$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/4953b6f952152e20e02cb84601089c1ded8c43dc.roa File: 4953b6f952152e20e02cb84601089c1ded8c43dc.roa (raw, json) Hash identifier: dDBrRT6iHGOoLGLlB5C1+9FMHHNqHi19ZM2SoPAIjjE= Subject key identifier: 59:DA:E6:54:FF:2C:8E:F1:A2:EF:4A:37:10:04:4F:C4:64:4B:90:7D Certificate issuer: /CN=3ac089c221d0dbc870f89217c46c6a8f5a357910 Certificate serial: 090571 Authority key identifier: 7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/4953b6f952152e20e02cb84601089c1ded8c43dc.roa Signing time: Thu 17 Feb 2022 14:45:29 +0000 ROA not before: Thu 17 Feb 2022 03:00:00 +0000 ROA not after: Sat 17 Feb 2024 03:00:00 +0000 asID: 271843 IP address blocks: 45.162.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 08:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591217 (0x90571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910 Validity Not Before: Feb 17 03:00:00 2022 GMT Not After : Feb 17 03:00:00 2024 GMT Subject: CN=4953b6f952152e20e02cb84601089c1ded8c43dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:b6:f6:8f:36:ac:56:48:d8:ff:7e:fe:8f: 1e:a2:80:61:53:a8:43:15:8c:5b:0a:e0:07:14:ad: 18:ba:2f:fc:e9:55:5c:3d:f8:0b:a3:8a:12:ed:a2: 71:4e:01:40:94:63:f2:b6:77:1e:df:a3:5b:c3:72: 3c:2d:02:68:9f:68:ef:fb:a0:80:b1:a8:7b:d7:ab: 76:b3:88:80:86:8c:22:9f:bc:44:30:03:52:cf:64: 54:63:ac:3c:dc:07:f6:9a:40:70:7b:6e:6d:63:1d: 72:82:f9:72:df:b2:a3:fc:58:0f:e1:67:02:ce:2f: 2a:4a:45:12:20:f5:8a:2a:73:7a:b5:fe:31:05:5a: ae:ff:00:a8:06:62:37:40:9c:46:6d:88:43:4f:77: 3e:81:fb:a5:18:55:af:51:b6:31:79:f2:4a:43:78: 6e:ef:ec:8c:cd:44:d9:86:63:16:d2:84:a2:41:db: 1b:2c:41:42:e5:50:70:45:a1:ef:70:89:1f:ec:a4: 8a:26:12:30:75:14:44:e8:b3:d1:cb:ba:60:45:f1: a4:35:75:cb:cc:b3:20:76:ab:81:3b:2b:e9:79:5f: 01:97:42:25:1c:da:dd:f5:e6:49:62:c5:91:c4:b1: ce:f9:dd:2c:bc:b7:bb:63:57:fe:64:ae:b6:59:a7: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:E6:54:FF:2C:8E:F1:A2:EF:4A:37:10:04:4F:C4:64:4B:90:7D X509v3 Authority Key Identifier: keyid:7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/4953b6f952152e20e02cb84601089c1ded8c43dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.132.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:2a:6a:63:50:fb:33:9b:46:65:b4:b6:f3:21:f3:c5:18:1b: dc:72:89:e2:6d:88:df:38:f3:3d:6d:06:8e:56:92:87:5e:44: 65:36:ba:02:9a:20:6f:d1:e2:c0:be:6a:a4:69:35:6c:aa:0a: de:43:10:71:c5:89:3d:ea:aa:3a:52:4a:c7:26:f6:a2:38:ed: 75:43:86:1b:a5:91:c6:ae:9f:1e:dc:4f:83:11:92:a8:88:ad: 96:ca:b9:c6:bc:c2:f5:6b:1c:ad:9d:fb:28:0c:a5:90:39:f0: 13:ce:a5:b9:d3:28:78:99:d1:cb:7e:39:62:11:a7:1d:e7:84: b9:7e:9a:5c:6e:a4:44:52:64:9f:ee:bb:ae:eb:57:ce:b9:41: b2:5e:c7:34:e5:b2:f5:d1:52:53:78:6e:aa:18:d9:0a:ef:50: 19:88:39:79:fe:a3:59:ad:c3:e9:d1:43:9a:94:a6:fd:1e:f8: fd:1a:38:5e:79:93:5b:79:51:72:b5:aa:08:06:5f:b0:69:e5: 17:38:3b:49:4a:7f:ac:06:ed:fc:bb:97:61:2f:a8:6a:7b:e3: e3:17:fb:d0:d5:84:ac:ec:c9:b1:4d:0e:b3:b1:f8:f1:05:dd: 6d:92:89:f7:5c:37:e3:97:7d:57:bd:47:d4:7c:be:fd:8a:ae: 07:00:ae:76 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDCQVxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh YzA4OWMyMjFkMGRiYzg3MGY4OTIxN2M0NmM2YThmNWEzNTc5MTAwHhcNMjIwMjE3 MDMwMDAwWhcNMjQwMjE3MDMwMDAwWjAzMTEwLwYDVQQDEyg0OTUzYjZmOTUyMTUy ZTIwZTAyY2I4NDYwMTA4OWMxZGVkOGM0M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlDO29o82rFZI2P9+/o8eooBhU6hDFYxbCuAHFK0Yui/86VVc PfgLo4oS7aJxTgFAlGPytnce36Nbw3I8LQJon2jv+6CAsah716t2s4iAhowin7xE MANSz2RUY6w83Af2mkBwe25tYx1ygvly37Kj/FgP4WcCzi8qSkUSIPWKKnN6tf4x BVqu/wCoBmI3QJxGbYhDT3c+gfulGFWvUbYxefJKQ3hu7+yMzUTZhmMW0oSiQdsb LEFC5VBwRaHvcIkf7KSKJhIwdRRE6LPRy7pgRfGkNXXLzLMgdquBOyvpeV8Bl0Il HNrd9eZJYsWRxLHO+d0svLe7Y1f+ZK62WafaDQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFFna5lT/LI7xou9KNxAET8RkS5B9MB8GA1UdIwQYMBaAFH5Jecan8oje7Cev +/uhKFqPfhsRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2FjMDg5 YzIyMWQwZGJjODcwZjg5MjE3YzQ2YzZhOGY1YTM1NzkxMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODA2OGZhMTMtODg2MC00OTczLThhMmMtYmE4YTZh NWNkYzg0LzQ5NTNiNmY5NTIxNTJlMjBlMDJjYjg0NjAxMDg5YzFkZWQ4YzQzZGMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84MDY4ZmExMy04ODYwLTQ5NzMtOGEyYy1iYThh NmE1Y2RjODQvM2FjMDg5YzIyMWQwZGJjODcwZjg5MjE3YzQ2YzZhOGY1YTM1Nzkx MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAS2ihDANBgkqhkiG9w0BAQsFAAOCAQEAaypqY1D7M5tGZbS2 8yHzxRgb3HKJ4m2I3zjzPW0GjlaSh15EZTa6Apogb9HiwL5qpGk1bKoK3kMQccWJ PeqqOlJKxyb2ojjtdUOGG6WRxq6fHtxPgxGSqIitlsq5xrzC9WscrZ37KAylkDnw E86ludMoeJnRy345YhGnHeeEuX6aXG6kRFJkn+67rutXzrlBsl7HNOWy9dFSU3hu qhjZCu9QGYg5ef6jWa3D6dFDmpSm/R74/Ro4XnmTW3lRcrWqCAZfsGnlFzg7SUp/ rAbt/LuXYS+oanvj4xf70NWErOzJsU0Os7H48QXdbZKJ91w345d9V71H1Hy+/Yqu BwCudg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:39 2023 by rpki-client on console-fra.rpki-client.org