$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa File: 18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa (raw, json) Hash identifier: KwZ1iikf3k2lrxWvDNsBtYovWM6PJMvQblyvUkv8kJ8= Subject key identifier: 95:89:16:C8:29:3D:05:9B:B0:78:17:E5:E3:D5:7A:09:8E:53:14:80 Certificate issuer: /CN=e98b3a7ddef8f773492165299fd1cc4c656e96c9 Certificate serial: 0C48BD Authority key identifier: 1C:59:56:31:DA:F6:42:96:39:A6:50:40:F5:B3:C6:BC:E5:1D:23:EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa Signing time: Wed 24 Mar 2021 14:46:17 +0000 ROA not before: Wed 24 Mar 2021 14:46:17 +0000 ROA not after: Tue 24 Mar 2026 14:46:17 +0000 asID: 266694 IP address blocks: 45.229.168.0/22 maxlen: 22 2803:7520::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/e98b3a7ddef8f773492165299fd1cc4c656e96c9.crl rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/e98b3a7ddef8f773492165299fd1cc4c656e96c9.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805053 (0xc48bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98b3a7ddef8f773492165299fd1cc4c656e96c9 Validity Not Before: Mar 24 14:46:17 2021 GMT Not After : Mar 24 14:46:17 2026 GMT Subject: CN=18e5f7f234267eef704cb6345b5ccfaf79a4ad68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:b2:db:30:52:b4:9b:fd:04:af:24:fa:05: a9:93:04:17:56:22:2a:e8:0a:ac:2c:54:35:e4:4d: 84:b7:3f:de:06:12:6d:19:7d:32:e5:36:d0:b6:e5: 4d:81:7e:d7:a1:ef:ca:08:d5:57:22:a8:4a:3b:74: d2:6d:bf:76:f3:e6:eb:f8:d6:ad:78:0e:ff:46:eb: dd:da:74:89:ee:89:f8:e6:17:f4:69:6c:8f:18:3d: b8:1e:41:ea:a5:ef:d0:2e:63:c8:1e:0c:e4:b3:9c: 7f:08:60:f3:d6:e8:a1:4a:1a:08:cb:ab:d7:9e:66: 8d:26:b6:c7:e0:18:5a:6d:31:4e:a2:74:19:33:da: 1c:d9:c5:24:27:6e:47:37:9f:2a:de:bd:54:54:bf: 8d:5d:fd:3d:91:da:f9:6d:e1:3b:e8:3b:f5:a5:75: 14:64:1d:18:a0:32:d4:78:65:6c:13:b5:a7:fa:66: 1d:62:69:5a:57:28:26:b9:6b:34:98:3b:da:ab:7c: a7:7c:86:ed:e7:e3:a0:3d:f7:a2:86:f9:b0:af:d2: 56:0b:7e:b1:7b:bc:03:08:29:8f:17:0b:7f:c2:e3: 8b:aa:28:37:ff:0d:42:9a:81:b3:ef:b5:fd:1f:2b: f9:ac:9b:8c:d2:e3:6b:12:48:df:9f:f3:23:59:26: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:89:16:C8:29:3D:05:9B:B0:78:17:E5:E3:D5:7A:09:8E:53:14:80 X509v3 Authority Key Identifier: keyid:1C:59:56:31:DA:F6:42:96:39:A6:50:40:F5:B3:C6:BC:E5:1D:23:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/e98b3a7ddef8f773492165299fd1cc4c656e96c9.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.168.0/22 IPv6: 2803:7520::/32 Signature Algorithm: sha256WithRSAEncryption 80:3a:4a:d8:76:8f:fa:59:e4:8c:99:94:db:68:61:c5:2c:5e: 82:d1:1e:2b:9e:af:0f:87:82:a9:d2:fb:22:bb:dd:1c:7f:16: 18:3f:d1:de:27:b8:7d:4a:7d:d7:50:3b:9e:87:e9:69:b4:f0: 87:81:10:01:32:9f:d8:0c:c1:d2:52:3f:bd:35:90:06:91:ec: 63:3f:23:a7:27:cf:57:81:ab:a3:3e:a1:1a:9b:e3:6d:6e:1d: 99:8b:71:09:31:cf:33:cb:f3:0e:24:d4:da:5e:a9:8f:21:3f: 7f:ff:5d:70:15:05:b6:6b:d6:48:5d:ae:88:e0:d3:8e:ec:76: 7a:0b:c0:b3:bb:4d:3f:16:45:bf:af:9d:99:f7:b6:f7:61:14: 2d:8e:9a:6d:68:14:7a:b0:51:24:c5:df:8a:5b:85:50:79:65: c2:77:b1:03:f9:15:f9:5c:0c:cd:51:cf:5a:de:8c:fd:25:65: 0b:49:00:59:28:0c:85:53:16:1c:45:8a:40:d0:7f:8d:85:e6: 7e:a1:3f:9d:f2:28:4e:4a:32:83:80:f4:28:46:71:01:b0:85: 3e:bb:c9:96:fd:27:9f:ea:b2:9a:1f:5a:2b:72:22:6e:28:31: ad:4d:98:4b:26:c5:86:a2:f0:15:68:ae:52:39:9f:0c:0c:32: cb:d4:c5:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDDEi9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5 OGIzYTdkZGVmOGY3NzM0OTIxNjUyOTlmZDFjYzRjNjU2ZTk2YzkwHhcNMjEwMzI0 MTQ0NjE3WhcNMjYwMzI0MTQ0NjE3WjAzMTEwLwYDVQQDEygxOGU1ZjdmMjM0MjY3 ZWVmNzA0Y2I2MzQ1YjVjY2ZhZjc5YTRhZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiXKy2zBStJv9BK8k+gWpkwQXViIq6AqsLFQ15E2Etz/eBhJt GX0y5TbQtuVNgX7Xoe/KCNVXIqhKO3TSbb928+br+NateA7/Ruvd2nSJ7on45hf0 aWyPGD24HkHqpe/QLmPIHgzks5x/CGDz1uihShoIy6vXnmaNJrbH4BhabTFOonQZ M9oc2cUkJ25HN58q3r1UVL+NXf09kdr5beE76Dv1pXUUZB0YoDLUeGVsE7Wn+mYd YmlaVygmuWs0mDvaq3ynfIbt5+OgPfeihvmwr9JWC36xe7wDCCmPFwt/wuOLqig3 /w1CmoGz77X9Hyv5rJuM0uNrEkjfn/MjWSbJ0wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFJWJFsgpPQWbsHgX5ePVegmOUxSAMB8GA1UdIwQYMBaAFBxZVjHa9kKWOaZQ QPWzxrzlHSPqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk4YjNh N2RkZWY4Zjc3MzQ5MjE2NTI5OWZkMWNjNGM2NTZlOTZjOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzYxMGNjOTYtNjJjNS00OTk4LWE5NTYtYjk0MzBj OTc5NDU4LzE4ZTVmN2YyMzQyNjdlZWY3MDRjYjYzNDViNWNjZmFmNzlhNGFkNjgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zNjEwY2M5Ni02MmM1LTQ5OTgtYTk1Ni1iOTQz MGM5Nzk0NTgvZTk4YjNhN2RkZWY4Zjc3MzQ5MjE2NTI5OWZkMWNjNGM2NTZlOTZj OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi3lqDANBAIAAjAHAwUAKAN1IDANBgkqhkiG9w0BAQsFAAOC AQEAgDpK2HaP+lnkjJmU22hhxSxegtEeK56vD4eCqdL7IrvdHH8WGD/R3ie4fUp9 11A7nofpabTwh4EQATKf2AzB0lI/vTWQBpHsYz8jpyfPV4Groz6hGpvjbW4dmYtx CTHPM8vzDiTU2l6pjyE/f/9dcBUFtmvWSF2uiODTjux2egvAs7tNPxZFv6+dmfe2 92EULY6abWgUerBRJMXfiluFUHllwnexA/kV+VwMzVHPWt6M/SVlC0kAWSgMhVMW HEWKQNB/jYXmfqE/nfIoTkoyg4D0KEZxAbCFPrvJlv0nn+qymh9aK3IibigxrU2Y SybFhqLwFWiuUjmfDAwyy9TFUQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:33:38 2023 by rpki-client on console-ams.rpki-client.org