$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa File: 146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa (raw, json) Hash identifier: rTXOgFnvRrmrRc6oMTvX7vajkallFpyAe2cCxzGwAt8= Subject key identifier: FF:67:29:9B:44:3B:83:98:66:EE:16:B8:5D:A7:8C:B7:DE:29:3B:F3 Certificate issuer: /CN=e44b350d3b38d42846292aa361e5c48e7d3371c5 Certificate serial: 07D7CA Authority key identifier: 4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa Signing time: Wed 24 Mar 2021 14:45:06 +0000 ROA not before: Wed 24 Mar 2021 14:45:06 +0000 ROA not after: Tue 24 Mar 2026 14:45:06 +0000 asID: 42473 IP address blocks: 131.100.0.0/22 maxlen: 24 2803:ad80::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.crl rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513994 (0x7d7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e44b350d3b38d42846292aa361e5c48e7d3371c5 Validity Not Before: Mar 24 14:45:06 2021 GMT Not After : Mar 24 14:45:06 2026 GMT Subject: CN=146f05adeed68dc9def8a015bc2c7876ce7f6d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:5e:21:45:7f:38:16:68:c4:82:f4:37:2d: 8a:95:3b:3b:31:bf:84:84:46:cc:ff:84:49:12:65: 86:6f:74:5f:9d:e3:e8:b6:5a:e9:29:0e:a8:8b:6e: 5f:44:29:8a:1d:1c:fd:1b:64:ef:6a:d5:f4:25:13: cb:5b:cd:c7:cb:db:bc:cf:b0:f1:52:89:b6:a5:93: e8:55:7d:ab:7c:4c:d1:cb:3d:df:6a:0b:6e:be:3c: cd:52:27:30:9f:ba:ec:fb:1d:5b:6a:0e:78:a0:fc: 11:c7:fa:b8:f8:ab:81:0b:d5:3b:df:7d:9c:21:21: 3f:05:9c:fc:94:7d:01:61:0f:12:d6:69:e3:34:86: 8d:06:27:a6:2d:6a:ec:e8:8f:c6:d6:cc:cf:77:12: 04:4b:66:d8:ae:bd:57:f5:2f:1d:3d:d5:d8:01:d5: 59:a9:75:b0:f6:88:a5:c4:42:5d:49:e4:b6:cf:03: 8f:88:f1:97:32:73:8a:6b:15:a5:6b:a7:37:92:a0: eb:d0:6d:4e:bc:af:18:e3:82:f2:aa:17:2c:e9:22: d9:ed:a9:ee:14:96:ed:03:82:2a:7f:70:62:72:4c: bc:65:f3:d7:5c:e6:53:99:09:a4:98:1c:18:2c:32: fc:94:c9:bf:25:e9:8e:b6:dc:91:f8:84:a6:0e:2d: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:29:9B:44:3B:83:98:66:EE:16:B8:5D:A7:8C:B7:DE:29:3B:F3 X509v3 Authority Key Identifier: keyid:4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.0.0/22 IPv6: 2803:ad80::/32 Signature Algorithm: sha256WithRSAEncryption 84:ff:d5:5d:2e:da:f6:c7:ff:9f:5a:84:00:af:36:c5:54:69: 66:1c:28:ad:9a:6a:b5:dd:6f:10:ed:de:2a:a0:5b:fd:2a:23: 0f:ad:16:81:0e:2d:3c:53:a9:74:56:fb:a3:b1:07:56:5f:88: 95:36:b6:93:2d:d4:10:e4:69:f2:d0:4b:de:45:b1:3e:83:d4: 4f:c2:68:7d:bd:04:37:de:71:6a:28:76:f7:76:a7:f2:cb:07: 80:24:f5:53:96:ea:e8:a1:17:b9:ce:f1:c4:de:59:6d:17:ce: 42:50:72:c2:51:a4:70:16:86:24:8c:20:7a:90:a0:0d:29:8c: d1:ed:ff:2b:7e:c4:83:ac:de:b3:7b:36:0d:df:36:bc:dd:a4: df:04:3c:14:a9:46:19:2d:64:10:f5:54:3f:81:00:de:98:ac: 0d:0b:5c:aa:c4:94:d6:80:fd:25:aa:5f:54:00:5b:e4:40:d9: f0:55:75:9f:6d:67:53:9f:31:59:dc:3c:56:67:c4:88:51:c8: e5:59:6b:e7:44:82:b9:bf:e3:f2:4e:00:a5:fa:68:7e:bd:49: c5:35:fc:61:a2:b7:80:9b:8d:db:21:b9:23:e3:43:ec:6c:08: 8b:65:f5:49:de:6e:61:c1:94:26:67:6d:8f:e2:9d:ab:bf:d3: 3c:a3:39:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDB9fKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0 NGIzNTBkM2IzOGQ0Mjg0NjI5MmFhMzYxZTVjNDhlN2QzMzcxYzUwHhcNMjEwMzI0 MTQ0NTA2WhcNMjYwMzI0MTQ0NTA2WjAzMTEwLwYDVQQDEygxNDZmMDVhZGVlZDY4 ZGM5ZGVmOGEwMTViYzJjNzg3NmNlN2Y2ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArPpeIUV/OBZoxIL0Ny2KlTs7Mb+EhEbM/4RJEmWGb3RfnePo tlrpKQ6oi25fRCmKHRz9G2TvatX0JRPLW83Hy9u8z7DxUom2pZPoVX2rfEzRyz3f agtuvjzNUicwn7rs+x1bag54oPwRx/q4+KuBC9U7332cISE/BZz8lH0BYQ8S1mnj NIaNBiemLWrs6I/G1szPdxIES2bYrr1X9S8dPdXYAdVZqXWw9oilxEJdSeS2zwOP iPGXMnOKaxWla6c3kqDr0G1OvK8Y44Lyqhcs6SLZ7anuFJbtA4Iqf3Bicky8ZfPX XOZTmQmkmBwYLDL8lMm/JemOttyR+ISmDi234wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFP9nKZtEO4OYZu4WuF2njLfeKTvzMB8GA1UdIwQYMBaAFExy9GW8apYLOlKm 0YnQh+OhY1PpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTQ0YjM1 MGQzYjM4ZDQyODQ2MjkyYWEzNjFlNWM0OGU3ZDMzNzFjNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMTNhNThkMzMtZDAwZi00NWJkLWIwOGUtODRlYjQ4 ZGJhYWFjLzE0NmYwNWFkZWVkNjhkYzlkZWY4YTAxNWJjMmM3ODc2Y2U3ZjZkNDIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xM2E1OGQzMy1kMDBmLTQ1YmQtYjA4ZS04NGVi NDhkYmFhYWMvZTQ0YjM1MGQzYjM4ZDQyODQ2MjkyYWEzNjFlNWM0OGU3ZDMzNzFj NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAoNkADANBAIAAjAHAwUAKAOtgDANBgkqhkiG9w0BAQsFAAOC AQEAhP/VXS7a9sf/n1qEAK82xVRpZhworZpqtd1vEO3eKqBb/SojD60WgQ4tPFOp dFb7o7EHVl+IlTa2ky3UEORp8tBL3kWxPoPUT8Jofb0EN95xaih293an8ssHgCT1 U5bq6KEXuc7xxN5ZbRfOQlBywlGkcBaGJIwgepCgDSmM0e3/K37Eg6zes3s2Dd82 vN2k3wQ8FKlGGS1kEPVUP4EA3pisDQtcqsSU1oD9JapfVABb5EDZ8FV1n21nU58x Wdw8VmfEiFHI5Vlr50SCub/j8k4Apfpofr1JxTX8YaK3gJuN2yG5I+ND7GwIi2X1 Sd5uYcGUJmdtj+Kdq7/TPKM5mg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:41 2023 by rpki-client on console-fra.rpki-client.org