$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/e0a4b26c19344f458f42ff18336e27d384eb26ef.roa File: e0a4b26c19344f458f42ff18336e27d384eb26ef.roa (raw, json) Hash identifier: Gw5pTu/lTGbVGHmG1XbjJTp0dMWpJgJzFvrXbyO04/k= Subject key identifier: F9:53:E6:B9:3F:64:EB:7C:9F:E3:B6:AF:2B:B6:25:07:F9:92:0E:3F Certificate issuer: /CN=bcae9c743eec0954d88147787d8e521760114b89 Certificate serial: 061DE3 Authority key identifier: F8:EA:89:3C:CE:8D:25:CF:80:FD:09:5C:AC:C8:87:F1:C8:17:A8:8D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcae9c743eec0954d88147787d8e521760114b89.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/e0a4b26c19344f458f42ff18336e27d384eb26ef.roa Signing time: Wed 24 Mar 2021 14:48:06 +0000 ROA not before: Wed 24 Mar 2021 14:48:05 +0000 ROA not after: Tue 24 Mar 2026 14:48:05 +0000 asID: 270026 IP address blocks: 189.127.166.0/23 maxlen: 24 2803:f9e0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/bcae9c743eec0954d88147787d8e521760114b89.crl rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/bcae9c743eec0954d88147787d8e521760114b89.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcae9c743eec0954d88147787d8e521760114b89.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400867 (0x61de3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcae9c743eec0954d88147787d8e521760114b89 Validity Not Before: Mar 24 14:48:05 2021 GMT Not After : Mar 24 14:48:05 2026 GMT Subject: CN=e0a4b26c19344f458f42ff18336e27d384eb26ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:78:32:8c:84:ac:30:40:16:e7:43:a5:93: e1:3b:28:fd:19:5f:e7:fb:c8:3d:72:dc:4a:04:89: 37:00:c4:bc:45:a8:5e:cc:54:c3:02:e2:6d:78:36: 0b:37:09:91:a0:6c:f5:a8:e4:f0:ee:0f:e1:49:0e: dc:af:fe:5f:73:ac:b5:ee:a4:72:33:d0:18:70:ca: 7a:80:01:4c:69:48:be:ac:46:28:a7:0a:04:30:72: ec:3c:69:29:84:f6:ba:08:74:09:2a:d1:ac:4b:e6: d1:b8:de:ee:a1:7a:41:1a:b3:54:38:07:71:d1:b3: ac:c0:cf:8e:94:9e:0d:c8:3f:12:9b:8b:e8:9c:b9: 49:a4:b8:b5:ae:df:38:48:b1:50:30:ce:2b:3a:11: ce:24:7f:82:ca:66:32:ec:d0:05:cc:f0:23:c1:7b: f1:03:7b:48:5b:2a:fc:fa:4d:53:09:f8:c8:0e:c8: f8:6a:21:e4:63:b1:a5:ce:0e:ad:de:3d:13:88:4f: 11:60:14:f1:c2:8d:35:f1:97:c2:3a:dc:7f:6a:d6: 74:99:c2:ad:53:0d:a1:a8:70:db:d3:5d:f4:40:9f: ab:61:1b:df:fc:94:e2:e9:4c:b4:92:1e:c1:19:c0: 05:81:35:91:ce:5a:45:ec:24:da:b0:7e:c7:76:b8: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:53:E6:B9:3F:64:EB:7C:9F:E3:B6:AF:2B:B6:25:07:F9:92:0E:3F X509v3 Authority Key Identifier: keyid:F8:EA:89:3C:CE:8D:25:CF:80:FD:09:5C:AC:C8:87:F1:C8:17:A8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcae9c743eec0954d88147787d8e521760114b89.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/e0a4b26c19344f458f42ff18336e27d384eb26ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3bebcfa8-49bf-4460-94a2-977e59ab6849/bcae9c743eec0954d88147787d8e521760114b89.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.166.0/23 IPv6: 2803:f9e0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:74:5d:e2:09:c2:48:81:e8:21:f8:25:02:4f:fb:a7:27:49: 96:12:fb:24:51:33:4b:cb:5d:21:fd:5f:f6:b1:f7:3a:4b:5b: 89:61:5d:61:0c:6a:32:f4:8e:2c:bf:c1:16:0d:3d:e7:13:60: 6c:e0:f7:9a:13:d9:17:33:62:b0:eb:1b:26:5e:94:b5:c2:d5: e0:b9:cc:27:4e:2d:08:04:74:da:3a:3d:cf:b0:43:b7:eb:88: 46:09:30:56:2b:8f:9e:6b:47:8c:af:d1:9f:f8:58:e1:74:a0: aa:24:e9:c0:14:da:f0:7a:2f:ff:53:a7:fe:5c:48:c3:f4:5b: 11:79:1d:b3:9a:69:74:41:fe:d1:f0:12:07:d9:a1:c6:a8:9e: 92:f3:0f:a5:e7:24:e6:ca:cd:61:aa:51:71:40:29:ca:04:97: f8:12:08:c6:ce:bc:30:e3:79:e7:08:3c:e6:c0:bc:66:b7:8c: 5c:c7:77:f5:d0:d5:6d:b0:a7:92:3a:bb:25:95:de:4f:6a:0b: ab:64:b7:20:8e:42:45:3a:f7:f6:d5:0c:fd:dd:54:71:fc:23: 65:0e:db:92:b9:0a:c4:a2:4e:e8:18:f5:7b:40:46:36:82:21: 44:21:6c:2d:1a:d5:2b:26:10:48:fa:c8:61:ae:9c:2f:7f:de: c0:9b:ac:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDBh3jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj YWU5Yzc0M2VlYzA5NTRkODgxNDc3ODdkOGU1MjE3NjAxMTRiODkwHhcNMjEwMzI0 MTQ0ODA1WhcNMjYwMzI0MTQ0ODA1WjAzMTEwLwYDVQQDEyhlMGE0YjI2YzE5MzQ0 ZjQ1OGY0MmZmMTgzMzZlMjdkMzg0ZWIyNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnzR4MoyErDBAFudDpZPhOyj9GV/n+8g9ctxKBIk3AMS8Rahe zFTDAuJteDYLNwmRoGz1qOTw7g/hSQ7cr/5fc6y17qRyM9AYcMp6gAFMaUi+rEYo pwoEMHLsPGkphPa6CHQJKtGsS+bRuN7uoXpBGrNUOAdx0bOswM+OlJ4NyD8Sm4vo nLlJpLi1rt84SLFQMM4rOhHOJH+CymYy7NAFzPAjwXvxA3tIWyr8+k1TCfjIDsj4 aiHkY7Glzg6t3j0TiE8RYBTxwo018ZfCOtx/atZ0mcKtUw2hqHDb0130QJ+rYRvf /JTi6Uy0kh7BGcAFgTWRzlpF7CTasH7HdrjYqwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFPlT5rk/ZOt8n+O2ryu2JQf5kg4/MB8GA1UdIwQYMBaAFPjqiTzOjSXPgP0J XKzIh/HIF6iNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmNhZTlj NzQzZWVjMDk1NGQ4ODE0Nzc4N2Q4ZTUyMTc2MDExNGI4OS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvM2JlYmNmYTgtNDliZi00NDYwLTk0YTItOTc3ZTU5 YWI2ODQ5L2UwYTRiMjZjMTkzNDRmNDU4ZjQyZmYxODMzNmUyN2QzODRlYjI2ZWYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zYmViY2ZhOC00OWJmLTQ0NjAtOTRhMi05Nzdl NTlhYjY4NDkvYmNhZTljNzQzZWVjMDk1NGQ4ODE0Nzc4N2Q4ZTUyMTc2MDExNGI4 OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAb1/pjANBAIAAjAHAwUAKAP54DANBgkqhkiG9w0BAQsFAAOC AQEAm3Rd4gnCSIHoIfglAk/7pydJlhL7JFEzS8tdIf1f9rH3OktbiWFdYQxqMvSO LL/BFg095xNgbOD3mhPZFzNisOsbJl6UtcLV4LnMJ04tCAR02jo9z7BDt+uIRgkw ViuPnmtHjK/Rn/hY4XSgqiTpwBTa8Hov/1On/lxIw/RbEXkds5ppdEH+0fASB9mh xqiekvMPpeck5srNYapRcUApygSX+BIIxs68MON55wg85sC8ZreMXMd39dDVbbCn kjq7JZXeT2oLq2S3II5CRTr39tUM/d1UcfwjZQ7bkrkKxKJO6Bj1e0BGNoIhRCFs LRrVKyYQSPrIYa6cL3/ewJusPQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:48 2023 by rpki-client on console-fra.rpki-client.org