$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa File: 3230302e33332e32302e302f32342d3234203d3e203238333939.roa (raw, json) Hash identifier: TRhHLNhGu0IMI/O+ACSQH+Lio7HLcYt64CjwPjd6cr8= Subject key identifier: DB:D0:71:A1:25:F4:0F:67:DA:AE:B7:D1:08:89:86:C6:78:59:B1:5B Certificate issuer: /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC Certificate serial: 316C6290A5193892DE3E6750BC3710D8A19C3A40 Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa Signing time: Fri 17 Jan 2025 04:20:00 +0000 ROA not before: Fri 17 Jan 2025 04:15:00 +0000 ROA not after: Fri 16 Jan 2026 04:20:00 +0000 asID: 28399 IP address blocks: 200.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6c:62:90:a5:19:38:92:de:3e:67:50:bc:37:10:d8:a1:9c:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC Validity Not Before: Jan 17 04:15:00 2025 GMT Not After : Jan 16 04:20:00 2026 GMT Subject: CN=DBD071A125F40F67DAAEB7D1088986C67859B15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:2b:49:f7:81:1e:91:b9:7a:73:8c:d0:86: ff:54:f6:98:fb:e5:4d:40:e7:9a:7d:e6:19:ac:ca: 07:2e:f7:af:66:75:96:b9:78:54:26:35:9b:d8:c3: 17:ca:05:19:d8:4a:35:c8:0a:c1:9c:50:69:b9:4f: ee:91:09:41:64:89:e2:27:b1:08:df:4c:1c:65:28: 9b:9a:f1:b6:f7:11:38:b5:0c:57:47:86:96:9e:99: 58:60:63:b6:96:eb:20:0c:6e:b6:f4:3f:f5:e5:3e: 31:f3:93:69:f7:c1:9f:d5:3a:1c:d3:78:1d:cb:bc: fb:41:63:2f:92:6b:74:d5:50:e7:f6:cd:cc:33:5e: 03:79:b5:4c:f5:a2:01:31:3f:d9:82:e7:34:8c:a4: d9:76:1d:0f:ac:2e:df:55:2e:23:dd:3d:0a:3b:37: 7f:31:85:8d:62:9b:2b:ad:5f:33:cf:22:26:45:aa: cf:af:1d:20:6b:d9:9f:30:6c:bd:55:0b:33:d4:4b: 29:1b:95:bb:95:f3:ae:67:ec:48:37:e7:3d:9e:2e: 47:94:51:be:a2:12:1b:19:45:db:89:22:66:7c:c8: 86:30:09:1e:0e:20:a4:cd:30:f5:ab:83:ad:e8:ef: 71:9d:21:f5:9d:23:37:23:57:5b:c2:c7:d6:69:d8: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D0:71:A1:25:F4:0F:67:DA:AE:B7:D1:08:89:86:C6:78:59:B1:5B X509v3 Authority Key Identifier: keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.20.0/24 Signature Algorithm: sha256WithRSAEncryption 59:8b:ba:49:d3:4e:66:65:a8:24:65:fe:2c:df:17:ad:70:3d: 2e:eb:6e:67:6f:50:f7:2d:74:37:45:b2:ba:b5:7f:93:55:f5: 13:1c:26:85:6c:ff:70:4e:8e:00:1f:18:77:40:96:aa:e0:1b: 79:bb:3d:48:89:ba:8b:55:c9:3d:1c:9b:af:54:9d:97:85:7b: 31:f6:2f:d8:0a:42:bf:2f:73:68:14:03:8a:a2:b7:03:ea:ad: 38:8e:cd:28:19:98:49:8f:35:d2:4b:10:5e:4e:7f:fb:0c:72: 84:1a:fa:08:16:b1:f5:a8:b3:8a:37:85:cc:33:96:d4:b2:4a: 5b:db:c3:ac:11:e8:dd:06:9b:e2:4d:58:71:7a:8b:ac:8b:69: 02:8a:df:1a:f8:42:db:75:ac:7b:ec:a7:ec:b6:29:53:a4:e5: 5f:a1:91:2c:5d:1b:ae:0b:cd:bc:4e:2b:b8:c0:71:63:c5:87: c2:3c:68:b7:5c:f3:f2:d1:44:9d:b3:26:bd:e0:4c:4d:19:61: 31:8d:83:5f:f2:79:76:5e:57:2a:f4:df:08:de:13:b9:e0:42: 66:88:f0:88:16:fd:1d:27:5f:23:a5:b2:d2:44:72:93:7f:62: 54:d8:d2:81:cf:1e:ce:ba:c5:96:73:54:28:a6:ea:46:92:4a: 1e:39:ef:5e -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUMWxikKUZOJLePmdQvDcQ2KGcOkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM0RTRBM0Q1QjM2RjUwM0NDNzk5M0Q5RDE1M0RBQTk5 QTdBOURBQzAeFw0yNTAxMTcwNDE1MDBaFw0yNjAxMTYwNDIwMDBaMDMxMTAvBgNV BAMTKERCRDA3MUExMjVGNDBGNjdEQUFFQjdEMTA4ODk4NkM2Nzg1OUIxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79StJ94Eekbl6c4zQhv9U9pj7 5U1A55p95hmsygcu969mdZa5eFQmNZvYwxfKBRnYSjXICsGcUGm5T+6RCUFkieIn sQjfTBxlKJua8bb3ETi1DFdHhpaemVhgY7aW6yAMbrb0P/XlPjHzk2n3wZ/VOhzT eB3LvPtBYy+Sa3TVUOf2zcwzXgN5tUz1ogExP9mC5zSMpNl2HQ+sLt9VLiPdPQo7 N38xhY1imyutXzPPIiZFqs+vHSBr2Z8wbL1VCzPUSykblbuV865n7Eg35z2eLkeU Ub6iEhsZRduJImZ8yIYwCR4OIKTNMPWrg63o73GdIfWdIzcjV1vCx9Zp2JhTAgMB AAGjggLGMIICwjAdBgNVHQ4EFgQU29BxoSX0D2farrfRCImGxnhZsVswHwYDVR0j BBgwFoAUg05KPVs29QPMeZPZ0VPaqZp6nawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQzc1REIwQTJGNTExNzIxMDZGQTFDRTc3NjVGQ0JBOUU2 REFFNkQ5MEE4RjExQjVGOUE2OTg0NzY2ODBFMjc3LzAvODM0RTRBM0Q1QjM2RjUw M0NDNzk5M0Q5RDE1M0RBQTk5QTdBOURBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MzRFNEEzRDVCMzZGNTAzQ0M3 OTkzRDlEMTUzREFBOTlBN0E5REFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREM3NURCMEEyRjUxMTcyMTA2RkExQ0U3NzY1RkNCQTlFNkRBRTZEOTBB OEYxMUI1RjlBNjk4NDc2NjgwRTI3Ny8wLzMyMzAzMDJlMzMzMzJlMzIzMDJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIIRQwDQYJ KoZIhvcNAQELBQADggEBAFmLuknTTmZlqCRl/izfF61wPS7rbmdvUPctdDdFsrq1 f5NV9RMcJoVs/3BOjgAfGHdAlqrgG3m7PUiJuotVyT0cm69UnZeFezH2L9gKQr8v c2gUA4qitwPqrTiOzSgZmEmPNdJLEF5Of/sMcoQa+ggWsfWos4o3hcwzltSySlvb w6wR6N0Gm+JNWHF6i6yLaQKK3xr4Qtt1rHvsp+y2KVOk5V+hkSxdG64LzbxOK7jA cWPFh8I8aLdc8/LRRJ2zJr3gTE0ZYTGNg1/yeXZeVyr03wjeE7ngQmaI8IgW/R0n XyOlstJEcpN/YlTY0oHPHs66xZZzVCim6kaSSh45714= -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net