$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa File: 49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa (raw, json) Hash identifier: pexVWXit7fG7FTXnHRwjzXO2b8A4N8+Pe1y0++KxwyM= Subject key identifier: 85:86:EA:70:E7:C2:74:9E:1E:35:B1:57:71:94:02:B5:D5:A8:29:84 Certificate issuer: /CN=73d66d1924e1166622ad12a1caea078bb4879ad0 Certificate serial: 044108 Authority key identifier: B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa Signing time: Wed 24 Mar 2021 14:28:54 +0000 ROA not before: Wed 24 Mar 2021 14:28:54 +0000 ROA not after: Tue 24 Mar 2026 14:28:54 +0000 asID: 264771 IP address blocks: 168.196.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278792 (0x44108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d66d1924e1166622ad12a1caea078bb4879ad0 Validity Not Before: Mar 24 14:28:54 2021 GMT Not After : Mar 24 14:28:54 2026 GMT Subject: CN=49bc23b691372dd5dda32fe8cfd26b2dbd248b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:2a:bf:2b:76:c2:54:94:c8:f2:cc:62:09: f9:a5:cb:48:13:e7:bf:ec:88:92:cb:b8:5d:bd:ee: bf:d8:bb:5e:18:4e:57:65:ac:26:74:8e:b1:3c:1e: 2b:6d:d7:3c:79:36:f7:1d:d2:98:a9:85:79:ef:f6: f8:fa:7c:21:aa:eb:98:1f:db:5a:e5:83:8c:fb:09: 13:ca:a7:33:2c:cc:9f:01:90:c7:9c:20:82:fd:2d: b1:51:5b:53:e2:55:00:18:79:e9:86:1d:fc:c9:47: 58:55:d0:54:8a:c8:17:e1:34:4c:d5:3d:79:d1:e7: c4:19:b0:cc:2e:f2:da:ef:25:3e:df:e6:13:13:dc: eb:98:9a:74:2f:c3:4c:94:04:ee:52:4b:64:5b:7f: f6:85:98:8b:4d:f5:9f:f0:8f:62:8e:f5:fe:b3:7b: ab:92:15:a1:04:f1:11:e6:8f:00:28:66:03:b5:65: 28:3d:95:93:e9:40:8e:56:13:ce:ba:8d:73:de:05: 33:6a:2b:9a:44:2f:3e:97:e0:39:4c:70:e9:3e:37: 52:f5:35:a5:5c:7c:02:5e:d2:dd:4b:c2:bd:6f:33: 5e:3d:8f:ea:3e:0f:cb:95:87:2b:d6:e7:de:84:d1: 73:a1:9b:71:2b:9b:4e:68:0e:da:af:59:33:d4:b4: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:86:EA:70:E7:C2:74:9E:1E:35:B1:57:71:94:02:B5:D5:A8:29:84 X509v3 Authority Key Identifier: keyid:B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/49bc23b691372dd5dda32fe8cfd26b2dbd248b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.156.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:42:35:bf:63:4a:eb:5b:3f:9c:e2:1a:1c:36:ab:fc:be:10: c2:0a:0b:e2:0a:dc:63:1c:07:d9:47:23:a1:ba:cb:82:06:cb: eb:7f:c1:15:3b:7a:20:93:fc:48:e3:a1:45:6e:ae:0b:fb:b9: 7f:df:e7:78:79:e2:da:88:5e:08:09:fc:bd:a2:ce:db:21:39: 95:2f:fe:d7:47:3a:1b:2a:80:b7:75:2d:41:0b:74:08:44:2f: 98:7d:7d:7f:64:e9:0c:e3:e8:97:9c:de:bc:d5:5f:35:af:d7: 87:59:a5:57:8c:92:7e:66:a6:80:0b:6b:84:3d:16:a4:3e:41: 37:74:d6:c7:65:9f:7b:a8:b4:b9:59:68:5e:04:32:b5:2e:51: ab:18:44:65:0a:8c:db:8e:ce:a7:da:03:ec:39:14:4d:76:f4: 06:08:f7:cb:cd:b8:68:b4:11:15:01:17:2d:7b:bb:20:f4:a7: f4:43:ab:e6:de:0e:e0:f5:90:a3:ae:68:a9:a1:dc:ec:fb:1d: 8d:7d:c0:fa:6c:e2:ce:4a:f3:cd:f1:a2:df:76:dd:4f:51:54: de:1f:fe:aa:aa:f8:a7:59:ac:8d:0d:e0:2f:33:2f:92:1e:73: 0e:d7:b9:24:c5:33:a7:90:76:9c:e9:3b:a6:0f:e2:b8:22:17: fa:9d:6d:56 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDBEEIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcz ZDY2ZDE5MjRlMTE2NjYyMmFkMTJhMWNhZWEwNzhiYjQ4NzlhZDAwHhcNMjEwMzI0 MTQyODU0WhcNMjYwMzI0MTQyODU0WjAzMTEwLwYDVQQDEyg0OWJjMjNiNjkxMzcy ZGQ1ZGRhMzJmZThjZmQyNmIyZGJkMjQ4YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkwAqvyt2wlSUyPLMYgn5pctIE+e/7IiSy7hdve6/2LteGE5X ZawmdI6xPB4rbdc8eTb3HdKYqYV57/b4+nwhquuYH9ta5YOM+wkTyqczLMyfAZDH nCCC/S2xUVtT4lUAGHnphh38yUdYVdBUisgX4TRM1T150efEGbDMLvLa7yU+3+YT E9zrmJp0L8NMlATuUktkW3/2hZiLTfWf8I9ijvX+s3urkhWhBPER5o8AKGYDtWUo PZWT6UCOVhPOuo1z3gUzaiuaRC8+l+A5THDpPjdS9TWlXHwCXtLdS8K9bzNePY/q Pg/LlYcr1ufehNFzoZtxK5tOaA7ar1kz1LSaiwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFIWG6nDnwnSeHjWxV3GUArXVqCmEMB8GA1UdIwQYMBaAFLSt9I+G8TEQIPiQ HqpP6/V8dY4NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzNkNjZk MTkyNGUxMTY2NjIyYWQxMmExY2FlYTA3OGJiNDg3OWFkMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWFlZDAzOWYtYjg0Yi00YjNmLTk1MDYtN2E2Mzhi Y2YzNGRhLzQ5YmMyM2I2OTEzNzJkZDVkZGEzMmZlOGNmZDI2YjJkYmQyNDhiMzgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81YWVkMDM5Zi1iODRiLTRiM2YtOTUwNi03YTYz OGJjZjM0ZGEvNzNkNjZkMTkyNGUxMTY2NjIyYWQxMmExY2FlYTA3OGJiNDg3OWFk MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqjEnDANBgkqhkiG9w0BAQsFAAOCAQEAX0I1v2NK61s/nOIa HDar/L4QwgoL4grcYxwH2UcjobrLggbL63/BFTt6IJP8SOOhRW6uC/u5f9/neHni 2oheCAn8vaLO2yE5lS/+10c6GyqAt3UtQQt0CEQvmH19f2TpDOPol5zevNVfNa/X h1mlV4ySfmamgAtrhD0WpD5BN3TWx2Wfe6i0uVloXgQytS5RqxhEZQqM247Op9oD 7DkUTXb0Bgj3y824aLQRFQEXLXu7IPSn9EOr5t4O4PWQo65oqaHc7PsdjX3A+mzi zkrzzfGi33bdT1FU3h/+qqr4p1msjQ3gLzMvkh5zDte5JMUzp5B2nOk7pg/iuCIX +p1tVg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:31 2023 by rpki-client on console-fra.rpki-client.org