$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa File: aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa (raw, json) Hash identifier: cN9B4IXj6CrlldC22z53SJQeb3RrtQ+6YH1KWQb4mpA= Subject key identifier: 39:00:CD:4A:A5:F5:63:63:D7:64:B2:ED:C6:0E:D5:2D:BF:0D:13:EF Certificate issuer: /CN=23e6b47caf00c16218d730db4db550ca6fcb92ad Certificate serial: 061595 Authority key identifier: F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa Signing time: Wed 21 Dec 2022 04:37:04 +0000 ROA not before: Tue 20 Dec 2022 04:34:34 +0000 ROA not after: Sat 21 Dec 2024 04:34:34 +0000 asID: 271922 IP address blocks: 179.63.52.0/22 maxlen: 24 2803:df10::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.crl rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398741 (0x61595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e6b47caf00c16218d730db4db550ca6fcb92ad Validity Not Before: Dec 20 04:34:34 2022 GMT Not After : Dec 21 04:34:34 2024 GMT Subject: CN=aa42750c9406cd280f81b4c337ae5a2e8d4d5db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:f7:d7:52:fe:db:19:09:c3:a4:bb:9e:4e: 17:57:46:a7:9a:c9:0d:74:c1:d9:5c:91:ec:05:4c: 4d:94:06:b6:77:de:d5:62:fd:26:1a:7b:76:bf:ea: e7:73:06:62:af:92:61:14:1b:dd:fc:ce:11:e4:2b: 79:f7:2a:ef:ae:e8:38:ce:17:7c:9d:34:44:82:66: 61:19:c0:cd:cd:50:70:ed:5a:fb:2f:f3:bf:bb:92: 21:70:dd:83:fd:a5:34:f8:8b:aa:3a:21:ec:83:b7: 61:77:af:fc:00:2a:98:20:75:89:3c:39:5b:20:d2: 3f:c8:8e:d7:b0:c8:f6:f1:86:ee:65:f4:d8:4e:6f: 99:28:3f:8b:c5:d1:a7:fb:47:1c:8f:e6:9a:93:ba: 74:6c:57:4a:c2:2c:5a:b6:6f:22:6e:b1:87:5c:ad: db:a6:15:92:0d:fd:f1:78:94:1c:9a:46:c2:64:08: a7:6c:16:5c:d6:0f:0e:03:64:75:8c:f2:ea:4f:9e: 4d:c7:09:8c:3e:ba:2c:30:a7:27:27:22:92:b1:2f: f6:c3:48:16:2d:23:44:cc:5c:29:ea:57:ec:48:1d: 19:8b:de:19:26:61:76:2d:84:fb:36:8b:5b:bc:f4: db:d1:ef:8a:0b:6f:42:d8:90:4d:6a:01:3a:bc:0b: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:00:CD:4A:A5:F5:63:63:D7:64:B2:ED:C6:0E:D5:2D:BF:0D:13:EF X509v3 Authority Key Identifier: keyid:F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.63.52.0/22 IPv6: 2803:df10::/32 Signature Algorithm: sha256WithRSAEncryption 06:55:aa:ca:ab:7f:87:c5:57:58:55:b1:a2:7a:5b:7c:28:91: 4c:84:26:32:01:58:36:28:b1:f4:43:1c:e8:59:f5:25:d0:9c: 52:5b:4a:b2:00:6a:ba:dc:19:0d:ca:70:cb:6e:45:15:92:63: 28:f7:59:08:b5:50:c1:77:1c:00:a8:4f:15:b4:15:70:29:9a: cd:c8:a4:56:c8:d3:b9:c2:c9:92:c3:96:1d:88:c8:a4:48:93: 65:b3:d9:20:67:fb:b2:68:bf:d2:07:1b:db:17:b1:12:a7:e2: 7f:8a:3f:3d:7a:3c:00:a2:94:84:45:8f:27:e1:da:35:a7:d6: 89:45:63:c3:99:1c:0a:85:25:73:f1:64:00:ab:52:e7:0c:8c: 19:c1:bc:11:67:27:71:46:24:fb:0e:cb:1a:77:ac:8a:8c:4d: b5:7c:ca:93:e3:18:a0:c1:51:81:1b:fc:5b:db:c0:96:98:6a: 72:cc:d9:82:14:91:05:83:4c:21:a1:dd:61:5b:61:04:35:47: 75:41:c1:95:ab:65:f8:13:c0:a0:99:ae:6e:76:9d:93:49:0f: a2:5b:27:4d:50:ee:d3:ad:fe:33:52:86:38:8f:6f:54:f2:db: 80:56:a8:27:ce:9d:50:19:3e:68:0a:39:91:bd:ad:4e:f5:aa: 68:13:45:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDBhWVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIz ZTZiNDdjYWYwMGMxNjIxOGQ3MzBkYjRkYjU1MGNhNmZjYjkyYWQwHhcNMjIxMjIw MDQzNDM0WhcNMjQxMjIxMDQzNDM0WjAzMTEwLwYDVQQDEyhhYTQyNzUwYzk0MDZj ZDI4MGY4MWI0YzMzN2FlNWEyZThkNGQ1ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAukv311L+2xkJw6S7nk4XV0anmskNdMHZXJHsBUxNlAa2d97V Yv0mGnt2v+rncwZir5JhFBvd/M4R5Ct59yrvrug4zhd8nTREgmZhGcDNzVBw7Vr7 L/O/u5IhcN2D/aU0+IuqOiHsg7dhd6/8ACqYIHWJPDlbINI/yI7XsMj28YbuZfTY Tm+ZKD+LxdGn+0ccj+aak7p0bFdKwixatm8ibrGHXK3bphWSDf3xeJQcmkbCZAin bBZc1g8OA2R1jPLqT55NxwmMProsMKcnJyKSsS/2w0gWLSNEzFwp6lfsSB0Zi94Z JmF2LYT7NotbvPTb0e+KC29C2JBNagE6vAsyFwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFDkAzUql9WNj12Sy7cYO1S2/DRPvMB8GA1UdIwQYMBaAFPR0xzC+oJT2qLtx MGJ812DfoFZJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjNlNmI0 N2NhZjAwYzE2MjE4ZDczMGRiNGRiNTUwY2E2ZmNiOTJhZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvM2VhNzNkZGMtMzY5Zi00ZmE0LWI2OTQtMzY4Y2U3 M2FmYTAwL2FhNDI3NTBjOTQwNmNkMjgwZjgxYjRjMzM3YWU1YTJlOGQ0ZDVkYjgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zZWE3M2RkYy0zNjlmLTRmYTQtYjY5NC0zNjhj ZTczYWZhMDAvMjNlNmI0N2NhZjAwYzE2MjE4ZDczMGRiNGRiNTUwY2E2ZmNiOTJh ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEArM/NDANBAIAAjAHAwUAKAPfEDANBgkqhkiG9w0BAQsFAAOC AQEABlWqyqt/h8VXWFWxonpbfCiRTIQmMgFYNiix9EMc6Fn1JdCcUltKsgBqutwZ Dcpwy25FFZJjKPdZCLVQwXccAKhPFbQVcCmazcikVsjTucLJksOWHYjIpEiTZbPZ IGf7smi/0gcb2xexEqfif4o/PXo8AKKUhEWPJ+HaNafWiUVjw5kcCoUlc/FkAKtS 5wyMGcG8EWcncUYk+w7LGnesioxNtXzKk+MYoMFRgRv8W9vAlphqcszZghSRBYNM IaHdYVthBDVHdUHBlatl+BPAoJmubnadk0kPolsnTVDu063+M1KGOI9vVPLbgFao J86dUBk+aAo5kb2tTvWqaBNF+w== -----END CERTIFICATE-----Generated at Wed Mar 15 11:33:40 2023 by rpki-client on console-ams.rpki-client.org