$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32342d3234203d3e20323633383333.roa File: 3133382e3235352e3136382e302f32342d3234203d3e20323633383333.roa (raw, json) Hash identifier: Nv7GPifsH68DiI5qWgzLgR9YZNfp6+VioqNbC0V5nG4= Subject key identifier: 90:8B:D1:8C:DD:68:B9:43:C9:C7:73:F3:B6:09:9B:FC:D3:C9:D3:99 Certificate issuer: /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF Certificate serial: 5DC8B0CBCF8A86180D511817D161D4B80E03FB53 Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32342d3234203d3e20323633383333.roa Signing time: Fri 06 Mar 2026 11:33:07 +0000 ROA not before: Fri 06 Mar 2026 11:28:07 +0000 ROA not after: Fri 05 Mar 2027 11:33:07 +0000 asID: 263833 IP address blocks: 138.255.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c8:b0:cb:cf:8a:86:18:0d:51:18:17:d1:61:d4:b8:0e:03:fb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF Validity Not Before: Mar 6 11:28:07 2026 GMT Not After : Mar 5 11:33:07 2027 GMT Subject: CN=908BD18CDD68B943C9C773F3B6099BFCD3C9D399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:fd:f1:f0:aa:a1:0a:15:f1:56:9c:79:ea: 9c:b9:2c:be:62:d4:35:7d:93:f3:29:01:6e:b0:d8: 40:b4:d5:74:8d:c4:ec:3c:44:dc:ad:6f:c7:16:11: e1:29:83:d8:11:0c:8a:6d:19:41:2d:f5:52:07:09: 4c:93:52:ce:6f:b4:52:48:f4:cf:6c:b7:fb:47:5b: 0e:72:61:92:55:ab:7d:8e:b5:af:7e:68:74:c5:80: 7c:cd:69:15:0a:48:a0:5c:26:8a:19:e4:62:5b:9e: d4:53:c3:23:80:bd:25:f7:cd:6e:2c:9e:31:5e:50: c8:ad:35:f2:64:8f:5c:64:70:8c:74:6b:27:f9:74: 93:b4:01:57:9e:40:de:9c:29:91:4f:ab:b8:6a:93: bb:72:7a:54:69:15:f4:b9:aa:83:58:e0:51:97:eb: 39:b5:dd:1d:d4:a6:1e:84:3c:ea:7b:a5:03:93:a4: 32:7f:00:be:ff:a3:60:06:71:b6:9d:2b:09:ac:ca: ba:d3:e6:56:6f:bb:eb:f8:fe:ac:78:9d:ff:8f:f6: 58:a3:20:4f:2a:ee:a3:b6:dd:0c:d6:ae:27:cc:2f: 40:9d:44:e3:21:8b:75:a8:fd:3a:b3:55:bf:af:1f: 2a:70:f6:82:53:a1:a9:3e:e7:a8:b9:aa:7a:53:4a: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8B:D1:8C:DD:68:B9:43:C9:C7:73:F3:B6:09:9B:FC:D3:C9:D3:99 X509v3 Authority Key Identifier: keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136382e302f32342d3234203d3e20323633383333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.168.0/24 Signature Algorithm: sha256WithRSAEncryption 29:1d:58:a6:54:99:9e:2d:7a:c8:9f:9d:20:56:28:65:45:61: 19:5d:1c:dc:5d:a3:7e:a4:27:0d:76:c6:8f:4c:f7:b7:b6:fb: fe:ad:63:c0:4c:a4:aa:a3:06:48:33:36:12:5e:40:30:30:cd: bd:68:c5:9d:ff:00:01:68:72:50:fe:65:a7:40:1f:cb:e0:18: 69:03:14:ec:d5:af:ff:1a:82:0c:b3:d7:e4:ab:59:69:42:53: b9:76:b5:e6:77:79:60:f9:81:c1:87:bc:81:58:ee:18:dd:0e: 73:f8:ce:29:c5:64:57:f5:6d:ad:ed:7d:28:57:49:b2:12:d1: 41:76:26:85:ea:f2:4c:80:c7:40:35:56:58:52:eb:e3:40:59: f3:59:78:26:b0:0d:2a:39:08:69:16:1a:51:e9:8b:1d:5b:ac: a9:c1:f4:a1:67:d0:ab:b7:0b:74:0a:f6:05:63:d7:93:af:b4: 3e:0b:e5:f3:84:9f:19:46:fe:55:0f:4b:fb:75:77:c7:be:ea: 54:7c:07:f3:71:db:61:98:89:73:81:5f:b8:16:65:4a:60:7a: e2:0a:84:3f:8a:cf:ab:aa:2c:f0:44:21:79:30:4a:af:fe:7b: 90:7b:24:7b:03:de:21:f5:81:0f:73:05:7a:0d:84:8e:50:84: ed:04:a5:19 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUXciwy8+KhhgNURgX0WHUuA4D+1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYyRUM1Q0MzNDM0NEFBQkMxRDVDNDE4NUE2MjIxNDJD MTIxM0FFRjAeFw0yNjAzMDYxMTI4MDdaFw0yNzAzMDUxMTMzMDdaMDMxMTAvBgNV BAMTKDkwOEJEMThDREQ2OEI5NDNDOUM3NzNGM0I2MDk5QkZDRDNDOUQzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+v3x8KqhChXxVpx56py5LL5i 1DV9k/MpAW6w2EC01XSNxOw8RNytb8cWEeEpg9gRDIptGUEt9VIHCUyTUs5vtFJI 9M9st/tHWw5yYZJVq32Ota9+aHTFgHzNaRUKSKBcJooZ5GJbntRTwyOAvSX3zW4s njFeUMitNfJkj1xkcIx0ayf5dJO0AVeeQN6cKZFPq7hqk7tyelRpFfS5qoNY4FGX 6zm13R3Uph6EPOp7pQOTpDJ/AL7/o2AGcbadKwmsyrrT5lZvu+v4/qx4nf+P9lij IE8q7qO23QzWrifML0CdROMhi3Wo/TqzVb+vHypw9oJToak+56i5qnpTSusFAgMB AAGjggLMMIICyDAdBgNVHQ4EFgQUkIvRjN1ouUPJx3Pztgmb/NPJ05kwHwYDVR0j BBgwFoAUjy7FzDQ0SqvB1cQYWmIhQsEhOu8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRjRDOTI0MkQxQzMwOTcyODhFNUY5RUIxODI5ODhFMEE0 MUNCMkI3NTM4REJGNzg2QTQ4QzhCQTFGMzY2MkU5LzAvOEYyRUM1Q0MzNDM0NEFB QkMxRDVDNDE4NUE2MjIxNDJDMTIxM0FFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjJFQzVDQzM0MzQ0QUFCQzFE NUM0MTg1QTYyMjE0MkMxMjEzQUVGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkY0QzkyNDJEMUMzMDk3Mjg4RTVGOUVCMTgyOTg4RTBBNDFDQjJCNzUz OERCRjc4NkE0OEM4QkExRjM2NjJFOS8wLzMxMzMzODJlMzIzNTM1MmUzMTM2Mzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMzMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK /6gwDQYJKoZIhvcNAQELBQADggEBACkdWKZUmZ4tesifnSBWKGVFYRldHNxdo36k Jw12xo9M97e2+/6tY8BMpKqjBkgzNhJeQDAwzb1oxZ3/AAFoclD+ZadAH8vgGGkD FOzVr/8aggyz1+SrWWlCU7l2teZ3eWD5gcGHvIFY7hjdDnP4zinFZFf1ba3tfShX SbIS0UF2JoXq8kyAx0A1VlhS6+NAWfNZeCawDSo5CGkWGlHpix1brKnB9KFn0Ku3 C3QK9gVj15OvtD4L5fOEnxlG/lUPS/t1d8e+6lR8B/Nx22GYiXOBX7gWZUpgeuIK hD+Kz6uqLPBEIXkwSq/+e5B7JHsD3iH1gQ9zBXoNhI5QhO0EpRk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:57:12 2026 by rpki-client