$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa File: a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa (raw, json) Hash identifier: e8BsIjPeXhh3npBiZOuq7hxbCM2YbfcRqyk+6gKgUqM= Subject key identifier: 73:5C:C9:22:9C:F6:EB:A7:A5:01:08:13:54:FC:7F:C1:FD:2B:59:BD Certificate issuer: /CN=3a95f00c30d4360b8734d44d748537fafcb56a34 Certificate serial: FD Authority key identifier: 67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa Signing time: Tue 15 Mar 2022 19:42:25 +0000 ROA not before: Tue 15 Mar 2022 03:00:00 +0000 ROA not after: Fri 15 Mar 2024 03:00:00 +0000 asID: 64117 IP address blocks: 45.185.220.0/22 maxlen: 24 2803:d360::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.crl rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a95f00c30d4360b8734d44d748537fafcb56a34 Validity Not Before: Mar 15 03:00:00 2022 GMT Not After : Mar 15 03:00:00 2024 GMT Subject: CN=a2f8c7a9399f1a983d12c3237c03fbbb07959282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:ef:88:3a:b3:dd:4b:58:c2:c2:ce:61:7c: 72:90:3f:3e:ae:af:37:37:9c:62:6d:53:db:9f:9a: 53:44:a9:b9:1b:a9:ea:1c:3b:54:de:75:c2:ed:56: f0:d6:03:da:f6:fd:13:1e:45:a3:15:55:5a:dd:51: ff:30:80:97:66:66:5f:05:3c:28:51:35:92:65:15: d6:10:24:76:8e:05:37:8b:cf:b5:98:cc:d3:aa:82: ac:86:17:18:fa:d6:4c:62:05:11:cf:9b:4d:c1:54: a0:d3:89:1b:ed:4f:24:d5:d8:f7:9e:aa:b8:c0:01: 18:04:18:a0:10:4a:aa:0b:f5:60:ee:9a:fe:d8:31: 29:8d:64:0f:39:2b:b4:77:86:b2:be:12:55:4c:62: f3:49:0f:10:17:11:78:40:66:1c:e6:9e:61:9d:4e: 48:15:5c:ca:c2:e1:9d:fa:82:b1:5f:21:b2:21:6f: b1:0e:0d:53:19:44:52:a1:18:f5:4c:18:2a:91:e3: cb:15:62:55:a9:7c:da:fc:c0:62:f9:8f:e0:cb:aa: 48:67:c5:a6:61:c9:3b:6b:f4:62:11:4d:38:ad:48: cf:5e:29:c0:da:31:d2:3e:e3:a0:9a:b9:e7:41:4a: fe:a1:3c:4e:7c:5e:eb:46:81:1f:d5:d8:23:c2:a8: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5C:C9:22:9C:F6:EB:A7:A5:01:08:13:54:FC:7F:C1:FD:2B:59:BD X509v3 Authority Key Identifier: keyid:67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.220.0/22 IPv6: 2803:d360::/32 Signature Algorithm: sha256WithRSAEncryption 59:61:5c:fb:2a:0a:77:c6:d7:d9:4b:c9:54:b9:24:0f:e7:af: 8e:7c:67:da:0c:c9:58:6a:ab:f8:d7:7c:64:98:d0:42:47:4e: 4f:c5:e6:6e:91:06:c9:7c:9c:74:84:21:25:82:30:8a:9b:8f: 21:fa:4c:89:ed:44:50:66:e8:9b:0b:08:82:87:de:93:da:01: fa:d9:cf:87:e6:45:e2:e5:ef:4e:7f:e4:0a:94:59:b4:40:43: 24:46:e6:26:6a:5f:14:a1:2e:66:c9:98:2a:84:a0:db:4c:c8: 1a:6a:3b:38:13:0f:be:5d:1f:0d:27:70:ff:62:89:f5:0e:59: 23:ab:82:1a:9d:8c:8e:44:1c:d4:9b:2b:41:02:d2:13:7a:9b: 6c:12:ec:52:8c:fc:0e:e4:d6:6c:3d:f2:01:7f:25:0d:4a:7a: 03:e5:76:28:9e:3c:4c:19:0c:2c:ae:a1:28:54:fa:ec:63:53: 54:3f:56:f3:6a:5d:70:39:b1:3c:ce:7b:da:ee:e4:0f:7c:a3: 60:5e:40:ec:d0:db:96:cd:80:47:43:70:2f:b3:91:b3:50:51: 14:0d:1d:8b:e5:2a:e3:d6:29:8d:1b:ce:79:7a:82:ed:47:85: 20:86:50:85:a7:96:7e:00:ca:e4:00:af:33:9f:bf:ba:46:77: e3:c0:fa:9e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM2E5 NWYwMGMzMGQ0MzYwYjg3MzRkNDRkNzQ4NTM3ZmFmY2I1NmEzNDAeFw0yMjAzMTUw MzAwMDBaFw0yNDAzMTUwMzAwMDBaMDMxMTAvBgNVBAMTKGEyZjhjN2E5Mzk5ZjFh OTgzZDEyYzMyMzdjMDNmYmJiMDc5NTkyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDf++IOrPdS1jCws5hfHKQPz6urzc3nGJtU9ufmlNEqbkbqeoc O1TedcLtVvDWA9r2/RMeRaMVVVrdUf8wgJdmZl8FPChRNZJlFdYQJHaOBTeLz7WY zNOqgqyGFxj61kxiBRHPm03BVKDTiRvtTyTV2PeeqrjAARgEGKAQSqoL9WDumv7Y MSmNZA85K7R3hrK+ElVMYvNJDxAXEXhAZhzmnmGdTkgVXMrC4Z36grFfIbIhb7EO DVMZRFKhGPVMGCqR48sVYlWpfNr8wGL5j+DLqkhnxaZhyTtr9GIRTTitSM9eKcDa MdI+46CauedBSv6hPE58XutGgR/V2CPCqMqNAgMBAAGjggJqMIICZjAdBgNVHQ4E FgQUc1zJIpz266elAQgTVPx/wf0rWb0wHwYDVR0jBBgwFoAUZ7a69x96/3nMsCiY XTMrJL/NwHQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zYTk1ZjAw YzMwZDQzNjBiODczNGQ0NGQ3NDg1MzdmYWZjYjU2YTM0LmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy83MjY4MGE1Mi1lNDYxLTQ5MDMtYjNjMy01M2Q0ZjRi YjNhOTIvYTJmOGM3YTkzOTlmMWE5ODNkMTJjMzIzN2MwM2ZiYmIwNzk1OTI4Mi5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljLzcyNjgwYTUyLWU0NjEtNDkwMy1iM2MzLTUzZDRm NGJiM2E5Mi8zYTk1ZjAwYzMwZDQzNjBiODczNGQ0NGQ3NDg1MzdmYWZjYjU2YTM0 LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w HTAMBAIAATAGAwQCLbncMA0EAgACMAcDBQAoA9NgMA0GCSqGSIb3DQEBCwUAA4IB AQBZYVz7Kgp3xtfZS8lUuSQP56+OfGfaDMlYaqv413xkmNBCR05PxeZukQbJfJx0 hCElgjCKm48h+kyJ7URQZuibCwiCh96T2gH62c+H5kXi5e9Of+QKlFm0QEMkRuYm al8UoS5myZgqhKDbTMgaajs4Ew++XR8NJ3D/Yon1Dlkjq4IanYyORBzUmytBAtIT eptsEuxSjPwO5NZsPfIBfyUNSnoD5XYonjxMGQwsrqEoVPrsY1NUP1bzal1wObE8 znva7uQPfKNgXkDs0NuWzYBHQ3Avs5GzUFEUDR2L5Srj1imNG855eoLtR4UghlCF p5Z+AMrkAK8zn7+6RnfjwPqe -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:47 2023 by rpki-client on console-ams.rpki-client.org