$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/33608cc0debfdf980c7e2f2af2aa664c27c13124.roa File: 33608cc0debfdf980c7e2f2af2aa664c27c13124.roa (raw, json) Hash identifier: hVQ8za5FJGmFwh0gRgfQHNJRS/21SoBZjSuRv5pH8N0= Subject key identifier: 49:77:A2:FC:1C:97:AE:EF:77:70:69:65:C6:67:35:9A:3C:24:1F:9E Certificate issuer: /CN=f10755e086c3f00dedf6589d23f8331bfccf8397 Certificate serial: 1FDAFD Authority key identifier: E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/33608cc0debfdf980c7e2f2af2aa664c27c13124.roa Signing time: Fri 24 Mar 2023 08:30:31 +0000 ROA not before: Thu 23 Mar 2023 08:30:31 +0000 ROA not after: Sat 22 Mar 2025 08:30:31 +0000 asID: 27893 IP address blocks: 190.170.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.crl rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 20:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087677 (0x1fdafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10755e086c3f00dedf6589d23f8331bfccf8397 Validity Not Before: Mar 23 08:30:31 2023 GMT Not After : Mar 22 08:30:31 2025 GMT Subject: CN=33608cc0debfdf980c7e2f2af2aa664c27c13124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:f8:65:f6:03:ec:c9:cb:45:fe:b0:a6:53: 6f:de:16:93:b9:a1:3f:16:30:43:23:92:cb:71:7b: 5d:ba:e6:35:72:c3:24:2d:1a:8a:6a:94:56:f4:57: 50:52:de:36:6f:80:ed:fa:df:ce:22:8d:86:3f:4b: 82:14:fd:86:d8:4e:22:c0:48:18:8b:21:b4:e6:d9: 6b:2a:d3:ea:45:eb:e8:1b:a0:3a:f5:89:db:18:9c: 01:88:57:13:b5:de:4f:94:85:14:f5:ae:11:6d:34: 59:e2:42:a7:46:1f:8c:c5:01:5d:db:b0:4f:cd:91: c8:0c:55:16:5e:bc:fa:3b:5b:15:a6:36:08:b1:14: 18:b2:9a:6c:ce:81:5e:57:8b:3a:52:72:33:e0:58: 42:97:1d:01:f5:d7:c3:2c:64:e9:3b:d6:34:3f:12: 1b:9a:88:5e:31:8f:09:7c:44:0b:ff:b7:37:65:9f: 53:33:ce:b3:b6:04:56:71:6d:bf:bf:81:b6:85:77: 5e:08:ac:a0:99:56:6e:75:75:21:89:77:a6:c3:70: c1:a9:9f:ee:73:90:86:d9:dd:a2:cb:d5:99:be:41: bd:64:19:e9:be:e1:ba:73:1f:3d:0f:b6:e0:ff:ed: 3e:3c:7f:2b:39:c6:e5:ca:3b:af:3a:f2:64:9e:de: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:A2:FC:1C:97:AE:EF:77:70:69:65:C6:67:35:9A:3C:24:1F:9E X509v3 Authority Key Identifier: keyid:E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/33608cc0debfdf980c7e2f2af2aa664c27c13124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.170.112.0/20 Signature Algorithm: sha256WithRSAEncryption 72:d7:0d:32:c7:34:29:19:7b:fb:57:1b:10:d8:9f:69:bb:b1: bf:16:ea:40:35:2e:6d:4e:53:6b:b2:6a:57:c3:b3:e8:b1:b7: 8a:0e:b3:65:6f:10:e1:7d:da:27:b2:e2:12:d7:76:bf:72:5c: 14:d8:ff:c6:3d:fc:b8:bb:5e:31:72:91:24:5a:d8:2e:8d:79: 08:d7:90:24:ad:42:11:c4:33:c9:3a:f2:2a:23:36:d5:11:2b: 7d:f0:f2:6f:92:2a:15:3c:78:bf:d4:f9:4c:bf:89:61:72:33: 16:47:79:9d:2e:c5:65:e9:4c:94:8e:fd:90:60:60:f6:24:d3: 1b:08:db:e4:f2:91:01:76:e4:b6:88:f8:3e:c5:69:e7:d3:bf: 69:a8:d5:fb:53:c7:c7:24:de:a5:66:99:ce:cf:92:f7:d6:0f: 60:66:a6:2d:d4:cd:db:b2:d6:70:05:3e:b8:8f:c5:32:e7:f3: 17:17:06:f9:7b:93:b0:68:49:a5:20:94:13:1f:c7:38:8a:50: eb:15:e1:10:72:6d:22:b8:18:7c:cf:e9:f2:f8:90:ee:98:12: ff:19:fa:a8:fe:21:e4:c7:77:15:a6:10:f2:ba:57:f5:7d:20: 58:3a:9b:e3:23:45:04:fe:f6:fd:5e:47:42:60:74:e8:e9:c6: bd:21:86:b0 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDH9r9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYx MDc1NWUwODZjM2YwMGRlZGY2NTg5ZDIzZjgzMzFiZmNjZjgzOTcwHhcNMjMwMzIz MDgzMDMxWhcNMjUwMzIyMDgzMDMxWjAzMTEwLwYDVQQDEygzMzYwOGNjMGRlYmZk Zjk4MGM3ZTJmMmFmMmFhNjY0YzI3YzEzMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA5mD4ZfYD7MnLRf6wplNv3haTuaE/FjBDI5LLcXtduuY1csMk LRqKapRW9FdQUt42b4Dt+t/OIo2GP0uCFP2G2E4iwEgYiyG05tlrKtPqRevoG6A6 9YnbGJwBiFcTtd5PlIUU9a4RbTRZ4kKnRh+MxQFd27BPzZHIDFUWXrz6O1sVpjYI sRQYsppszoFeV4s6UnIz4FhClx0B9dfDLGTpO9Y0PxIbmoheMY8JfEQL/7c3ZZ9T M86ztgRWcW2/v4G2hXdeCKygmVZudXUhiXemw3DBqZ/uc5CG2d2iy9WZvkG9ZBnp vuG6cx89D7bg/+0+PH8rOcblyjuvOvJknt4P6QIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFEl3ovwcl67vd3BpZcZnNZo8JB+eMB8GA1UdIwQYMBaAFOjjIeTgKRrB1H7g z+pApLUT2mZXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjEwNzU1 ZTA4NmMzZjAwZGVkZjY1ODlkMjNmODMzMWJmY2NmODM5Ny5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNzZmOTdlNjMtYTFiMS00MDYxLWJlODUtZThiNGMw NmVhMDBjLzMzNjA4Y2MwZGViZmRmOTgwYzdlMmYyYWYyYWE2NjRjMjdjMTMxMjQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83NmY5N2U2My1hMWIxLTQwNjEtYmU4NS1lOGI0 YzA2ZWEwMGMvZjEwNzU1ZTA4NmMzZjAwZGVkZjY1ODlkMjNmODMzMWJmY2NmODM5 Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBL6qcDANBgkqhkiG9w0BAQsFAAOCAQEActcNMsc0KRl7+1cb ENifabuxvxbqQDUubU5Ta7JqV8Oz6LG3ig6zZW8Q4X3aJ7LiEtd2v3JcFNj/xj38 uLteMXKRJFrYLo15CNeQJK1CEcQzyTryKiM21RErffDyb5IqFTx4v9T5TL+JYXIz Fkd5nS7FZelMlI79kGBg9iTTGwjb5PKRAXbktoj4PsVp59O/aajV+1PHxyTepWaZ zs+S99YPYGamLdTN27LWcAU+uI/FMufzFxcG+XuTsGhJpSCUEx/HOIpQ6xXhEHJt IrgYfM/p8viQ7pgS/xn6qP4h5Md3FaYQ8rpX9X0gWDqb4yNFBP72/V5HQmB06OnG vSGGsA== -----END CERTIFICATE-----Generated at Wed Jul 19 22:20:55 2023 by rpki-client on console-fra.rpki-client.org