$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/889aca0c75d25a3163a31e82c7f530783d2ddde9.roa File: 889aca0c75d25a3163a31e82c7f530783d2ddde9.roa (raw, json) Hash identifier: jlhUsqWKhdb1v3/VvtzbBTReqRMdk8HDdhlbXh86clo= Subject key identifier: 65:1A:F1:E1:E7:29:D4:96:8E:01:99:50:14:3C:68:40:F2:CC:EA:27 Certificate issuer: /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901 Certificate serial: 0CFC41 Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/889aca0c75d25a3163a31e82c7f530783d2ddde9.roa Signing time: Mon 31 May 2021 01:09:51 +0000 ROA not before: Sun 30 May 2021 03:00:00 +0000 ROA not after: Tue 30 May 2023 03:00:00 +0000 asID: 267871 IP address blocks: 45.177.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851009 (0xcfc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901 Validity Not Before: May 30 03:00:00 2021 GMT Not After : May 30 03:00:00 2023 GMT Subject: CN=889aca0c75d25a3163a31e82c7f530783d2ddde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:0c:4f:e9:ce:b1:36:06:98:82:ef:53:cd: f2:26:7e:4c:8f:33:0b:54:74:81:99:3c:5d:fb:1c: 45:b8:c0:1f:0e:0f:56:22:83:9e:8f:b3:2a:d2:c8: 84:01:9b:7b:a5:26:07:ee:12:0c:7a:f3:fe:8d:46: 31:a0:3b:3c:40:36:0e:dd:6e:96:88:b8:b5:3a:18: e7:82:37:e1:93:dd:ad:a9:ee:8a:07:ec:ca:bc:7e: 07:a8:7f:0a:31:6e:b5:58:56:51:1b:c7:37:34:06: 25:2c:6c:c6:ad:10:49:41:47:66:34:84:80:a6:f7: 1e:f5:41:16:73:1c:da:1d:1b:2b:45:0d:f0:42:4d: 94:bd:a2:30:1e:78:31:c5:9f:79:69:cd:5c:9e:49: a9:96:f6:62:a7:3d:ad:fb:fc:40:79:19:0a:e9:0e: e8:4e:fa:eb:48:a2:d3:3b:80:b9:56:74:07:4a:35: 9e:ef:df:3e:ac:c0:10:a0:bf:6b:a8:a6:6b:ea:85: ac:18:21:cf:0d:94:ac:c3:32:26:ed:ce:9b:ba:60: 38:36:5f:e1:fe:fa:dc:90:88:ec:77:7a:0f:4f:f0: 26:c7:3d:9b:53:98:57:93:a6:f1:d7:fa:34:b8:12: 0c:2a:85:9c:83:f6:27:f6:1c:9b:fc:34:60:2b:b6: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1A:F1:E1:E7:29:D4:96:8E:01:99:50:14:3C:68:40:F2:CC:EA:27 X509v3 Authority Key Identifier: keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/889aca0c75d25a3163a31e82c7f530783d2ddde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.20.0/23 Signature Algorithm: sha256WithRSAEncryption 66:b3:e5:1d:02:36:8e:8e:78:63:8e:d2:d4:e3:f9:79:89:3f: 2b:a9:4b:13:9f:74:81:b2:ff:40:7b:68:8b:7d:61:52:e5:d7: 62:a9:67:ec:4f:bb:b5:aa:ef:39:cd:63:98:3d:b0:38:13:d9: b3:03:d9:ac:48:a2:a6:a1:c8:c2:3f:3f:58:c4:50:c2:b0:6f: 14:ed:6b:99:82:9a:88:88:68:da:6b:7b:01:2d:35:0f:55:6c: 23:4b:9c:8d:e9:c6:9f:1a:82:31:98:d9:ac:81:b6:46:33:f5: e2:57:5b:93:97:89:da:0d:0c:94:7b:23:f0:17:d9:79:99:1b: 9c:99:bb:cf:a9:15:3d:d3:a2:b0:af:9f:3c:16:10:68:22:61: 89:02:c9:e5:28:44:79:ae:b6:48:b1:1e:d9:6e:80:6f:a4:8b: a6:3d:7c:ce:67:63:03:28:09:8d:52:33:8c:a7:52:dc:7c:8d: 18:10:1c:ab:64:d6:8b:10:71:fa:56:a9:47:8b:1e:04:25:d0: 10:31:0f:fc:c3:d4:54:b7:17:e6:25:be:7b:e5:64:10:18:63: d7:7e:a2:60:53:b8:49:1a:5b:45:68:f9:8f:b9:e2:85:87:41: aa:a3:53:5a:08:8a:bb:29:ea:6e:a0:dd:eb:99:ba:80:ce:1e: ba:80:22:0d -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDPxBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh ZjY2MmM0OThjMGNiZDJiYjY4YjNlZjc0YjYwMmEyZDQ5NGQ5MDEwHhcNMjEwNTMw MDMwMDAwWhcNMjMwNTMwMDMwMDAwWjAzMTEwLwYDVQQDEyg4ODlhY2EwYzc1ZDI1 YTMxNjNhMzFlODJjN2Y1MzA3ODNkMmRkZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsNEMT+nOsTYGmILvU83yJn5MjzMLVHSBmTxd+xxFuMAfDg9W IoOej7Mq0siEAZt7pSYH7hIMevP+jUYxoDs8QDYO3W6WiLi1Ohjngjfhk92tqe6K B+zKvH4HqH8KMW61WFZRG8c3NAYlLGzGrRBJQUdmNISApvce9UEWcxzaHRsrRQ3w Qk2UvaIwHngxxZ95ac1cnkmplvZipz2t+/xAeRkK6Q7oTvrrSKLTO4C5VnQHSjWe 798+rMAQoL9rqKZr6oWsGCHPDZSswzIm7c6bumA4Nl/h/vrckIjsd3oPT/Amxz2b U5hXk6bx1/o0uBIMKoWcg/Yn9hyb/DRgK7a+PQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFGUa8eHnKdSWjgGZUBQ8aEDyzOonMB8GA1UdIwQYMBaAFLvRICWwSPa1rhX8 ULFUYG9SfKrgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFmNjYy YzQ5OGMwY2JkMmJiNjhiM2VmNzRiNjAyYTJkNDk0ZDkwMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOGFjY2M5NjgtMDdmMi00MGMzLWI4YTgtMTQ3ZTUy MDE1MGIyLzg4OWFjYTBjNzVkMjVhMzE2M2EzMWU4MmM3ZjUzMDc4M2QyZGRkZTku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84YWNjYzk2OC0wN2YyLTQwYzMtYjhhOC0xNDdl NTIwMTUwYjIvNGFmNjYyYzQ5OGMwY2JkMmJiNjhiM2VmNzRiNjAyYTJkNDk0ZDkw MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAS2xFDANBgkqhkiG9w0BAQsFAAOCAQEAZrPlHQI2jo54Y47S 1OP5eYk/K6lLE590gbL/QHtoi31hUuXXYqln7E+7tarvOc1jmD2wOBPZswPZrEii pqHIwj8/WMRQwrBvFO1rmYKaiIho2mt7AS01D1VsI0ucjenGnxqCMZjZrIG2RjP1 4ldbk5eJ2g0MlHsj8BfZeZkbnJm7z6kVPdOisK+fPBYQaCJhiQLJ5ShEea62SLEe 2W6Ab6SLpj18zmdjAygJjVIzjKdS3HyNGBAcq2TWixBx+lapR4seBCXQEDEP/MPU VLcX5iW+e+VkEBhj136iYFO4SRpbRWj5j7nihYdBqqNTWgiKuynqbqDd65m6gM4e uoAiDQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:41 2023 by rpki-client on console-fra.rpki-client.org