$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa File: 238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa (raw, json) Hash identifier: cNIQMr1T9tDdHV6u+YH+IRJgV+vC8R/5cx0VZgc66UE= Subject key identifier: BF:31:CE:C9:9F:F2:24:85:01:24:7F:7E:D3:5D:7E:9A:8F:01:65:67 Certificate issuer: /CN=1ffa70be0f2939adf371127478487e627e9dcfa1 Certificate serial: 0D5C3E Authority key identifier: 22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa Signing time: Wed 24 Mar 2021 14:31:23 +0000 ROA not before: Wed 24 Mar 2021 14:31:23 +0000 ROA not after: Tue 24 Mar 2026 14:31:23 +0000 asID: 265658 IP address blocks: 45.4.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.crl rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 09:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875582 (0xd5c3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ffa70be0f2939adf371127478487e627e9dcfa1 Validity Not Before: Mar 24 14:31:23 2021 GMT Not After : Mar 24 14:31:23 2026 GMT Subject: CN=238e7605ce9b6c9b2b6dce543b4de1218880f85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:86:6e:28:b7:eb:17:b6:10:1f:3d:34:b9: 73:85:e2:80:13:7a:51:4b:b3:d4:d8:7f:ce:b5:82: 69:13:ea:2a:36:da:29:cd:ee:8f:7f:76:da:98:93: 67:09:83:c4:f5:02:5c:48:0e:a1:f1:6b:5f:0d:50: 5b:ee:ef:6a:92:09:51:69:b3:32:68:a1:e0:5e:f7: 07:62:ec:1c:8a:84:48:78:cc:db:b1:ce:4a:f3:ce: bb:2a:3f:6c:36:b8:e8:37:0a:8b:cd:10:6b:ba:28: a3:e5:b9:3d:1b:32:6f:a1:fc:ba:87:7e:53:90:82: 99:5e:7d:7d:a3:93:2d:29:e3:d6:3c:8a:22:9e:4f: af:e6:ac:c2:35:5a:a1:46:49:b4:e7:81:61:cf:08: f6:68:5c:6d:9d:a3:a2:3b:fa:03:c0:94:d4:c2:9a: bd:2b:00:32:7a:b6:bb:74:5f:52:00:d6:50:ba:79: 44:5b:90:c4:64:ac:e7:be:34:03:67:a9:74:6c:b8: 3e:a7:de:71:b9:11:33:a2:60:c1:7d:f2:e1:47:28: 1e:23:73:a0:51:ea:a1:ea:c0:16:8e:61:da:3a:5c: 76:f8:1b:32:76:be:eb:75:a3:d2:16:1a:c6:bb:a7: 05:fb:ca:1b:b9:3b:36:7f:43:16:a9:27:8c:ed:6b: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:31:CE:C9:9F:F2:24:85:01:24:7F:7E:D3:5D:7E:9A:8F:01:65:67 X509v3 Authority Key Identifier: keyid:22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.97.0/24 Signature Algorithm: sha256WithRSAEncryption 75:51:37:e7:d4:2d:fc:b2:ea:01:24:46:1b:74:1f:59:ab:6b: 1c:27:31:5e:30:af:4c:1e:2f:45:fc:81:16:27:12:04:9c:2a: e2:69:39:c1:e4:fb:6f:ce:ac:5e:8e:96:27:c4:f2:f8:65:43: 46:6f:cb:ca:eb:4b:3e:56:28:29:20:63:6f:0a:96:ad:45:10: 0e:7d:7f:fd:37:e7:4b:55:53:04:4f:be:ae:62:c2:a7:90:e8: 8d:77:03:5f:7e:d8:97:32:cd:16:98:57:8e:c5:78:ae:b3:29: 5a:97:a6:42:3a:2d:d6:49:9b:02:59:d9:23:16:c4:49:0d:88: b9:fa:88:96:f2:7d:ed:6e:bf:65:aa:3e:bf:c9:a6:83:13:7a: a2:a8:c4:e8:e2:8e:bf:b5:fe:49:66:4a:e0:7f:be:17:b3:90: 87:8e:f6:ab:8c:14:e7:af:bb:b5:dc:b4:80:41:c4:3f:bd:a3: e1:d7:4b:e9:be:62:41:3f:af:3b:ba:49:f1:e2:a7:30:c0:c3: 33:40:07:48:a7:7b:da:14:db:46:3e:a2:50:7f:41:6c:b2:86: 93:5a:07:2a:84:2c:eb:4d:32:4f:15:a9:5f:67:8a:80:6c:12: 83:7f:0f:7e:a6:ce:42:9b:13:6e:ce:52:c6:08:52:13:a5:0a: 0e:4a:5d:00 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDVw+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm ZmE3MGJlMGYyOTM5YWRmMzcxMTI3NDc4NDg3ZTYyN2U5ZGNmYTEwHhcNMjEwMzI0 MTQzMTIzWhcNMjYwMzI0MTQzMTIzWjAzMTEwLwYDVQQDEygyMzhlNzYwNWNlOWI2 YzliMmI2ZGNlNTQzYjRkZTEyMTg4ODBmODVmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnq6Gbii36xe2EB89NLlzheKAE3pRS7PU2H/OtYJpE+oqNtop ze6Pf3bamJNnCYPE9QJcSA6h8WtfDVBb7u9qkglRabMyaKHgXvcHYuwcioRIeMzb sc5K8867Kj9sNrjoNwqLzRBruiij5bk9GzJvofy6h35TkIKZXn19o5MtKePWPIoi nk+v5qzCNVqhRkm054Fhzwj2aFxtnaOiO/oDwJTUwpq9KwAyera7dF9SANZQunlE W5DEZKznvjQDZ6l0bLg+p95xuREzomDBffLhRygeI3OgUeqh6sAWjmHaOlx2+Bsy dr7rdaPSFhrGu6cF+8obuTs2f0MWqSeM7Wu9KQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFL8xzsmf8iSFASR/ftNdfpqPAWVnMB8GA1UdIwQYMBaAFCL4nRfFbyUA+XUH YUado+VHURrbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWZmYTcw YmUwZjI5MzlhZGYzNzExMjc0Nzg0ODdlNjI3ZTlkY2ZhMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODg0ZmJhMmUtMjU4OS00NjY5LWJmNDktZDMxNDVk YjY0NDJmLzIzOGU3NjA1Y2U5YjZjOWIyYjZkY2U1NDNiNGRlMTIxODg4MGY4NWYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84ODRmYmEyZS0yNTg5LTQ2NjktYmY0OS1kMzE0 NWRiNjQ0MmYvMWZmYTcwYmUwZjI5MzlhZGYzNzExMjc0Nzg0ODdlNjI3ZTlkY2Zh MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC0EYTANBgkqhkiG9w0BAQsFAAOCAQEAdVE359Qt/LLqASRG G3QfWatrHCcxXjCvTB4vRfyBFicSBJwq4mk5weT7b86sXo6WJ8Ty+GVDRm/LyutL PlYoKSBjbwqWrUUQDn1//TfnS1VTBE++rmLCp5DojXcDX37YlzLNFphXjsV4rrMp WpemQjot1kmbAlnZIxbESQ2IufqIlvJ97W6/Zao+v8mmgxN6oqjE6OKOv7X+SWZK 4H++F7OQh472q4wU56+7tdy0gEHEP72j4ddL6b5iQT+vO7pJ8eKnMMDDM0AHSKd7 2hTbRj6iUH9BbLKGk1oHKoQs600yTxWpX2eKgGwSg38PfqbOQpsTbs5SxghSE6UK DkpdAA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:41 2023 by rpki-client on console-fra.rpki-client.org