$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa File: f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa (raw, json) Hash identifier: xiKHaxHfj7k+YtkjtiQUGYhE7DzTSsx1fMDKwqN4us0= Subject key identifier: C3:16:0D:78:B7:9A:3E:B8:AE:C8:A7:2B:6B:90:74:D5:0F:83:BF:05 Certificate issuer: /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Certificate serial: 03FC5D Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa Signing time: Wed 24 Mar 2021 14:32:10 +0000 ROA not before: Wed 24 Mar 2021 14:32:10 +0000 ROA not after: Tue 24 Mar 2026 14:32:10 +0000 asID: 265740 IP address blocks: 128.201.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261213 (0x3fc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf Validity Not Before: Mar 24 14:32:10 2021 GMT Not After : Mar 24 14:32:10 2026 GMT Subject: CN=f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:c1:2c:98:9c:8b:fb:98:8c:25:df:65:ab: c5:f5:c8:a8:ce:d0:60:62:8f:03:d8:2a:5b:a7:31: 02:63:7a:79:e1:3e:1b:fd:31:b4:41:ea:2f:94:2c: 4f:f1:7b:30:82:1b:37:3d:72:fe:db:83:0b:dd:7c: c5:99:5e:e0:d4:d6:cd:08:b0:b5:12:cc:2c:99:e9: 61:09:2e:e5:29:df:61:fe:bc:7d:79:1b:8e:0d:06: bd:bf:60:02:e4:c7:3b:7e:78:3d:00:5c:63:b7:ee: 21:ad:4f:e3:76:a3:a7:b2:04:a0:22:e7:fd:cf:ce: 6e:cf:ae:93:88:40:a5:10:26:d5:7b:d3:59:35:ad: f7:f7:52:71:c6:87:c0:80:46:52:4f:ee:c0:5b:ee: ca:ee:94:43:e9:63:30:dd:1e:1d:90:56:f7:20:b6: 4f:4a:f9:a4:45:4a:12:7b:3f:4d:f8:54:59:eb:2f: 62:d9:c2:94:9f:ab:83:28:0e:d8:96:19:f4:54:1a: c4:a8:f2:fb:c9:75:f2:9b:33:a9:51:a8:f6:bd:59: f7:ae:95:14:7e:62:28:b2:ac:f8:9a:82:f4:6e:b7: fa:12:58:63:02:f8:8d:88:39:21:48:eb:1c:03:aa: 63:9b:13:79:b4:95:5e:7c:fb:06:4a:a9:4a:fb:e3: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:16:0D:78:B7:9A:3E:B8:AE:C8:A7:2B:6B:90:74:D5:0F:83:BF:05 X509v3 Authority Key Identifier: keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.22.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:f3:80:eb:2a:6e:4c:62:85:e0:ed:fa:c2:29:cc:d6:9e:eb: b6:d0:40:0a:30:f3:cc:5a:4f:56:5e:c9:d5:cd:77:c6:5b:5a: b0:99:f8:24:93:8f:8b:ac:c5:e1:bf:e3:24:65:9b:9f:40:5d: 0e:83:a7:40:0e:a1:d3:04:36:f6:96:4b:f5:2c:ca:98:42:88: 33:55:78:04:a9:84:0e:f1:fb:64:98:82:a2:87:51:44:71:1a: 3c:06:32:5f:b9:6f:0c:25:e6:85:9b:bd:01:8e:a7:17:73:89: a2:f6:eb:a8:13:4a:85:b0:b2:d7:e9:c7:0d:69:27:1f:08:c5: 60:e2:4c:46:82:82:23:12:38:6c:e6:a0:65:8c:e8:13:ab:e7: 75:73:8b:d0:a4:e2:5d:a5:40:6d:01:a2:50:79:05:db:ba:bc: eb:1f:c6:e3:e3:65:e9:1d:48:86:9d:c8:96:1a:94:82:43:77: e2:f9:c0:46:46:fb:6d:ea:bc:02:b4:68:98:9e:a3:03:7a:1e: 20:e8:5f:6c:e8:2d:68:fd:f7:e0:4d:8c:e8:4a:ba:0d:28:4f: 9a:cc:ff:c1:d1:17:a9:3f:fe:90:a9:09:ff:77:d7:8f:68:29: c3:87:e8:3a:17:d0:74:93:15:06:2a:40:0c:0d:96:40:d0:2e: 44:29:87:96 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDA/xdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 NDRkYzRmMDNlNGVkYjFjNDc4MDBhN2YyMmJhMTJmY2I1YmU5YmYwHhcNMjEwMzI0 MTQzMjEwWhcNMjYwMzI0MTQzMjEwWjAzMTEwLwYDVQQDEyhmMGE0NGRiOWViYTA3 Yzk0ZjE3YzFjMGQ5ZWUxM2I0NWJmNmQzNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAi1zBLJici/uYjCXfZavF9cioztBgYo8D2CpbpzECY3p54T4b /TG0QeovlCxP8Xswghs3PXL+24ML3XzFmV7g1NbNCLC1EswsmelhCS7lKd9h/rx9 eRuODQa9v2AC5Mc7fng9AFxjt+4hrU/jdqOnsgSgIuf9z85uz66TiEClECbVe9NZ Na3391JxxofAgEZST+7AW+7K7pRD6WMw3R4dkFb3ILZPSvmkRUoSez9N+FRZ6y9i 2cKUn6uDKA7Ylhn0VBrEqPL7yXXymzOpUaj2vVn3rpUUfmIosqz4moL0brf6Elhj AviNiDkhSOscA6pjmxN5tJVefPsGSqlK++MKpQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMMWDXi3mj64rsinK2uQdNUPg78FMB8GA1UdIwQYMBaAFD0Vmhv4RTAlyfmv HGwbgEW1VVKuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY0NGRj NGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTliZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2FlMjNlMTgtZDA2NC00MzIzLWJiYzUtODc4YWUx NmUxOGQzL2YwYTQ0ZGI5ZWJhMDdjOTRmMTdjMWMwZDllZTEzYjQ1YmY2ZDM1MTQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83YWUyM2UxOC1kMDY0LTQzMjMtYmJjNS04Nzhh ZTE2ZTE4ZDMvZDY0NGRjNGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTli Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIDJFjANBgkqhkiG9w0BAQsFAAOCAQEAf/OA6ypuTGKF4O36 winM1p7rttBACjDzzFpPVl7J1c13xltasJn4JJOPi6zF4b/jJGWbn0BdDoOnQA6h 0wQ29pZL9SzKmEKIM1V4BKmEDvH7ZJiCoodRRHEaPAYyX7lvDCXmhZu9AY6nF3OJ ovbrqBNKhbCy1+nHDWknHwjFYOJMRoKCIxI4bOagZYzoE6vndXOL0KTiXaVAbQGi UHkF27q86x/G4+Nl6R1Ihp3IlhqUgkN34vnARkb7beq8ArRomJ6jA3oeIOhfbOgt aP334E2M6Eq6DShPmsz/wdEXqT/+kKkJ/3fXj2gpw4foOhfQdJMVBipADA2WQNAu RCmHlg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:49 2023 by rpki-client on console-ams.rpki-client.org