$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa File: 3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa (raw, json) Hash identifier: 6/GEUfhY6yNWrOneE96KvIp3ffRPuO6qZIjYmZ+twRc= Subject key identifier: 9E:1B:88:F7:22:82:E2:A8:42:6C:01:6C:CD:24:06:35:3C:C0:21:A9 Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5 Certificate serial: 746239A5E809DA46AF5FDE6ACC6DB0567E70ABD1 Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa Signing time: Tue 05 Mar 2024 18:01:14 +0000 ROA not before: Tue 05 Mar 2024 17:56:14 +0000 ROA not after: Tue 04 Mar 2025 18:01:14 +0000 asID: 10620 IP address blocks: 191.156.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:62:39:a5:e8:09:da:46:af:5f:de:6a:cc:6d:b0:56:7e:70:ab:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5 Validity Not Before: Mar 5 17:56:14 2024 GMT Not After : Mar 4 18:01:14 2025 GMT Subject: CN=9E1B88F72282E2A8426C016CCD2406353CC021A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:a5:85:f7:6f:d9:78:b2:2c:7c:d3:f0:82: c1:ec:2b:f9:0b:b1:cc:45:56:3b:67:88:cd:6b:7e: be:02:4c:da:59:41:00:82:c9:35:9c:af:e6:ea:23: c3:5c:d4:c1:44:26:60:97:37:c9:64:4a:32:7e:64: 92:95:95:cc:7f:e2:88:26:51:e3:d8:18:2c:36:91: a2:f0:6b:f8:38:5f:28:a9:6d:5b:70:84:18:ae:16: 77:ac:13:4c:8f:ab:87:e7:fa:67:83:3a:16:b9:02: 5b:b5:dc:03:00:dd:ed:48:9e:ad:74:34:0b:60:5a: 4e:05:d1:64:9b:64:83:5d:d2:ff:4c:6b:46:7e:4d: 8a:7c:47:67:7e:ed:46:17:4f:57:27:4f:90:21:61: 28:9e:29:77:df:43:97:93:f7:38:3b:20:c0:a3:30: a4:f7:a8:44:63:e5:f5:51:91:0e:28:02:7e:e0:c6: 2d:e1:76:21:77:a4:d9:5a:43:ad:55:bf:05:e9:0c: 4d:30:2c:b9:45:86:5d:f2:8d:e1:5f:a1:d8:01:f6: 78:32:18:59:0e:3e:a5:de:31:2e:ca:a6:a9:39:f9: 30:89:08:31:a3:35:50:fd:01:a5:1d:be:be:d8:ce: 1d:0f:27:2b:22:2e:98:21:87:9c:f7:01:18:f4:66: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:88:F7:22:82:E2:A8:42:6C:01:6C:CD:24:06:35:3C:C0:21:A9 X509v3 Authority Key Identifier: keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203130363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.156.215.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:f4:05:15:20:35:b0:bf:80:e1:14:bc:bc:a9:d5:5b:1a:64: 7c:ef:17:97:84:cd:d5:33:3a:72:9b:4a:4b:c8:ab:50:ae:76: 60:38:6f:d9:29:25:9d:98:47:cf:92:31:33:4e:96:ee:9a:1c: f8:29:0f:3d:e9:e8:8d:49:98:c5:39:6b:e6:02:35:61:20:de: 02:6b:67:8b:d9:5c:55:43:06:dd:5d:25:cb:52:3d:d9:44:4a: f4:5a:41:c0:4f:44:ce:fe:13:04:bc:9d:c1:d7:ef:25:cb:e7: 3c:5c:e3:e9:57:11:a1:ca:52:c7:ae:a0:0b:fd:a4:92:f1:7b: a6:a5:39:52:6f:80:b3:1d:89:47:b3:2d:89:58:47:cc:da:1b: c7:04:6e:39:c5:d1:02:f8:d3:68:fd:81:70:34:27:f9:36:4d: 1c:c4:17:9a:67:8f:d3:b9:30:65:31:36:df:09:d7:e0:c5:e9: e4:fe:95:4c:ae:d7:3b:fb:c6:34:f5:60:3c:19:20:fa:49:62: fc:d6:8c:f7:e0:92:9e:1c:80:11:c0:b3:5f:ee:f2:7f:c1:68: 78:35:da:bb:2b:0f:29:a8:dc:8a:ad:ec:1e:4c:12:91:b4:e6: 2c:a9:84:93:47:0b:0a:60:9f:d6:d6:6e:d8:a2:02:87:93:b9: ed:55:cd:1d -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUdGI5pegJ2kavX95qzG2wVn5wq9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB RDg2NTNENTAeFw0yNDAzMDUxNzU2MTRaFw0yNTAzMDQxODAxMTRaMDMxMTAvBgNV BAMTKDlFMUI4OEY3MjI4MkUyQTg0MjZDMDE2Q0NEMjQwNjM1M0NDMDIxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBqWF92/ZeLIsfNPwgsHsK/kL scxFVjtniM1rfr4CTNpZQQCCyTWcr+bqI8Nc1MFEJmCXN8lkSjJ+ZJKVlcx/4ogm UePYGCw2kaLwa/g4XyipbVtwhBiuFnesE0yPq4fn+meDOha5Alu13AMA3e1Inq10 NAtgWk4F0WSbZINd0v9Ma0Z+TYp8R2d+7UYXT1cnT5AhYSieKXffQ5eT9zg7IMCj MKT3qERj5fVRkQ4oAn7gxi3hdiF3pNlaQ61VvwXpDE0wLLlFhl3yjeFfodgB9ngy GFkOPqXeMS7Kpqk5+TCJCDGjNVD9AaUdvr7Yzh0PJysiLpghh5z3ARj0Zmt9AgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUnhuI9yKC4qhCbAFszSQGNTzAIakwHwYDVR0j BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3 RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMjMxMzUy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMwMzYzMjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv5zX MA0GCSqGSIb3DQEBCwUAA4IBAQAK9AUVIDWwv4DhFLy8qdVbGmR87xeXhM3VMzpy m0pLyKtQrnZgOG/ZKSWdmEfPkjEzTpbumhz4KQ896eiNSZjFOWvmAjVhIN4Ca2eL 2VxVQwbdXSXLUj3ZREr0WkHAT0TO/hMEvJ3B1+8ly+c8XOPpVxGhylLHrqAL/aSS 8XumpTlSb4CzHYlHsy2JWEfM2hvHBG45xdEC+NNo/YFwNCf5Nk0cxBeaZ4/TuTBl MTbfCdfgxenk/pVMrtc7+8Y09WA8GSD6SWL81oz34JKeHIARwLNf7vJ/wWh4Ndq7 Kw8pqNyKreweTBKRtOYsqYSTRwsKYJ/W1m7YogKHk7ntVc0d -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org