$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/9d0516478ea0d3123f7b4212942a1c3ce547e4ff.roa File: 9d0516478ea0d3123f7b4212942a1c3ce547e4ff.roa (raw, json) Hash identifier: IyhC5ZlAH1EFIOTX9L4VT7w0gBxw70EkMOtqZPnBpDs= Subject key identifier: C3:A4:7F:C2:7E:8A:C8:E0:A4:9E:90:BF:49:39:1D:75:F1:3B:48:B3 Certificate issuer: /CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d Certificate serial: 08137D Authority key identifier: F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/9d0516478ea0d3123f7b4212942a1c3ce547e4ff.roa Signing time: Wed 24 Jan 2024 20:23:48 +0000 ROA not before: Wed 24 Jan 2024 20:23:47 +0000 ROA not after: Sat 24 Jan 2026 20:23:47 +0000 asID: 264646 IP address blocks: 45.181.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 22 Feb 2024 21:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529277 (0x8137d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d Validity Not Before: Jan 24 20:23:47 2024 GMT Not After : Jan 24 20:23:47 2026 GMT Subject: CN=9d0516478ea0d3123f7b4212942a1c3ce547e4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:53:7e:a0:41:4e:99:ba:65:8f:73:e3:67: 66:ed:44:b7:8d:cb:90:c0:f1:f9:89:46:17:9d:64: c0:93:dc:03:be:5d:8f:f8:3c:86:08:49:26:5f:e5: fa:4b:26:b8:b2:6c:f6:5f:6c:49:e8:4c:64:42:8e: 1d:77:52:37:88:05:b4:06:ea:55:e4:ee:c6:7e:ad: d3:3e:b8:1f:bb:e6:6a:5f:83:1e:0f:07:97:2e:a5: 54:30:65:e4:e6:20:36:d9:1c:fd:c0:fb:40:06:13: 3c:d5:cc:77:dc:0a:ca:79:4c:31:ef:83:8e:bb:e7: 95:59:b7:87:43:f7:1d:3b:69:3a:5a:52:60:cb:33: 1c:72:fa:85:70:6f:67:5f:59:96:88:3f:3e:a3:22: 72:61:a5:85:2b:7a:35:5b:80:cc:fc:2c:6a:78:fd: af:ce:cb:18:f2:e3:df:0d:ba:3b:0c:93:96:f5:7d: 0f:b8:d3:42:5b:7c:d2:03:d9:fd:7f:fa:fb:aa:4f: ec:13:83:7f:18:95:38:95:33:52:67:93:aa:5b:d2: bd:93:5a:ab:ef:dd:76:72:73:d8:1d:95:29:d9:fc: ae:17:80:d0:f1:e1:2c:bf:c2:e2:9f:50:08:2a:e1: 67:97:06:1d:17:1d:3c:b4:23:18:a8:11:47:cf:6a: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:7F:C2:7E:8A:C8:E0:A4:9E:90:BF:49:39:1D:75:F1:3B:48:B3 X509v3 Authority Key Identifier: keyid:F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/9d0516478ea0d3123f7b4212942a1c3ce547e4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.205.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:35:43:bc:75:52:21:d0:fa:61:bb:f2:ba:be:9e:47:a7:42: b6:f8:c8:7c:00:8f:d3:dc:b4:8a:ed:58:ad:ec:1d:80:43:77: 3c:35:14:72:71:80:0f:de:9e:35:9e:df:3d:c4:35:a0:43:9d: 7f:e5:10:c9:91:a7:2a:bd:ff:c9:e4:a1:fd:45:49:31:55:11: 3f:37:56:a0:27:f5:66:d7:39:ef:38:85:01:4f:52:45:f4:61: 0e:2d:f7:21:71:00:ad:4b:11:d9:f4:3f:b2:e0:69:55:9b:29: d5:38:2c:37:2c:c2:8f:a3:83:fb:33:82:ab:77:3d:14:95:41: ee:63:37:4b:6c:90:83:e0:67:9d:3a:34:e7:dd:02:10:d2:3d: b3:36:d8:81:ea:05:50:15:d2:42:4e:01:b8:30:15:dd:8a:75: c0:26:6e:60:51:8c:a1:a2:55:65:7b:aa:67:da:f7:a8:c4:79: a4:c2:0c:74:12:bb:63:68:77:0a:4d:bc:d6:c5:2b:4f:61:d5: e0:02:7b:de:05:38:8e:ad:a6:ac:10:42:90:35:8f:fe:95:95: 2b:26:d4:27:53:88:da:cb:d1:5e:e6:1a:fe:cc:02:bd:b7:11: a6:27:95:85:74:3a:0d:ff:98:b6:e9:1c:f3:89:5e:df:79:7d: cd:2d:33:2e -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDCBN9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNj ZDAyYWQzOWU4OGNhNzA5YmI3NGQ0YmEzN2EzZjBhMmQwMjA5NWQwHhcNMjQwMTI0 MjAyMzQ3WhcNMjYwMTI0MjAyMzQ3WjAzMTEwLwYDVQQDEyg5ZDA1MTY0NzhlYTBk MzEyM2Y3YjQyMTI5NDJhMWMzY2U1NDdlNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlutTfqBBTpm6ZY9z42dm7US3jcuQwPH5iUYXnWTAk9wDvl2P +DyGCEkmX+X6Sya4smz2X2xJ6ExkQo4dd1I3iAW0BupV5O7Gfq3TPrgfu+ZqX4Me DweXLqVUMGXk5iA22Rz9wPtABhM81cx33ArKeUwx74OOu+eVWbeHQ/cdO2k6WlJg yzMccvqFcG9nX1mWiD8+oyJyYaWFK3o1W4DM/CxqeP2vzssY8uPfDbo7DJOW9X0P uNNCW3zSA9n9f/r7qk/sE4N/GJU4lTNSZ5OqW9K9k1qr7912cnPYHZUp2fyuF4DQ 8eEsv8Lin1AIKuFnlwYdFx08tCMYqBFHz2qbnQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMOkf8J+isjgpJ6Qv0k5HXXxO0izMB8GA1UdIwQYMBaAFPLxKld+HB7hlS5w +Jlrt+uJx72DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2NkMDJh ZDM5ZTg4Y2E3MDliYjc0ZDRiYTM3YTNmMGEyZDAyMDk1ZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNTBiODMwZmEtM2QyMS00NmI2LThjOTQtYWU4Mjlk NDU1Nzg2LzlkMDUxNjQ3OGVhMGQzMTIzZjdiNDIxMjk0MmExYzNjZTU0N2U0ZmYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81MGI4MzBmYS0zZDIxLTQ2YjYtOGM5NC1hZTgy OWQ0NTU3ODYvM2NkMDJhZDM5ZTg4Y2E3MDliYjc0ZDRiYTM3YTNmMGEyZDAyMDk1 ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC21zTANBgkqhkiG9w0BAQsFAAOCAQEASzVDvHVSIdD6Ybvy ur6eR6dCtvjIfACP09y0iu1YrewdgEN3PDUUcnGAD96eNZ7fPcQ1oEOdf+UQyZGn Kr3/yeSh/UVJMVURPzdWoCf1Ztc57ziFAU9SRfRhDi33IXEArUsR2fQ/suBpVZsp 1TgsNyzCj6OD+zOCq3c9FJVB7mM3S2yQg+BnnTo0590CENI9szbYgeoFUBXSQk4B uDAV3Yp1wCZuYFGMoaJVZXuqZ9r3qMR5pMIMdBK7Y2h3Ck281sUrT2HV4AJ73gU4 jq2mrBBCkDWP/pWVKybUJ1OI2svRXuYa/swCvbcRpieVhXQ6Df+Ytukc84le33l9 zS0zLg== -----END CERTIFICATE-----Generated at Tue Feb 20 06:47:47 2024 by rpki-client on console-fra.rpki-client.org