$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/4fdcef574e9fba1e64db2061605b1241f393d0a8.roa File: 4fdcef574e9fba1e64db2061605b1241f393d0a8.roa (raw, json) Hash identifier: snQYStrH6oNNkP9U0icRQ/5ShkmW2C46bMTojoxh938= Subject key identifier: 87:D7:C4:D3:12:E5:85:AE:16:5F:FE:CF:AC:3C:E0:A0:D4:D1:3F:E2 Certificate issuer: /CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89 Certificate serial: 0D30D5 Authority key identifier: F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/4fdcef574e9fba1e64db2061605b1241f393d0a8.roa Signing time: Wed 24 Mar 2021 14:39:36 +0000 ROA not before: Wed 24 Mar 2021 14:39:35 +0000 ROA not after: Tue 24 Mar 2026 14:39:35 +0000 asID: 263238 IP address blocks: 45.4.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.crl rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864469 (0xd30d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89 Validity Not Before: Mar 24 14:39:35 2021 GMT Not After : Mar 24 14:39:35 2026 GMT Subject: CN=4fdcef574e9fba1e64db2061605b1241f393d0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:e3:44:f3:f9:81:30:8e:17:cf:3d:64:25: 27:ae:12:e3:91:f1:5d:87:dc:74:0e:ec:09:5d:50: b6:fc:e0:d2:79:50:39:26:d7:ad:ef:29:09:8d:8d: 8c:5f:5a:99:b6:75:bf:7d:e9:1e:9e:fe:54:c8:92: 5f:22:b6:8d:3e:28:79:cd:06:e0:51:27:13:cf:c7: 2d:cd:04:77:0c:7d:e1:7a:28:4c:1b:b4:ff:d6:e8: 84:de:44:24:77:53:9f:05:97:91:ea:f9:1e:d3:93: cc:89:85:e6:f8:7c:88:38:2d:03:22:96:34:60:e3: d6:d5:3f:94:7b:87:f0:6a:b7:fa:59:bc:a4:96:61: 4b:9b:03:91:73:ec:f7:ff:58:cd:89:af:2c:b1:7a: 21:3b:0c:29:bc:ea:5f:44:bf:cf:32:a2:c1:47:27: 7b:6a:fd:35:4e:20:80:47:a3:a0:7a:ee:96:22:bf: 93:42:6e:66:27:2f:8f:6f:ab:a3:c5:96:7d:7d:9d: e6:e7:34:5f:da:4d:bd:50:46:8a:01:16:bb:86:2c: fd:fa:17:1f:21:60:5a:9d:a9:96:ce:d1:64:ac:af: 7e:4f:4c:65:90:69:87:13:85:ce:88:4d:d9:64:08: eb:be:91:36:cd:dc:77:aa:6f:4b:5d:f4:69:96:de: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:C4:D3:12:E5:85:AE:16:5F:FE:CF:AC:3C:E0:A0:D4:D1:3F:E2 X509v3 Authority Key Identifier: keyid:F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/4fdcef574e9fba1e64db2061605b1241f393d0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.200.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:1f:91:82:f2:78:e3:d7:15:aa:e7:d4:68:c0:23:f2:8e:71: fe:01:cd:ee:43:57:c0:19:13:f3:a8:53:2e:c1:8b:1c:7b:76: c1:cf:d2:9d:88:d8:a6:a8:55:17:c8:f3:78:74:5a:58:4f:b2: 37:a2:ca:68:5b:9a:67:9c:cd:cc:f9:ed:de:07:89:c8:47:06: 8c:5d:e6:d8:8c:dc:06:50:42:35:13:9b:f9:db:d3:17:dd:08: f3:09:b0:8b:ea:d6:c9:09:3f:2a:12:b8:80:d7:69:79:d7:42: 2a:81:cf:c9:02:d5:80:73:65:12:2d:39:60:17:51:4b:62:89: 37:3a:9b:b1:02:b1:6d:73:0a:22:b1:8e:b6:c0:96:75:ff:c1: 9c:15:bb:5d:11:61:a2:90:eb:5a:b6:f1:39:f8:94:92:90:46: 67:97:7e:54:e2:54:ca:98:86:a7:3a:10:80:00:c4:81:09:83: 6f:55:17:f2:29:30:b2:b9:7d:37:8e:9a:a3:d6:4c:5d:0e:5b: 22:99:fe:1a:75:32:80:1c:19:a8:41:ec:6f:9d:6d:cd:d0:1a: 23:e6:f0:9f:2c:eb:b0:93:0a:5b:7f:b1:d4:c2:b3:37:8c:fb: 22:1a:21:9a:21:95:cf:67:0c:cd:5e:55:b1:0b:e4:42:c0:c9: a3:1e:04:8d -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDTDVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm ZGFkYzA1YmMzYjIwOWMxMWFhZDdlMzY3YjQ0ZjdmY2RiYjZlODkwHhcNMjEwMzI0 MTQzOTM1WhcNMjYwMzI0MTQzOTM1WjAzMTEwLwYDVQQDEyg0ZmRjZWY1NzRlOWZi YTFlNjRkYjIwNjE2MDViMTI0MWYzOTNkMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvz/jRPP5gTCOF889ZCUnrhLjkfFdh9x0DuwJXVC2/ODSeVA5 Jtet7ykJjY2MX1qZtnW/fekenv5UyJJfIraNPih5zQbgUScTz8ctzQR3DH3heihM G7T/1uiE3kQkd1OfBZeR6vke05PMiYXm+HyIOC0DIpY0YOPW1T+Ue4fwarf6Wbyk lmFLmwORc+z3/1jNia8ssXohOwwpvOpfRL/PMqLBRyd7av01TiCAR6Ogeu6WIr+T Qm5mJy+Pb6ujxZZ9fZ3m5zRf2k29UEaKARa7hiz9+hcfIWBanamWztFkrK9+T0xl kGmHE4XOiE3ZZAjrvpE2zdx3qm9LXfRplt4+JwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFIfXxNMS5YWuFl/+z6w84KDU0T/iMB8GA1UdIwQYMBaAFPIn/dbieEpgWwFB F3gjazxJE3JEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZkYWRj MDViYzNiMjA5YzExYWFkN2UzNjdiNDRmN2ZjZGJiNmU4OS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNTJjZDJkMjctNjEwYS00YjQ2LWI4MTUtZmY2OGJk YzgwM2E3LzRmZGNlZjU3NGU5ZmJhMWU2NGRiMjA2MTYwNWIxMjQxZjM5M2QwYTgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81MmNkMmQyNy02MTBhLTRiNDYtYjgxNS1mZjY4 YmRjODAzYTcvOWZkYWRjMDViYzNiMjA5YzExYWFkN2UzNjdiNDRmN2ZjZGJiNmU4 OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAi0EyDANBgkqhkiG9w0BAQsFAAOCAQEASh+RgvJ449cVqufU aMAj8o5x/gHN7kNXwBkT86hTLsGLHHt2wc/SnYjYpqhVF8jzeHRaWE+yN6LKaFua Z5zNzPnt3geJyEcGjF3m2IzcBlBCNROb+dvTF90I8wmwi+rWyQk/KhK4gNdpeddC KoHPyQLVgHNlEi05YBdRS2KJNzqbsQKxbXMKIrGOtsCWdf/BnBW7XRFhopDrWrbx OfiUkpBGZ5d+VOJUypiGpzoQgADEgQmDb1UX8ikwsrl9N46ao9ZMXQ5bIpn+GnUy gBwZqEHsb51tzdAaI+bwnyzrsJMKW3+x1MKzN4z7IhohmiGVz2cMzV5VsQvkQsDJ ox4EjQ== -----END CERTIFICATE-----Generated at Wed Jul 19 22:22:17 2023 by rpki-client on console-ams.rpki-client.org