$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/359c6df758cfeb4d426886214a86f135e12b3acb.roa File: 359c6df758cfeb4d426886214a86f135e12b3acb.roa (raw, json) Hash identifier: tgMqLyeMrbasaxqxmKKqRxNiQY4s+z39/lU4Jar0Teg= Subject key identifier: 59:C0:81:09:F9:3F:61:01:99:22:30:F8:C6:C7:5C:7F:0A:51:6C:85 Certificate issuer: /CN=af74f3aa42340a4c03a724bcfe9d604390d00998 Certificate serial: 0DB214 Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/359c6df758cfeb4d426886214a86f135e12b3acb.roa Signing time: Wed 24 Mar 2021 14:38:48 +0000 ROA not before: Wed 24 Mar 2021 14:38:45 +0000 ROA not after: Tue 24 Mar 2026 14:38:45 +0000 asID: 27947 IP address blocks: 45.71.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897556 (0xdb214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998 Validity Not Before: Mar 24 14:38:45 2021 GMT Not After : Mar 24 14:38:45 2026 GMT Subject: CN=359c6df758cfeb4d426886214a86f135e12b3acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:4d:b7:f9:26:ac:85:09:77:8f:c4:e4:70: 67:eb:d3:e1:39:79:e1:8c:5a:13:ab:31:fe:a8:38: 1a:e1:aa:37:fa:3a:1f:7c:05:27:32:4c:5b:46:c4: 91:50:60:37:57:5a:ee:3a:49:33:c0:89:d4:5b:59: 08:d8:5b:9c:d2:2e:e0:fa:4d:b0:9a:27:94:6c:ef: 55:8e:56:f2:0a:b7:df:64:a7:1f:a0:d2:0a:82:2a: 15:27:88:ca:f6:da:e2:c7:7a:6c:8c:38:49:9b:35: 6b:95:48:fb:9e:1b:aa:fe:d8:e0:b3:87:10:fb:da: 03:ec:c8:e1:84:97:84:c9:a9:b9:e6:ce:0b:29:15: 2f:ff:3a:4f:d2:10:7f:07:b9:f7:b6:58:1c:8c:60: 24:4d:5b:00:0a:6a:a0:57:9d:a5:e4:33:41:d0:77: 1c:c1:a1:c8:90:34:27:92:a3:0d:b5:cb:9f:74:79: 6a:6a:fe:6e:06:46:cf:3b:78:0f:53:7c:91:f2:32: a3:be:34:c1:9a:91:dd:55:08:3f:cb:cd:50:f4:25: de:fa:d6:3b:12:50:03:ef:a3:00:68:c9:42:77:99: fd:b5:8b:8d:20:ab:35:7d:5a:51:5c:55:41:53:a9: c4:67:dd:d0:df:f8:be:7c:1b:25:f0:a9:0e:b0:0a: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C0:81:09:F9:3F:61:01:99:22:30:F8:C6:C7:5C:7F:0A:51:6C:85 X509v3 Authority Key Identifier: keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/359c6df758cfeb4d426886214a86f135e12b3acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.38.0/24 Signature Algorithm: sha256WithRSAEncryption 17:ad:80:5b:1b:70:05:e5:75:27:d6:78:f3:3a:1b:55:8e:dc: cf:1c:ed:64:68:66:b3:57:65:6d:b7:93:06:33:61:9e:26:b3: 06:f5:05:49:ec:72:4b:c1:87:d8:7f:9c:10:40:9b:9d:5c:46: 15:b6:be:70:52:23:5f:cc:38:d7:6c:ca:5e:7f:11:cb:ac:2c: a6:a8:68:78:52:06:9c:65:5e:ef:d7:a9:b5:79:8b:6f:64:c0: 7c:01:41:c3:93:b4:ab:f7:55:3c:21:05:9b:ab:f1:0e:3c:8e: 57:6d:20:a7:00:30:e1:54:7f:dc:a0:6b:a0:99:7d:26:c7:6d: b0:3d:8d:81:8b:f2:1e:d5:44:67:bf:30:47:97:34:78:cc:4f: f6:ce:86:85:d0:50:de:48:67:a8:13:98:7d:26:56:cf:e0:5f: 63:0a:f2:0a:7e:f7:ee:35:fa:35:3f:d4:09:30:93:ae:b1:e9: eb:26:6f:65:bb:2a:2c:a8:90:97:57:fd:9f:c6:ff:00:db:ec: 46:7d:49:14:c4:e6:29:12:89:3b:4d:68:fb:e0:e0:74:1c:c9: 0e:37:26:74:6b:d9:ca:c1:2f:15:2f:3e:0e:c4:d4:70:d9:9c: 56:6b:58:16:30:c3:16:94:69:31:fd:52:79:ad:57:0b:87:a9: 3d:8b:8f:e8 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDbIUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm NzRmM2FhNDIzNDBhNGMwM2E3MjRiY2ZlOWQ2MDQzOTBkMDA5OTgwHhcNMjEwMzI0 MTQzODQ1WhcNMjYwMzI0MTQzODQ1WjAzMTEwLwYDVQQDEygzNTljNmRmNzU4Y2Zl YjRkNDI2ODg2MjE0YTg2ZjEzNWUxMmIzYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA0chNt/kmrIUJd4/E5HBn69PhOXnhjFoTqzH+qDga4ao3+jof fAUnMkxbRsSRUGA3V1ruOkkzwInUW1kI2Fuc0i7g+k2wmieUbO9VjlbyCrffZKcf oNIKgioVJ4jK9trix3psjDhJmzVrlUj7nhuq/tjgs4cQ+9oD7MjhhJeEyam55s4L KRUv/zpP0hB/B7n3tlgcjGAkTVsACmqgV52l5DNB0HccwaHIkDQnkqMNtcufdHlq av5uBkbPO3gPU3yR8jKjvjTBmpHdVQg/y81Q9CXe+tY7ElAD76MAaMlCd5n9tYuN IKs1fVpRXFVBU6nEZ93Q3/i+fBsl8KkOsArqFwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFFnAgQn5P2EBmSIw+MbHXH8KUWyFMB8GA1UdIwQYMBaAFPjADna6vDze/iOT okrklwo0hX7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWY3NGYz YWE0MjM0MGE0YzAzYTcyNGJjZmU5ZDYwNDM5MGQwMDk5OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNmUxMzk0YjktYjA3OC00NGZmLThjNzUtOTM2NTMw M2FjYTRmLzM1OWM2ZGY3NThjZmViNGQ0MjY4ODYyMTRhODZmMTM1ZTEyYjNhY2Iu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82ZTEzOTRiOS1iMDc4LTQ0ZmYtOGM3NS05MzY1 MzAzYWNhNGYvYWY3NGYzYWE0MjM0MGE0YzAzYTcyNGJjZmU5ZDYwNDM5MGQwMDk5 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC1HJjANBgkqhkiG9w0BAQsFAAOCAQEAF62AWxtwBeV1J9Z4 8zobVY7czxztZGhms1dlbbeTBjNhniazBvUFSexyS8GH2H+cEECbnVxGFba+cFIj X8w412zKXn8Ry6wspqhoeFIGnGVe79eptXmLb2TAfAFBw5O0q/dVPCEFm6vxDjyO V20gpwAw4VR/3KBroJl9JsdtsD2NgYvyHtVEZ78wR5c0eMxP9s6GhdBQ3khnqBOY fSZWz+BfYwryCn737jX6NT/UCTCTrrHp6yZvZbsqLKiQl1f9n8b/ANvsRn1JFMTm KRKJO01o++DgdBzJDjcmdGvZysEvFS8+DsTUcNmcVmtYFjDDFpRpMf1Sea1XC4ep PYuP6A== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:45 2023 by rpki-client on console-ams.rpki-client.org