$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/3ed336c98c0e4fc03fafea28049b4d0048963b29.roa File: 3ed336c98c0e4fc03fafea28049b4d0048963b29.roa (raw, json) Hash identifier: ndt+du1zQ3sIj9cuPUkHEsPvg2F2ce0DGtcF5gF6Lvk= Subject key identifier: 9B:E3:B6:9B:7A:11:DD:FA:B3:68:1D:D8:A4:D1:78:A2:F7:10:89:4A Certificate issuer: /CN=845bbeaf321291f319d25e6aad16fc99ac388e15 Certificate serial: 11C003 Authority key identifier: 6F:76:57:C1:A5:80:23:BE:79:7E:9C:DE:62:7D:63:1D:2C:BD:51:BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845bbeaf321291f319d25e6aad16fc99ac388e15.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/3ed336c98c0e4fc03fafea28049b4d0048963b29.roa Signing time: Thu 28 Oct 2021 14:57:43 +0000 ROA not before: Wed 24 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 264780 IP address blocks: 45.165.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/845bbeaf321291f319d25e6aad16fc99ac388e15.crl rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/845bbeaf321291f319d25e6aad16fc99ac388e15.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845bbeaf321291f319d25e6aad16fc99ac388e15.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 05:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163267 (0x11c003) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845bbeaf321291f319d25e6aad16fc99ac388e15 Validity Not Before: Mar 24 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=3ed336c98c0e4fc03fafea28049b4d0048963b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:77:9b:8b:79:01:08:60:c9:7f:7d:f8:8d: b9:00:ee:9f:5d:37:5c:3f:20:96:ab:90:8b:ff:e9: f4:9f:6f:25:6e:65:fe:82:cd:b6:28:f7:ce:76:fb: 07:4f:40:d9:63:04:59:61:55:98:d7:f5:e6:26:a8: eb:a3:97:37:5b:83:cc:fb:92:e7:8f:60:46:5a:96: 25:38:2e:2e:6d:e0:b2:70:e3:28:9d:1f:d9:05:d2: ad:48:28:5e:de:3d:a1:a3:92:4b:3d:79:a2:79:a7: eb:08:22:0e:02:63:c5:86:74:9c:09:df:9e:40:cd: e0:55:cf:2d:39:32:c4:f4:ba:b0:3e:ed:7c:cc:df: ae:cf:2f:d5:a6:c3:ca:5b:62:19:0e:bf:37:a8:df: 38:95:59:8f:50:5c:71:03:7b:e3:16:bd:71:27:40: 6a:ef:b0:fc:9f:0f:58:ac:f0:7e:52:5f:5f:38:0f: 1f:84:76:d6:76:be:7d:4c:8f:dc:cb:54:15:5c:98: a9:95:16:78:fe:d2:e6:3d:20:93:41:c0:91:88:31: 5d:81:79:9e:e8:96:cd:2c:ac:3a:ff:d2:bf:f3:4f: 81:7a:6e:44:cc:cc:13:0a:9a:04:d6:68:57:cc:19: 4b:cf:d6:2a:13:98:db:6a:10:f8:ef:f0:6e:e2:99: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E3:B6:9B:7A:11:DD:FA:B3:68:1D:D8:A4:D1:78:A2:F7:10:89:4A X509v3 Authority Key Identifier: keyid:6F:76:57:C1:A5:80:23:BE:79:7E:9C:DE:62:7D:63:1D:2C:BD:51:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845bbeaf321291f319d25e6aad16fc99ac388e15.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/3ed336c98c0e4fc03fafea28049b4d0048963b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61e4995d-8b6d-4878-b8b1-9339d519bb9c/845bbeaf321291f319d25e6aad16fc99ac388e15.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.40.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:b4:bc:4f:7d:4f:ca:71:b6:e2:b1:3a:53:fb:2b:7e:26:4e: 34:a7:40:44:54:10:cb:5f:78:e0:f8:54:89:b4:b8:f9:0c:bc: 36:d8:f2:1b:b5:26:63:38:dd:5e:2a:9c:3c:f3:bc:32:2d:95: 82:6c:65:bd:6c:b0:00:b2:6b:b3:80:e7:5b:9a:5a:ec:24:5e: a7:e2:75:54:67:b7:18:ea:81:b1:19:8c:75:1f:ef:8f:25:80: 11:f1:8b:d5:30:88:a8:63:75:12:b7:f4:58:c7:74:8d:d7:8e: e7:8b:93:c8:ac:f4:b6:ce:ef:0a:07:f7:c9:11:09:7c:c0:a0: 9f:2e:b7:40:44:aa:ff:d7:20:18:6b:af:e4:a9:15:6e:3b:be: ba:a5:30:36:73:f3:71:d4:ae:9c:e2:44:cc:14:a3:69:d7:a7: c8:3e:e0:74:7b:bd:64:a4:2e:e2:96:aa:e5:a0:f0:51:c8:08: 27:e4:c8:5d:b9:48:11:7f:c1:4e:93:62:fe:b4:61:35:1f:54: 2a:ab:c0:0b:55:3f:66:3a:37:8f:a4:1c:be:52:54:15:f0:e2: 81:5b:b7:78:d3:23:76:20:83:b9:30:36:66:8b:c2:7e:e7:39: 34:b8:49:ff:98:7a:14:0d:63:4b:cc:cc:e6:07:d4:97:8a:34: 83:ec:2f:32 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDEcADMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0 NWJiZWFmMzIxMjkxZjMxOWQyNWU2YWFkMTZmYzk5YWMzODhlMTUwHhcNMjEwMzI0 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzZWQzMzZjOThjMGU0 ZmMwM2ZhZmVhMjgwNDliNGQwMDQ4OTYzYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAk5B3m4t5AQhgyX99+I25AO6fXTdcPyCWq5CL/+n0n28lbmX+ gs22KPfOdvsHT0DZYwRZYVWY1/XmJqjro5c3W4PM+5Lnj2BGWpYlOC4ubeCycOMo nR/ZBdKtSChe3j2ho5JLPXmieafrCCIOAmPFhnScCd+eQM3gVc8tOTLE9LqwPu18 zN+uzy/VpsPKW2IZDr83qN84lVmPUFxxA3vjFr1xJ0Bq77D8nw9YrPB+Ul9fOA8f hHbWdr59TI/cy1QVXJiplRZ4/tLmPSCTQcCRiDFdgXme6JbNLKw6/9K/80+Bem5E zMwTCpoE1mhXzBlLz9YqE5jbahD47/Bu4pnfYwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFJvjtpt6Ed36s2gd2KTReKL3EIlKMB8GA1UdIwQYMBaAFG92V8GlgCO+eX6c 3mJ9Yx0svVG9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODQ1YmJl YWYzMjEyOTFmMzE5ZDI1ZTZhYWQxNmZjOTlhYzM4OGUxNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNjFlNDk5NWQtOGI2ZC00ODc4LWI4YjEtOTMzOWQ1 MTliYjljLzNlZDMzNmM5OGMwZTRmYzAzZmFmZWEyODA0OWI0ZDAwNDg5NjNiMjku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82MWU0OTk1ZC04YjZkLTQ4NzgtYjhiMS05MzM5 ZDUxOWJiOWMvODQ1YmJlYWYzMjEyOTFmMzE5ZDI1ZTZhYWQxNmZjOTlhYzM4OGUx NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAi2lKDANBgkqhkiG9w0BAQsFAAOCAQEAOrS8T31PynG24rE6 U/srfiZONKdARFQQy1944PhUibS4+Qy8NtjyG7UmYzjdXiqcPPO8Mi2VgmxlvWyw ALJrs4DnW5pa7CRep+J1VGe3GOqBsRmMdR/vjyWAEfGL1TCIqGN1Erf0WMd0jdeO 54uTyKz0ts7vCgf3yREJfMCgny63QESq/9cgGGuv5KkVbju+uqUwNnPzcdSunOJE zBSjadenyD7gdHu9ZKQu4paq5aDwUcgIJ+TIXblIEX/BTpNi/rRhNR9UKqvAC1U/ Zjo3j6QcvlJUFfDigVu3eNMjdiCDuTA2ZovCfuc5NLhJ/5h6FA1jS8zM5gfUl4o0 g+wvMg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:32 2023 by rpki-client on console-fra.rpki-client.org