2:bb:ee:eb:22:2d:11:36:36:27:99:87:29:32:5e:d1: 06:84:3d:9c:7a:07:6b:be:a3:0d:fb:af:e6:81:94:de:8a:72: cf:62:e4:d5:b8:c9:42:f5:51:b1:79:c9:4c:52:26:da:0d:c5: e6:92:ed:2b:d9:6b:23:e6:09:b6:f0:33:6a:17:f0:06:d8:c6: 28:39:70:b1:be:65:df:0f:ce:7a:0f:8a:67:73:0c:2c:3c:82: e7:f4:bd:d2:22:02:11:e1:ac:8c:54:aa:0a:90:7e:aa:9c:ae: 52:d8:81:14:73:97:28:52:68:9c:bd:fb:df:59:09:da:4d:34: 19:ca:8a:3e:0d:4e:d6:fa:07:5a:e6:cf:c5:ca:f8:d8:d2:c9: a8:c8:36:21:29:a6:74:23:ab:66:2c:90:33:66:cc:46:20:b1: d3:d1:cb:80:20:9e:19:78:4c:84:9f:b8:89:2e:51:33:a0:86: 6c:cf:9e:63:8d:e7:84:9c:29:24:48:a6:cb:09:75:50:f9:e1: b2:c0:93:a8:be:32:47:6e:28:93:5c:5c:52:b8:25:96:44:de: eb:31:ae:9a -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUJM98iFEQSa9qErFV8DU9hmideDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBENzlGNUQ5NzA0RDAzN0E1RkQzNzg5RjdBODA3QkUw OUFDOEI3RjAeFw0yNTA5MDExODI1MDJaFw0yNjA4MzExODMwMDJaMDMxMTAvBgNV BAMTKDNGMDJDQzYwRDg2RjAwOTU0RTIyMTc0ODU0Q0YyOTlFMDE2NjYxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8l9FtM0OWfJKeM4Qx8XEIZJe jBc2urL+KmB1SuW+H01S88RZlcEsrs8s/K5+xkfhPJ9Le1Ix0IjryTnlxHAjPeCc W/n5R+bDlcj7Bw2R6A/kglT3vxTvkT8l8dR2r+HVyBBXj5gjgQEiHDj+Dbw7HMPD Sb+dbMtXEhMJ2BJqcXpSHferibTMPmwERrnGBfVfLuTNEoCDFm5S7ajS7UQEB8PC PehPAkNRkV8EWMhOe99RXYcc52Rv8d5tYkQ+hfbK1mNnJEXN/x60Q5+oO3D8pLlz pLynrLJHilGankAKYSdLbd744Js1qRV4Az5kQTu0HV/qSHz36boJEFvNT9WxAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUPwLMYNhvAJVOIhdIVM8pngFmYQwwHwYDVR0j BBgwFoAU8NefXZcE0Del/TeJ96gHvgmsi38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRTIxRkZFMzdDRjBBMEYwOENCRkQyNzJBN0IwMEEzNEY0 OEM5QjQ5Njg4RjdDREE0NUNEODA3Q0E2RDJFODU0LzAvRjBENzlGNUQ5NzA0RDAz N0E1RkQzNzg5RjdBODA3QkUwOUFDOEI3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEQ3OUY1RDk3MDREMDM3QTVG RDM3ODlGN0E4MDdCRTA5QUM4QjdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUUyMUZGRTM3Q0YwQTBGMDhDQkZEMjcyQTdCMDBBMzRGNDhDOUI0OTY4 OEY3Q0RBNDVDRDgwN0NBNkQyRTg1NC8wLzMyMzAzMDJlMzYzMTJlMzczNDJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIPUowDQYJ KoZIhvcNAQELBQADggEBAAxYTPXUF0Tdojkae2R6E24IDDqIGNzWhBRSFGPyzK+F 0hS2DHDo0rvu6yItETY2J5mHKTJe0QaEPZx6B2u+ow37r+aBlN6Kcs9i5NW4yUL1 UbF5yUxSJtoNxeaS7SvZayPmCbbwM2oX8AbYxig5cLG+Zd8PznoPimdzDCw8guf0 vdIiAhHhrIxUqgqQfqqcrlLYgRRzlyhSaJy9+99ZCdpNNBnKij4NTtb6B1rmz8XK +NjSyajINiEppnQjq2YskDNmzEYgsdPRy4Agnhl4TISfuIkuUTOghmzPnmON54Sc KSRIpssJdVD54bLAk6i+MkduKJNcXFK4JZZE3usxrpo= -----END CERTIFICATE-----Generated at Mon Oct 20 23:06:40 2025 by rpki-client