$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa File: a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa (raw, json) Hash identifier: GRoDB96REdIVmarf8Gduubxbn3O73T3GKiSg3xgagGE= Subject key identifier: 2E:8A:9D:88:98:39:D4:C5:88:3C:B6:8C:FF:A3:2C:27:20:F8:AD:55 Certificate issuer: /CN=a736ecb08742dd36c47f8758266a50eba82e7909 Certificate serial: 15EDD4 Authority key identifier: F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa Signing time: Tue 05 Apr 2022 15:06:16 +0000 ROA not before: Tue 05 Apr 2022 03:00:00 +0000 ROA not after: Fri 05 Apr 2024 03:00:00 +0000 asID: 264633 IP address blocks: 200.10.141.0/24 maxlen: 24 2801:11:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 05:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437140 (0x15edd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a736ecb08742dd36c47f8758266a50eba82e7909 Validity Not Before: Apr 5 03:00:00 2022 GMT Not After : Apr 5 03:00:00 2024 GMT Subject: CN=a08c435f9cfbaadca51bad5d5c2f67b64038048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:6d:57:d7:4b:22:03:34:1c:91:cb:45:da: f3:54:8d:9e:db:c1:61:21:4a:77:e8:40:9d:ed:1c: c1:30:82:df:34:f0:08:2a:2b:c1:de:95:53:ee:01: ee:73:30:e8:7a:5f:e8:12:2c:d8:33:95:81:90:f9: 95:ae:de:30:c4:8a:22:40:ec:c7:00:c5:13:7c:78: 9b:e6:ac:13:83:30:21:9d:d9:6e:9f:97:7e:42:dd: 3e:90:6e:36:ab:63:bd:d3:8a:65:41:35:81:bc:0f: fc:2c:00:65:cc:b3:13:7c:b2:c1:0c:5f:c5:9d:ee: 43:53:68:2a:23:15:20:36:1f:cf:eb:7c:18:ac:51: 08:21:45:16:38:97:44:33:38:c1:40:b7:4f:d4:83: f9:fc:23:c9:a7:21:17:1c:48:3b:f0:1c:6c:a4:e3: 51:6e:aa:5b:9b:22:04:0c:07:20:01:6e:d9:5b:49: ea:9c:1a:43:c9:b5:04:16:a9:80:3a:d9:40:be:77: 90:14:7f:ce:ac:78:33:53:63:9e:fd:b2:4d:53:e0: cd:ed:b5:b3:36:fd:8c:1f:47:0a:4c:cd:18:7e:8c: a9:d0:a4:03:fa:29:89:55:93:a2:d1:f0:0f:2c:7f: 26:68:d7:da:84:71:b4:65:93:1b:c8:1b:21:30:a3: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8A:9D:88:98:39:D4:C5:88:3C:B6:8C:FF:A3:2C:27:20:F8:AD:55 X509v3 Authority Key Identifier: keyid:F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.141.0/24 IPv6: 2801:11:1000::/48 Signature Algorithm: sha256WithRSAEncryption 45:c5:b3:e6:4e:95:a7:6a:88:fc:d3:99:c5:62:7d:25:c3:b0: d4:96:07:83:3e:15:96:a0:a3:94:f3:af:76:5c:0e:aa:e6:af: b6:50:6d:41:f8:59:b3:b1:3a:65:f2:c8:da:80:71:19:e3:af: 67:cf:ac:0d:a7:f7:a2:18:af:9a:53:4c:94:70:f6:93:51:61: 9a:09:75:f2:ad:8b:85:b3:a7:60:5a:a3:89:f1:08:f6:3a:e6: 98:83:89:0d:f6:47:00:d2:da:a9:71:42:2f:05:fe:30:59:7b: d0:24:51:fa:ae:c1:f9:62:6b:97:42:13:32:d9:61:ca:c3:4e: cf:19:35:56:8d:fd:e0:a0:1e:29:0a:55:a0:5f:e9:aa:3e:f2: 99:73:82:8f:a6:ea:db:ab:7b:3f:f9:0a:4e:1f:35:a9:44:b8: 7b:0a:1c:9b:a7:50:86:2e:39:f9:78:06:d4:05:66:48:62:33: 22:4e:9e:44:ae:e6:e4:c1:ad:11:7d:81:7d:f8:cd:4b:d2:1f: 11:62:aa:56:1a:44:31:f7:55:f3:63:06:a9:27:b7:4b:b4:0a: 9b:62:5e:03:e3:78:9f:a7:59:d3:21:5b:71:a6:a6:bc:bc:2f: 8a:a4:dd:a6:60:99:9a:9a:9f:4b:90:cd:e1:99:c9:13:fe:65: 4a:db:f0:10 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDFe3UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3 MzZlY2IwODc0MmRkMzZjNDdmODc1ODI2NmE1MGViYTgyZTc5MDkwHhcNMjIwNDA1 MDMwMDAwWhcNMjQwNDA1MDMwMDAwWjAzMTEwLwYDVQQDEyhhMDhjNDM1ZjljZmJh YWRjYTUxYmFkNWQ1YzJmNjdiNjQwMzgwNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAz4ltV9dLIgM0HJHLRdrzVI2e28FhIUp36ECd7RzBMILfNPAI KivB3pVT7gHuczDoel/oEizYM5WBkPmVrt4wxIoiQOzHAMUTfHib5qwTgzAhndlu n5d+Qt0+kG42q2O904plQTWBvA/8LABlzLMTfLLBDF/Fne5DU2gqIxUgNh/P63wY rFEIIUUWOJdEMzjBQLdP1IP5/CPJpyEXHEg78BxspONRbqpbmyIEDAcgAW7ZW0nq nBpDybUEFqmAOtlAvneQFH/OrHgzU2Oe/bJNU+DN7bWzNv2MH0cKTM0Yfoyp0KQD +imJVZOi0fAPLH8maNfahHG0ZZMbyBshMKMdgwIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFC6KnYiYOdTFiDy2jP+jLCcg+K1VMB8GA1UdIwQYMBaAFPbr3Jf4BZeJAhCo If6ZdNihf/YnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTczNmVj YjA4NzQyZGQzNmM0N2Y4NzU4MjY2YTUwZWJhODJlNzkwOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWI5ODZlMWUtNTRkZi00ZmNhLWEwOGQtNWY5NjRh ZDc5ZmRjL2EwOGM0MzVmOWNmYmFhZGNhNTFiYWQ1ZDVjMmY2N2I2NDAzODA0OGUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81Yjk4NmUxZS01NGRmLTRmY2EtYTA4ZC01Zjk2 NGFkNzlmZGMvYTczNmVjYjA4NzQyZGQzNmM0N2Y4NzU4MjY2YTUwZWJhODJlNzkw OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAMgKjTAPBAIAAjAJAwcAKAEAERAAMA0GCSqGSIb3DQEBCwUA A4IBAQBFxbPmTpWnaoj805nFYn0lw7DUlgeDPhWWoKOU8692XA6q5q+2UG1B+Fmz sTpl8sjagHEZ469nz6wNp/eiGK+aU0yUcPaTUWGaCXXyrYuFs6dgWqOJ8Qj2OuaY g4kN9kcA0tqpcUIvBf4wWXvQJFH6rsH5YmuXQhMy2WHKw07PGTVWjf3goB4pClWg X+mqPvKZc4KPpurbq3s/+QpOHzWpRLh7Chybp1CGLjn5eAbUBWZIYjMiTp5Erubk wa0RfYF9+M1L0h8RYqpWGkQx91XzYwapJ7dLtAqbYl4D43ifp1nTIVtxpqa8vC+K pN2mYJmamp9LkM3hmckT/mVK2/AQ -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:31 2023 by rpki-client on console-fra.rpki-client.org