$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/89402169a156ce9e2cedf74fed554d4a413e1e1e.roa File: 89402169a156ce9e2cedf74fed554d4a413e1e1e.roa (raw, json) Hash identifier: XsSSqAe8QFlw1Zz9Bg3Ciq0lAW+qgAdcLCmwGCR7NNc= Subject key identifier: 6E:86:B5:AD:B8:D9:F8:A9:88:6F:F1:B6:C2:C1:3B:3B:63:3E:30:A9 Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a Certificate serial: 089C36 Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/89402169a156ce9e2cedf74fed554d4a413e1e1e.roa Signing time: Mon 14 Mar 2022 22:10:12 +0000 ROA not before: Mon 14 Mar 2022 03:00:00 +0000 ROA not after: Wed 14 Mar 2029 03:00:00 +0000 asID: 14593 IP address blocks: 138.84.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 13:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564278 (0x89c36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a Validity Not Before: Mar 14 03:00:00 2022 GMT Not After : Mar 14 03:00:00 2029 GMT Subject: CN=89402169a156ce9e2cedf74fed554d4a413e1e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:be:8e:17:ff:c4:7e:67:55:b1:16:e0:8d: 5f:5f:74:0e:1b:76:c0:cb:ef:7d:c6:f2:4c:22:dc: 37:62:98:ac:c9:ba:03:9f:20:61:b4:3b:e0:df:e8: 78:e4:0b:1f:40:f2:39:72:0c:af:92:dc:dc:19:5d: 24:0e:0f:ed:af:23:65:f0:26:a6:00:0f:6f:de:b1: 8b:90:73:76:57:01:12:88:81:5c:ce:34:61:33:40: 7e:a3:ea:cb:2e:e3:20:79:db:eb:e1:29:0f:ee:30: c5:b1:b3:0b:91:ae:f8:4d:ba:10:bf:45:e2:c7:5b: 1a:55:a5:a2:cb:e1:c0:ca:ef:fb:94:00:2f:91:1d: 96:2f:33:09:63:a5:3a:70:32:47:a8:61:55:29:40: 63:e8:6f:86:62:07:a5:41:4a:dc:54:35:9a:f6:ad: a1:bc:8a:db:f8:32:1d:e1:1c:e1:c4:33:b3:59:21: b5:2e:73:55:ed:aa:a4:b4:a0:d4:48:b8:c4:2e:e5: 7c:80:61:bb:1a:c2:78:a3:10:6b:61:bb:0f:50:87: 51:cc:26:7a:12:a5:04:a8:1d:b4:a0:e4:6d:10:fe: 9e:d0:28:12:9f:3a:c6:c2:9f:3b:8f:79:cc:4c:c4: 08:a5:57:cd:45:a5:eb:f5:fd:62:72:ff:7d:5f:e1: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:86:B5:AD:B8:D9:F8:A9:88:6F:F1:B6:C2:C1:3B:3B:63:3E:30:A9 X509v3 Authority Key Identifier: keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/89402169a156ce9e2cedf74fed554d4a413e1e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.84.32.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:1b:e6:ae:8f:07:f6:c5:70:73:4c:8f:0a:91:40:98:cd:68: 43:30:1d:cf:d4:03:e0:d5:14:47:be:3b:5d:a7:0f:1d:cf:db: 83:e7:a2:6a:42:81:b8:bd:b8:f9:18:4d:2c:a3:43:07:6f:f1: eb:7c:e0:fd:62:72:09:7c:06:4a:23:fd:d1:ee:0e:b9:8b:c4: 20:52:28:47:39:39:21:ef:c3:04:27:a3:d9:9f:84:dc:c6:71: a4:87:01:7a:1c:44:d3:f6:9d:d3:0e:49:04:1a:1f:29:06:24: 46:46:bd:df:d8:94:61:22:b0:ee:13:d2:23:8d:a3:44:09:2f: bd:c5:8d:90:6f:83:96:1d:dd:d8:63:2a:9f:81:51:6f:86:6b: cc:be:36:be:52:03:66:fe:47:99:75:46:8e:f9:31:f7:f9:77: 16:62:e3:4e:2d:05:de:29:24:6e:8f:7a:ba:9a:0c:4b:22:31: bf:a7:64:e3:a0:06:4c:f6:ad:eb:93:9b:b4:01:e8:4f:9a:e8: ad:69:f0:2d:0c:d7:5b:45:f3:70:b0:56:cf:78:8c:4d:eb:88: 1d:91:e1:cf:e0:70:f1:e9:04:f7:8c:ae:3d:a3:47:d7:e3:a8: 8a:4c:38:e2:2f:e0:46:b3:c5:b2:05:36:70:9b:48:7b:fe:a1: 5a:14:0e:96 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDCJw2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZm Zjc1ZTljZGU4NmI1YzQ5MGQxNzFhODk5MzI2N2UyMzI3MDc4N2EwHhcNMjIwMzE0 MDMwMDAwWhcNMjkwMzE0MDMwMDAwWjAzMTEwLwYDVQQDEyg4OTQwMjE2OWExNTZj ZTllMmNlZGY3NGZlZDU1NGQ0YTQxM2UxZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqSW+jhf/xH5nVbEW4I1fX3QOG3bAy+99xvJMItw3YpisyboD nyBhtDvg3+h45AsfQPI5cgyvktzcGV0kDg/tryNl8CamAA9v3rGLkHN2VwESiIFc zjRhM0B+o+rLLuMgedvr4SkP7jDFsbMLka74TboQv0Xix1saVaWiy+HAyu/7lAAv kR2WLzMJY6U6cDJHqGFVKUBj6G+GYgelQUrcVDWa9q2hvIrb+DId4RzhxDOzWSG1 LnNV7aqktKDUSLjELuV8gGG7GsJ4oxBrYbsPUIdRzCZ6EqUEqB20oORtEP6e0CgS nzrGwp87j3nMTMQIpVfNRaXr9f1icv99X+FdJQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFG6Gta242fipiG/xtsLBOztjPjCpMB8GA1UdIwQYMBaAFJWmZw95jexuNC+g Gb+b2Ie6oOIjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmZmNzVl OWNkZTg2YjVjNDkwZDE3MWE4OTkzMjY3ZTIzMjcwNzg3YS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjk1YTU1ZTgtZmIzMS00OTg3LWFjOGQtMzQzZGY5 N2ZmMzg3Lzg5NDAyMTY5YTE1NmNlOWUyY2VkZjc0ZmVkNTU0ZDRhNDEzZTFlMWUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yOTVhNTVlOC1mYjMxLTQ5ODctYWM4ZC0zNDNk Zjk3ZmYzODcvNmZmNzVlOWNkZTg2YjVjNDkwZDE3MWE4OTkzMjY3ZTIzMjcwNzg3 YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAopUIDANBgkqhkiG9w0BAQsFAAOCAQEAPxvmro8H9sVwc0yP CpFAmM1oQzAdz9QD4NUUR747XacPHc/bg+eiakKBuL24+RhNLKNDB2/x63zg/WJy CXwGSiP90e4OuYvEIFIoRzk5Ie/DBCej2Z+E3MZxpIcBehxE0/ad0w5JBBofKQYk Rka939iUYSKw7hPSI42jRAkvvcWNkG+Dlh3d2GMqn4FRb4ZrzL42vlIDZv5HmXVG jvkx9/l3FmLjTi0F3ikkbo96upoMSyIxv6dk46AGTPat65ObtAHoT5rorWnwLQzX W0XzcLBWz3iMTeuIHZHhz+Bw8ekE94yuPaNH1+Ooikw44i/gRrPFsgU2cJtIe/6h WhQOlg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:45 2023 by rpki-client on console-fra.rpki-client.org