$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/c05532b197d8cdf4fe8cc8d4c9a3b9a04d77128e.roa File: c05532b197d8cdf4fe8cc8d4c9a3b9a04d77128e.roa (raw, json) Hash identifier: kE0gb3HtUgNKjq9UAsy4KgouXbr8jfwCorjy0SmlXQs= Subject key identifier: 19:FF:5D:BC:D6:E3:01:A7:CC:E4:BB:76:C7:C3:90:9B:95:A2:94:2F Certificate issuer: /CN=622a212a52d7db5f61eeaabb953a0ff99338ff33 Certificate serial: 04A517 Authority key identifier: FA:F7:DA:B0:F4:39:5D:63:0F:BD:AA:19:E2:2C:24:D7:90:1B:1C:A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/622a212a52d7db5f61eeaabb953a0ff99338ff33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/c05532b197d8cdf4fe8cc8d4c9a3b9a04d77128e.roa Signing time: Wed 24 Mar 2021 14:38:23 +0000 ROA not before: Wed 24 Mar 2021 14:38:23 +0000 ROA not after: Tue 24 Mar 2026 14:38:23 +0000 asID: 271799 IP address blocks: 177.52.221.0/24 maxlen: 24 2803:c010::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/622a212a52d7db5f61eeaabb953a0ff99338ff33.crl rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/622a212a52d7db5f61eeaabb953a0ff99338ff33.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/622a212a52d7db5f61eeaabb953a0ff99338ff33.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304407 (0x4a517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622a212a52d7db5f61eeaabb953a0ff99338ff33 Validity Not Before: Mar 24 14:38:23 2021 GMT Not After : Mar 24 14:38:23 2026 GMT Subject: CN=c05532b197d8cdf4fe8cc8d4c9a3b9a04d77128e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:b8:5e:51:9e:5d:68:24:fb:69:98:49:01: ab:97:36:88:c7:42:b7:08:a5:36:db:1d:51:5b:a1: ad:db:9b:23:d1:64:67:f5:0e:99:22:b6:de:7b:6d: 34:aa:9b:51:13:d5:39:b2:2f:d4:0c:9c:e1:53:6d: e2:d7:41:46:e7:d6:8c:ef:05:f6:2c:58:90:d8:22: c1:a8:09:be:70:7c:28:83:9b:7a:e1:e9:77:d7:87: c9:ec:33:b9:b3:fb:0b:57:20:52:34:a2:cd:da:d7: 9a:0b:c8:6e:e5:49:27:04:2a:0f:29:19:e1:a2:b0: 51:15:22:27:42:47:1f:ca:d0:e2:c9:15:e4:97:3a: d1:d4:8d:62:55:0e:4a:89:fd:28:18:5d:df:53:7a: 01:31:72:12:2e:3a:08:f2:ea:f5:fa:ff:ba:d8:40: fb:b9:9c:3d:c0:27:9d:31:a7:e4:2b:3c:0d:0d:7c: 18:3a:57:6f:2f:8b:5d:59:b6:e8:cd:91:3c:e4:b1: 56:0b:aa:0c:4a:ad:dd:af:c4:c3:a9:67:1e:78:6c: b8:3a:96:38:9a:7e:aa:14:27:77:7e:ac:69:40:a8: 5c:5d:71:ac:21:f5:a4:f4:23:72:c9:45:a6:11:d3: b1:4e:bb:f3:b6:04:2e:89:34:fe:50:8f:7b:81:40: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:5D:BC:D6:E3:01:A7:CC:E4:BB:76:C7:C3:90:9B:95:A2:94:2F X509v3 Authority Key Identifier: keyid:FA:F7:DA:B0:F4:39:5D:63:0F:BD:AA:19:E2:2C:24:D7:90:1B:1C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/622a212a52d7db5f61eeaabb953a0ff99338ff33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/c05532b197d8cdf4fe8cc8d4c9a3b9a04d77128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/622a212a52d7db5f61eeaabb953a0ff99338ff33.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.52.221.0/24 IPv6: 2803:c010::/32 Signature Algorithm: sha256WithRSAEncryption 3e:f5:35:53:b9:75:9c:84:9c:51:dc:af:bb:77:9d:78:de:8d: 58:d6:83:15:2c:82:ff:51:9d:e4:49:62:23:6d:0d:da:47:33: e0:cd:35:a5:33:f3:15:5a:53:03:ba:e3:9b:73:a7:4d:d9:7f: 9e:a8:24:fe:51:39:40:bc:dc:19:c8:75:d9:2b:71:8d:93:7c: c3:26:5e:b6:ac:47:c5:46:0b:ed:d8:80:86:ff:4f:79:95:39: 89:e3:a2:8c:4a:59:9c:a9:df:42:d7:e6:86:ff:e8:36:3c:13: 76:f8:8c:93:3e:6a:21:69:df:7f:8c:c6:79:9a:18:d9:4d:c0: 17:77:cd:b9:ed:67:83:31:ea:75:67:47:90:ed:54:5a:f2:d7: 90:be:18:bb:db:ed:75:c0:90:89:11:8b:c5:ea:6a:2e:d1:6e: 8e:4b:65:e3:26:0e:7b:fb:dc:76:18:c8:8e:6b:62:0f:57:7a: 1e:66:b4:51:3f:5b:52:85:47:8a:f8:6f:86:22:de:e7:5d:83: 94:29:76:9a:4e:65:b5:7a:31:2d:d9:54:8b:29:a0:c5:de:fc: 8f:82:49:e9:d0:0c:e6:14:74:43:99:99:95:b8:b3:2e:9d:f1: e3:ca:b3:b6:e2:4c:d7:13:36:9d:be:7c:c3:dc:42:9b:f7:b3: 79:69:f3:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDBKUXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy MmEyMTJhNTJkN2RiNWY2MWVlYWFiYjk1M2EwZmY5OTMzOGZmMzMwHhcNMjEwMzI0 MTQzODIzWhcNMjYwMzI0MTQzODIzWjAzMTEwLwYDVQQDEyhjMDU1MzJiMTk3ZDhj ZGY0ZmU4Y2M4ZDRjOWEzYjlhMDRkNzcxMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAspC4XlGeXWgk+2mYSQGrlzaIx0K3CKU22x1RW6Gt25sj0WRn 9Q6ZIrbee200qptRE9U5si/UDJzhU23i10FG59aM7wX2LFiQ2CLBqAm+cHwog5t6 4el314fJ7DO5s/sLVyBSNKLN2teaC8hu5UknBCoPKRnhorBRFSInQkcfytDiyRXk lzrR1I1iVQ5Kif0oGF3fU3oBMXISLjoI8ur1+v+62ED7uZw9wCedMafkKzwNDXwY OldvL4tdWbbozZE85LFWC6oMSq3dr8TDqWceeGy4OpY4mn6qFCd3fqxpQKhcXXGs IfWk9CNyyUWmEdOxTrvztgQuiTT+UI97gUDp0wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFBn/XbzW4wGnzOS7dsfDkJuVopQvMB8GA1UdIwQYMBaAFPr32rD0OV1jD72q GeIsJNeQGxyjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjIyYTIx MmE1MmQ3ZGI1ZjYxZWVhYWJiOTUzYTBmZjk5MzM4ZmYzMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMTBhNjZiNjktYWIzZC00Yjk2LTg3NTYtMTgyMTA4 NDAxNTI1L2MwNTUzMmIxOTdkOGNkZjRmZThjYzhkNGM5YTNiOWEwNGQ3NzEyOGUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xMGE2NmI2OS1hYjNkLTRiOTYtODc1Ni0xODIx MDg0MDE1MjUvNjIyYTIxMmE1MmQ3ZGI1ZjYxZWVhYWJiOTUzYTBmZjk5MzM4ZmYz My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEALE03TANBAIAAjAHAwUAKAPAEDANBgkqhkiG9w0BAQsFAAOC AQEAPvU1U7l1nIScUdyvu3edeN6NWNaDFSyC/1Gd5EliI20N2kcz4M01pTPzFVpT A7rjm3OnTdl/nqgk/lE5QLzcGch12StxjZN8wyZetqxHxUYL7diAhv9PeZU5ieOi jEpZnKnfQtfmhv/oNjwTdviMkz5qIWnff4zGeZoY2U3AF3fNue1ngzHqdWdHkO1U WvLXkL4Yu9vtdcCQiRGLxepqLtFujktl4yYOe/vcdhjIjmtiD1d6Hma0UT9bUoVH ivhvhiLe512DlCl2mk5ltXoxLdlUiymgxd78j4JJ6dAM5hR0Q5mZlbizLp3x48qz tuJM1xM2nb58w9xCm/ezeWnz9A== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:41 2023 by rpki-client on console-fra.rpki-client.org