$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa File: ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa (raw, json) Hash identifier: YiBEOloLj0abcZhzLeXKasA3WyVdSMkLW4IDu8Pbk7I= Subject key identifier: 72:B2:7D:64:D1:DF:BD:BD:73:69:8D:0E:0D:71:D8:EC:C2:75:24:D1 Certificate issuer: /CN=73d66d1924e1166622ad12a1caea078bb4879ad0 Certificate serial: 0440F7 Authority key identifier: B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa Signing time: Wed 24 Mar 2021 14:28:54 +0000 ROA not before: Wed 24 Mar 2021 14:28:54 +0000 ROA not after: Tue 24 Mar 2026 14:28:54 +0000 asID: 264771 IP address blocks: 168.196.156.0/22 maxlen: 22 2803:30c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278775 (0x440f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d66d1924e1166622ad12a1caea078bb4879ad0 Validity Not Before: Mar 24 14:28:54 2021 GMT Not After : Mar 24 14:28:54 2026 GMT Subject: CN=ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:2e:10:2f:37:dd:35:8e:8d:73:fc:3c:e5: d0:2b:32:2d:e8:5a:83:d5:27:33:7e:db:3c:9d:cb: 9e:c1:c9:95:4c:0c:d9:56:14:b9:f8:c1:ee:7e:11: 17:33:e5:6f:c2:06:09:f7:5d:98:47:59:e7:a7:da: 29:b5:79:2e:3f:7e:9c:f6:0b:2b:ce:37:4f:9b:47: 98:b5:df:ed:cb:76:b6:e1:93:29:f5:cc:28:19:a4: 7e:bf:72:14:64:26:05:0c:51:2b:22:93:6e:87:70: 34:ac:b7:ce:6d:68:b1:a7:e1:24:51:95:6e:d2:b7: ce:40:ff:47:d7:72:d1:f3:3d:aa:6b:9a:e8:12:a7: a6:60:f7:74:49:8c:58:92:6c:e8:f2:2a:90:ba:30: 93:fe:ab:cc:1a:62:f4:9b:9f:6a:3d:45:22:e2:c2: 23:28:31:8d:e1:8e:6b:d3:78:f4:92:91:2e:2c:fa: 62:16:6e:15:97:5e:da:31:91:9c:2c:f9:d4:65:70: 33:4e:2e:ad:c4:df:97:d3:bf:2d:b0:5f:fc:1b:ff: 7d:e4:80:72:c0:ef:4c:0e:13:ca:9e:81:f7:52:04: a2:a0:e1:e9:16:4c:40:38:e1:68:a0:87:9b:c8:d0: b5:98:bb:48:74:d7:82:08:6b:6d:f4:ee:ac:2a:3d: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B2:7D:64:D1:DF:BD:BD:73:69:8D:0E:0D:71:D8:EC:C2:75:24:D1 X509v3 Authority Key Identifier: keyid:B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/ee16cb4c8a65dd707bba97a4b2d9a7a52705f79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.156.0/22 IPv6: 2803:30c0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:50:32:db:1a:56:13:37:ce:f4:9c:e2:80:1e:ee:c8:3b:cc: d5:31:4d:dc:ca:0e:39:c0:66:d1:d9:fd:fc:5a:96:40:e9:7f: ec:1a:73:53:0a:ea:7a:32:4e:4c:21:bb:72:a4:29:a1:fa:d8: cb:b3:a8:c1:44:aa:ee:2a:19:55:dc:65:09:26:97:28:60:f3: 80:90:33:f5:21:57:c9:20:e5:51:a6:0b:47:30:b4:7d:e9:ca: 68:10:97:af:a0:4c:c7:b9:3b:5d:71:ed:cb:d2:1c:55:08:52: d1:db:d0:cc:62:b2:14:af:32:0f:ee:07:ee:2d:c4:9e:4f:f9: 82:2a:20:29:06:9c:54:c8:94:c8:20:27:e7:b4:50:2a:02:5f: 0e:31:68:c0:05:71:82:b8:ce:cf:cc:85:2f:1f:48:63:96:b9: ca:cc:12:74:3a:10:18:fe:84:2e:c8:1f:a7:de:0a:07:b0:fe: 9b:a5:12:85:f9:fb:72:ac:2c:af:68:a9:3e:cb:5d:bd:bf:91: 01:3a:05:95:59:1f:04:cd:92:fb:87:de:b9:f1:0f:1f:59:9e: 85:ad:91:7c:c2:64:4d:87:50:ae:16:3e:92:08:aa:81:d5:98: 3b:f8:8e:14:39:2b:e8:d4:90:74:a2:50:4f:5e:7e:c1:b9:b4: 84:98:a6:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDBED3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcz ZDY2ZDE5MjRlMTE2NjYyMmFkMTJhMWNhZWEwNzhiYjQ4NzlhZDAwHhcNMjEwMzI0 MTQyODU0WhcNMjYwMzI0MTQyODU0WjAzMTEwLwYDVQQDEyhlZTE2Y2I0YzhhNjVk ZDcwN2JiYTk3YTRiMmQ5YTdhNTI3MDVmNzllMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiFIuEC833TWOjXP8POXQKzIt6FqD1Sczfts8ncuewcmVTAzZ VhS5+MHufhEXM+VvwgYJ912YR1nnp9optXkuP36c9gsrzjdPm0eYtd/ty3a24ZMp 9cwoGaR+v3IUZCYFDFErIpNuh3A0rLfObWixp+EkUZVu0rfOQP9H13LR8z2qa5ro EqemYPd0SYxYkmzo8iqQujCT/qvMGmL0m59qPUUi4sIjKDGN4Y5r03j0kpEuLPpi Fm4Vl17aMZGcLPnUZXAzTi6txN+X078tsF/8G/995IBywO9MDhPKnoH3UgSioOHp FkxAOOFooIebyNC1mLtIdNeCCGtt9O6sKj2bnQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFHKyfWTR3729c2mNDg1x2OzCdSTRMB8GA1UdIwQYMBaAFLSt9I+G8TEQIPiQ HqpP6/V8dY4NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzNkNjZk MTkyNGUxMTY2NjIyYWQxMmExY2FlYTA3OGJiNDg3OWFkMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWFlZDAzOWYtYjg0Yi00YjNmLTk1MDYtN2E2Mzhi Y2YzNGRhL2VlMTZjYjRjOGE2NWRkNzA3YmJhOTdhNGIyZDlhN2E1MjcwNWY3OWUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81YWVkMDM5Zi1iODRiLTRiM2YtOTUwNi03YTYz OGJjZjM0ZGEvNzNkNjZkMTkyNGUxMTY2NjIyYWQxMmExY2FlYTA3OGJiNDg3OWFk MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAqjEnDANBAIAAjAHAwUAKAMwwDANBgkqhkiG9w0BAQsFAAOC AQEAHFAy2xpWEzfO9JzigB7uyDvM1TFN3MoOOcBm0dn9/FqWQOl/7BpzUwrqejJO TCG7cqQpofrYy7OowUSq7ioZVdxlCSaXKGDzgJAz9SFXySDlUaYLRzC0fenKaBCX r6BMx7k7XXHty9IcVQhS0dvQzGKyFK8yD+4H7i3Enk/5giogKQacVMiUyCAn57RQ KgJfDjFowAVxgrjOz8yFLx9IY5a5yswSdDoQGP6ELsgfp94KB7D+m6UShfn7cqws r2ipPstdvb+RAToFlVkfBM2S+4feufEPH1meha2RfMJkTYdQrhY+kgiqgdWYO/iO FDkr6NSQdKJQT15+wbm0hJim6g== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:39 2023 by rpki-client on console-ams.rpki-client.org