$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/d489aba1b8ee19cd74b660822d0cf56386929422.roa File: d489aba1b8ee19cd74b660822d0cf56386929422.roa (raw, json) Hash identifier: 0yAUMUlMRm5zYIRLmsd15cuxTAu2dPR664k6xYjAPwE= Subject key identifier: C9:02:F9:36:71:64:00:BA:2A:01:07:E2:2F:51:95:C6:21:59:EC:1C Certificate issuer: /CN=f04c66e47b3a8a66f313f04f07882f394b836678 Certificate serial: 0AF9E2 Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/d489aba1b8ee19cd74b660822d0cf56386929422.roa Signing time: Tue 24 Jan 2023 19:03:31 +0000 ROA not before: Tue 23 Nov 2021 03:00:00 +0000 ROA not after: Sat 25 Nov 2023 03:00:00 +0000 asID: 52235 IP address blocks: 190.99.64.0/22 maxlen: 25 190.99.68.0/22 maxlen: 25 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719330 (0xaf9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678 Validity Not Before: Nov 23 03:00:00 2021 GMT Not After : Nov 25 03:00:00 2023 GMT Subject: CN=d489aba1b8ee19cd74b660822d0cf56386929422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:0f:1b:97:1a:52:56:33:e9:6f:1f:92:2b: d2:4a:14:db:df:78:0c:fd:8c:b8:5f:2d:aa:a7:7f: 38:12:0e:6a:46:29:d0:bd:53:be:fb:81:a1:a1:02: 15:3d:0c:c9:29:84:f5:0c:e6:b4:e4:1f:db:29:af: 1d:13:3a:cb:de:83:8c:c8:e1:a8:c5:fa:5d:d7:38: c9:91:01:69:2b:7f:f5:f2:4a:df:56:83:16:3c:7a: 0f:03:43:75:3c:32:66:92:ed:43:81:52:6e:51:73: 4f:5c:55:95:b8:05:45:e8:19:f3:21:56:c5:75:12: 49:bc:86:3c:c2:74:d6:9f:b4:25:41:da:5d:ba:27: db:fd:87:5d:c1:63:1a:00:15:38:ae:cc:10:f3:03: 92:f6:82:b2:e4:e4:43:aa:02:18:48:3c:df:9e:f2: 53:1f:32:ae:19:75:47:6d:a4:f8:f8:b0:9f:23:db: cb:be:a1:81:15:d9:5f:53:1c:a2:71:66:51:39:88: 05:bb:55:d1:48:b6:7d:4d:91:f2:2e:ad:0a:b5:9c: 4d:6f:b6:aa:4f:93:c7:28:5b:d7:64:4a:bd:33:93: 3f:a7:6f:61:ba:c2:47:b2:e7:c6:41:5d:32:28:a2: a7:87:2e:b7:71:3b:1d:37:8d:ad:1c:f0:c9:97:54: d4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:02:F9:36:71:64:00:BA:2A:01:07:E2:2F:51:95:C6:21:59:EC:1C X509v3 Authority Key Identifier: keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/d489aba1b8ee19cd74b660822d0cf56386929422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.64.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:2f:09:61:77:0d:be:c9:6b:42:58:f3:dd:85:7e:e2:39:3f: 64:b4:f2:ee:a0:f7:14:74:46:6c:9b:4e:90:ad:bd:b9:0f:6b: 25:d9:ff:52:87:ff:46:4a:a3:2e:f9:57:87:67:2b:74:c3:17: db:43:fb:60:5b:6c:92:c6:b8:c7:e8:b4:93:8d:22:fb:e0:6d: 60:7e:7b:13:75:c4:47:2a:66:cf:c1:84:70:22:21:c3:d1:d3: 75:8b:69:e7:90:8c:ab:1f:f2:90:74:f9:4e:60:d6:e7:e2:ab: 35:f5:69:76:4c:ca:7b:d6:eb:c1:44:8d:7c:3f:e8:82:df:82: aa:39:89:c0:d8:93:9f:04:13:56:ed:ed:dc:bc:bd:38:41:a2: f4:b2:fc:fb:fe:d7:a7:4a:53:25:9a:e0:3e:1b:74:0f:9e:ca: 15:15:a6:d2:da:c7:ac:a5:df:b3:9e:44:e2:0e:5d:b3:6e:bd: c2:53:0d:a5:44:62:7b:58:4e:a5:71:fc:69:24:38:5b:61:0d: d4:e3:46:0e:42:71:46:29:51:f8:13:c5:43:eb:e0:e1:3f:7b: c5:9e:d6:c1:de:50:e4:3f:8c:2a:c7:4e:99:65:e7:48:d3:51: 74:16:e1:49:03:23:eb:d5:b7:59:84:a3:9b:d6:4d:ad:da:de: a0:a4:b1:fb -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDCvniMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw NGM2NmU0N2IzYThhNjZmMzEzZjA0ZjA3ODgyZjM5NGI4MzY2NzgwHhcNMjExMTIz MDMwMDAwWhcNMjMxMTI1MDMwMDAwWjAzMTEwLwYDVQQDEyhkNDg5YWJhMWI4ZWUx OWNkNzRiNjYwODIyZDBjZjU2Mzg2OTI5NDIyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlh0PG5caUlYz6W8fkivSShTb33gM/Yy4Xy2qp384Eg5qRinQ vVO++4GhoQIVPQzJKYT1DOa05B/bKa8dEzrL3oOMyOGoxfpd1zjJkQFpK3/18krf VoMWPHoPA0N1PDJmku1DgVJuUXNPXFWVuAVF6BnzIVbFdRJJvIY8wnTWn7QlQdpd uifb/YddwWMaABU4rswQ8wOS9oKy5ORDqgIYSDzfnvJTHzKuGXVHbaT4+LCfI9vL vqGBFdlfUxyicWZROYgFu1XRSLZ9TZHyLq0KtZxNb7aqT5PHKFvXZEq9M5M/p29h usJHsufGQV0yKKKnhy63cTsdN42tHPDJl1TUhwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMkC+TZxZAC6KgEH4i9RlcYhWewcMB8GA1UdIwQYMBaAFPAE74BYkFBLX3jz CW8qOyjFfPUvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA0YzY2 ZTQ3YjNhOGE2NmYzMTNmMDRmMDc4ODJmMzk0YjgzNjY3OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODUxZjM4NjAtY2VjMi00MDk2LTk4OGYtMDBlMDE1 NjU3MGFjL2Q0ODlhYmExYjhlZTE5Y2Q3NGI2NjA4MjJkMGNmNTYzODY5Mjk0MjIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84NTFmMzg2MC1jZWMyLTQwOTYtOTg4Zi0wMGUw MTU2NTcwYWMvZjA0YzY2ZTQ3YjNhOGE2NmYzMTNmMDRmMDc4ODJmMzk0YjgzNjY3 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA75jQDANBgkqhkiG9w0BAQsFAAOCAQEATC8JYXcNvslrQljz 3YV+4jk/ZLTy7qD3FHRGbJtOkK29uQ9rJdn/Uof/RkqjLvlXh2crdMMX20P7YFts ksa4x+i0k40i++BtYH57E3XERypmz8GEcCIhw9HTdYtp55CMqx/ykHT5TmDW5+Kr NfVpdkzKe9brwUSNfD/ogt+CqjmJwNiTnwQTVu3t3Ly9OEGi9LL8+/7Xp0pTJZrg Pht0D57KFRWm0trHrKXfs55E4g5ds269wlMNpURie1hOpXH8aSQ4W2EN1ONGDkJx RilR+BPFQ+vg4T97xZ7Wwd5Q5D+MKsdOmWXnSNNRdBbhSQMj69W3WYSjm9ZNrdre oKSx+w== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:53 2023 by rpki-client on console-ams.rpki-client.org