$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa File: 34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa (raw, json) Hash identifier: CXzGXfR41i/1HvoAUoAc0uTBDAAIRoe5wXtGqXceCoE= Subject key identifier: 98:AD:C9:6D:C9:19:7D:6E:AA:7B:F1:A4:8D:E8:8B:A3:1D:97:1D:5B Certificate issuer: /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Certificate serial: 346ABD7D1787F3DC97D45B0B22564601FC744543 Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa Signing time: Fri 11 Apr 2025 18:25:00 +0000 ROA not before: Fri 11 Apr 2025 18:20:00 +0000 ROA not after: Fri 10 Apr 2026 18:25:00 +0000 asID: 267758 IP address blocks: 45.170.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6a:bd:7d:17:87:f3:dc:97:d4:5b:0b:22:56:46:01:fc:74:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Validity Not Before: Apr 11 18:20:00 2025 GMT Not After : Apr 10 18:25:00 2026 GMT Subject: CN=98ADC96DC9197D6EAA7BF1A48DE88BA31D971D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f3:26:0f:92:96:3c:2c:a0:39:b2:ca:5f:0e: 47:98:77:df:2f:3f:4f:59:d4:28:05:09:79:90:9c: 20:cb:00:dd:51:5a:bf:dd:ca:ee:f5:56:01:dc:8c: 1c:fc:46:c5:6e:3f:61:62:3f:72:25:ef:b4:0e:90: f0:7d:36:b6:8f:06:1a:8a:7a:0c:01:4a:2e:38:05: 6d:68:2c:37:b0:63:b5:87:72:3b:af:6c:d1:51:67: 5e:c4:49:06:d4:31:77:a2:8b:38:a6:82:c0:13:46: 96:53:98:00:86:44:5b:51:2c:a0:ae:f9:0d:88:1b: 23:64:2e:d5:27:e1:0a:de:68:d7:78:06:8a:a2:42: 55:15:89:bb:15:bd:e4:b5:32:66:fa:83:a4:35:37: 13:24:89:f8:03:df:10:a6:bc:49:67:0b:5f:23:bb: a2:f2:cd:48:86:c8:9b:48:59:44:30:53:11:8b:de: 47:0a:91:89:04:a3:5d:bf:51:62:6c:c2:82:4d:81: 6a:23:67:89:39:e4:46:72:6c:c2:d9:f2:c3:ac:94: 98:7f:4c:40:1b:06:10:11:7d:5a:70:bd:38:18:62: c3:d6:b8:ed:21:ff:ce:67:fc:21:c8:7e:1f:f7:2a: 9f:16:e8:b8:3a:3c:8d:36:02:aa:e5:bf:7c:72:c6: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AD:C9:6D:C9:19:7D:6E:AA:7B:F1:A4:8D:E8:8B:A3:1D:97:1D:5B X509v3 Authority Key Identifier: keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32342d3234203d3e20323637373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.102.0/24 Signature Algorithm: sha256WithRSAEncryption aa:f1:92:e5:94:14:9c:87:f3:37:bc:24:d7:5f:5a:0c:a5:a6: 5b:04:28:fb:a6:2e:ab:c4:11:6a:ce:71:d5:69:8d:b9:de:b5: fd:20:55:b4:be:f1:64:7b:0f:93:c5:32:37:d5:43:5d:ee:43: f7:e8:9a:cd:74:dd:26:7c:6d:d8:13:73:2b:cd:86:51:ab:84: d2:b1:3d:3e:b9:9e:8b:de:5b:06:f0:05:13:e2:92:c3:e6:1f: 51:6f:78:46:34:0d:b4:36:8d:d4:28:93:bf:a1:77:95:38:c8: 0e:1c:d7:64:c2:be:88:5d:43:cd:91:a5:80:7d:a0:53:f8:7c: 44:a3:ef:8b:af:40:4c:88:ef:0e:30:ff:9c:7d:d8:1e:3d:69: 3f:36:a2:43:8b:60:77:84:a8:97:70:3d:40:e9:a9:fc:ec:49: 66:6f:7e:98:b8:5f:6e:5a:86:61:c2:9c:46:c3:9d:63:75:f6: a4:59:46:cc:79:bd:05:11:27:c4:2d:6b:bc:39:2d:02:ff:e8: 6b:e2:a5:b7:b2:12:09:94:7c:11:a1:de:0e:d3:7c:cf:3b:ad: 58:96:17:14:51:9e:99:bb:70:75:83:b2:4f:b4:7b:33:98:a5: a5:25:2d:55:e9:dd:09:6b:6e:42:5c:41:1c:07:24:c5:41:dd: e8:dc:a8:2c -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUNGq9fReH89yX1FsLIlZGAfx0RUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz QThCNEI4RDAeFw0yNTA0MTExODIwMDBaFw0yNjA0MTAxODI1MDBaMDMxMTAvBgNV BAMTKDk4QURDOTZEQzkxOTdENkVBQTdCRjFBNDhERTg4QkEzMUQ5NzFENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs8yYPkpY8LKA5sspfDkeYd98v P09Z1CgFCXmQnCDLAN1RWr/dyu71VgHcjBz8RsVuP2FiP3Il77QOkPB9NraPBhqK egwBSi44BW1oLDewY7WHcjuvbNFRZ17ESQbUMXeiizimgsATRpZTmACGRFtRLKCu +Q2IGyNkLtUn4QreaNd4BoqiQlUVibsVveS1Mmb6g6Q1NxMkifgD3xCmvElnC18j u6LyzUiGyJtIWUQwUxGL3kcKkYkEo12/UWJswoJNgWojZ4k55EZybMLZ8sOslJh/ TEAbBhARfVpwvTgYYsPWuO0h/85n/CHIfh/3Kp8W6Lg6PI02Aqrlv3xyxm55AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUmK3JbckZfW6qe/GkjeiLox2XHVswHwYDVR0j BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1 QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3 OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wLzM0MzUyZTMxMzczMDJlMzEzMDMyMmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALapm MA0GCSqGSIb3DQEBCwUAA4IBAQCq8ZLllBSch/M3vCTXX1oMpaZbBCj7pi6rxBFq znHVaY253rX9IFW0vvFkew+TxTI31UNd7kP36JrNdN0mfG3YE3MrzYZRq4TSsT0+ uZ6L3lsG8AUT4pLD5h9Rb3hGNA20No3UKJO/oXeVOMgOHNdkwr6IXUPNkaWAfaBT +HxEo++Lr0BMiO8OMP+cfdgePWk/NqJDi2B3hKiXcD1A6an87Elmb36YuF9uWoZh wpxGw51jdfakWUbMeb0FESfELWu8OS0C/+hr4qW3shIJlHwRod4O03zPO61YlhcU UZ6Zu3B1g7JPtHszmKWlJS1V6d0Ja25CXEEcByTFQd3o3Kgs -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:38 2025 by rpki-client on console.sobornost.net