$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa File: 76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa (raw, json) Hash identifier: z0HfT0J/eY2PmiYcRdnmBKfCx2hvMLU3ZdOZ4L/6agI= Subject key identifier: CD:05:1E:C8:FC:40:44:5E:65:D0:E8:1D:9E:4F:3C:CA:53:AD:8C:F4 Certificate issuer: /CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4 Certificate serial: 0DC966 Authority key identifier: 1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa Signing time: Wed 24 Mar 2021 14:31:47 +0000 ROA not before: Wed 24 Mar 2021 14:31:47 +0000 ROA not after: Tue 24 Mar 2026 14:31:47 +0000 asID: 27756 IP address blocks: 170.84.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.crl rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903526 (0xdc966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4 Validity Not Before: Mar 24 14:31:47 2021 GMT Not After : Mar 24 14:31:47 2026 GMT Subject: CN=76571c8a3950be27e99cbfd1f6c0981c45f29a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:c9:a2:4e:09:e0:a4:4f:cb:d1:d8:95:80: 0e:e1:c4:49:f9:a1:5e:2f:6a:de:f1:d0:6d:9d:91: 9f:27:04:d2:56:78:d6:6b:2d:d7:78:2e:f1:87:c5: d3:7c:a6:e0:e4:a5:9e:22:7f:7e:f7:bf:fd:49:58: d2:54:55:a7:1d:d8:ce:8c:27:41:9b:0a:7f:f4:e5: ce:fd:ac:d0:de:78:e2:32:73:3c:8e:4b:ea:ba:24: b7:ac:cc:99:a2:2b:eb:62:b3:4b:e6:46:50:82:90: 1e:11:8e:ab:6f:16:a1:77:b7:ac:8d:70:51:ee:30: a4:c6:46:e4:da:c5:84:05:f4:1e:0f:3b:20:64:ee: 41:06:62:3a:ee:f4:08:de:59:02:c6:70:f9:c3:bb: 8a:73:dc:bf:a4:2d:d7:9f:c7:c3:98:16:b7:34:0c: 0d:2f:46:4b:d5:79:d0:10:23:b8:fd:d1:fd:a7:d2: 4a:55:f4:16:51:e0:60:4a:63:38:e4:e6:c9:41:d9: 0c:3b:a6:21:04:5d:6f:d2:ef:61:fb:2a:3b:94:5f: 38:5d:28:6b:85:ed:1e:28:8b:a2:d7:bc:84:6c:9a: 3f:0b:79:dd:1c:b3:95:2a:de:13:ee:f7:61:55:ff: 30:2d:7a:5e:37:c7:07:0b:df:8b:85:0f:4a:f5:a2: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:05:1E:C8:FC:40:44:5E:65:D0:E8:1D:9E:4F:3C:CA:53:AD:8C:F4 X509v3 Authority Key Identifier: keyid:1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.234.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b0:1a:92:94:06:df:14:71:ce:19:b1:7f:d2:e3:f3:76:f0: 5c:81:06:b4:f1:9a:c4:5c:f6:0c:90:e7:2c:f4:b6:04:73:7d: 7a:8a:22:e3:10:63:e0:00:a3:7d:69:60:63:55:a3:f5:01:3a: c6:fe:0c:ca:36:1b:91:e9:41:8f:72:ab:0e:42:85:84:22:33: 1a:6c:7b:11:50:13:12:bf:1e:e5:0c:7b:ea:62:5f:c6:fb:a5: b2:98:20:f0:cd:34:0d:3d:99:c5:11:28:9a:63:39:79:fb:3c: 6d:95:de:bb:3e:c4:e1:e5:6b:83:ac:d7:58:64:e2:7c:d2:c5: 7b:95:cc:5e:c8:c0:23:2f:9c:43:2a:e1:9b:c5:b5:8c:4a:3b: aa:07:4e:d0:90:7a:a0:05:c3:fe:00:c1:dc:b1:1c:bd:14:8c: c2:5b:84:b5:00:40:bc:33:a8:a8:34:3e:92:61:48:c0:96:ea: ad:cf:bc:8f:19:b0:8d:da:a5:dc:fa:13:a0:2e:5a:84:99:cf: 2b:cc:bd:ca:a2:ee:7a:c6:76:50:ce:39:f5:29:22:6e:6b:81: ef:a7:29:99:9a:5b:4f:37:b7:16:e2:88:54:73:2f:b8:06:8d: 0b:40:9d:98:43:c5:8a:47:71:dd:57:2b:4a:f9:0e:63:39:74: 84:83:56:e1 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDclmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3 ZDdlY2Y2Njk0YjRmY2UwNWNjNzViNTg1ZjE2YWE2NDUyNDRiYTQwHhcNMjEwMzI0 MTQzMTQ3WhcNMjYwMzI0MTQzMTQ3WjAzMTEwLwYDVQQDEyg3NjU3MWM4YTM5NTBi ZTI3ZTk5Y2JmZDFmNmMwOTgxYzQ1ZjI5YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApgrJok4J4KRPy9HYlYAO4cRJ+aFeL2re8dBtnZGfJwTSVnjW ay3XeC7xh8XTfKbg5KWeIn9+97/9SVjSVFWnHdjOjCdBmwp/9OXO/azQ3njiMnM8 jkvquiS3rMyZoivrYrNL5kZQgpAeEY6rbxahd7esjXBR7jCkxkbk2sWEBfQeDzsg ZO5BBmI67vQI3lkCxnD5w7uKc9y/pC3Xn8fDmBa3NAwNL0ZL1XnQECO4/dH9p9JK VfQWUeBgSmM45ObJQdkMO6YhBF1v0u9h+yo7lF84XShrhe0eKIui17yEbJo/C3nd HLOVKt4T7vdhVf8wLXpeN8cHC9+LhQ9K9aIoFwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFM0FHsj8QEReZdDoHZ5PPMpTrYz0MB8GA1UdIwQYMBaAFB1YCtmt/je4j/gu mIjIDWSMChg5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODdkN2Vj ZjY2OTRiNGZjZTA1Y2M3NWI1ODVmMTZhYTY0NTI0NGJhNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMTZmNTNlOWEtOWM4MC00N2E5LWI4ZWEtNmVjYzY5 OGJmMjliLzc2NTcxYzhhMzk1MGJlMjdlOTljYmZkMWY2YzA5ODFjNDVmMjlhNDku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xNmY1M2U5YS05YzgwLTQ3YTktYjhlYS02ZWNj Njk4YmYyOWIvODdkN2VjZjY2OTRiNGZjZTA1Y2M3NWI1ODVmMTZhYTY0NTI0NGJh NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKpU6jANBgkqhkiG9w0BAQsFAAOCAQEAKbAakpQG3xRxzhmx f9Lj83bwXIEGtPGaxFz2DJDnLPS2BHN9eooi4xBj4ACjfWlgY1Wj9QE6xv4MyjYb kelBj3KrDkKFhCIzGmx7EVATEr8e5Qx76mJfxvulspgg8M00DT2ZxREommM5efs8 bZXeuz7E4eVrg6zXWGTifNLFe5XMXsjAIy+cQyrhm8W1jEo7qgdO0JB6oAXD/gDB 3LEcvRSMwluEtQBAvDOoqDQ+kmFIwJbqrc+8jxmwjdql3PoToC5ahJnPK8y9yqLu esZ2UM459SkibmuB76cpmZpbTze3FuKIVHMvuAaNC0CdmEPFikdx3VcrSvkOYzl0 hINW4Q== -----END CERTIFICATE-----Generated at Wed Mar 15 11:33:29 2023 by rpki-client on console-ams.rpki-client.org