$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa File: 455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa (raw, json) Hash identifier: A58rGb+OdZWnPCLktPvq/H2FdbWrXpI5azGVM1IKexQ= Subject key identifier: B4:E2:CB:12:D0:6E:AA:A0:C7:85:40:E5:C7:E6:03:B7:E1:6F:FD:E5 Certificate issuer: /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Certificate serial: 090473 Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa Signing time: Tue 19 Oct 2021 17:23:59 +0000 ROA not before: Wed 24 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 7049 IP address blocks: 128.201.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590963 (0x90473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Validity Not Before: Mar 24 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=455012735e166d7a1fd6c673e6ccfc94ed74d11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:9f:53:a4:69:a1:ef:78:c6:70:ab:87:6f: 89:58:3f:d9:44:82:2f:af:21:af:34:7b:40:df:5d: 72:f1:15:db:b9:5d:cd:ae:92:06:3e:24:5c:34:c4: 80:4e:2d:25:b5:ea:63:89:d4:6f:f8:77:3c:9f:5e: 8a:de:48:75:32:d2:f5:59:1e:cb:24:fa:bc:cc:b2: 8f:f2:9a:48:b8:75:5d:9b:02:e0:ae:e2:b3:71:4d: 04:29:8f:9d:59:e8:c3:91:cd:e1:73:7e:a1:8d:64: 6e:e2:58:86:58:52:7d:75:52:6c:04:8e:97:2b:86: 53:8c:73:28:f7:2c:e5:6c:9e:f7:3c:d4:55:e8:0b: 79:0e:1f:cc:12:f0:01:dd:78:a9:aa:17:4b:48:12: f1:2d:2b:f8:c8:75:a4:a5:72:de:7c:39:b1:a7:66: 6d:ab:aa:e5:6e:dd:b7:38:08:ed:d1:dd:ae:1a:84: fa:e4:46:c4:16:12:aa:93:80:f5:5e:36:e8:ec:31: b7:15:d4:97:df:99:0c:fa:88:1f:88:fe:93:55:77: 30:d0:e8:16:78:81:13:53:1d:03:5a:bb:0c:6b:e7: 8f:83:f1:5d:b8:f4:ad:db:07:e9:dc:4a:c9:e6:55: 5a:49:60:33:72:4f:11:cd:cf:c7:83:4c:e0:95:1c: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E2:CB:12:D0:6E:AA:A0:C7:85:40:E5:C7:E6:03:B7:E1:6F:FD:E5 X509v3 Authority Key Identifier: keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:cc:3d:3b:24:4b:ee:b5:55:fd:a7:10:93:be:61:36:e8:f1: 3c:21:8d:ad:fc:02:e4:2d:46:69:d5:2b:8b:01:58:2b:89:6d: a8:51:8a:60:dc:94:2b:c9:9e:4d:a8:91:d1:da:d5:19:c3:19: e1:da:09:08:83:8a:19:8d:75:d5:78:c3:ce:1e:3c:c6:0d:44: 1e:e9:a4:9a:d8:3f:58:95:64:ee:31:ed:e5:b5:0c:c8:a5:7b: cb:c3:8a:cc:22:fb:c6:2d:be:e0:fc:da:1e:d0:ff:1c:ba:cf: 58:a7:25:d5:2b:80:fa:1e:42:96:15:71:30:f5:fe:13:6a:73: 6e:21:98:3a:37:31:88:77:ff:38:f4:58:0f:03:92:06:3c:3c: 53:69:0c:59:68:db:db:32:ae:18:ea:ce:64:20:40:3d:82:bc: 83:eb:15:f8:18:ce:1f:10:6c:3b:f7:e8:59:7f:ba:62:c5:55: 5c:05:2f:f7:c9:1a:68:1d:81:87:eb:72:a6:3a:e6:09:4f:8b: a1:30:b8:5b:1f:e5:fb:7b:f7:fc:50:a7:24:35:59:91:28:2e: a9:0d:93:34:da:06:2e:7d:15:fe:c8:a7:dd:d3:72:85:14:f2: 72:7a:1f:69:02:c1:28:5f:19:9e:85:90:d2:27:fc:78:93:39: 19:bb:e4:b1 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDCQRzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 NDRkYzRmMDNlNGVkYjFjNDc4MDBhN2YyMmJhMTJmY2I1YmU5YmYwHhcNMjEwMzI0 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0NTUwMTI3MzVlMTY2 ZDdhMWZkNmM2NzNlNmNjZmM5NGVkNzRkMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAikafU6Rpoe94xnCrh2+JWD/ZRIIvryGvNHtA311y8RXbuV3N rpIGPiRcNMSATi0ltepjidRv+Hc8n16K3kh1MtL1WR7LJPq8zLKP8ppIuHVdmwLg ruKzcU0EKY+dWejDkc3hc36hjWRu4liGWFJ9dVJsBI6XK4ZTjHMo9yzlbJ73PNRV 6At5Dh/MEvAB3XipqhdLSBLxLSv4yHWkpXLefDmxp2Ztq6rlbt23OAjt0d2uGoT6 5EbEFhKqk4D1Xjbo7DG3FdSX35kM+ogfiP6TVXcw0OgWeIETUx0DWrsMa+ePg/Fd uPSt2wfp3ErJ5lVaSWAzck8Rzc/Hg0zglRxNawIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFLTiyxLQbqqgx4VA5cfmA7fhb/3lMB8GA1UdIwQYMBaAFD0Vmhv4RTAlyfmv HGwbgEW1VVKuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY0NGRj NGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTliZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2FlMjNlMTgtZDA2NC00MzIzLWJiYzUtODc4YWUx NmUxOGQzLzQ1NTAxMjczNWUxNjZkN2ExZmQ2YzY3M2U2Y2NmYzk0ZWQ3NGQxMWMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83YWUyM2UxOC1kMDY0LTQzMjMtYmJjNS04Nzhh ZTE2ZTE4ZDMvZDY0NGRjNGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTli Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIDJFzANBgkqhkiG9w0BAQsFAAOCAQEAOsw9OyRL7rVV/acQ k75hNujxPCGNrfwC5C1GadUriwFYK4ltqFGKYNyUK8meTaiR0drVGcMZ4doJCIOK GY111XjDzh48xg1EHumkmtg/WJVk7jHt5bUMyKV7y8OKzCL7xi2+4PzaHtD/HLrP WKcl1SuA+h5ClhVxMPX+E2pzbiGYOjcxiHf/OPRYDwOSBjw8U2kMWWjb2zKuGOrO ZCBAPYK8g+sV+BjOHxBsO/foWX+6YsVVXAUv98kaaB2Bh+typjrmCU+LoTC4Wx/l +3v3/FCnJDVZkSguqQ2TNNoGLn0V/sin3dNyhRTycnofaQLBKF8ZnoWQ0if8eJM5 GbvksQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:49 2023 by rpki-client on console-ams.rpki-client.org