$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa File: 3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa (raw, json) Hash identifier: Vt+GnukSz2/rbDQYmfve7h5tScqNuNENqNAGZkS1F1o= Subject key identifier: EE:7A:C0:77:CC:94:E2:45:5C:BB:BA:59:AB:14:CA:3E:72:34:FD:3D Certificate issuer: /CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66 Certificate serial: 433D010444958F6FAF059457F37840A39E9A8027 Authority key identifier: 87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa Signing time: Tue 05 Mar 2024 17:58:42 +0000 ROA not before: Tue 05 Mar 2024 17:53:42 +0000 ROA not after: Tue 04 Mar 2025 17:58:42 +0000 asID: 263806 IP address blocks: 138.185.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3d:01:04:44:95:8f:6f:af:05:94:57:f3:78:40:a3:9e:9a:80:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66 Validity Not Before: Mar 5 17:53:42 2024 GMT Not After : Mar 4 17:58:42 2025 GMT Subject: CN=EE7AC077CC94E2455CBBBA59AB14CA3E7234FD3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:24:a4:82:d5:cb:77:30:d7:54:de:f0:9d: d5:4a:6d:bd:20:8d:02:07:0d:33:04:08:7e:34:3d: f0:82:32:a6:42:2e:7f:a1:ab:0c:20:07:71:fe:68: 7d:ef:66:18:7d:41:ce:5f:0f:53:e2:c5:ed:03:fd: 35:42:b2:02:f8:d7:62:6e:a8:14:c3:6e:2b:c3:09: 4b:f2:95:e3:d1:86:1e:d7:d3:b0:f5:57:54:b5:9c: f5:dc:8a:c9:b3:5e:6c:79:27:4d:e6:90:e7:06:e1: 96:6b:e8:27:6c:f8:65:ed:aa:f1:35:39:95:59:53: 79:03:b9:f3:1f:12:43:d9:d0:82:4e:55:c0:8b:bf: 6f:c9:ec:d0:66:6d:89:1d:7e:3d:bf:03:f6:1f:df: 13:29:01:f9:84:08:b7:1c:e7:44:89:c6:9c:2d:3d: 0b:12:7c:3f:e1:00:8d:a0:0d:7e:52:d6:a4:fd:0e: b9:f9:70:6b:7b:1e:d6:71:14:17:aa:36:cf:cd:43: ba:7a:fd:be:8e:af:c4:bc:86:11:b0:55:7a:12:0d: 34:f1:e7:1e:a2:71:74:62:91:18:d7:b6:8a:ef:32: a1:01:58:07:24:29:81:d2:43:23:7d:ed:f0:f2:e5: 6b:04:78:19:d4:53:30:14:d4:5d:ad:8d:8b:0e:19: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7A:C0:77:CC:94:E2:45:5C:BB:BA:59:AB:14:CA:3E:72:34:FD:3D X509v3 Authority Key Identifier: keyid:87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.64.0/22 Signature Algorithm: sha256WithRSAEncryption 33:1a:42:ba:b6:b8:21:30:2d:49:40:05:63:3b:5b:e9:5e:55: 69:f9:7b:7a:de:91:f9:dc:a6:95:bb:cb:11:ec:c9:22:81:fb: b7:07:94:1e:87:1f:13:a0:a7:e4:8f:d2:61:ec:97:fe:13:e6: 39:64:0b:40:c8:8a:0f:60:3e:a1:a8:0d:2d:8e:71:0b:e6:54: 58:03:68:be:f4:09:19:05:5b:13:3e:c5:23:e0:40:d1:7c:0d: 05:c1:cb:f6:3b:c3:16:38:fb:17:b8:d9:31:51:a2:23:d7:c3: d2:d4:06:7c:85:26:7d:df:b3:ca:52:a2:f7:dd:a1:27:9b:09: 78:54:2d:e7:42:3e:4b:ba:ab:76:e8:65:5b:ef:90:37:a6:e1: c4:cf:a4:94:21:cc:37:ea:6e:bf:c9:b8:c2:42:c6:8d:53:00: e7:9f:23:f1:1f:b1:15:a1:5b:b8:88:0d:85:25:07:db:48:57: 66:d1:df:dd:f0:98:54:2e:b9:68:60:34:ac:b8:9c:69:8b:62: 21:61:ea:29:f8:58:11:30:1e:28:88:8d:bc:97:8c:ea:b0:75: c2:bb:c3:6e:2b:0f:90:9d:87:df:d6:81:18:4b:a5:54:c3:d8: e7:aa:43:d8:cc:92:f9:9c:4b:79:2a:ad:ef:2e:35:f5:f8:b5: fd:83:96:a7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUQz0BBESVj2+vBZRX83hAo56agCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc1OTQwQzRGOUI1Q0QzQzFFMTU1ODVBNEI5QjFGRjRC REU5QkQ2NjAeFw0yNDAzMDUxNzUzNDJaFw0yNTAzMDQxNzU4NDJaMDMxMTAvBgNV BAMTKEVFN0FDMDc3Q0M5NEUyNDU1Q0JCQkE1OUFCMTRDQTNFNzIzNEZEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDSSkgtXLdzDXVN7wndVKbb0g jQIHDTMECH40PfCCMqZCLn+hqwwgB3H+aH3vZhh9Qc5fD1Pixe0D/TVCsgL412Ju qBTDbivDCUvylePRhh7X07D1V1S1nPXcismzXmx5J03mkOcG4ZZr6Cds+GXtqvE1 OZVZU3kDufMfEkPZ0IJOVcCLv2/J7NBmbYkdfj2/A/Yf3xMpAfmECLcc50SJxpwt PQsSfD/hAI2gDX5S1qT9Drn5cGt7HtZxFBeqNs/NQ7p6/b6Or8S8hhGwVXoSDTTx 5x6icXRikRjXtorvMqEBWAckKYHSQyN97fDy5WsEeBnUUzAU1F2tjYsOGdDVAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQU7nrAd8yU4kVcu7pZqxTKPnI0/T0wHwYDVR0j BBgwFoAUh1lAxPm1zTweFVhaS5sf9L3pvWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNEJBMzM2M0NDRUUwMDBEMjFFMTI2REQyQjQ3MDExNjc5 RDQ4NzY4REE4MUQ4NDIyMTg0N0I1N0M0RTAxMjJBLzAvODc1OTQwQzRGOUI1Q0Qz QzFFMTU1ODVBNEI5QjFGRjRCREU5QkQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzU5NDBDNEY5QjVDRDNDMUUx NTU4NUE0QjlCMUZGNEJERTlCRDY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzRCQTMzNjNDQ0VFMDAwRDIxRTEyNkREMkI0NzAxMTY3OUQ0ODc2OERB ODFEODQyMjE4NDdCNTdDNEUwMTIyQS8wLzMxMzMzODJlMzEzODM1MmUzNjM0MmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirlA MA0GCSqGSIb3DQEBCwUAA4IBAQAzGkK6trghMC1JQAVjO1vpXlVp+Xt63pH53KaV u8sR7Mkigfu3B5Qehx8ToKfkj9Jh7Jf+E+Y5ZAtAyIoPYD6hqA0tjnEL5lRYA2i+ 9AkZBVsTPsUj4EDRfA0Fwcv2O8MWOPsXuNkxUaIj18PS1AZ8hSZ937PKUqL33aEn mwl4VC3nQj5Luqt26GVb75A3puHEz6SUIcw36m6/ybjCQsaNUwDnnyPxH7EVoVu4 iA2FJQfbSFdm0d/d8JhULrloYDSsuJxpi2IhYeop+FgRMB4oiI28l4zqsHXCu8Nu Kw+QnYff1oEYS6VUw9jnqkPYzJL5nEt5Kq3vLjX1+LX9g5an -----END CERTIFICATE-----Generated at Tue Jun 25 22:05:55 2024 by rpki-client on console-ams.rpki-client.org