$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/eb488466c34f56bc5816e08f53e9d347bf40011a.roa File: eb488466c34f56bc5816e08f53e9d347bf40011a.roa (raw, json) Hash identifier: cF44uZ3rGRDUx0ZW5VKjxz6VKTDQGZ5p48tvk19keW4= Subject key identifier: 8E:99:DE:A3:12:26:EF:97:1C:9B:75:58:DC:87:80:2C:F8:F3:F4:14 Certificate issuer: /CN=8b212b3e5e4578c90e2826cd05317ea5fc56e905 Certificate serial: 0B7BD7 Authority key identifier: 4F:E8:6D:76:9C:07:98:95:E0:0C:CF:90:9A:79:7B:CA:0B:83:03:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b212b3e5e4578c90e2826cd05317ea5fc56e905.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/eb488466c34f56bc5816e08f53e9d347bf40011a.roa Signing time: Thu 25 Mar 2021 16:21:18 +0000 ROA not before: Thu 25 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 52468 IP address blocks: 45.185.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/8b212b3e5e4578c90e2826cd05317ea5fc56e905.crl rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/8b212b3e5e4578c90e2826cd05317ea5fc56e905.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b212b3e5e4578c90e2826cd05317ea5fc56e905.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752599 (0xb7bd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b212b3e5e4578c90e2826cd05317ea5fc56e905 Validity Not Before: Mar 25 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=eb488466c34f56bc5816e08f53e9d347bf40011a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:60:8a:4c:e4:b3:6f:66:3e:61:2f:55:cf:20: 07:77:78:85:0f:25:c4:8e:80:9b:db:8b:bd:5e:b7: a1:fa:69:e5:4a:cd:7e:2a:ac:4f:27:d2:57:70:94: f9:be:aa:38:10:70:eb:f7:2d:22:99:a2:13:9a:77: 1c:96:bd:3d:ea:2f:74:1f:29:37:76:c6:79:01:f4: e1:95:96:d9:ef:6b:40:b7:aa:92:68:ce:65:58:9c: 0c:59:82:a6:88:5d:80:43:21:ca:68:49:35:79:f1: 88:15:cf:d3:9e:fa:03:f3:65:eb:53:db:5e:7c:b3: 59:c5:c9:9a:33:4b:67:3c:e3:7b:a8:f5:27:82:ec: aa:61:70:99:06:6d:ef:ec:1e:f0:35:57:83:07:6a: 87:b2:b2:07:1d:b9:1d:fa:02:3f:6b:1b:b2:c3:92: 13:11:c6:02:1e:95:28:99:74:fe:65:f4:60:f7:70: 05:bb:d8:5b:c2:b7:f6:79:22:73:d0:f9:6d:7e:74: 54:92:e7:ef:90:f0:bd:8a:21:fb:95:03:d2:5f:c5: e1:e7:a8:4e:6f:26:b4:0d:11:fb:63:c5:a2:1d:31: 26:b3:18:a8:44:3f:a6:24:cd:65:d2:d2:5e:1a:8c: d7:45:54:4b:61:c6:73:8c:99:e9:81:41:81:05:cc: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:99:DE:A3:12:26:EF:97:1C:9B:75:58:DC:87:80:2C:F8:F3:F4:14 X509v3 Authority Key Identifier: keyid:4F:E8:6D:76:9C:07:98:95:E0:0C:CF:90:9A:79:7B:CA:0B:83:03:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b212b3e5e4578c90e2826cd05317ea5fc56e905.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/eb488466c34f56bc5816e08f53e9d347bf40011a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/8b212b3e5e4578c90e2826cd05317ea5fc56e905.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.130.0/24 Signature Algorithm: sha256WithRSAEncryption 47:52:12:b0:38:71:b4:67:50:70:bf:ac:5f:d5:d6:29:53:6c: 38:6c:39:30:68:9a:3f:3b:09:55:d1:f0:7c:55:7e:07:0e:19: 15:78:d8:e8:e3:73:e3:8c:76:a5:9a:63:d0:3c:00:af:c3:c8: c1:6e:c9:6a:67:88:cf:75:55:9d:85:3c:06:62:04:28:e7:76: 92:42:c0:5b:ce:ab:c9:07:b6:3f:7f:0f:e9:a4:aa:a9:0e:18: 82:c6:95:ff:55:e0:f3:52:77:3e:77:85:9a:a0:ba:9b:81:63: de:27:a0:1e:29:6d:f4:3e:22:89:dc:e7:ca:af:ae:e5:71:0d: 2b:1d:ab:71:9a:20:b4:fb:38:c5:89:c1:8c:9e:65:b0:d2:e6: 98:2b:31:02:12:c9:1a:b9:d2:69:b3:c0:28:c3:3e:e7:a5:0e: 6b:83:7d:6e:dc:21:71:25:2f:bf:ff:47:c0:46:c2:b8:fd:b1: e2:aa:01:27:d1:69:a8:a6:f5:0a:50:5b:eb:71:63:ce:71:1a: 2e:1d:22:36:fc:86:a7:7b:b9:6e:c4:8a:ba:c0:87:1c:cd:67: d8:b2:68:c3:32:d1:e6:7c:70:e5:3b:d5:f0:80:52:61:34:e4: 1d:6f:8d:bf:9c:55:42:a7:a1:3f:e7:59:5a:75:bb:c9:8a:94: 8e:da:9c:8c -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDC3vXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi MjEyYjNlNWU0NTc4YzkwZTI4MjZjZDA1MzE3ZWE1ZmM1NmU5MDUwHhcNMjEwMzI1 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlYjQ4ODQ2NmMzNGY1 NmJjNTgxNmUwOGY1M2U5ZDM0N2JmNDAwMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA7mCKTOSzb2Y+YS9VzyAHd3iFDyXEjoCb24u9Xreh+mnlSs1+ KqxPJ9JXcJT5vqo4EHDr9y0imaITmncclr096i90Hyk3dsZ5AfThlZbZ72tAt6qS aM5lWJwMWYKmiF2AQyHKaEk1efGIFc/TnvoD82XrU9tefLNZxcmaM0tnPON7qPUn guyqYXCZBm3v7B7wNVeDB2qHsrIHHbkd+gI/axuyw5ITEcYCHpUomXT+ZfRg93AF u9hbwrf2eSJz0PltfnRUkufvkPC9iiH7lQPSX8Xh56hObya0DRH7Y8WiHTEmsxio RD+mJM1l0tJeGozXRVRLYcZzjJnpgUGBBcwyfwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFI6Z3qMSJu+XHJt1WNyHgCz48/QUMB8GA1UdIwQYMBaAFE/obXacB5iV4AzP kJp5e8oLgwMaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGIyMTJi M2U1ZTQ1NzhjOTBlMjgyNmNkMDUzMTdlYTVmYzU2ZTkwNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWYxZjFjYzEtMjQ3ZC00ZjJiLWExZTktZDY5MTBi YzZiNjUxL2ViNDg4NDY2YzM0ZjU2YmM1ODE2ZTA4ZjUzZTlkMzQ3YmY0MDAxMWEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xZjFmMWNjMS0yNDdkLTRmMmItYTFlOS1kNjkx MGJjNmI2NTEvOGIyMTJiM2U1ZTQ1NzhjOTBlMjgyNmNkMDUzMTdlYTVmYzU2ZTkw NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC25gjANBgkqhkiG9w0BAQsFAAOCAQEAR1ISsDhxtGdQcL+s X9XWKVNsOGw5MGiaPzsJVdHwfFV+Bw4ZFXjY6ONz44x2pZpj0DwAr8PIwW7JameI z3VVnYU8BmIEKOd2kkLAW86ryQe2P38P6aSqqQ4YgsaV/1Xg81J3PneFmqC6m4Fj 3iegHilt9D4iidznyq+u5XENKx2rcZogtPs4xYnBjJ5lsNLmmCsxAhLJGrnSabPA KMM+56UOa4N9btwhcSUvv/9HwEbCuP2x4qoBJ9FpqKb1ClBb63FjznEaLh0iNvyG p3u5bsSKusCHHM1n2LJowzLR5nxw5TvV8IBSYTTkHW+Nv5xVQqehP+dZWnW7yYqU jtqcjA== -----END CERTIFICATE-----Generated at Fri Mar 29 03:23:51 2024 by rpki-client on console-ams.rpki-client.org