$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa File: 0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa (raw, json) Hash identifier: tw9OUuxB5+1YWvAxTAzLADX7duedEHHkQDg2q9TKzoE= Subject key identifier: 97:E1:9F:75:A9:99:84:A8:C8:57:51:CD:7C:C4:A8:54:27:F8:12:82 Certificate issuer: /CN=37043f262df2eb062b3237cb4f189b08823ce138 Certificate serial: 1D91C2 Authority key identifier: 34:D4:85:26:6C:78:F8:0C:9F:41:63:82:5F:3F:15:7B:E5:86:2A:EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37043f262df2eb062b3237cb4f189b08823ce138.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa Signing time: Mon 09 Jan 2023 15:51:54 +0000 ROA not before: Sun 08 Jan 2023 15:51:31 +0000 ROA not after: Thu 09 Jan 2025 15:51:31 +0000 asID: 264814 IP address blocks: 170.238.200.0/22 maxlen: 24 2803:ecc0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/37043f262df2eb062b3237cb4f189b08823ce138.crl rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/37043f262df2eb062b3237cb4f189b08823ce138.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37043f262df2eb062b3237cb4f189b08823ce138.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937858 (0x1d91c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37043f262df2eb062b3237cb4f189b08823ce138 Validity Not Before: Jan 8 15:51:31 2023 GMT Not After : Jan 9 15:51:31 2025 GMT Subject: CN=0a3f0ea6ce88f66f5933413a85d6facef5881fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:88:2f:aa:3e:af:20:fc:d3:5f:20:bc:52: 6c:a5:40:63:d5:e7:c8:36:74:95:fb:c7:f7:f1:b9: 68:70:13:55:88:9a:a4:1e:06:7f:1f:19:40:ae:26: 44:48:63:2b:77:98:2f:74:ed:2a:d2:13:d8:92:04: 5f:37:f0:ed:f6:e2:ad:72:20:36:01:bb:1b:91:6e: a1:6c:c0:60:7b:12:17:48:5f:e8:77:dc:a9:16:cb: ee:78:e7:2d:09:d0:3c:c0:00:c6:3b:6a:72:15:0e: 92:b1:b2:a9:a8:d4:eb:8a:94:26:8d:d0:2b:84:36: a6:d4:6f:c5:fd:ef:72:71:f4:3e:26:4d:bb:c0:79: 4a:b7:cc:fd:e5:72:b1:d6:1f:aa:f8:e3:ba:5a:fb: fc:1b:2a:cc:b9:c2:c6:0c:3c:9a:b8:81:79:55:e6: 31:51:2f:56:25:6c:1d:13:78:24:42:eb:79:1f:b9: e1:dd:c5:1e:1e:ed:6d:47:9b:8e:47:f2:6e:96:4d: c8:fc:5f:df:cc:bc:c9:3a:98:17:28:66:0b:88:ab: 2b:24:fb:08:32:ba:20:f3:9f:6c:77:8e:c4:b9:9a: f7:28:18:b5:7a:7d:26:c5:01:a9:83:c5:bc:10:be: 6f:93:71:c2:29:27:fd:b6:9a:94:e4:92:99:7c:b8: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E1:9F:75:A9:99:84:A8:C8:57:51:CD:7C:C4:A8:54:27:F8:12:82 X509v3 Authority Key Identifier: keyid:34:D4:85:26:6C:78:F8:0C:9F:41:63:82:5F:3F:15:7B:E5:86:2A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37043f262df2eb062b3237cb4f189b08823ce138.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/0a3f0ea6ce88f66f5933413a85d6facef5881fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/21c8ed93-6fb9-42bd-86b3-7595efa88bfe/37043f262df2eb062b3237cb4f189b08823ce138.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.200.0/22 IPv6: 2803:ecc0::/32 Signature Algorithm: sha256WithRSAEncryption 39:43:6f:e4:a5:e9:7b:bf:af:55:7e:e0:50:37:42:e9:25:0e: a9:9d:08:c7:ac:36:b4:bd:08:49:4e:aa:67:5f:4c:2c:da:fe: 6d:84:3a:8c:1a:26:c0:3d:9d:26:ac:75:af:35:a4:6b:64:a1: 5e:99:73:e1:68:a3:44:01:4e:b1:6e:45:af:78:41:78:49:4f: 64:4f:f9:a0:58:e8:f4:cb:ae:dc:17:f6:6b:11:e2:f0:36:4c: f1:08:f1:7f:27:d2:5d:a0:45:80:eb:8a:bb:d2:a7:ca:52:cc: 61:b8:d6:33:c8:f8:4d:16:d0:76:cc:47:b1:8c:cc:98:ee:dd: 5b:77:31:f8:55:e6:99:a5:64:a6:bb:2b:93:c1:dc:cd:ff:5e: 00:2c:30:6f:5b:8c:4b:4a:56:eb:fe:2b:73:c6:55:42:fa:a5: 12:d4:8f:25:c5:ad:41:03:9e:ac:92:7a:a0:62:dd:7a:af:72: 13:36:4c:7c:a9:e7:10:0d:8a:a2:8c:d5:96:6e:fb:e3:c0:a1: 1f:a0:b4:e0:b3:ee:e9:6d:b8:3e:4b:1d:06:1e:8d:24:33:61: 93:2a:a3:b3:74:36:5a:eb:72:2e:23:06:5b:c5:ef:3e:0b:a0: ec:ea:8f:86:81:0f:ba:b9:e6:da:a2:ae:7e:c0:2c:37:1f:16: 77:62:d2:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDHZHCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3 MDQzZjI2MmRmMmViMDYyYjMyMzdjYjRmMTg5YjA4ODIzY2UxMzgwHhcNMjMwMTA4 MTU1MTMxWhcNMjUwMTA5MTU1MTMxWjAzMTEwLwYDVQQDEygwYTNmMGVhNmNlODhm NjZmNTkzMzQxM2E4NWQ2ZmFjZWY1ODgxZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArE6IL6o+ryD8018gvFJspUBj1efINnSV+8f38blocBNViJqk HgZ/HxlAriZESGMrd5gvdO0q0hPYkgRfN/Dt9uKtciA2AbsbkW6hbMBgexIXSF/o d9ypFsvueOctCdA8wADGO2pyFQ6SsbKpqNTripQmjdArhDam1G/F/e9ycfQ+Jk27 wHlKt8z95XKx1h+q+OO6Wvv8GyrMucLGDDyauIF5VeYxUS9WJWwdE3gkQut5H7nh 3cUeHu1tR5uOR/Julk3I/F/fzLzJOpgXKGYLiKsrJPsIMrog859sd47EuZr3KBi1 en0mxQGpg8W8EL5vk3HCKSf9tpqU5JKZfLgr3wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFJfhn3WpmYSoyFdRzXzEqFQn+BKCMB8GA1UdIwQYMBaAFDTUhSZsePgMn0Fj gl8/FXvlhirsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzcwNDNm MjYyZGYyZWIwNjJiMzIzN2NiNGYxODliMDg4MjNjZTEzOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjFjOGVkOTMtNmZiOS00MmJkLTg2YjMtNzU5NWVm YTg4YmZlLzBhM2YwZWE2Y2U4OGY2NmY1OTMzNDEzYTg1ZDZmYWNlZjU4ODFmY2Yu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yMWM4ZWQ5My02ZmI5LTQyYmQtODZiMy03NTk1 ZWZhODhiZmUvMzcwNDNmMjYyZGYyZWIwNjJiMzIzN2NiNGYxODliMDg4MjNjZTEz OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAqruyDANBAIAAjAHAwUAKAPswDANBgkqhkiG9w0BAQsFAAOC AQEAOUNv5KXpe7+vVX7gUDdC6SUOqZ0Ix6w2tL0ISU6qZ19MLNr+bYQ6jBomwD2d Jqx1rzWka2ShXplz4WijRAFOsW5Fr3hBeElPZE/5oFjo9Muu3Bf2axHi8DZM8Qjx fyfSXaBFgOuKu9KnylLMYbjWM8j4TRbQdsxHsYzMmO7dW3cx+FXmmaVkprsrk8Hc zf9eACwwb1uMS0pW6/4rc8ZVQvqlEtSPJcWtQQOerJJ6oGLdeq9yEzZMfKnnEA2K oozVlm7748ChH6C04LPu6W24PksdBh6NJDNhkyqjs3Q2WutyLiMGW8XvPgug7OqP hoEPurnm2qKufsAsNx8Wd2LSTQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:44 2023 by rpki-client on console-fra.rpki-client.org