$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa File: aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa (raw, json) Hash identifier: FSKljO/iS4JiDDc7AxtDhXnuJ5V2m1kBhLmvKG3ZXQ0= Subject key identifier: 87:8E:35:71:E5:C8:EE:DF:E5:05:0D:6F:1A:09:B1:F1:C0:08:3B:F6 Certificate issuer: /CN=00932e972389ea7205865b22c4909bed7cdcbf7e Certificate serial: 0D6191 Authority key identifier: D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa Signing time: Wed 24 Mar 2021 14:34:48 +0000 ROA not before: Wed 24 Mar 2021 14:34:48 +0000 ROA not after: Tue 24 Mar 2026 14:34:48 +0000 asID: 61499 IP address blocks: 138.121.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876945 (0xd6191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00932e972389ea7205865b22c4909bed7cdcbf7e Validity Not Before: Mar 24 14:34:48 2021 GMT Not After : Mar 24 14:34:48 2026 GMT Subject: CN=aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:c1:a7:0c:1a:52:cc:af:22:3a:4c:17:56: 5b:86:da:5e:6b:0f:49:0c:02:12:43:b6:ad:9c:ed: 57:0f:5e:24:c1:00:de:27:6b:29:c6:ae:0d:a8:0d: 72:c3:5b:cb:37:20:e0:7f:e5:f6:9d:9d:23:30:15: b7:c2:7d:a7:ef:44:9b:75:81:f4:19:24:19:f4:08: b6:87:26:ab:1d:e3:cb:60:dd:db:b3:30:fc:0a:ed: e7:74:11:45:60:bd:99:0a:e6:5d:43:78:8e:51:8f: 42:39:14:7c:a8:22:50:6b:0e:af:d4:61:12:37:de: d0:fd:31:44:fc:9a:1f:e4:7d:53:24:b2:e1:d2:eb: 9f:81:8d:fe:33:23:bd:2e:96:bc:31:37:3e:61:f7: 63:25:54:5b:b2:97:22:ae:9c:e3:8d:d7:ba:4f:de: 6e:4e:5e:f1:d1:6d:ba:08:e4:98:c8:5c:4b:8c:1b: 2a:b0:ac:cc:a6:f8:8f:1c:66:7a:e6:7c:63:fc:bb: fb:a5:91:42:61:88:ad:52:8e:10:64:e4:fe:14:b0: ea:b1:89:c9:98:46:3f:14:a2:ff:85:88:0e:56:44: 31:dc:0c:39:d4:75:d3:6e:9d:21:c5:f6:bb:a8:70: 85:14:c6:57:1f:2e:b3:6e:51:89:30:91:d5:02:20: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:35:71:E5:C8:EE:DF:E5:05:0D:6F:1A:09:B1:F1:C0:08:3B:F6 X509v3 Authority Key Identifier: keyid:D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.4.0/22 Signature Algorithm: sha256WithRSAEncryption 18:35:5d:55:ae:fb:a8:e0:38:21:48:bf:68:19:8a:fb:24:3c: 55:ad:81:50:d0:e8:55:c8:51:dc:2a:81:48:08:f3:e2:dd:9e: eb:56:9d:8e:b9:c9:c9:39:76:d2:dc:67:4e:d3:7e:18:b6:c1: ec:0a:cc:a0:9c:3a:f7:f2:13:aa:de:07:82:32:88:24:08:0f: cf:96:8d:e8:94:89:22:2d:43:db:bc:22:30:3d:59:ed:0f:59: db:89:4d:97:83:86:75:1b:fd:4d:23:da:6a:01:1c:00:0d:c4: b0:0e:9d:c0:df:4e:81:05:75:6a:ee:15:43:38:68:cb:84:3d: 4b:56:44:ba:d2:d8:4b:2c:98:a6:71:e3:ba:a4:43:ef:2c:31: d8:33:fe:f8:c4:61:a4:ca:f8:e4:23:ba:28:8b:22:51:89:d7: 1c:a8:c5:61:1d:a5:c5:3d:1b:7a:b1:f0:aa:29:8f:33:09:04: 05:17:8e:a0:0e:e0:02:e2:37:43:da:30:1a:97:90:8a:fb:25: 13:92:df:76:9b:ca:24:59:f9:ac:0d:ec:52:02:c0:c1:ec:eb: 95:2b:63:90:82:95:60:78:36:53:3b:95:28:e0:27:88:bf:bc: 37:3f:48:54:a0:ed:b6:7d:e1:8a:e1:78:e7:50:75:2e:b0:ab: 76:f8:12:77 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDWGRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAw OTMyZTk3MjM4OWVhNzIwNTg2NWIyMmM0OTA5YmVkN2NkY2JmN2UwHhcNMjEwMzI0 MTQzNDQ4WhcNMjYwMzI0MTQzNDQ4WjAzMTEwLwYDVQQDEyhhYTdiMGVkOWFhN2E1 NjYxZTY4ZjgwMzllNzI4MmQ5OTdmZjhmOThiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmQrBpwwaUsyvIjpMF1Zbhtpeaw9JDAISQ7atnO1XD14kwQDe J2spxq4NqA1yw1vLNyDgf+X2nZ0jMBW3wn2n70SbdYH0GSQZ9Ai2hyarHePLYN3b szD8Cu3ndBFFYL2ZCuZdQ3iOUY9CORR8qCJQaw6v1GESN97Q/TFE/Jof5H1TJLLh 0uufgY3+MyO9Lpa8MTc+YfdjJVRbspcirpzjjde6T95uTl7x0W26COSYyFxLjBsq sKzMpviPHGZ65nxj/Lv7pZFCYYitUo4QZOT+FLDqsYnJmEY/FKL/hYgOVkQx3Aw5 1HXTbp0hxfa7qHCFFMZXHy6zblGJMJHVAiAoCQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFIeONXHlyO7f5QUNbxoJsfHACDv2MB8GA1UdIwQYMBaAFNBlb7knxT7Yl9NO 2i0GGAsMw5kwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDA5MzJl OTcyMzg5ZWE3MjA1ODY1YjIyYzQ5MDliZWQ3Y2RjYmY3ZS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMGEwYjczYjYtZWFhMC00ODg0LWI0MjYtNzg5NDhl MmU5MzVkL2FhN2IwZWQ5YWE3YTU2NjFlNjhmODAzOWU3MjgyZDk5N2ZmOGY5OGIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wYTBiNzNiNi1lYWEwLTQ4ODQtYjQyNi03ODk0 OGUyZTkzNWQvMDA5MzJlOTcyMzg5ZWE3MjA1ODY1YjIyYzQ5MDliZWQ3Y2RjYmY3 ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAop5BDANBgkqhkiG9w0BAQsFAAOCAQEAGDVdVa77qOA4IUi/ aBmK+yQ8Va2BUNDoVchR3CqBSAjz4t2e61adjrnJyTl20txnTtN+GLbB7ArMoJw6 9/ITqt4HgjKIJAgPz5aN6JSJIi1D27wiMD1Z7Q9Z24lNl4OGdRv9TSPaagEcAA3E sA6dwN9OgQV1au4VQzhoy4Q9S1ZEutLYSyyYpnHjuqRD7ywx2DP++MRhpMr45CO6 KIsiUYnXHKjFYR2lxT0berHwqimPMwkEBReOoA7gAuI3Q9owGpeQivslE5LfdpvK JFn5rA3sUgLAwezrlStjkIKVYHg2UzuVKOAniL+8Nz9IVKDttn3hiuF451B1LrCr dvgSdw== -----END CERTIFICATE-----Generated at Thu Mar 28 14:01:08 2024 by rpki-client on console-fra.rpki-client.org