$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32332d3234203d3e20323633383333.roa File: 3133382e3235352e3136382e302f32332d3234203d3e20323633383333.roa (raw, json) Hash identifier: EbOdk30AuPHmCl59QE7Gdy83tz5Afnjl0z+A/YRBRXg= Subject key identifier: D3:7F:8C:52:06:28:C3:FC:48:B6:2C:79:CA:2F:A2:BD:01:6D:37:F1 Certificate issuer: /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF Certificate serial: 5A0E7B660ACA3316F8BAE12AEC0FA0530EEFFD8A Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32332d3234203d3e20323633383333.roa Signing time: Fri 06 Mar 2026 11:33:08 +0000 ROA not before: Fri 06 Mar 2026 11:28:08 +0000 ROA not after: Fri 05 Mar 2027 11:33:08 +0000 asID: 263833 IP address blocks: 138.255.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0e:7b:66:0a:ca:33:16:f8:ba:e1:2a:ec:0f:a0:53:0e:ef:fd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF Validity Not Before: Mar 6 11:28:08 2026 GMT Not After : Mar 5 11:33:08 2027 GMT Subject: CN=D37F8C520628C3FC48B62C79CA2FA2BD016D37F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:44:f6:13:13:36:c2:1c:17:91:72:87:65: c4:3e:3f:ba:76:23:4f:c6:6d:99:07:11:46:dc:9a: 38:c8:77:5d:4f:72:89:39:12:33:a3:85:1a:7c:60: 3d:92:9d:4b:bb:ed:c3:d2:fb:7a:25:6d:7c:ae:b9: be:49:0e:c2:26:6a:f7:80:78:d6:f2:b5:07:7a:2a: 0b:43:d5:53:11:19:b5:ac:41:50:86:be:ea:62:dd: 07:56:41:b4:5c:bf:72:27:b3:bc:17:f9:98:b8:30: fa:ab:1b:de:99:33:ad:77:da:b0:42:a4:a1:19:95: 2c:33:43:2a:53:51:7c:99:41:bd:c1:15:be:47:fc: 82:71:0a:3d:ef:74:c9:4d:9c:0e:16:7d:53:c6:9a: da:3b:ca:05:9f:d2:3f:bd:fc:0f:a5:3e:f2:63:ad: 62:ae:dd:9b:c2:33:b0:3d:86:2c:f7:9d:af:45:62: 27:cc:11:39:65:ff:59:79:44:8b:d6:b1:d3:be:ed: 56:b0:48:65:a6:f3:27:83:a9:67:8c:a6:67:41:20: b8:90:d0:66:85:8f:90:c8:f4:da:d1:d4:9c:45:cb: 2e:2f:61:78:a3:ec:33:4b:15:16:eb:05:3a:44:e4: 29:13:b4:94:6a:26:17:b4:4b:dc:36:e9:c3:5f:9f: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7F:8C:52:06:28:C3:FC:48:B6:2C:79:CA:2F:A2:BD:01:6D:37:F1 X509v3 Authority Key Identifier: keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32332d3234203d3e20323633383333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.168.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:35:6b:e5:04:67:ed:e2:da:25:41:5c:2f:f6:f9:f9:73:7c: 02:5e:7d:44:e3:4f:62:b4:7c:45:64:08:42:b6:7d:76:aa:b8: c7:fb:ad:1d:fa:f7:d8:b9:c1:ff:da:66:0b:c4:2a:bd:79:a5: 82:31:4d:36:1e:d2:4b:9a:25:2c:3f:63:18:fc:81:2d:b4:f9: 39:fe:3d:3b:f2:c6:2c:a7:6a:2c:ee:59:6d:33:e4:0d:1a:4a: 6c:7a:5d:66:5f:74:3f:8c:83:a4:e4:fa:e8:4f:f8:e0:91:70: a8:8a:09:8a:37:0a:3f:9d:6b:d8:89:88:b2:8d:d7:60:85:f5: 32:f2:46:7a:48:da:72:ba:7c:61:d7:54:ac:89:b1:e3:30:dd: 30:cc:d2:8d:fe:b8:e0:c7:47:57:b5:e5:5b:7f:26:5c:01:be: 31:58:ce:bd:93:7b:5d:83:e0:2c:55:df:dc:74:4f:c1:3b:33: ad:86:cd:b4:4b:e1:91:9f:eb:31:30:7a:cf:ca:e4:d6:ce:8e: 0e:ba:2b:96:cb:09:49:7a:24:34:35:7b:a1:58:dc:45:20:01: e6:a4:68:18:c0:69:e1:45:46:a5:1d:dc:c1:cd:bb:c2:f3:50: 68:b7:f2:6a:af:57:30:cb:ff:6e:b8:12:4c:33:6c:fe:a5:81: fd:8a:44:11 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUWg57ZgrKMxb4uuEq7A+gUw7v/YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYyRUM1Q0MzNDM0NEFBQkMxRDVDNDE4NUE2MjIxNDJD MTIxM0FFRjAeFw0yNjAzMDYxMTI4MDhaFw0yNzAzMDUxMTMzMDhaMDMxMTAvBgNV BAMTKEQzN0Y4QzUyMDYyOEMzRkM0OEI2MkM3OUNBMkZBMkJEMDE2RDM3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4kT2ExM2whwXkXKHZcQ+P7p2 I0/GbZkHEUbcmjjId11Pcok5EjOjhRp8YD2SnUu77cPS+3olbXyuub5JDsImaveA eNbytQd6KgtD1VMRGbWsQVCGvupi3QdWQbRcv3Ins7wX+Zi4MPqrG96ZM6132rBC pKEZlSwzQypTUXyZQb3BFb5H/IJxCj3vdMlNnA4WfVPGmto7ygWf0j+9/A+lPvJj rWKu3ZvCM7A9hiz3na9FYifMETll/1l5RIvWsdO+7VawSGWm8yeDqWeMpmdBILiQ 0GaFj5DI9NrR1JxFyy4vYXij7DNLFRbrBTpE5CkTtJRqJhe0S9w26cNfn5iNAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQU03+MUgYow/xItix5yi+ivQFtN/EwHwYDVR0j BBgwFoAUjy7FzDQ0SqvB1cQYWmIhQsEhOu8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRjRDOTI0MkQxQzMwOTcyODhFNUY5RUIxODI5ODhFMEE0 MUNCMkI3NTM4REJGNzg2QTQ4QzhCQTFGMzY2MkU5LzAvOEYyRUM1Q0MzNDM0NEFB QkMxRDVDNDE4NUE2MjIxNDJDMTIxM0FFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjJFQzVDQzM0MzQ0QUFCQzFE NUM0MTg1QTYyMjE0MkMxMjEzQUVGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkY0QzkyNDJEMUMzMDk3Mjg4RTVGOUVCMTgyOTg4RTBBNDFDQjJCNzUz OERCRjc4NkE0OEM4QkExRjM2NjJFOS8wLzMxMzMzODJlMzIzNTM1MmUzMTM2Mzgy ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzMzODMzMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK /6gwDQYJKoZIhvcNAQELBQADggEBADo1a+UEZ+3i2iVBXC/2+flzfAJefUTjT2K0 fEVkCEK2fXaquMf7rR3699i5wf/aZgvEKr15pYIxTTYe0kuaJSw/Yxj8gS20+Tn+ PTvyxiynaizuWW0z5A0aSmx6XWZfdD+Mg6Tk+uhP+OCRcKiKCYo3Cj+da9iJiLKN 12CF9TLyRnpI2nK6fGHXVKyJseMw3TDM0o3+uODHR1e15Vt/JlwBvjFYzr2Te12D 4CxV39x0T8E7M62GzbRL4ZGf6zEwes/K5NbOjg66K5bLCUl6JDQ1e6FY3EUgAeak aBjAaeFFRqUd3MHNu8LzUGi38mqvVzDL/264EkwzbP6lgf2KRBE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:57:21 2026 by rpki-client