$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e203138363738.roa File: 3139312e39372e35392e302f32342d3234203d3e203138363738.roa (raw, json) Hash identifier: 6oamtY7pY4y/kDE4lha3qgHl5jtSGQpQQ5ngXMcrA6o= Subject key identifier: 36:D5:5B:5B:FD:C3:1B:88:E4:9B:4D:EE:47:A6:89:A8:BD:F5:52:5D Certificate issuer: /CN=8E9E896ADF8041E07AB6735225935260B837E74D Certificate serial: 5D177EB43DD78313D39457D5603F348A9E229F36 Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e203138363738.roa Signing time: Mon 04 Aug 2025 19:50:00 +0000 ROA not before: Mon 04 Aug 2025 19:45:00 +0000 ROA not after: Mon 03 Aug 2026 19:50:00 +0000 asID: 18678 IP address blocks: 191.97.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:17:7e:b4:3d:d7:83:13:d3:94:57:d5:60:3f:34:8a:9e:22:9f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D Validity Not Before: Aug 4 19:45:00 2025 GMT Not After : Aug 3 19:50:00 2026 GMT Subject: CN=36D55B5BFDC31B88E49B4DEE47A689A8BDF5525D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:93:7f:32:8b:75:7f:af:80:5c:f5:b0:0d: 7a:c9:c0:5a:4e:41:3b:91:70:63:6a:16:17:a8:98: 26:36:13:16:8b:5a:0f:fa:6a:d2:a4:d4:c2:e1:fb: 47:c6:30:67:b7:ea:00:29:67:ac:5b:56:5f:c7:66: 39:9e:cb:b4:76:4d:1f:09:64:1e:f8:26:42:ea:8a: da:de:a2:47:1c:2a:1f:2f:29:6b:30:47:19:33:54: 8f:2f:42:f4:98:45:74:01:9f:28:91:b8:a1:83:f0: a9:47:6a:a8:ec:53:25:3d:83:91:57:a1:31:ae:36: ed:ff:61:a3:85:0d:ad:51:e6:7d:e4:38:4c:f0:c6: c1:ef:ce:ab:ec:40:12:76:c7:06:e2:61:5f:d3:83: 96:cd:27:c1:59:3a:4e:5d:64:af:37:c7:bd:21:5b: 75:ec:74:51:02:d5:75:c7:5b:2f:a8:c9:42:33:0c: 33:81:3d:fe:96:2f:69:b6:36:f9:e6:0a:c5:b4:20: 95:56:02:62:ba:ec:79:66:b5:e3:f9:58:86:70:4f: ce:e0:c1:a1:a1:ba:17:7b:d5:5a:89:af:eb:1c:81: be:d2:bf:7b:60:12:09:4d:04:3b:33:25:ad:8a:64: 0a:9d:47:c4:7f:f5:6d:0a:ff:3a:96:f3:b2:25:f0: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D5:5B:5B:FD:C3:1B:88:E4:9B:4D:EE:47:A6:89:A8:BD:F5:52:5D X509v3 Authority Key Identifier: keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e203138363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.97.59.0/24 Signature Algorithm: sha256WithRSAEncryption 29:1d:f1:fa:24:9b:7b:ec:2c:51:f8:1d:e4:1c:78:c5:e0:cb: 71:41:d7:7a:99:6c:cc:80:3e:08:a4:c8:c0:b2:48:2e:b4:c2: 7e:3c:e2:37:68:f1:83:3d:bd:71:82:2f:7d:1d:d4:e2:c0:41: 6f:0f:09:2e:aa:0f:87:c5:eb:97:ea:f8:b3:28:06:c4:14:2c: 53:bf:56:35:39:36:e8:9e:c9:3c:96:2f:04:d4:95:7b:18:6d: 3e:29:e8:70:fc:42:82:ad:90:29:e4:d6:c8:b2:1d:9a:69:bd: 5c:82:9b:ee:29:d9:24:1c:65:bb:34:20:fc:8a:2a:39:c6:c8: ba:93:90:3f:3d:0e:90:f5:f2:16:b6:09:88:4a:d1:ea:60:f1: b9:49:3b:a8:8e:70:0d:19:97:2c:19:75:ed:bc:22:9b:ec:0e: ae:0f:7b:80:83:e5:1c:0b:0c:9d:e1:4b:d8:c1:6d:4e:c3:56: 6d:25:cc:fd:a5:b4:56:6e:f6:32:fe:8b:32:3b:da:0f:c6:a4: 1a:f5:1a:70:3a:5b:7a:f1:22:23:b6:6e:da:41:84:3f:ca:3d: b1:c1:f0:bc:3e:07:e3:3d:8f:ab:f0:3b:ce:c9:b3:b0:83:f0: 76:c7:a2:50:16:13:b5:bb:3f:6a:c4:68:aa:98:d6:f6:58:cf: 35:11:72:57 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUXRd+tD3XgxPTlFfVYD80ip4inzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC ODM3RTc0RDAeFw0yNTA4MDQxOTQ1MDBaFw0yNjA4MDMxOTUwMDBaMDMxMTAvBgNV BAMTKDM2RDU1QjVCRkRDMzFCODhFNDlCNERFRTQ3QTY4OUE4QkRGNTUyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfy5N/Mot1f6+AXPWwDXrJwFpO QTuRcGNqFheomCY2ExaLWg/6atKk1MLh+0fGMGe36gApZ6xbVl/HZjmey7R2TR8J ZB74JkLqitreokccKh8vKWswRxkzVI8vQvSYRXQBnyiRuKGD8KlHaqjsUyU9g5FX oTGuNu3/YaOFDa1R5n3kOEzwxsHvzqvsQBJ2xwbiYV/Tg5bNJ8FZOk5dZK83x70h W3XsdFEC1XXHWy+oyUIzDDOBPf6WL2m2NvnmCsW0IJVWAmK67HlmteP5WIZwT87g waGhuhd71VqJr+scgb7Sv3tgEglNBDszJa2KZAqdR8R/9W0K/zqW87Il8JbfAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQUNtVbW/3DG4jkm03uR6aJqL31Ul0wHwYDVR0j BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMxMzkzMTJlMzkzNzJlMzUzOTJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YTswDQYJ KoZIhvcNAQELBQADggEBACkd8fokm3vsLFH4HeQceMXgy3FB13qZbMyAPgikyMCy SC60wn484jdo8YM9vXGCL30d1OLAQW8PCS6qD4fF65fq+LMoBsQULFO/VjU5Nuie yTyWLwTUlXsYbT4p6HD8QoKtkCnk1siyHZppvVyCm+4p2SQcZbs0IPyKKjnGyLqT kD89DpD18ha2CYhK0epg8blJO6iOcA0ZlywZde28IpvsDq4Pe4CD5RwLDJ3hS9jB bU7DVm0lzP2ltFZu9jL+izI72g/GpBr1GnA6W3rxIiO2btpBhD/KPbHB8Lw+B+M9 j6vwO87Js7CD8HbHolAWE7W7P2rEaKqY1vZYzzURclc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:38 2025 by rpki-client