$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/6be576376c9808d644c582cc6e2496a0a82d0a94.roa File: 6be576376c9808d644c582cc6e2496a0a82d0a94.roa (raw, json) Hash identifier: gYRKpegUU5rHDmSHL2JsCXZ0BfAsBwZiWYlHtRHjFzY= Subject key identifier: 2E:A0:17:BA:62:AF:EF:3C:33:19:80:72:59:79:EB:6C:70:9C:F2:A7 Certificate issuer: /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Certificate serial: 03FE89 Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/6be576376c9808d644c582cc6e2496a0a82d0a94.roa Signing time: Wed 24 Mar 2021 14:32:10 +0000 ROA not before: Wed 24 Mar 2021 14:32:10 +0000 ROA not after: Tue 24 Mar 2026 14:32:10 +0000 asID: 265740 IP address blocks: 128.201.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261769 (0x3fe89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Validity Not Before: Mar 24 14:32:10 2021 GMT Not After : Mar 24 14:32:10 2026 GMT Subject: CN=6be576376c9808d644c582cc6e2496a0a82d0a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:8f:b5:e9:0b:13:93:9c:8f:85:91:de:93: 65:5a:1d:28:3e:36:2e:6e:32:de:9b:32:ef:b8:46: 88:6f:7c:97:85:f6:ed:be:1f:2e:08:c0:67:7d:06: e1:8f:f8:9c:f7:6c:c4:1b:16:bc:4d:3f:6f:16:24: 46:3a:e8:46:f6:91:82:1d:7e:7c:e2:53:2c:53:36: e5:fd:7c:2a:84:e4:c5:cd:99:bc:13:15:1b:5b:a0: e4:ee:7e:77:d8:db:c8:96:48:f8:19:11:c3:91:f1: 5a:95:c8:7b:bc:91:5d:f1:b8:70:74:c6:52:f4:dd: 8c:12:92:12:7f:20:11:6c:a3:f2:53:a3:f6:f2:9d: 51:13:cd:cd:a7:f0:8f:7b:dc:b0:c7:8b:04:dd:b9: 25:af:33:73:d1:39:5e:93:8a:a7:f9:7e:7d:3d:3b: f1:3d:99:30:59:b3:5e:25:0b:53:83:ab:09:54:03: 6c:64:74:5b:24:f7:59:73:70:53:8c:eb:2b:4f:42: e1:3a:bb:7d:e7:44:7b:b5:01:e2:c3:8a:ee:d3:5c: b3:0f:b4:e1:28:ad:78:60:3c:7b:c0:f6:cc:0b:fa: 92:a8:93:d2:17:3b:56:e5:90:d7:46:13:bd:b4:30: 13:2f:22:85:77:fa:50:95:d0:3c:b3:1a:12:18:4d: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:17:BA:62:AF:EF:3C:33:19:80:72:59:79:EB:6C:70:9C:F2:A7 X509v3 Authority Key Identifier: keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/6be576376c9808d644c582cc6e2496a0a82d0a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.21.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:1b:0e:bd:31:d8:3c:29:e3:fb:08:4d:70:22:58:b8:eb:d5: 27:50:77:54:6e:80:e4:75:14:3b:38:3c:68:6f:37:7f:dc:c5: 43:f5:41:da:82:7a:23:0b:a8:61:9d:ab:99:13:13:2b:74:d9: ee:cb:67:7d:15:3a:8b:01:4a:b2:2c:c3:9e:ce:2e:0a:49:f4: 8a:1d:c3:2e:b1:5c:a6:dc:2a:60:4c:a6:b6:2d:5e:34:86:3e: 9a:b1:f9:50:7b:c4:2d:9e:65:5b:46:ce:56:c7:c4:13:90:36: 83:b6:00:04:40:51:aa:dd:a2:7e:96:45:75:c9:47:b0:c0:44: cf:20:15:16:c0:ef:f0:0c:b5:33:00:52:76:14:12:71:06:a0: 5d:97:2b:c7:bd:ec:bb:d8:87:b9:ac:66:e1:54:e1:dd:51:0b: 5c:43:00:7d:b6:a7:73:d3:ff:99:50:89:3c:de:e6:4f:d5:6e: 76:49:43:6c:88:06:2a:7d:e3:b1:25:5e:2a:e3:b9:5d:01:87: e9:97:38:de:fd:a0:bd:5a:41:ed:70:2e:4a:92:20:a8:93:c3: 39:f6:2a:74:8c:67:e0:bc:f8:f5:9d:b3:9a:39:fb:c8:d7:18: 24:79:bf:04:50:a7:d2:24:47:a9:df:f0:1d:5a:76:ea:b5:8c: 7f:05:9e:3d -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDA/6JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 NDRkYzRmMDNlNGVkYjFjNDc4MDBhN2YyMmJhMTJmY2I1YmU5YmYwHhcNMjEwMzI0 MTQzMjEwWhcNMjYwMzI0MTQzMjEwWjAzMTEwLwYDVQQDEyg2YmU1NzYzNzZjOTgw OGQ2NDRjNTgyY2M2ZTI0OTZhMGE4MmQwYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhAKPtekLE5Ocj4WR3pNlWh0oPjYubjLemzLvuEaIb3yXhfbt vh8uCMBnfQbhj/ic92zEGxa8TT9vFiRGOuhG9pGCHX584lMsUzbl/XwqhOTFzZm8 ExUbW6Dk7n532NvIlkj4GRHDkfFalch7vJFd8bhwdMZS9N2MEpISfyARbKPyU6P2 8p1RE83Np/CPe9ywx4sE3bklrzNz0Tlek4qn+X59PTvxPZkwWbNeJQtTg6sJVANs ZHRbJPdZc3BTjOsrT0LhOrt950R7tQHiw4ru01yzD7ThKK14YDx7wPbMC/qSqJPS FztW5ZDXRhO9tDATLyKFd/pQldA8sxoSGE1sPwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFC6gF7pir+88MxmAcll562xwnPKnMB8GA1UdIwQYMBaAFD0Vmhv4RTAlyfmv HGwbgEW1VVKuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY0NGRj NGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTliZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2FlMjNlMTgtZDA2NC00MzIzLWJiYzUtODc4YWUx NmUxOGQzLzZiZTU3NjM3NmM5ODA4ZDY0NGM1ODJjYzZlMjQ5NmEwYTgyZDBhOTQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83YWUyM2UxOC1kMDY0LTQzMjMtYmJjNS04Nzhh ZTE2ZTE4ZDMvZDY0NGRjNGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTli Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIDJFTANBgkqhkiG9w0BAQsFAAOCAQEAOxsOvTHYPCnj+whN cCJYuOvVJ1B3VG6A5HUUOzg8aG83f9zFQ/VB2oJ6IwuoYZ2rmRMTK3TZ7stnfRU6 iwFKsizDns4uCkn0ih3DLrFcptwqYEymti1eNIY+mrH5UHvELZ5lW0bOVsfEE5A2 g7YABEBRqt2ifpZFdclHsMBEzyAVFsDv8Ay1MwBSdhQScQagXZcrx73su9iHuaxm 4VTh3VELXEMAfbanc9P/mVCJPN7mT9VudklDbIgGKn3jsSVeKuO5XQGH6Zc43v2g vVpB7XAuSpIgqJPDOfYqdIxn4Lz49Z2zmjn7yNcYJHm/BFCn0iRHqd/wHVp26rWM fwWePQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:49 2023 by rpki-client on console-ams.rpki-client.org