$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa File: 170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa (raw, json) Hash identifier: PEaYPNVou9U3o3Pyi5pP8LAFH1t/q1eP8WmFwqRRaUc= Subject key identifier: ED:B4:6E:0E:A2:63:DA:A4:E1:02:E7:24:39:06:D5:6C:2E:E0:86:42 Certificate issuer: /CN=d67a2511cddb03773fd7ab77a77fce811a97e2f5 Certificate serial: 0CE577 Authority key identifier: 51:02:5E:78:BE:A6:CA:C5:FC:23:16:42:9F:68:67:60:C4:94:98:68 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa Signing time: Wed 24 Mar 2021 14:29:39 +0000 ROA not before: Wed 24 Mar 2021 14:29:38 +0000 ROA not after: Tue 24 Mar 2026 14:29:38 +0000 asID: 3356 IP address blocks: 45.163.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.crl rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845175 (0xce577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67a2511cddb03773fd7ab77a77fce811a97e2f5 Validity Not Before: Mar 24 14:29:38 2021 GMT Not After : Mar 24 14:29:38 2026 GMT Subject: CN=170dd66fa1b2c367dd2fcf7ce0ec321163736812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:9f:10:3f:de:be:a2:48:58:25:af:5d:a8: d2:93:98:fd:69:85:e8:73:25:48:a7:29:71:a3:fb: 03:ce:63:e7:57:14:64:85:91:88:01:03:8d:c9:ca: e5:7a:83:f5:d5:2e:ac:ef:ae:c9:50:73:c6:cf:77: f8:3c:e6:c1:52:4d:ec:ed:ae:84:c2:18:07:f4:d2: ce:77:3a:d3:ce:b7:53:ce:7f:4e:23:32:67:f3:63: d4:f2:25:8b:66:4f:e0:d2:4d:a8:b0:a2:dd:3f:14: f6:d7:64:95:ac:57:8d:c7:3b:7d:5b:8e:65:05:15: dc:6e:0b:13:6a:9a:47:07:55:af:a4:f5:be:23:c5: e3:de:56:9a:94:b4:8c:76:6d:f9:c2:81:e4:f1:89: 94:c8:ac:e5:17:ac:7d:d1:64:2f:d2:f2:06:88:d2: 29:69:46:ba:6c:23:78:c6:cf:a5:b1:59:d9:e4:76: 8b:f7:2a:94:8d:92:73:80:ca:93:a3:8d:e9:34:6a: ee:91:dc:ca:89:06:56:2b:09:0d:c4:e5:59:2f:13: 30:b4:5a:56:8c:29:61:30:82:9f:27:cd:1e:3e:22: bf:c7:98:f8:22:cd:65:a3:2c:8d:cc:82:d8:42:2d: 72:62:33:02:0c:21:89:e9:c2:3c:ad:12:3d:59:b0: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B4:6E:0E:A2:63:DA:A4:E1:02:E7:24:39:06:D5:6C:2E:E0:86:42 X509v3 Authority Key Identifier: keyid:51:02:5E:78:BE:A6:CA:C5:FC:23:16:42:9F:68:67:60:C4:94:98:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.31.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:41:a1:68:c7:f2:4d:a1:52:5d:2f:47:d5:72:8f:35:26:db: 12:d3:62:ff:07:28:8b:9b:16:be:34:28:43:23:b9:2f:b4:d1: 49:61:54:1c:ec:b8:dd:0c:fa:08:59:af:5e:5c:26:91:0b:6f: 6d:84:df:e3:a3:81:a9:96:03:e6:ec:fe:96:f9:b8:26:93:fa: 86:e5:7d:91:ef:b9:60:94:a1:b0:1d:ca:5c:a2:2c:52:12:d1: 20:3a:23:82:2c:8f:e9:1c:9f:27:ce:2b:db:0d:99:28:cf:39: 73:b6:7d:c1:8e:bc:1a:da:0c:2d:9b:cb:97:d5:3b:8c:5e:99: 32:cc:4b:f1:38:f3:18:76:ec:d5:a7:b8:b0:7b:4b:f1:91:6e: 6e:ed:f7:ed:6b:ec:b1:b1:21:30:e9:f5:44:55:79:7b:08:86: c3:51:f0:13:11:21:d4:27:8a:69:b6:47:47:1c:ff:0b:a3:f5: 6d:a7:dc:17:d3:29:d5:50:e7:f6:13:9d:2f:87:73:62:b5:de: 60:e5:c0:32:1c:04:5e:88:00:0c:89:7d:5a:02:9e:2b:54:25: 44:23:d0:90:33:ad:f4:72:19:c6:a6:f4:cc:66:1e:11:fc:72: 7c:d9:c0:23:75:36:06:3a:2a:a3:33:db:52:fe:0b:5a:82:a2: 4b:03:6e:b9 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDOV3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 N2EyNTExY2RkYjAzNzczZmQ3YWI3N2E3N2ZjZTgxMWE5N2UyZjUwHhcNMjEwMzI0 MTQyOTM4WhcNMjYwMzI0MTQyOTM4WjAzMTEwLwYDVQQDEygxNzBkZDY2ZmExYjJj MzY3ZGQyZmNmN2NlMGVjMzIxMTYzNzM2ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuTqfED/evqJIWCWvXajSk5j9aYXocyVIpylxo/sDzmPnVxRk hZGIAQONycrleoP11S6s767JUHPGz3f4PObBUk3s7a6EwhgH9NLOdzrTzrdTzn9O IzJn82PU8iWLZk/g0k2osKLdPxT212SVrFeNxzt9W45lBRXcbgsTappHB1WvpPW+ I8Xj3laalLSMdm35woHk8YmUyKzlF6x90WQv0vIGiNIpaUa6bCN4xs+lsVnZ5HaL 9yqUjZJzgMqTo43pNGrukdzKiQZWKwkNxOVZLxMwtFpWjClhMIKfJ80ePiK/x5j4 Is1loyyNzILYQi1yYjMCDCGJ6cI8rRI9WbAe9wIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFO20bg6iY9qk4QLnJDkG1Wwu4IZCMB8GA1UdIwQYMBaAFFECXni+psrF/CMW Qp9oZ2DElJhoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY3YTI1 MTFjZGRiMDM3NzNmZDdhYjc3YTc3ZmNlODExYTk3ZTJmNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNDY0MjYzOGUtNWFkMS00YmUzLWFhN2UtNDIzN2M2 MGJmODA4LzE3MGRkNjZmYTFiMmMzNjdkZDJmY2Y3Y2UwZWMzMjExNjM3MzY4MTIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80NjQyNjM4ZS01YWQxLTRiZTMtYWE3ZS00MjM3 YzYwYmY4MDgvZDY3YTI1MTFjZGRiMDM3NzNmZDdhYjc3YTc3ZmNlODExYTk3ZTJm NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC2jHzANBgkqhkiG9w0BAQsFAAOCAQEAHkGhaMfyTaFSXS9H 1XKPNSbbEtNi/wcoi5sWvjQoQyO5L7TRSWFUHOy43Qz6CFmvXlwmkQtvbYTf46OB qZYD5uz+lvm4JpP6huV9ke+5YJShsB3KXKIsUhLRIDojgiyP6RyfJ84r2w2ZKM85 c7Z9wY68GtoMLZvLl9U7jF6ZMsxL8TjzGHbs1ae4sHtL8ZFubu337WvssbEhMOn1 RFV5ewiGw1HwExEh1CeKabZHRxz/C6P1bafcF9Mp1VDn9hOdL4dzYrXeYOXAMhwE XogADIl9WgKeK1QlRCPQkDOt9HIZxqb0zGYeEfxyfNnAI3U2BjoqozPbUv4LWoKi SwNuuQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:50 2023 by rpki-client on console-fra.rpki-client.org