$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa File: AS20940.roa (raw, json) Hash identifier: XcftcQM1CV3s4JlkRKuC54GxcGUvnkMAqSl7EOyaOwY= Subject key identifier: D6:15:A6:41:8D:D2:E3:E2:38:5B:58:BF:E4:FA:C9:E9:8D:AB:A3:DC Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378 Certificate serial: 37C93E234B29616B86B355E3B26F6CC8691C78CF Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa Signing time: Thu 09 May 2024 23:45:00 +0000 ROA not before: Thu 09 May 2024 23:40:00 +0000 ROA not after: Thu 08 May 2025 23:45:00 +0000 asID: 20940 IP address blocks: 189.247.204.0/22 maxlen: 24 189.247.216.0/24 maxlen: 24 2806:1040:fc::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Jun 2024 10:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c9:3e:23:4b:29:61:6b:86:b3:55:e3:b2:6f:6c:c8:69:1c:78:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378 Validity Not Before: May 9 23:40:00 2024 GMT Not After : May 8 23:45:00 2025 GMT Subject: CN=D615A6418DD2E3E2385B58BFE4FAC9E98DABA3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:71:a3:cc:10:8b:f1:09:d6:35:2a:70:37: 3f:47:34:91:1f:93:98:88:28:09:1b:c0:fa:1c:51: 82:89:b5:87:63:84:ca:96:13:94:49:36:f7:b7:bc: 1d:d3:21:c0:0e:e2:10:17:4b:ea:dd:f0:c8:97:26: dd:a3:c2:8a:56:40:3a:8a:82:e2:11:8b:3c:5e:b9: 28:cf:a1:5d:17:15:53:f3:ee:ba:1d:76:32:92:7f: 68:c7:6e:b1:ac:b6:c1:1a:fa:30:9c:99:d9:14:11: 34:51:1a:4b:5a:d3:14:0a:77:01:5f:e9:c0:94:ae: ef:12:cf:b3:cf:ed:35:9b:b0:83:4c:4b:ad:b4:a5: e7:26:10:22:fd:b2:05:92:09:d4:89:ac:20:73:12: 93:30:9a:10:96:94:4e:8f:3c:31:9f:33:58:3e:f2: 3d:53:a9:f1:b5:72:70:6b:ae:a9:02:c3:d6:08:20: 69:93:55:5c:38:9a:0a:42:97:9f:30:22:8f:6d:14: 7f:6a:67:82:4b:65:a1:6e:35:17:d5:21:04:a9:81: 87:04:db:46:8b:99:20:50:d8:bf:d3:cd:86:bc:a2: 11:b5:ea:f2:75:87:a2:8d:9b:5e:51:ad:fd:c4:4c: 52:b4:f4:19:7c:bb:49:5f:de:9c:01:48:d5:73:1b: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:15:A6:41:8D:D2:E3:E2:38:5B:58:BF:E4:FA:C9:E9:8D:AB:A3:DC X509v3 Authority Key Identifier: keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.247.204.0/22 189.247.216.0/24 IPv6: 2806:1040:fc::/48 Signature Algorithm: sha256WithRSAEncryption b5:a2:8f:02:be:d0:be:b9:2a:ee:20:ed:da:29:2b:07:20:82: 2a:fb:8a:11:73:2d:75:5c:47:79:c2:2c:d0:45:d5:02:f9:d0: d7:f9:27:32:80:11:6f:a7:2e:ce:99:36:d5:83:5d:d0:e1:b9: a9:a1:6a:17:2e:bb:db:86:a9:03:4f:e5:0a:d5:a4:e5:7a:df: 1f:f9:e3:72:6d:9f:c4:83:02:1e:e2:76:fb:22:4e:91:03:a8: 5c:48:25:1b:40:66:ba:fc:00:50:5a:20:cf:c5:3f:ce:a2:b5: 21:c8:0f:0b:63:8f:7a:9b:fa:59:5e:7d:76:50:dd:07:e4:1f: f7:2c:09:40:43:e8:af:97:73:59:e4:6a:19:5e:01:19:ed:54: 1e:d0:ab:32:9f:93:74:41:37:17:b3:4b:fc:d7:bc:c6:96:bc: e9:ec:32:17:1c:07:d3:ff:73:41:a6:94:c0:ac:0a:2b:bd:09: 52:78:73:47:fa:1b:2b:99:09:a2:5a:40:57:d4:0b:d8:60:91: b1:d9:8e:a3:54:c2:ca:33:e0:ac:e5:c4:4e:75:de:dc:86:23: e8:71:7f:c7:6b:18:c7:56:be:aa:79:9f:ed:8b:fd:7b:fc:16: 9d:92:89:50:d2:85:1e:34:b3:a4:c8:3b:ba:94:4d:bf:e6:4d: aa:f5:b3:af -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgIUN8k+I0spYWuGs1Xjsm9syGkceM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAzMDQwNjFFQjk5 OEJGNzM3ODAeFw0yNDA1MDkyMzQwMDBaFw0yNTA1MDgyMzQ1MDBaMDMxMTAvBgNV BAMTKEQ2MTVBNjQxOEREMkUzRTIzODVCNThCRkU0RkFDOUU5OERBQkEzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3XGjzBCL8QnWNSpwNz9HNJEf k5iIKAkbwPocUYKJtYdjhMqWE5RJNve3vB3TIcAO4hAXS+rd8MiXJt2jwopWQDqK guIRizxeuSjPoV0XFVPz7roddjKSf2jHbrGstsEa+jCcmdkUETRRGkta0xQKdwFf 6cCUru8Sz7PP7TWbsINMS620pecmECL9sgWSCdSJrCBzEpMwmhCWlE6PPDGfM1g+ 8j1TqfG1cnBrrqkCw9YIIGmTVVw4mgpCl58wIo9tFH9qZ4JLZaFuNRfVIQSpgYcE 20aLmSBQ2L/TzYa8ohG16vJ1h6KNm15Rrf3ETFK09Bl8u0lf3pwBSNVzG+0tAgMB AAGjggKvMIICqzAdBgNVHQ4EFgQU1hWmQY3S4+I4W1i/5PrJ6Y2ro9wwHwYDVR0j BBgwFoAUyGjcQiRD+nDndhwDBAYeuZi/c3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0 ODMzRTg1QkU5RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3 MEU3NzYxQzAzMDQwNjFFQjk5OEJGNzM3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODY4REM0MjI0NDNGQTcwRTc3 NjFDMDMwNDA2MUVCOTk4QkY3Mzc4LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5 RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQVMyMDk0MC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAr33zAME AL332DAPBAIAAjAJAwcAKAYQQAD8MA0GCSqGSIb3DQEBCwUAA4IBAQC1oo8CvtC+ uSruIO3aKSsHIIIq+4oRcy11XEd5wizQRdUC+dDX+ScygBFvpy7OmTbVg13Q4bmp oWoXLrvbhqkDT+UK1aTlet8f+eNybZ/EgwIe4nb7Ik6RA6hcSCUbQGa6/ABQWiDP xT/OorUhyA8LY496m/pZXn12UN0H5B/3LAlAQ+ivl3NZ5GoZXgEZ7VQe0Ksyn5N0 QTcXs0v817zGlrzp7DIXHAfT/3NBppTArAorvQlSeHNH+hsrmQmiWkBX1AvYYJGx 2Y6jVMLKM+Cs5cROdd7chiPocX/HaxjHVr6qeZ/ti/17/BadkolQ0oUeNLOkyDu6 lE2/5k2q9bOv -----END CERTIFICATE-----Generated at Sun Jun 2 10:44:55 2024 by rpki-client on console-ams.rpki-client.org