$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b11e20735d74c1a68f674e648f480544d6470832.roa File: b11e20735d74c1a68f674e648f480544d6470832.roa (raw, json) Hash identifier: RtXNMD3Q/7Bl6EHYgSAzNYJSkrnjCCDP5OXuXOicnws= Subject key identifier: 42:30:A1:9B:14:9B:FD:2A:1B:AC:17:D1:FF:27:E2:27:95:21:6C:FB Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73 Certificate serial: 1B59B8 Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b11e20735d74c1a68f674e648f480544d6470832.roa Signing time: Mon 21 Nov 2022 19:04:52 +0000 ROA not before: Sat 20 Mar 2021 14:30:56 +0000 ROA not after: Tue 24 Mar 2026 14:30:56 +0000 asID: 18747 IP address blocks: 181.78.0.0/15 maxlen: 15 181.79.0.0/19 maxlen: 24 181.79.0.0/24 maxlen: 24 181.79.1.0/24 maxlen: 24 181.79.2.0/24 maxlen: 24 181.79.3.0/24 maxlen: 24 181.79.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 06:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792440 (0x1b59b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73 Validity Not Before: Mar 20 14:30:56 2021 GMT Not After : Mar 24 14:30:56 2026 GMT Subject: CN=b11e20735d74c1a68f674e648f480544d6470832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:29:0b:fd:aa:ef:11:29:58:96:94:ff:b1: e4:4d:40:0b:73:e4:54:92:66:59:ee:be:7e:e6:50: 11:69:ef:e5:02:0f:1f:30:13:5a:b6:63:cf:4b:60: 1a:71:60:cc:81:c8:de:22:42:87:f6:e8:66:b8:9f: f5:88:d6:7c:3a:0b:50:00:76:d6:32:bb:ed:20:de: b8:a8:ca:cb:95:fe:02:6b:66:da:f8:91:66:49:c4: fd:bd:7f:6f:c6:19:9a:4b:ea:4c:38:bd:84:0a:84: 60:6f:54:83:5b:63:43:d0:89:fe:f5:84:a2:b2:a3: d6:38:3b:58:c9:06:72:d2:fe:e3:10:31:99:06:86: 74:cd:b7:fe:fb:e1:a8:84:65:36:ce:c2:08:5f:99: 26:7f:1f:28:52:d4:b8:7f:1a:c4:84:64:0e:e0:f0: 65:47:f0:ee:92:36:43:0f:7d:8d:ef:0d:f3:10:e1: 89:bb:92:ca:c9:32:01:61:ae:9b:b3:bb:83:cd:87: c9:81:e7:11:55:b2:1f:8b:7a:18:a9:d3:9d:2d:5a: 89:8b:c2:6c:39:fc:1f:c8:ae:22:33:61:a1:28:7a: 3f:67:c3:b0:f5:83:b8:b0:09:73:0e:55:99:ba:0a: cd:fa:cc:93:52:10:42:00:83:5c:18:6e:d8:86:17: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:A1:9B:14:9B:FD:2A:1B:AC:17:D1:FF:27:E2:27:95:21:6C:FB X509v3 Authority Key Identifier: keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b11e20735d74c1a68f674e648f480544d6470832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.78.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3f:eb:07:c7:e6:d6:3d:68:2a:98:cf:2d:bf:82:c8:8b:24:0f: 57:4f:2c:3d:d7:75:2b:08:0f:e0:1a:8a:b8:e1:d7:5d:5f:d1: 0c:ee:1f:98:c1:eb:5a:ef:c1:d3:81:b0:df:9d:5e:12:9d:9e: 7f:a5:57:81:09:6d:4b:ab:33:61:ae:9f:71:81:a2:88:ae:2d: be:2c:7d:9c:95:92:9a:3a:d7:bf:75:43:10:80:07:92:ae:2a: 3e:a7:a1:e5:4e:3a:b1:a1:d7:05:ef:96:af:aa:0d:07:53:73: 12:b7:08:8c:26:b3:cd:44:92:e5:e0:7a:13:f2:63:2c:ac:35: 2b:1a:70:0a:5e:55:ac:59:d4:f8:67:7a:b1:6d:00:92:91:cf: 98:ab:63:bd:12:59:d5:61:e9:28:e6:fa:77:3e:40:4a:c2:8a: e6:f9:a7:19:30:0c:26:5c:13:3f:f7:ce:0e:9c:e8:9a:d1:3c: 61:02:d0:df:dd:6e:28:c5:6d:f3:21:28:f2:2f:5d:33:52:30: 6d:89:c3:9b:bd:35:7d:b7:69:5a:67:43:92:75:5f:f1:4e:a9: 6a:72:07:42:60:ff:44:7d:cc:e8:e4:82:0e:74:85:a8:4a:47: 04:ce:1d:91:5a:cc:cf:2f:c8:8b:56:f7:c9:ec:97:ae:1b:e7: ea:f4:d7:58 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIDG1m4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy Y2ZjMzIxMjQ1NTQ2NGNkOGY4NTZhMzQ4YjJkNWNhZjczZGNkNzMwHhcNMjEwMzIw MTQzMDU2WhcNMjYwMzI0MTQzMDU2WjAzMTEwLwYDVQQDEyhiMTFlMjA3MzVkNzRj MWE2OGY2NzRlNjQ4ZjQ4MDU0NGQ2NDcwODMyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAo34pC/2q7xEpWJaU/7HkTUALc+RUkmZZ7r5+5lARae/lAg8f MBNatmPPS2AacWDMgcjeIkKH9uhmuJ/1iNZ8OgtQAHbWMrvtIN64qMrLlf4Ca2ba +JFmScT9vX9vxhmaS+pMOL2ECoRgb1SDW2ND0In+9YSisqPWODtYyQZy0v7jEDGZ BoZ0zbf+++GohGU2zsIIX5kmfx8oUtS4fxrEhGQO4PBlR/DukjZDD32N7w3zEOGJ u5LKyTIBYa6bs7uDzYfJgecRVbIfi3oYqdOdLVqJi8JsOfwfyK4iM2GhKHo/Z8Ow 9YO4sAlzDlWZugrN+syTUhBCAINcGG7YhhcLwwIDAQABo4ICWjCCAlYwHQYDVR0O BBYEFEIwoZsUm/0qG6wX0f8n4ieVIWz7MB8GA1UdIwQYMBaAFO2XYCMHZoB2YyKf bUEoBQfvncIpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzJjZmMz MjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3My5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMGVmNTY4NmQtZmM2Ni00YzhlLWJlNGYtZGE2OWZi YzJiZmI1L2IxMWUyMDczNWQ3NGMxYTY4ZjY3NGU2NDhmNDgwNTQ0ZDY0NzA4MzIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wZWY1Njg2ZC1mYzY2LTRjOGUtYmU0Zi1kYTY5 ZmJjMmJmYjUvYzJjZmMzMjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3 My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP MA0wCwQCAAEwBQMDAbVOMA0GCSqGSIb3DQEBCwUAA4IBAQA/6wfH5tY9aCqYzy2/ gsiLJA9XTyw913UrCA/gGoq44dddX9EM7h+Yweta78HTgbDfnV4SnZ5/pVeBCW1L qzNhrp9xgaKIri2+LH2clZKaOte/dUMQgAeSrio+p6HlTjqxodcF75avqg0HU3MS twiMJrPNRJLl4HoT8mMsrDUrGnAKXlWsWdT4Z3qxbQCSkc+Yq2O9ElnVYeko5vp3 PkBKworm+acZMAwmXBM/984OnOia0TxhAtDf3W4oxW3zISjyL10zUjBticObvTV9 t2laZ0OSdV/xTqlqcgdCYP9Efczo5IIOdIWoSkcEzh2RWszPL8iLVvfJ7JeuG+fq 9NdY -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:40 2023 by rpki-client on console-fra.rpki-client.org