$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa File: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (raw, json) Hash identifier: M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k= Subject key identifier: 9D:74:C9:88:65:A9:F3:A8:FB:59:7B:99:1B:41:C1:E9:D7:F1:13:D5 Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Certificate serial: 07E064EBDC636EFB18A1A2A0634AD049FF09770E Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa Signing time: Tue 14 Jan 2025 10:15:00 +0000 ROA not before: Tue 14 Jan 2025 10:10:00 +0000 ROA not after: Tue 13 Jan 2026 10:15:00 +0000 asID: 265798 IP address blocks: 201.158.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e0:64:eb:dc:63:6e:fb:18:a1:a2:a0:63:4a:d0:49:ff:09:77:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8 Validity Not Before: Jan 14 10:10:00 2025 GMT Not After : Jan 13 10:15:00 2026 GMT Subject: CN=9D74C98865A9F3A8FB597B991B41C1E9D7F113D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:d8:c0:61:e5:a6:ac:fc:95:ad:5d:e6:83: e7:88:3b:a4:da:03:cb:8e:c4:9c:cb:60:b7:e3:7b: 37:73:cd:45:9a:f8:a9:d5:e8:b5:ff:67:97:2b:01: f5:3c:8c:a1:3e:9b:2d:9c:ce:ce:38:6c:9e:22:7f: e4:4c:e7:c7:07:55:4c:ab:77:87:68:b5:5d:36:b6: 25:0e:df:09:b1:dd:a1:a2:69:57:2e:25:56:dc:63: a9:5c:48:25:98:13:25:5e:f0:cd:9c:81:d7:a8:29: 7b:b7:12:73:8e:7f:62:83:ff:19:63:6b:c0:b9:7f: c3:21:a1:e8:29:ad:bf:76:f0:86:d9:de:d8:c2:bb: 28:eb:e4:60:b0:f8:61:28:81:ff:8c:d0:a7:b4:b6: 70:b4:14:4f:b7:b8:0c:9e:f9:98:bd:ae:85:8d:b5: 34:e0:37:b0:8d:0a:15:8f:85:a3:54:de:d2:d7:ee: f1:b7:b1:ad:b0:ae:01:82:9c:e2:5f:ae:fa:c2:b4: e5:09:71:f4:7b:3d:c6:f1:92:2f:d9:5b:c6:66:90: 1b:3f:ad:bc:8a:2e:00:6b:1c:7c:ed:95:00:20:98: 9d:a5:9d:5b:34:5e:b9:05:5f:dc:6c:4e:ad:94:14: 1d:08:a6:68:04:00:a1:dd:23:f0:c3:2f:92:f8:6d: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:74:C9:88:65:A9:F3:A8:FB:59:7B:99:1B:41:C1:E9:D7:F1:13:D5 X509v3 Authority Key Identifier: keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.158.96.0/23 Signature Algorithm: sha256WithRSAEncryption 64:7e:56:8c:b2:02:d3:c8:74:a8:b2:6e:58:11:e3:12:26:68: 37:1e:93:9a:f9:2a:46:6e:77:92:8f:71:be:d1:66:d5:4b:ca: ae:01:7b:30:bb:a8:c8:58:de:02:77:86:01:78:62:df:86:46: 3d:5e:cb:c9:43:b3:1a:9b:89:96:a2:d9:3c:73:d4:21:5c:ab: 04:72:9d:51:f4:db:7a:65:ec:2f:83:07:e0:8d:2b:66:a1:e5: d7:09:a4:cf:5c:ee:e0:40:cd:30:d3:4b:b3:e6:6b:73:d4:0c: 90:ef:cf:24:2c:7c:d1:2e:0b:3e:ba:19:61:f8:a6:f1:5b:04: 85:a8:e9:18:dd:8d:19:e9:a6:f7:fd:c2:4f:67:c6:e0:35:d8: a3:59:34:65:65:3b:ec:71:14:01:df:9a:f3:db:fb:45:e3:46: 37:28:8b:ee:b5:62:3b:09:45:46:08:2f:63:71:6c:48:a9:c6: be:ad:58:a8:6a:09:4d:04:cf:c7:05:8a:e6:8c:a4:b9:71:2c: 4e:b1:2b:e6:54:0a:61:68:02:d0:ab:ae:24:14:6c:17:92:40: b3:d4:94:73:ca:de:1f:93:36:14:07:7c:7a:bd:07:35:9d:3f: 7d:04:38:0d:58:40:b8:6f:aa:2a:35:65:e1:05:14:12:f5:89: 6c:52:ed:ea -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUB+Bk69xjbvsYoaKgY0rQSf8Jdw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0 NUMzN0JGODAeFw0yNTAxMTQxMDEwMDBaFw0yNjAxMTMxMDE1MDBaMDMxMTAvBgNV BAMTKDlENzRDOTg4NjVBOUYzQThGQjU5N0I5OTFCNDFDMUU5RDdGMTEzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPg9jAYeWmrPyVrV3mg+eIO6Ta A8uOxJzLYLfjezdzzUWa+KnV6LX/Z5crAfU8jKE+my2czs44bJ4if+RM58cHVUyr d4dotV02tiUO3wmx3aGiaVcuJVbcY6lcSCWYEyVe8M2cgdeoKXu3EnOOf2KD/xlj a8C5f8Mhoegprb928IbZ3tjCuyjr5GCw+GEogf+M0Ke0tnC0FE+3uAye+Zi9roWN tTTgN7CNChWPhaNU3tLX7vG3sa2wrgGCnOJfrvrCtOUJcfR7Pcbxki/ZW8ZmkBs/ rbyKLgBrHHztlQAgmJ2lnVs0XrkFX9xsTq2UFB0IpmgEAKHdI/DDL5L4bWZpAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUnXTJiGWp86j7WXuZG0HB6dfxE9UwHwYDVR0j BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1 OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wLzMyMzAzMTJlMzEzNTM4MmUzOTM2MmUz MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM1MzczOTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByZ5g MA0GCSqGSIb3DQEBCwUAA4IBAQBkflaMsgLTyHSosm5YEeMSJmg3HpOa+SpGbneS j3G+0WbVS8quAXswu6jIWN4Cd4YBeGLfhkY9XsvJQ7Mam4mWotk8c9QhXKsEcp1R 9Nt6ZewvgwfgjStmoeXXCaTPXO7gQM0w00uz5mtz1AyQ788kLHzRLgs+uhlh+Kbx WwSFqOkY3Y0Z6ab3/cJPZ8bgNdijWTRlZTvscRQB35rz2/tF40Y3KIvutWI7CUVG CC9jcWxIqca+rVioaglNBM/HBYrmjKS5cSxOsSvmVAphaALQq64kFGwXkkCz1JRz yt4fkzYUB3x6vQc1nT99BDgNWEC4b6oqNWXhBRQS9YlsUu3q -----END CERTIFICATE-----Generated at Sat Apr 26 18:18:02 2025 by rpki-client on console.sobornost.net