$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa File: 492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa (raw, json) Hash identifier: 1rvMOxng42orwPNPh/KaqNcDybpCvLFvcNOqCr2lelM= Subject key identifier: CA:40:FA:11:C2:90:64:AA:2D:D8:A2:8E:B6:84:B7:C4:DA:E9:05:93 Certificate issuer: /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Certificate serial: 08FE87 Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa Signing time: Tue 19 Oct 2021 17:23:33 +0000 ROA not before: Wed 24 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 7049 IP address blocks: 128.201.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 13:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589447 (0x8fe87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Validity Not Before: Mar 24 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=492c32ee74b353ff0c5d430ed3347b9bf20482eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:10:df:94:44:4c:40:58:4f:5a:0c:cd:c3: 67:98:31:cd:79:88:27:72:a1:16:23:67:87:29:bf: 79:bf:e5:8b:5d:6e:69:dd:3a:1c:e0:a9:b1:71:fc: ff:fb:f3:97:7d:3a:b3:14:df:65:ac:70:ab:87:0e: 11:1d:78:64:28:95:94:07:cc:07:69:79:1d:61:cc: a7:88:a5:b4:55:75:ff:b6:b3:8e:eb:bd:8f:03:97: d3:05:fa:c5:8e:4b:f3:8f:af:7f:68:0c:56:5f:56: 9b:37:2f:dc:bd:d6:a0:6d:0c:9e:cb:14:d3:dc:c3: bb:4b:0a:cf:ce:14:15:e4:ff:56:68:2b:cf:65:af: 7e:b6:3e:aa:81:85:49:31:8d:0f:b6:58:1b:28:64: 4c:3b:99:08:cb:25:d7:38:72:c8:90:c1:a0:60:52: e0:cb:ad:06:71:c1:88:3e:74:79:71:db:5c:51:32: 4a:99:b0:23:41:b4:9a:42:50:7e:2f:10:d5:7b:74: 88:c8:24:12:e6:fc:25:26:37:83:a8:f5:90:e7:f2: 0e:f9:af:8e:3d:d6:a5:89:82:37:b4:7d:47:55:98: 3d:1b:26:50:d5:f8:d3:36:d8:90:39:f8:3b:d9:28: cd:bc:8a:a3:eb:20:58:b5:20:95:e3:06:d3:39:44: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:40:FA:11:C2:90:64:AA:2D:D8:A2:8E:B6:84:B7:C4:DA:E9:05:93 X509v3 Authority Key Identifier: keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.20.0/24 Signature Algorithm: sha256WithRSAEncryption 02:60:47:3f:38:09:05:75:8f:f2:89:f2:1b:57:c0:03:ac:e6: ba:e3:87:a2:05:0f:b5:94:7c:4c:50:c4:11:36:0e:03:9a:3f: 76:96:24:a9:96:25:02:f2:32:1a:71:7a:a1:4b:9c:63:77:d8: ee:1e:20:22:aa:0b:6c:70:3d:bc:e7:bc:61:11:19:19:d1:d5: e8:ba:77:fd:ae:1f:ec:fc:bf:a1:ff:a9:96:d9:f0:a3:bc:93: f8:1a:43:df:f0:d1:ed:e2:68:9d:be:78:92:a8:14:69:53:fc: af:75:a6:34:77:ec:4e:ee:79:9e:e1:db:f5:4d:ba:98:ef:f7: 7b:8b:75:e6:c5:3c:c6:40:da:c7:63:2d:f8:08:f6:89:46:cc: 1e:54:61:48:d0:f6:2a:4b:60:fe:a9:f3:b1:59:2a:9c:8b:68: 24:4c:0c:c6:46:d9:ce:ec:23:8c:21:df:d1:5a:36:9f:cf:92: 93:e6:67:d8:c4:b2:28:1b:37:72:c0:6e:f4:4d:ac:91:8d:13: d5:95:9d:53:a1:98:33:a7:fc:de:29:91:e9:64:8d:c7:ec:1a: e7:63:ab:af:9c:6a:08:55:30:12:97:1c:d8:7d:c1:cf:13:c1: a3:1f:3f:4e:11:7c:05:59:17:b6:3e:f0:b3:d4:2f:f3:8b:eb: 00:ac:87:2b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDCP6HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 NDRkYzRmMDNlNGVkYjFjNDc4MDBhN2YyMmJhMTJmY2I1YmU5YmYwHhcNMjEwMzI0 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0OTJjMzJlZTc0YjM1 M2ZmMGM1ZDQzMGVkMzM0N2I5YmYyMDQ4MmViMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuDcQ35RETEBYT1oMzcNnmDHNeYgncqEWI2eHKb95v+WLXW5p 3Toc4Kmxcfz/+/OXfTqzFN9lrHCrhw4RHXhkKJWUB8wHaXkdYcyniKW0VXX/trOO 672PA5fTBfrFjkvzj69/aAxWX1abNy/cvdagbQyeyxTT3MO7SwrPzhQV5P9WaCvP Za9+tj6qgYVJMY0PtlgbKGRMO5kIyyXXOHLIkMGgYFLgy60GccGIPnR5cdtcUTJK mbAjQbSaQlB+LxDVe3SIyCQS5vwlJjeDqPWQ5/IO+a+OPdaliYI3tH1HVZg9GyZQ 1fjTNtiQOfg72SjNvIqj6yBYtSCV4wbTOUScbwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMpA+hHCkGSqLdiijraEt8Ta6QWTMB8GA1UdIwQYMBaAFD0Vmhv4RTAlyfmv HGwbgEW1VVKuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY0NGRj NGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTliZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2FlMjNlMTgtZDA2NC00MzIzLWJiYzUtODc4YWUx NmUxOGQzLzQ5MmMzMmVlNzRiMzUzZmYwYzVkNDMwZWQzMzQ3YjliZjIwNDgyZWIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83YWUyM2UxOC1kMDY0LTQzMjMtYmJjNS04Nzhh ZTE2ZTE4ZDMvZDY0NGRjNGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTli Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIDJFDANBgkqhkiG9w0BAQsFAAOCAQEAAmBHPzgJBXWP8ony G1fAA6zmuuOHogUPtZR8TFDEETYOA5o/dpYkqZYlAvIyGnF6oUucY3fY7h4gIqoL bHA9vOe8YREZGdHV6Lp3/a4f7Py/of+pltnwo7yT+BpD3/DR7eJonb54kqgUaVP8 r3WmNHfsTu55nuHb9U26mO/3e4t15sU8xkDax2Mt+Aj2iUbMHlRhSND2Kktg/qnz sVkqnItoJEwMxkbZzuwjjCHf0Vo2n8+Sk+Zn2MSyKBs3csBu9E2skY0T1ZWdU6GY M6f83imR6WSNx+wa52Orr5xqCFUwEpcc2H3BzxPBox8/ThF8BVkXtj7ws9Qv84vr AKyHKw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:38 2023 by rpki-client on console-fra.rpki-client.org