$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa File: 8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa (raw, json) Hash identifier: zkH282gYELC91aCqqS/02zvGnRgWnQgdCX2/dZIcwmM= Subject key identifier: 19:B0:60:D9:20:DD:FF:59:EA:55:82:AB:AA:4E:44:B0:2C:54:34:C2 Certificate issuer: /CN=3d834735280c5b9052510730fac20a4e6213a18d Certificate serial: 0EB22D Authority key identifier: 5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa Signing time: Wed 11 May 2022 22:28:12 +0000 ROA not before: Wed 24 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 265696 IP address blocks: 45.5.164.0/22 maxlen: 24 2801:17:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.crl rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 19:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963117 (0xeb22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d834735280c5b9052510730fac20a4e6213a18d Validity Not Before: Mar 24 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:47:c5:6b:6d:8c:90:60:67:37:53:55:d2: 0c:c3:7a:8f:68:45:34:14:d0:51:ac:ce:a4:e8:1c: ce:88:d0:0d:37:a4:86:a7:ae:3a:9b:05:6d:69:e8: 4a:d5:6c:f7:7c:72:59:11:57:2d:65:46:25:dd:4e: 73:be:88:6a:2e:04:47:88:ac:3d:8c:16:e7:5c:ef: 90:0c:54:1c:e3:77:99:af:90:ae:e3:28:34:fd:8f: b5:3c:e7:98:d1:d6:0a:fd:b6:d8:0f:50:3d:75:1a: d9:9f:06:81:37:3f:46:a2:66:eb:25:8f:11:a3:a0: 16:40:a1:ef:e4:e3:a7:08:af:62:88:57:a1:d7:5a: 70:90:9e:f5:93:bb:41:0a:b4:52:69:fa:a1:55:31: bc:7a:82:c7:07:68:28:c5:29:df:d0:4d:1f:b8:83: 21:14:7b:2f:a5:14:42:00:19:b2:af:14:c5:94:56: 70:9a:7b:cd:84:5f:55:4a:fc:11:87:c1:70:31:6d: b3:71:58:56:0e:9a:fa:02:3e:06:fc:ff:ff:00:61: 97:59:8c:31:a6:b1:67:0e:e4:7f:01:65:fa:6d:a8: e3:a6:c4:8a:d7:62:dc:5a:d5:3a:5a:f1:da:30:f2: 25:4a:1a:a3:94:b1:9e:0a:b6:ef:75:9d:60:c1:8e: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B0:60:D9:20:DD:FF:59:EA:55:82:AB:AA:4E:44:B0:2C:54:34:C2 X509v3 Authority Key Identifier: keyid:5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.164.0/22 IPv6: 2801:17:d000::/48 Signature Algorithm: sha256WithRSAEncryption 47:cf:72:9c:65:b7:6e:70:10:fa:81:6b:c3:08:b9:76:3b:8b: c9:fa:8b:74:4e:50:95:f7:77:e8:1b:31:ae:4a:22:0c:01:e1: c8:e0:ac:27:90:08:a1:f9:fb:e0:96:a5:ee:25:54:7e:4b:d4: 67:0f:a3:cd:19:7f:67:98:f2:3f:47:71:05:95:79:a6:da:d2: 97:b3:f9:cb:d1:a3:e7:d8:75:05:10:5f:2f:68:74:f3:66:32: 90:e1:ba:0b:92:74:ee:c9:c8:46:cc:0a:91:ef:c3:bf:46:8c: 25:d6:c0:1c:7e:3d:71:53:e6:60:c6:72:53:47:72:49:0e:b5: 39:8f:23:af:c0:f3:05:b3:ee:df:4a:dd:a2:d3:6a:eb:c6:de: b8:c5:52:61:d9:23:72:9f:52:e9:1e:52:9a:41:f4:a5:b9:25: 58:e1:d7:be:b6:4a:2c:96:0d:66:81:13:39:61:27:a0:c5:7f: b9:d5:b6:1e:c3:da:3a:85:2b:1a:cd:0c:ac:c8:79:36:25:30: 06:9a:6c:78:26:dc:54:b9:89:e8:99:75:8e:4b:05:be:4d:62: 10:34:b2:15:e3:5e:57:86:58:20:5d:5f:71:de:e5:6b:32:f8: 23:9c:67:ce:f7:92:27:48:52:67:5e:c1:b2:b0:b4:5e:ff:c6: c0:1c:ed:5b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDDrItMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNk ODM0NzM1MjgwYzViOTA1MjUxMDczMGZhYzIwYTRlNjIxM2ExOGQwHhcNMjEwMzI0 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4ZDZhYTFhMmE5YjI2 NzQzNWRlM2IwM2M3YWM2Njc5N2VmMjFkMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtPBHxWttjJBgZzdTVdIMw3qPaEU0FNBRrM6k6BzOiNANN6SG p646mwVtaehK1Wz3fHJZEVctZUYl3U5zvohqLgRHiKw9jBbnXO+QDFQc43eZr5Cu 4yg0/Y+1POeY0dYK/bbYD1A9dRrZnwaBNz9GombrJY8Ro6AWQKHv5OOnCK9iiFeh 11pwkJ71k7tBCrRSafqhVTG8eoLHB2goxSnf0E0fuIMhFHsvpRRCABmyrxTFlFZw mnvNhF9VSvwRh8FwMW2zcVhWDpr6Aj4G/P//AGGXWYwxprFnDuR/AWX6bajjpsSK 12LcWtU6WvHaMPIlShqjlLGeCrbvdZ1gwY6LfwIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFBmwYNkg3f9Z6lWCq6pORLAsVDTCMB8GA1UdIwQYMBaAFFryGDK/5TaD7bDr +wUT2gZ47Vm2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2Q4MzQ3 MzUyODBjNWI5MDUyNTEwNzMwZmFjMjBhNGU2MjEzYTE4ZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNzRhY2Y1ZjktYzA1My00YTlkLWExMDMtMzA0MzE5 NzlkODM1LzhkNmFhMWEyYTliMjY3NDM1ZGUzYjAzYzdhYzY2Nzk3ZWYyMWQxZmQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83NGFjZjVmOS1jMDUzLTRhOWQtYTEwMy0zMDQz MTk3OWQ4MzUvM2Q4MzQ3MzUyODBjNWI5MDUyNTEwNzMwZmFjMjBhNGU2MjEzYTE4 ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAi0FpDAPBAIAAjAJAwcAKAEAF9AAMA0GCSqGSIb3DQEBCwUA A4IBAQBHz3KcZbducBD6gWvDCLl2O4vJ+ot0TlCV93foGzGuSiIMAeHI4KwnkAih +fvglqXuJVR+S9RnD6PNGX9nmPI/R3EFlXmm2tKXs/nL0aPn2HUFEF8vaHTzZjKQ 4boLknTuychGzAqR78O/Rowl1sAcfj1xU+ZgxnJTR3JJDrU5jyOvwPMFs+7fSt2i 02rrxt64xVJh2SNyn1LpHlKaQfSluSVY4de+tkoslg1mgRM5YSegxX+51bYew9o6 hSsazQysyHk2JTAGmmx4JtxUuYnomXWOSwW+TWIQNLIV415XhlggXV9x3uVrMvgj nGfO95InSFJnXsGysLRe/8bAHO1b -----END CERTIFICATE-----Generated at Wed Jul 19 22:20:54 2023 by rpki-client on console-fra.rpki-client.org