$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa File: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (raw, json) Hash identifier: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk= Subject key identifier: 30:79:62:16:40:B3:0D:F5:E6:37:D4:3A:28:DF:97:69:BC:9C:EF:5A Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 3B6675FE98C8579A1EB69E739D5F5EE22CD99C4B Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa Signing time: Tue 04 Feb 2025 18:16:56 +0000 ROA not before: Tue 04 Feb 2025 18:11:56 +0000 ROA not after: Tue 03 Feb 2026 18:16:56 +0000 asID: 27947 IP address blocks: 200.9.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:75:fe:98:c8:57:9a:1e:b6:9e:73:9d:5f:5e:e2:2c:d9:9c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Feb 4 18:11:56 2025 GMT Not After : Feb 3 18:16:56 2026 GMT Subject: CN=3079621640B30DF5E637D43A28DF9769BC9CEF5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:0b:5b:a4:cb:2c:d7:f5:f2:f1:6c:4a:0a: 15:c6:43:6e:d0:43:a8:0e:57:38:e6:51:ec:12:73: c8:f5:00:35:9a:25:ee:9f:8a:23:76:cf:a4:94:c3: 36:ac:80:77:03:9a:57:8e:15:1d:f0:70:18:62:67: c8:d9:e4:19:ad:9f:5c:f5:5f:dd:f1:09:40:db:f0: a6:a5:ca:56:7b:61:28:c2:a0:80:d4:4d:80:61:64: 91:13:20:47:f7:f0:0e:3a:9b:cc:06:60:ee:dd:c1: 71:54:8e:9e:3b:12:f4:85:7d:fc:c3:23:23:e3:f6: 39:78:89:89:91:86:37:f1:c2:b7:73:a8:be:0b:90: 68:e6:24:0a:09:38:22:07:d8:d7:23:bd:a6:e6:83: ec:c8:17:d9:4c:da:a5:63:fe:89:b5:c5:77:e7:6f: b5:52:da:cc:e9:5c:ff:44:a6:82:84:04:75:7d:84: 05:a0:04:43:8d:d5:75:22:a9:5f:e9:d3:76:1d:b8: 53:5c:61:cd:4f:8e:9b:aa:1e:3c:02:7c:af:57:22: 71:32:f6:17:4f:30:bf:80:f7:86:72:87:c3:20:d1: 30:83:6e:2b:0c:c4:c3:fb:15:1a:52:d1:8b:9b:01: 3a:49:f3:09:71:5a:72:df:8f:dd:eb:8b:82:f0:fc: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:79:62:16:40:B3:0D:F5:E6:37:D4:3A:28:DF:97:69:BC:9C:EF:5A X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.9.96.0/24 Signature Algorithm: sha256WithRSAEncryption 66:9b:1f:82:28:4c:d7:cb:03:7a:3e:1e:bb:53:2a:0d:52:2a: 25:95:ab:cf:04:fe:11:6a:8d:9e:36:76:3f:da:a2:67:93:65: bb:03:cb:84:52:b1:59:74:1a:7c:87:42:e0:8d:70:85:48:47: 15:d6:66:15:20:d3:18:43:37:c3:60:9c:3d:14:3f:6c:9d:a9: 4e:1b:dc:43:fc:08:10:4b:73:ac:3c:13:cb:d2:80:ff:09:d2: 9a:fd:85:95:12:a6:6e:06:31:85:59:7c:03:bc:1f:df:96:0b: a9:1e:27:f8:7b:b0:b3:3a:27:80:09:80:6d:d4:8f:ad:14:cb: 53:ce:e0:1b:90:ea:9c:bb:6e:8a:69:a8:13:4a:e2:8b:31:bb: bc:54:74:87:8c:91:67:d5:2e:b5:49:4f:59:a9:5f:81:b7:00: e4:26:93:ac:a0:aa:b3:8e:6a:a6:80:54:52:48:35:60:98:f5: bd:fb:db:4b:b0:13:9b:1e:ab:5e:88:bd:a5:e1:21:73:29:24: 43:ec:98:a3:b6:3f:56:60:67:79:4c:92:1a:01:51:f5:a7:0d: b2:24:89:98:ba:14:de:4c:76:9d:8c:c4:c7:03:e4:b3:d7:d5: 08:73:42:6a:79:dd:d5:02:b6:f4:f6:f4:ea:7b:18:1b:2c:97: e8:4a:e6:1b -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUO2Z1/pjIV5oetp5znV9e4izZnEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNTAyMDQxODExNTZaFw0yNjAyMDMxODE2NTZaMDMxMTAvBgNV BAMTKDMwNzk2MjE2NDBCMzBERjVFNjM3RDQzQTI4REY5NzY5QkM5Q0VGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNQtbpMss1/Xy8WxKChXGQ27Q Q6gOVzjmUewSc8j1ADWaJe6fiiN2z6SUwzasgHcDmleOFR3wcBhiZ8jZ5Bmtn1z1 X93xCUDb8KalylZ7YSjCoIDUTYBhZJETIEf38A46m8wGYO7dwXFUjp47EvSFffzD IyPj9jl4iYmRhjfxwrdzqL4LkGjmJAoJOCIH2Ncjvabmg+zIF9lM2qVj/om1xXfn b7VS2szpXP9EpoKEBHV9hAWgBEON1XUiqV/p03YduFNcYc1PjpuqHjwCfK9XInEy 9hdPML+A94Zyh8Mg0TCDbisMxMP7FRpS0YubATpJ8wlxWnLfj93ri4Lw/P8lAgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUMHliFkCzDfXmN9Q6KN+Xabyc71owHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wLzMyMzAzMDJlMzkyZTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAlgMA0GCSqG SIb3DQEBCwUAA4IBAQBmmx+CKEzXywN6Ph67UyoNUiollavPBP4Rao2eNnY/2qJn k2W7A8uEUrFZdBp8h0LgjXCFSEcV1mYVINMYQzfDYJw9FD9snalOG9xD/AgQS3Os PBPL0oD/CdKa/YWVEqZuBjGFWXwDvB/flgupHif4e7CzOieACYBt1I+tFMtTzuAb kOqcu26KaagTSuKLMbu8VHSHjJFn1S61SU9ZqV+BtwDkJpOsoKqzjmqmgFRSSDVg mPW9+9tLsBObHqteiL2l4SFzKSRD7Jijtj9WYGd5TJIaAVH1pw2yJImYuhTeTHad jMTHA+Sz19UIc0Jqed3VArb09vTqexgbLJfoSuYb -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:37 2025 by rpki-client on console.sobornost.net