$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/33370b76cdfa86ff97e04c493004c86bc25acaa1.roa File: 33370b76cdfa86ff97e04c493004c86bc25acaa1.roa (raw, json) Hash identifier: 9zjBoHFqvFG0vL/mOlil8MTZ5V0gYfDxpmRWQe6Xl0s= Subject key identifier: 77:E6:1C:F2:08:39:A4:20:59:FD:B1:16:7E:44:41:D4:41:54:DB:48 Certificate issuer: /CN=29faf9dda9a05093ff92d48d0018f02866d6716b Certificate serial: 232D Authority key identifier: 93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/33370b76cdfa86ff97e04c493004c86bc25acaa1.roa Signing time: Thu 02 Feb 2023 17:47:56 +0000 ROA not before: Wed 01 Feb 2023 17:46:57 +0000 ROA not after: Sun 02 Feb 2025 17:46:57 +0000 asID: 16509 IP address blocks: 200.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.crl rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 17:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9005 (0x232d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29faf9dda9a05093ff92d48d0018f02866d6716b Validity Not Before: Feb 1 17:46:57 2023 GMT Not After : Feb 2 17:46:57 2025 GMT Subject: CN=33370b76cdfa86ff97e04c493004c86bc25acaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:6a:08:5e:2f:67:e4:aa:1a:78:1d:a5:f8: 39:e4:6c:e4:ec:4e:84:13:b6:3e:1c:01:43:04:7c: 52:45:2d:89:55:dd:e2:8b:c0:e1:41:43:74:db:6e: c7:78:13:d4:da:6b:34:9c:b0:80:31:78:bc:d8:22: 17:37:db:06:6d:a1:fe:fa:f1:84:db:62:16:7e:28: c1:d9:41:af:8f:4e:ea:14:a6:ff:e6:cd:53:e5:f9: 4b:3f:9e:ba:1c:ee:08:f6:1c:c7:65:45:ad:fb:39: ab:90:31:ed:86:aa:04:3d:04:d0:0e:ec:90:88:d8: cc:86:ee:a4:5e:cf:80:f6:d7:5f:55:23:c3:9a:0d: ef:1c:12:09:a4:48:8c:48:a9:21:ed:3c:08:21:46: e4:a6:67:c8:92:64:cb:2a:b6:27:44:36:ad:04:30: bd:5b:2c:16:83:ea:b9:6e:25:c7:08:bd:18:41:04: 87:ad:f3:22:80:8c:00:e2:ce:6e:2b:5f:ce:82:33: ff:9f:c9:d8:8e:bf:a5:ab:07:f9:9a:a7:f8:af:48: 03:c6:1f:31:bd:62:19:4d:16:d2:64:34:fe:ef:d3: f1:23:0f:1d:e1:21:fe:20:88:14:31:e7:91:e0:a1: d5:52:fa:02:c5:5e:d7:a4:38:2a:fc:ac:5e:49:e1: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E6:1C:F2:08:39:A4:20:59:FD:B1:16:7E:44:41:D4:41:54:DB:48 X509v3 Authority Key Identifier: keyid:93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/33370b76cdfa86ff97e04c493004c86bc25acaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.7.0/24 Signature Algorithm: sha256WithRSAEncryption 07:50:23:5c:b3:08:00:a1:1f:cd:28:e7:48:79:16:db:54:df: 7d:d8:3f:9d:5f:24:e0:be:ae:96:c2:f8:34:f2:a2:83:f5:9c: c2:34:1a:21:ea:0c:28:a3:9b:12:b8:af:07:22:7d:d1:5b:00: a6:6a:e3:5f:6b:60:88:e5:37:c6:16:ce:4d:54:6f:9b:b5:f3: df:e9:2f:9c:db:e1:d3:4c:f2:c8:52:89:51:09:42:40:29:8c: fd:40:64:7f:0a:be:76:e8:b1:09:0a:73:2f:69:8f:1b:80:90: c6:84:b4:99:5a:db:3d:c9:d7:94:6c:62:20:76:3b:5b:e1:70: 6b:00:6c:5d:bf:74:39:74:32:be:cd:26:64:eb:2f:ac:ff:b6: 2f:d0:cf:1b:27:a7:b3:65:e7:60:cd:07:4f:5e:a2:ca:ec:7b: d6:13:8a:b9:ea:64:34:15:9e:57:35:99:f0:16:31:e0:42:86: d5:4f:e6:93:f0:2c:cc:54:c4:7e:2a:bf:42:08:60:d3:6f:e5: ee:9d:d8:15:1d:51:09:85:c8:d8:e6:43:cb:8a:14:ff:d6:54: b3:38:d8:d6:2f:21:90:6a:c4:7d:31:88:f2:63:c7:8a:3b:6d: e3:26:82:8f:2d:ff:37:b7:15:7f:0b:6e:86:e7:18:83:07:a4: 18:3a:6a:3d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICIy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjlm YWY5ZGRhOWEwNTA5M2ZmOTJkNDhkMDAxOGYwMjg2NmQ2NzE2YjAeFw0yMzAyMDEx NzQ2NTdaFw0yNTAyMDIxNzQ2NTdaMDMxMTAvBgNVBAMTKDMzMzcwYjc2Y2RmYTg2 ZmY5N2UwNGM0OTMwMDRjODZiYzI1YWNhYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCEQGoIXi9n5KoaeB2l+DnkbOTsToQTtj4cAUMEfFJFLYlV3eKL wOFBQ3Tbbsd4E9TaazScsIAxeLzYIhc32wZtof768YTbYhZ+KMHZQa+PTuoUpv/m zVPl+Us/nroc7gj2HMdlRa37OauQMe2GqgQ9BNAO7JCI2MyG7qRez4D2119VI8Oa De8cEgmkSIxIqSHtPAghRuSmZ8iSZMsqtidENq0EML1bLBaD6rluJccIvRhBBIet 8yKAjADizm4rX86CM/+fydiOv6WrB/map/ivSAPGHzG9YhlNFtJkNP7v0/EjDx3h If4giBQx55HgodVS+gLFXtekOCr8rF5J4RaJAgMBAAGjggJbMIICVzAdBgNVHQ4E FgQUd+Yc8gg5pCBZ/bEWfkRB1EFU20gwHwYDVR0jBBgwFoAUkyxieDPVwYbXw8+k uylLuYvl6oAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yOWZhZjlk ZGE5YTA1MDkzZmY5MmQ0OGQwMDE4ZjAyODY2ZDY3MTZiLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy80ZGU1ODk1Ni05MGNkLTQ4N2YtOWUyZC0yNjRiZWQy MWM4ZmMvMzMzNzBiNzZjZGZhODZmZjk3ZTA0YzQ5MzAwNGM4NmJjMjVhY2FhMS5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljLzRkZTU4OTU2LTkwY2QtNDg3Zi05ZTJkLTI2NGJl ZDIxYzhmYy8yOWZhZjlkZGE5YTA1MDkzZmY5MmQ0OGQwMDE4ZjAyODY2ZDY3MTZi LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAyCEHMA0GCSqGSIb3DQEBCwUAA4IBAQAHUCNcswgAoR/NKOdI eRbbVN992D+dXyTgvq6Wwvg08qKD9ZzCNBoh6gwoo5sSuK8HIn3RWwCmauNfa2CI 5TfGFs5NVG+btfPf6S+c2+HTTPLIUolRCUJAKYz9QGR/Cr526LEJCnMvaY8bgJDG hLSZWts9ydeUbGIgdjtb4XBrAGxdv3Q5dDK+zSZk6y+s/7Yv0M8bJ6ezZedgzQdP XqLK7HvWE4q56mQ0FZ5XNZnwFjHgQobVT+aT8CzMVMR+Kr9CCGDTb+XundgVHVEJ hcjY5kPLihT/1lSzONjWLyGQasR9MYjyY8eKO23jJoKPLf83txV/C26G5xiDB6QY Omo9 -----END CERTIFICATE-----Generated at Wed Jul 19 22:22:15 2023 by rpki-client on console-ams.rpki-client.org