$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa File: 46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa (raw, json) Hash identifier: ycWuSQJzAYEKoCEy22cvx6DCRWw/1O2PCvTH5XyBhvo= Subject key identifier: 1A:AE:98:2B:A3:78:70:58:4C:DA:DC:C3:11:02:C7:4B:FA:E9:70:93 Certificate issuer: /CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876 Certificate serial: 0BBDAA Authority key identifier: 29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa Signing time: Wed 24 Mar 2021 14:40:11 +0000 ROA not before: Wed 24 Mar 2021 14:40:11 +0000 ROA not after: Tue 24 Mar 2026 14:40:11 +0000 asID: 266894 IP address blocks: 45.161.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 08:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769450 (0xbbdaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876 Validity Not Before: Mar 24 14:40:11 2021 GMT Not After : Mar 24 14:40:11 2026 GMT Subject: CN=46cad6f1e5c56a8feef5373c5e1ceb5771539c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:95:61:d6:c9:1c:22:05:43:3c:e7:7f:50: 8f:c8:0d:b0:98:94:f9:79:2e:5b:f1:e5:c6:3c:24: 36:bc:38:44:9d:bb:ec:e4:ed:52:a0:ae:4c:61:96: 17:9b:dc:f8:58:ba:07:8a:ba:26:3e:36:5c:6b:18: 8e:da:07:92:76:e1:d0:80:cb:f5:c8:e0:1c:cc:d3: 91:23:6f:63:4d:18:f4:90:42:88:f3:93:3c:d9:9e: 2a:40:bd:60:63:2e:de:a9:f0:a7:1d:1b:53:50:5a: 84:4a:7f:b6:b8:c3:29:a8:3d:0e:60:9b:1e:4f:07: 12:49:fa:9a:af:2f:45:75:e6:7d:ee:f0:39:a2:1a: 4a:01:6f:47:d7:9f:83:79:ea:c1:be:a1:fc:43:6b: c1:ae:40:1f:d0:3e:a4:74:d8:dd:e4:9a:0d:91:4f: 27:44:55:15:6a:69:7c:dd:7b:07:b4:4a:73:b2:66: c5:95:a0:e7:33:05:56:d8:18:7a:a8:12:ef:92:dc: a5:1f:eb:98:7f:e6:11:41:de:9f:43:2d:96:6a:3a: 39:6a:41:ac:d3:d1:b7:e7:9b:cf:85:62:7a:b3:f0: 14:17:e8:56:9b:4b:08:cc:ba:4a:13:59:c3:58:74: f0:9e:8f:7f:6f:40:1a:db:33:b9:a6:47:b9:4c:ea: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:98:2B:A3:78:70:58:4C:DA:DC:C3:11:02:C7:4B:FA:E9:70:93 X509v3 Authority Key Identifier: keyid:29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.32.0/22 Signature Algorithm: sha256WithRSAEncryption 28:7b:4f:7b:ff:c8:54:0f:76:a9:d1:3e:97:e3:19:a9:55:f9: 7a:6d:bf:04:41:82:eb:c3:94:d9:61:aa:b7:a7:59:a5:df:fe: a6:be:c1:92:90:be:0e:a8:67:a8:60:52:1f:8c:f6:a9:9f:ed: cd:c4:bd:17:6d:d5:02:17:59:2a:d7:d8:13:78:73:44:29:2f: e3:ad:12:bb:5f:0a:38:64:19:c1:58:0a:cf:ed:90:9c:b6:ed: 15:d5:92:af:a9:95:08:fc:e9:3a:ec:6c:6e:d2:51:3c:7c:5d: a7:34:7a:fb:1c:12:1e:02:77:76:12:75:15:71:9b:64:68:e7: a6:1c:31:ee:da:33:2d:67:95:be:81:c0:38:d7:2f:f7:ba:59: f2:09:eb:02:93:0c:e9:4a:8b:75:24:46:4d:1b:fe:a1:af:6b: e3:fd:45:e5:16:ed:b4:63:5f:af:9e:81:6c:de:01:f9:fc:5a: 8b:05:21:a5:b3:7b:41:36:e6:97:fa:dd:1c:fa:ce:40:90:0f: f0:7b:d8:68:a0:ee:37:f1:e3:f3:ee:ee:4e:4b:ad:6a:95:73: ea:94:34:e0:e9:c9:dd:08:63:54:be:af:1b:c5:84:9f:5a:1f: ce:45:92:82:68:ac:eb:0b:c7:03:dd:1e:00:e6:e2:ef:c7:2b: 13:b9:54:bd -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDC72qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4 OWQzYjJlMTRkYzYxYjE1ZGQ1ZTM2NDViYTU3YzExNDU1Zjk4NzYwHhcNMjEwMzI0 MTQ0MDExWhcNMjYwMzI0MTQ0MDExWjAzMTEwLwYDVQQDEyg0NmNhZDZmMWU1YzU2 YThmZWVmNTM3M2M1ZTFjZWI1NzcxNTM5YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkTeVYdbJHCIFQzznf1CPyA2wmJT5eS5b8eXGPCQ2vDhEnbvs 5O1SoK5MYZYXm9z4WLoHiromPjZcaxiO2geSduHQgMv1yOAczNORI29jTRj0kEKI 85M82Z4qQL1gYy7eqfCnHRtTUFqESn+2uMMpqD0OYJseTwcSSfqary9FdeZ97vA5 ohpKAW9H15+DeerBvqH8Q2vBrkAf0D6kdNjd5JoNkU8nRFUVaml83XsHtEpzsmbF laDnMwVW2Bh6qBLvktylH+uYf+YRQd6fQy2Wajo5akGs09G355vPhWJ6s/AUF+hW m0sIzLpKE1nDWHTwno9/b0Aa2zO5pke5TOpN1QIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFBqumCujeHBYTNrcwxECx0v66XCTMB8GA1UdIwQYMBaAFClDub9cQgME2r5p 5QrmyQHiX+msMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODg5ZDNi MmUxNGRjNjFiMTVkZDVlMzY0NWJhNTdjMTE0NTVmOTg3Ni5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjFiZmIwMmQtZWQyZi00OTgyLTgzMmYtMWFmOGQ4 N2VhN2IwLzQ2Y2FkNmYxZTVjNTZhOGZlZWY1MzczYzVlMWNlYjU3NzE1MzljMTku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yMWJmYjAyZC1lZDJmLTQ5ODItODMyZi0xYWY4 ZDg3ZWE3YjAvODg5ZDNiMmUxNGRjNjFiMTVkZDVlMzY0NWJhNTdjMTE0NTVmOTg3 Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAi2hIDANBgkqhkiG9w0BAQsFAAOCAQEAKHtPe//IVA92qdE+ l+MZqVX5em2/BEGC68OU2WGqt6dZpd/+pr7BkpC+DqhnqGBSH4z2qZ/tzcS9F23V AhdZKtfYE3hzRCkv460Su18KOGQZwVgKz+2QnLbtFdWSr6mVCPzpOuxsbtJRPHxd pzR6+xwSHgJ3dhJ1FXGbZGjnphwx7tozLWeVvoHAONcv97pZ8gnrApMM6UqLdSRG TRv+oa9r4/1F5RbttGNfr56BbN4B+fxaiwUhpbN7QTbml/rdHPrOQJAP8HvYaKDu N/Hj8+7uTkutapVz6pQ04OnJ3QhjVL6vG8WEn1ofzkWSgmis6wvHA90eAObi78cr E7lUvQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:44 2023 by rpki-client on console-fra.rpki-client.org