$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa File: 1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa (raw, json) Hash identifier: mvbkrs167nGAk3iWXejgyonDwvynIY0VBWpQDMz5e78= Subject key identifier: 98:A4:7E:CA:8C:E9:E6:9D:82:F4:55:26:4C:2F:1B:02:F1:FD:2A:99 Certificate issuer: /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901 Certificate serial: 118168 Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa Signing time: Thu 09 Dec 2021 02:44:59 +0000 ROA not before: Wed 08 Dec 2021 03:00:00 +0000 ROA not after: Fri 08 Dec 2023 03:00:00 +0000 asID: 267871 IP address blocks: 45.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147240 (0x118168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901 Validity Not Before: Dec 8 03:00:00 2021 GMT Not After : Dec 8 03:00:00 2023 GMT Subject: CN=1d53e0aa0783f63607c5c18d953d6094aaf4f061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:a0:b4:c1:72:76:62:f7:a4:a9:68:97:22: be:2c:b8:a1:25:86:02:9b:b5:3c:8b:31:30:21:e0: 99:c9:b0:8f:24:3d:58:e0:a0:e7:d4:3d:a8:6e:7c: c2:8f:b5:52:aa:c8:c4:5e:b7:30:2b:1b:48:10:4c: f9:b5:29:df:e5:e1:ab:29:04:ce:42:26:e9:68:96: 9e:4c:48:3b:a9:9b:03:f9:03:04:2f:dc:55:00:4f: a3:92:74:92:1a:6b:5f:b2:e0:97:0b:2a:a7:5b:4f: 85:19:85:de:90:96:e9:88:34:b0:dd:93:95:ce:94: 28:49:cd:47:2a:15:1d:62:08:d5:2f:af:8f:fc:dd: 90:ee:f0:da:58:5b:a2:b2:36:5f:5b:37:9d:28:42: ab:bc:6e:07:4c:9d:e1:46:9f:dc:14:5a:db:32:ec: 54:d2:ec:3c:bf:8b:3f:4d:d7:af:5e:ce:35:b5:0a: 4c:76:99:6a:3d:0f:d3:f4:e5:f8:45:86:d3:55:44: 15:e1:e2:11:82:e3:a8:83:d7:e0:57:cb:02:cc:fc: a1:f8:30:e1:34:d4:21:3b:73:bd:96:a8:72:63:aa: f9:d9:50:ea:45:8e:29:4a:1c:d7:3d:91:19:93:03: 05:c6:c0:8a:c4:82:43:6d:32:ce:aa:db:cb:66:47: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A4:7E:CA:8C:E9:E6:9D:82:F4:55:26:4C:2F:1B:02:F1:FD:2A:99 X509v3 Authority Key Identifier: keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.23.0/24 Signature Algorithm: sha256WithRSAEncryption a7:21:26:93:02:1a:95:2f:c7:6f:d7:db:ac:90:84:b0:1e:e0: ed:d8:3e:12:50:ac:08:76:b4:72:61:70:d1:04:ff:1b:3c:15: 6d:b8:7c:18:c5:1e:21:87:23:40:95:50:62:63:ac:a3:8d:9f: e2:91:bb:fd:8a:6a:20:c4:95:67:c0:6d:a7:1e:74:98:62:9b: ce:24:e6:db:b7:51:5f:74:8a:51:74:91:d8:7d:b3:06:4d:b1: d2:b0:18:4a:54:13:8b:66:18:cc:a6:7a:f5:1e:fb:45:32:47: 52:48:27:04:9d:56:54:75:68:77:ec:d4:a2:05:20:10:71:c9: 42:5f:0f:59:e4:54:e0:ea:08:b3:e4:16:74:76:5e:3d:67:ad: 89:f3:70:0c:c1:b3:11:84:5c:c9:f7:ab:ae:86:ed:7b:78:11: 44:d2:49:65:a1:0f:53:6b:25:2e:b1:55:3d:e2:30:8d:ff:c5: 00:79:14:7d:e0:53:29:53:db:bb:42:dc:b7:8f:5c:94:ff:21: 92:41:0d:22:1a:3f:e6:5b:fe:60:7c:36:4b:15:26:3d:22:09: 7e:e9:0a:00:8a:43:10:a5:cc:44:fd:12:1b:29:8e:11:75:c1: 8a:5a:21:68:5d:fc:25:c2:6e:66:c2:16:b8:fb:2c:6d:3d:6e: a3:fa:b9:6b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDEYFoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh ZjY2MmM0OThjMGNiZDJiYjY4YjNlZjc0YjYwMmEyZDQ5NGQ5MDEwHhcNMjExMjA4 MDMwMDAwWhcNMjMxMjA4MDMwMDAwWjAzMTEwLwYDVQQDEygxZDUzZTBhYTA3ODNm NjM2MDdjNWMxOGQ5NTNkNjA5NGFhZjRmMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmOegtMFydmL3pKlolyK+LLihJYYCm7U8izEwIeCZybCPJD1Y 4KDn1D2obnzCj7VSqsjEXrcwKxtIEEz5tSnf5eGrKQTOQibpaJaeTEg7qZsD+QME L9xVAE+jknSSGmtfsuCXCyqnW0+FGYXekJbpiDSw3ZOVzpQoSc1HKhUdYgjVL6+P /N2Q7vDaWFuisjZfWzedKEKrvG4HTJ3hRp/cFFrbMuxU0uw8v4s/TdevXs41tQpM dplqPQ/T9OX4RYbTVUQV4eIRguOog9fgV8sCzPyh+DDhNNQhO3O9lqhyY6r52VDq RY4pShzXPZEZkwMFxsCKxIJDbTLOqtvLZkedewIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFJikfsqM6eadgvRVJkwvGwLx/SqZMB8GA1UdIwQYMBaAFLvRICWwSPa1rhX8 ULFUYG9SfKrgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFmNjYy YzQ5OGMwY2JkMmJiNjhiM2VmNzRiNjAyYTJkNDk0ZDkwMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOGFjY2M5NjgtMDdmMi00MGMzLWI4YTgtMTQ3ZTUy MDE1MGIyLzFkNTNlMGFhMDc4M2Y2MzYwN2M1YzE4ZDk1M2Q2MDk0YWFmNGYwNjEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84YWNjYzk2OC0wN2YyLTQwYzMtYjhhOC0xNDdl NTIwMTUwYjIvNGFmNjYyYzQ5OGMwY2JkMmJiNjhiM2VmNzRiNjAyYTJkNDk0ZDkw MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC2xFzANBgkqhkiG9w0BAQsFAAOCAQEApyEmkwIalS/Hb9fb rJCEsB7g7dg+ElCsCHa0cmFw0QT/GzwVbbh8GMUeIYcjQJVQYmOso42f4pG7/Ypq IMSVZ8Btpx50mGKbziTm27dRX3SKUXSR2H2zBk2x0rAYSlQTi2YYzKZ69R77RTJH UkgnBJ1WVHVod+zUogUgEHHJQl8PWeRU4OoIs+QWdHZePWetifNwDMGzEYRcyfer robte3gRRNJJZaEPU2slLrFVPeIwjf/FAHkUfeBTKVPbu0Lct49clP8hkkENIho/ 5lv+YHw2SxUmPSIJfukKAIpDEKXMRP0SGymOEXXBilohaF38JcJuZsIWuPssbT1u o/q5aw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:41 2023 by rpki-client on console-fra.rpki-client.org