$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa File: 2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa (raw, json) Hash identifier: 7MiKEfXOz6kG8gfSzWXtuYYCwKp2LtmOc5DQ7LNvz2o= Subject key identifier: 44:24:C5:56:E6:26:CB:60:A0:00:7B:E6:1A:96:3C:55:CB:68:C9:E0 Certificate issuer: /CN=d0770ddd551675937607f1d9793d3dafd3873a04 Certificate serial: D1 Authority key identifier: F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa Signing time: Thu 30 Jun 2022 20:17:03 +0000 ROA not before: Thu 30 Jun 2022 03:00:00 +0000 ROA not after: Sun 30 Jun 2024 03:00:00 +0000 asID: 7965 IP address blocks: 200.2.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.crl rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0770ddd551675937607f1d9793d3dafd3873a04 Validity Not Before: Jun 30 03:00:00 2022 GMT Not After : Jun 30 03:00:00 2024 GMT Subject: CN=2d5c3252c9a05044ce669c4b53c99552b8b9a110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:f1:f8:69:04:5f:67:77:ae:9f:c1:ac:d2: 01:ab:6f:bc:6c:97:41:80:4f:17:86:bb:0d:81:64: e8:be:54:1b:1d:b2:d5:5f:90:85:b8:bf:4b:01:34: 1b:bd:85:f4:91:ea:3c:78:ea:4c:82:9d:93:c3:3c: 17:7b:ef:76:c6:46:8e:9d:9e:15:78:da:51:60:67: dc:31:87:71:8d:01:6b:06:27:c2:e6:99:ab:45:05: b3:79:be:88:68:3a:25:bc:04:82:73:61:5f:af:91: 3e:19:2f:fa:42:fd:4a:10:7a:4c:77:0d:41:25:c9: 11:47:5e:e2:7c:22:a7:77:cd:44:0c:fb:b6:d3:35: fd:3d:62:f2:e7:03:25:4d:3a:14:4a:2b:4c:56:ac: 68:93:39:c5:ed:ae:5d:a0:55:7e:ab:22:6c:06:70: 39:58:fd:fd:f0:49:3b:69:00:59:c1:40:a7:01:01: 06:57:72:07:45:56:62:27:17:f4:e2:ff:9d:a9:fc: 73:9d:0e:a1:f4:60:b2:99:c6:c2:ae:83:07:81:47: 85:61:76:4e:f2:4e:94:a9:b7:d8:29:85:0f:9c:48: 34:37:5a:32:a9:c9:7a:db:58:c2:ca:22:17:46:b9: eb:1a:41:ee:af:55:be:e3:8a:c9:6d:13:ce:8d:79: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:24:C5:56:E6:26:CB:60:A0:00:7B:E6:1A:96:3C:55:CB:68:C9:E0 X509v3 Authority Key Identifier: keyid:F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.2.8.0/21 Signature Algorithm: sha256WithRSAEncryption 00:8c:0b:14:dc:8f:c9:cc:79:75:f9:df:0d:66:3d:38:b7:5f: 69:e6:ba:4a:c4:67:70:ac:46:e0:5a:8b:16:34:9e:e8:d9:e0: d6:90:b2:63:24:d8:71:66:a8:e4:08:74:ae:fb:f5:63:52:d8: e7:5a:80:19:21:4f:3a:08:d4:05:cf:62:4c:17:ff:f6:56:4a: 57:ee:7f:e0:c3:e6:20:bc:bd:e7:4f:d7:28:73:ee:b5:c6:f8: 59:35:72:de:a5:2e:c3:dd:88:04:bf:7f:a2:d9:d5:85:31:4c: ce:0e:ef:18:ad:8f:58:19:36:dd:50:00:18:86:48:54:1d:18: 65:a3:e5:80:9e:f3:25:8d:84:22:f1:65:13:00:17:97:c4:30: df:a8:06:39:6f:4d:c6:41:b1:d4:cb:b7:30:d9:94:c6:2f:30: 93:e9:82:65:31:8d:4e:6e:84:1c:74:19:77:15:7b:92:e9:be: 1b:8d:97:f2:d7:8b:3f:58:a4:4e:0b:8a:ca:e9:89:3c:7b:55: 08:c7:4c:93:90:61:8f:47:fa:44:37:04:1f:89:84:79:95:67: 04:8f:b1:68:9e:a4:26:42:f6:bc:e8:3f:cb:ff:68:74:5f:ae: 9f:46:fb:d2:1d:c5:4f:f6:4d:4b:ed:54:2e:f4:7c:b4:05:5a: d3:9b:bb:2f -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZDA3 NzBkZGQ1NTE2NzU5Mzc2MDdmMWQ5NzkzZDNkYWZkMzg3M2EwNDAeFw0yMjA2MzAw MzAwMDBaFw0yNDA2MzAwMzAwMDBaMDMxMTAvBgNVBAMTKDJkNWMzMjUyYzlhMDUw NDRjZTY2OWM0YjUzYzk5NTUyYjhiOWExMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCLnfH4aQRfZ3eun8Gs0gGrb7xsl0GATxeGuw2BZOi+VBsdstVf kIW4v0sBNBu9hfSR6jx46kyCnZPDPBd773bGRo6dnhV42lFgZ9wxh3GNAWsGJ8Lm matFBbN5vohoOiW8BIJzYV+vkT4ZL/pC/UoQekx3DUElyRFHXuJ8Iqd3zUQM+7bT Nf09YvLnAyVNOhRKK0xWrGiTOcXtrl2gVX6rImwGcDlY/f3wSTtpAFnBQKcBAQZX cgdFVmInF/Ti/52p/HOdDqH0YLKZxsKugweBR4Vhdk7yTpSpt9gphQ+cSDQ3WjKp yXrbWMLKIhdGuesaQe6vVb7jisltE86NeTEJAgMBAAGjggJbMIICVzAdBgNVHQ4E FgQURCTFVuYmy2CgAHvmGpY8VctoyeAwHwYDVR0jBBgwFoAU90d4Vxfs8DyGVnlR R8gbTVn5Au4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kMDc3MGRk ZDU1MTY3NTkzNzYwN2YxZDk3OTNkM2RhZmQzODczYTA0LmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy8wZmQ5ODcxZC1iYmM5LTQwYWItYTQwZS1mMDdhZjJl ZWI2YWYvMmQ1YzMyNTJjOWEwNTA0NGNlNjY5YzRiNTNjOTk1NTJiOGI5YTExMC5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljLzBmZDk4NzFkLWJiYzktNDBhYi1hNDBlLWYwN2Fm MmVlYjZhZi9kMDc3MGRkZDU1MTY3NTkzNzYwN2YxZDk3OTNkM2RhZmQzODczYTA0 LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQDyAIIMA0GCSqGSIb3DQEBCwUAA4IBAQAAjAsU3I/JzHl1+d8N Zj04t19p5rpKxGdwrEbgWosWNJ7o2eDWkLJjJNhxZqjkCHSu+/VjUtjnWoAZIU86 CNQFz2JMF//2VkpX7n/gw+YgvL3nT9coc+61xvhZNXLepS7D3YgEv3+i2dWFMUzO Du8YrY9YGTbdUAAYhkhUHRhlo+WAnvMljYQi8WUTABeXxDDfqAY5b03GQbHUy7cw 2ZTGLzCT6YJlMY1OboQcdBl3FXuS6b4bjZfy14s/WKROC4rK6Yk8e1UIx0yTkGGP R/pENwQfiYR5lWcEj7FonqQmQva86D/L/2h0X66fRvvSHcVP9k1L7VQu9Hy0BVrT m7sv -----END CERTIFICATE-----Generated at Wed Mar 15 11:33:27 2023 by rpki-client on console-ams.rpki-client.org