$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa File: 3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa (raw, json) Hash identifier: w/R14fgDzeGH/qEC2h3+/FT85zeKbRyw8/lEKoKJk1k= Subject key identifier: E9:16:70:DB:4D:4A:C7:EC:78:75:24:E3:34:F0:C3:BB:73:2D:59:91 Certificate issuer: /CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a Certificate serial: 0C7515 Authority key identifier: 62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa Signing time: Wed 24 Mar 2021 14:41:33 +0000 ROA not before: Wed 24 Mar 2021 14:41:32 +0000 ROA not after: Tue 24 Mar 2026 14:41:32 +0000 asID: 48252 IP address blocks: 45.169.164.0/22 maxlen: 24 2803:3a0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 04:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816405 (0xc7515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a Validity Not Before: Mar 24 14:41:32 2021 GMT Not After : Mar 24 14:41:32 2026 GMT Subject: CN=3f5d9920015f5d9b973f5dc4db349ec1a09bebcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:86:64:9b:6c:6a:92:15:03:ac:e3:ae:19: 6b:6e:ac:1c:e3:d1:95:74:39:46:4d:d7:01:f4:92: 5e:6c:23:a3:22:53:1b:d8:9d:90:3f:cc:55:3b:3f: 2f:48:af:1e:e3:ee:ea:40:39:eb:21:5d:35:4a:0a: cb:a6:42:1a:f4:8c:15:c5:67:bb:c5:4b:7a:63:13: 82:d3:43:ff:43:8a:a5:68:25:07:f9:2e:b4:b6:82: 94:a4:e0:94:80:72:62:24:11:a9:48:f2:55:a1:74: 22:39:37:87:d6:88:71:58:ab:28:97:d4:53:ee:21: 80:1a:60:8c:dc:bb:c7:34:35:37:37:2b:d4:f8:25: 79:c1:07:12:52:57:cf:a3:45:cd:84:fa:60:25:cd: 07:d4:a6:3e:de:82:63:b2:35:2c:34:17:83:4d:aa: 25:f2:66:75:25:54:49:05:7a:d7:a2:6d:67:d6:55: 46:2b:df:c4:cc:4a:06:b8:5f:6c:2d:e5:79:ce:cf: 42:43:47:78:97:f8:00:5f:d6:58:d2:54:31:60:d6: d8:99:cc:9b:14:9a:d3:8c:62:11:43:fb:9f:99:ad: 60:b9:d5:6f:e6:07:c1:5c:89:42:05:d1:35:f3:ab: fc:7b:a9:4f:25:30:a6:13:fc:39:ae:d3:48:89:2f: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:16:70:DB:4D:4A:C7:EC:78:75:24:E3:34:F0:C3:BB:73:2D:59:91 X509v3 Authority Key Identifier: keyid:62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/3f5d9920015f5d9b973f5dc4db349ec1a09bebcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.164.0/22 IPv6: 2803:3a0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:56:fe:84:b7:3f:0a:34:15:10:76:86:d2:e9:41:d7:e4:55: d5:26:db:dc:55:d8:a0:49:98:29:7d:67:e4:e5:32:03:99:01: 52:aa:68:71:09:0d:95:4b:15:ec:11:b8:c7:eb:0c:11:83:11: 95:64:1b:10:fe:e4:3b:d7:7b:b2:28:a1:7f:e8:09:a5:de:65: 7b:9f:f2:f9:51:bb:be:00:62:7e:b5:c4:a4:dc:a3:db:58:b1: f0:16:66:55:1d:13:68:6f:c6:ae:e4:27:0c:93:8e:18:dc:e8: fd:e0:d4:3f:37:34:d5:76:04:e0:8e:ea:1a:6a:06:2e:b0:07: 48:8b:76:05:d0:47:99:21:ef:10:17:2f:76:70:be:87:ac:16: 0c:d8:c3:d0:e1:31:d2:b2:18:c1:10:ec:ab:2b:6a:36:22:49: 1e:7c:de:7d:4c:37:32:08:c4:01:c2:6a:65:73:b9:3a:ce:d3: bf:c6:26:23:9b:df:59:52:68:cd:0d:1c:0e:1c:6f:29:57:59: 54:00:5f:52:12:be:f3:b9:5e:f0:c2:c5:27:8f:d1:34:07:d2: 66:d6:d7:ee:00:8d:14:60:9f:f9:6f:14:2d:4c:7a:87:1f:c8: 7a:97:b5:8e:3a:94:00:4f:12:b3:a5:c1:af:d0:cc:17:46:8c: 57:57:9f:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDDHUVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi YmQwYjI2ZTI4ZWMwZTIyNTgzOGUyY2RhOTNlMjVlMTIyYjMzMmEwHhcNMjEwMzI0 MTQ0MTMyWhcNMjYwMzI0MTQ0MTMyWjAzMTEwLwYDVQQDEygzZjVkOTkyMDAxNWY1 ZDliOTczZjVkYzRkYjM0OWVjMWEwOWJlYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArPOGZJtsapIVA6zjrhlrbqwc49GVdDlGTdcB9JJebCOjIlMb 2J2QP8xVOz8vSK8e4+7qQDnrIV01SgrLpkIa9IwVxWe7xUt6YxOC00P/Q4qlaCUH +S60toKUpOCUgHJiJBGpSPJVoXQiOTeH1ohxWKsol9RT7iGAGmCM3LvHNDU3NyvU +CV5wQcSUlfPo0XNhPpgJc0H1KY+3oJjsjUsNBeDTaol8mZ1JVRJBXrXom1n1lVG K9/EzEoGuF9sLeV5zs9CQ0d4l/gAX9ZY0lQxYNbYmcybFJrTjGIRQ/ufma1gudVv 5gfBXIlCBdE186v8e6lPJTCmE/w5rtNIiS/O6wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFOkWcNtNSsfseHUk4zTww7tzLVmRMB8GA1UdIwQYMBaAFGLL7Rshoa0v5fWy Y7OQDZDq4cQFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWJiZDBi MjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUxMjJiMzMyYS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNjg1YjY1OGMtODNjMy00NTQyLTkyOTktYWY1Y2Fj NWIyZWZlLzNmNWQ5OTIwMDE1ZjVkOWI5NzNmNWRjNGRiMzQ5ZWMxYTA5YmViY2Iu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82ODViNjU4Yy04M2MzLTQ1NDItOTI5OS1hZjVj YWM1YjJlZmUvMWJiZDBiMjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUxMjJiMzMy YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi2ppDANBAIAAjAHAwUAKAMDoDANBgkqhkiG9w0BAQsFAAOC AQEAGlb+hLc/CjQVEHaG0ulB1+RV1Sbb3FXYoEmYKX1n5OUyA5kBUqpocQkNlUsV 7BG4x+sMEYMRlWQbEP7kO9d7siihf+gJpd5le5/y+VG7vgBifrXEpNyj21ix8BZm VR0TaG/GruQnDJOOGNzo/eDUPzc01XYE4I7qGmoGLrAHSIt2BdBHmSHvEBcvdnC+ h6wWDNjD0OEx0rIYwRDsqytqNiJJHnzefUw3MgjEAcJqZXO5Os7Tv8YmI5vfWVJo zQ0cDhxvKVdZVABfUhK+87le8MLFJ4/RNAfSZtbX7gCNFGCf+W8ULUx6hx/Iepe1 jjqUAE8Ss6XBr9DMF0aMV1efPQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:33 2023 by rpki-client on console-fra.rpki-client.org