$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/71041c21029499603d9bda8a8c3f5bade7ab13ed.roa File: 71041c21029499603d9bda8a8c3f5bade7ab13ed.roa (raw, json) Hash identifier: pdWlC9q5p9/3jT3jAx8BU6ROvft++4Kpy+Hfpx04IWg= Subject key identifier: 00:F5:4C:2D:8D:2C:10:E6:4C:33:B3:8C:39:C9:1F:27:3E:F6:BA:87 Certificate issuer: /CN=a7592b08126953b5ea8de3d431acbcc3fd5ebd54 Certificate serial: 0D44A9 Authority key identifier: 69:5A:A1:C4:C5:81:9D:6A:73:87:26:DD:D3:7C:21:F9:65:CC:FC:60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/71041c21029499603d9bda8a8c3f5bade7ab13ed.roa Signing time: Wed 24 Mar 2021 14:35:30 +0000 ROA not before: Wed 24 Mar 2021 14:35:30 +0000 ROA not after: Tue 24 Mar 2026 14:35:30 +0000 asID: 262215 IP address blocks: 179.60.240.0/22 maxlen: 24 186.159.112.0/22 maxlen: 24 2803:e000::/32 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.crl rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869545 (0xd44a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7592b08126953b5ea8de3d431acbcc3fd5ebd54 Validity Not Before: Mar 24 14:35:30 2021 GMT Not After : Mar 24 14:35:30 2026 GMT Subject: CN=71041c21029499603d9bda8a8c3f5bade7ab13ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:f7:63:b0:2d:c4:68:b9:ce:da:37:7b:11: 2d:ea:3b:16:64:68:62:a3:b4:79:93:11:bc:27:7c: 43:1c:1b:d8:95:f6:b7:2e:55:4c:44:b5:ab:92:3b: fe:54:af:69:49:c5:ff:79:ab:6a:af:ca:fe:e4:18: c8:92:d3:39:b3:fb:b3:e0:d4:40:3b:67:7c:d4:0b: 24:bf:52:a7:79:94:56:55:9a:8f:51:19:b6:16:da: 41:90:27:99:9c:0c:d8:09:7c:e7:4e:95:0b:e0:10: ab:97:47:44:d5:8b:22:76:7a:d9:9e:fb:13:95:81: 45:a0:8b:67:35:51:57:38:3a:cb:09:be:28:c6:12: c1:18:d5:28:8b:51:33:f1:4b:ed:d8:eb:19:31:ef: 28:1f:2a:18:10:cb:ef:51:76:2c:e0:2f:a2:c8:d7: 21:bd:95:92:69:ce:a0:ae:b6:c4:04:93:cd:7b:b9: 07:51:f2:fb:a4:24:19:da:bb:7d:a4:f7:62:91:a9: ee:2d:ca:bd:c0:2a:b9:7a:a0:91:fb:4a:7d:13:70: 0d:71:61:79:0e:af:5c:eb:7a:58:e4:ae:15:7c:53: 92:33:ca:71:12:f2:f2:b9:47:db:89:4a:b4:07:47: 5f:19:49:a7:2e:9a:24:e7:11:9f:38:f0:85:0a:12: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F5:4C:2D:8D:2C:10:E6:4C:33:B3:8C:39:C9:1F:27:3E:F6:BA:87 X509v3 Authority Key Identifier: keyid:69:5A:A1:C4:C5:81:9D:6A:73:87:26:DD:D3:7C:21:F9:65:CC:FC:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/71041c21029499603d9bda8a8c3f5bade7ab13ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.60.240.0/22 186.159.112.0/22 IPv6: 2803:e000::/32 Signature Algorithm: sha256WithRSAEncryption 04:ff:1d:02:1a:d3:c2:76:1d:31:38:b7:c7:df:72:b6:a1:66: f2:9b:15:d6:c2:75:9a:75:bb:b6:d0:9f:ed:27:b9:a3:30:9a: fb:ca:f1:a8:a6:a6:5c:f6:9b:1d:ca:3e:17:59:89:d1:26:a5: 87:05:ca:ab:15:e6:d9:e7:5c:94:dc:a1:8b:b6:5d:1c:0d:67: 68:0c:9c:96:86:ed:50:44:9c:68:2d:2e:e7:35:0f:db:62:6a: a5:05:1d:f4:71:70:84:b5:de:0d:1c:4d:13:b4:54:58:5f:cf: 14:f5:a7:58:c3:55:1f:20:e1:8c:21:92:1f:ab:df:ab:82:dd: cd:85:29:93:17:67:20:a9:92:d5:28:80:13:53:8e:52:b0:b3: 8d:3b:4c:fd:a5:f9:59:fd:fd:df:fb:4b:fd:11:c4:7c:2a:65: 92:fc:71:e5:76:a9:8d:35:a9:96:6a:9b:2f:6f:e6:16:e2:52: 06:63:a7:fd:18:3f:2a:af:8b:29:e1:c5:2f:bd:98:51:b5:09: 25:16:48:df:14:13:0e:62:8f:6d:ba:da:0e:a7:e5:ff:a3:ff: f0:ab:81:32:8c:fd:91:43:88:50:71:a2:f0:8e:ac:52:44:85: e0:2b:f8:4b:83:d7:45:e8:68:80:4b:35:07:fc:e7:98:2f:c3: 09:f0:9f:19 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDDUSpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3 NTkyYjA4MTI2OTUzYjVlYThkZTNkNDMxYWNiY2MzZmQ1ZWJkNTQwHhcNMjEwMzI0 MTQzNTMwWhcNMjYwMzI0MTQzNTMwWjAzMTEwLwYDVQQDEyg3MTA0MWMyMTAyOTQ5 OTYwM2Q5YmRhOGE4YzNmNWJhZGU3YWIxM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnGP3Y7AtxGi5zto3exEt6jsWZGhio7R5kxG8J3xDHBvYlfa3 LlVMRLWrkjv+VK9pScX/eatqr8r+5BjIktM5s/uz4NRAO2d81Askv1KneZRWVZqP URm2FtpBkCeZnAzYCXznTpUL4BCrl0dE1YsidnrZnvsTlYFFoItnNVFXODrLCb4o xhLBGNUoi1Ez8Uvt2OsZMe8oHyoYEMvvUXYs4C+iyNchvZWSac6grrbEBJPNe7kH UfL7pCQZ2rt9pPdikanuLcq9wCq5eqCR+0p9E3ANcWF5Dq9c63pY5K4VfFOSM8px EvLyuUfbiUq0B0dfGUmnLpok5xGfOPCFChKt3QIDAQABo4ICcDCCAmwwHQYDVR0O BBYEFAD1TC2NLBDmTDOzjDnJHyc+9rqHMB8GA1UdIwQYMBaAFGlaocTFgZ1qc4cm 3dN8IfllzPxgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc1OTJi MDgxMjY5NTNiNWVhOGRlM2Q0MzFhY2JjYzNmZDVlYmQ1NC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODA0NTQ3MGEtMGVkZS00ODZlLWE1NzktMmJhYjcz MGYwZmQ1LzcxMDQxYzIxMDI5NDk5NjAzZDliZGE4YThjM2Y1YmFkZTdhYjEzZWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84MDQ1NDcwYS0wZWRlLTQ4NmUtYTU3OS0yYmFi NzMwZjBmZDUvYTc1OTJiMDgxMjY5NTNiNWVhOGRlM2Q0MzFhY2JjYzNmZDVlYmQ1 NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEArM88AMEArqfcDANBAIAAjAHAwUAKAPgADANBgkqhkiG9w0B AQsFAAOCAQEABP8dAhrTwnYdMTi3x99ytqFm8psV1sJ1mnW7ttCf7Se5ozCa+8rx qKamXPabHco+F1mJ0SalhwXKqxXm2edclNyhi7ZdHA1naAyclobtUEScaC0u5zUP 22JqpQUd9HFwhLXeDRxNE7RUWF/PFPWnWMNVHyDhjCGSH6vfq4LdzYUpkxdnIKmS 1SiAE1OOUrCzjTtM/aX5Wf393/tL/RHEfCplkvxx5XapjTWplmqbL2/mFuJSBmOn /Rg/Kq+LKeHFL72YUbUJJRZI3xQTDmKPbbraDqfl/6P/8KuBMoz9kUOIUHGi8I6s UkSF4Cv4S4PXRehogEs1B/znmC/DCfCfGQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:50 2023 by rpki-client on console-ams.rpki-client.org