$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/3994b1831583d827a9d850705bf567a5192d9fc6.roa File: 3994b1831583d827a9d850705bf567a5192d9fc6.roa (raw, json) Hash identifier: yS7ReZRQehb8mhKZKbLVjAj5HrTa5wqi7PHHVmuEwuQ= Subject key identifier: B1:2F:78:DD:9C:BD:40:6B:A9:D8:90:4C:9A:48:89:EF:0C:2E:43:93 Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357 Certificate serial: 14D5B7 Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/3994b1831583d827a9d850705bf567a5192d9fc6.roa Signing time: Thu 15 Dec 2022 02:55:24 +0000 ROA not before: Wed 14 Dec 2022 02:55:15 +0000 ROA not after: Sun 15 Dec 2024 02:55:15 +0000 asID: 52398 IP address blocks: 168.121.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365431 (0x14d5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357 Validity Not Before: Dec 14 02:55:15 2022 GMT Not After : Dec 15 02:55:15 2024 GMT Subject: CN=3994b1831583d827a9d850705bf567a5192d9fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:22:d5:e2:2b:43:2d:5e:be:56:63:7a:6b: cc:b6:68:bf:87:22:33:12:c7:f3:11:94:dd:1d:6a: 6c:6d:fd:aa:54:0a:dd:45:09:a0:04:c7:9b:09:c2: b2:a3:f0:01:cf:a9:4f:64:4c:0d:ad:19:50:09:70: 51:7b:91:98:41:9f:67:ca:aa:b3:7d:3c:66:0a:a8: 29:12:89:ce:75:3a:a7:0a:9f:75:96:8c:5c:f7:99: 5c:23:2b:df:5f:27:33:4b:cb:cb:61:35:11:4d:5a: ff:4d:85:71:c5:21:c0:20:a1:33:23:35:d4:cc:b3: d3:8b:40:20:e8:e7:64:c2:32:be:70:e7:b3:47:2e: 37:cb:1d:21:54:b6:be:76:6a:5a:28:c5:c6:0d:d0: 20:af:55:4b:a0:e0:4d:9c:60:a5:0e:4c:7e:1d:01: 61:a9:cb:5d:ec:56:bd:06:50:61:d2:e2:3b:c0:bb: 80:83:72:35:e1:f2:54:e3:67:f5:c6:18:64:d2:61: 49:cc:c7:33:7d:0e:cb:b7:42:8c:f8:e8:75:c7:65: d0:1c:f1:2b:e8:a7:8d:28:7f:5a:f7:cd:75:e4:55: ec:47:73:f6:06:1b:86:f0:2e:f3:fb:ce:5f:3a:3e: 7b:9c:3b:42:b0:72:b8:e8:ba:0a:73:6f:dc:95:c6: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:78:DD:9C:BD:40:6B:A9:D8:90:4C:9A:48:89:EF:0C:2E:43:93 X509v3 Authority Key Identifier: keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/3994b1831583d827a9d850705bf567a5192d9fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.86.0/24 Signature Algorithm: sha256WithRSAEncryption 65:36:78:93:87:37:a3:cd:15:6e:cb:63:74:5c:6d:cf:41:52: 0e:93:3d:6e:41:66:5f:2a:60:04:72:9d:91:e0:bc:a0:76:2f: a9:2a:1f:ea:2e:ca:2f:c1:9f:dc:4f:cf:cf:d3:b5:2b:6e:8b: 94:98:21:c9:28:ee:cb:e5:03:21:69:9e:4d:9f:70:4d:d8:cc: eb:df:a3:6f:d2:6e:56:f8:71:97:b9:08:6f:b8:18:2f:7b:35: 5f:af:f8:4d:e2:5b:0b:9a:47:fe:5e:28:03:7b:a9:b1:ed:d7: ab:84:a6:66:24:da:a9:90:a8:ac:cc:8c:55:d1:30:43:44:ec: 93:59:7b:30:ef:a0:31:72:c8:9f:e7:e8:4c:14:b6:8f:69:4f: 7d:cc:56:36:ac:2d:16:19:49:f2:90:30:6f:0b:62:1b:6c:f7: 66:5b:57:e7:07:23:2d:77:8d:84:17:dc:64:23:6f:ac:f3:5c: bd:b1:6a:c7:21:fb:5e:69:bc:ac:d8:28:74:f2:a1:30:c7:66: 88:8b:ed:f9:41:7d:90:07:49:df:53:59:4c:4e:d6:4c:56:e5: b9:16:05:db:83:2b:7a:c7:d8:48:bc:23:d4:ad:f7:25:ee:f5: 34:e8:d9:b4:49:20:c8:75:3d:a4:db:67:75:2b:59:d0:99:be: 6f:8a:eb:e7 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDFNW3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi M2E0YWNlYTY0YjE3NDA4MWNkYWJiYjAwN2Q2Y2QwM2QyYTczNTcwHhcNMjIxMjE0 MDI1NTE1WhcNMjQxMjE1MDI1NTE1WjAzMTEwLwYDVQQDEygzOTk0YjE4MzE1ODNk ODI3YTlkODUwNzA1YmY1NjdhNTE5MmQ5ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArowi1eIrQy1evlZjemvMtmi/hyIzEsfzEZTdHWpsbf2qVArd RQmgBMebCcKyo/ABz6lPZEwNrRlQCXBRe5GYQZ9nyqqzfTxmCqgpEonOdTqnCp91 loxc95lcIyvfXyczS8vLYTURTVr/TYVxxSHAIKEzIzXUzLPTi0Ag6OdkwjK+cOez Ry43yx0hVLa+dmpaKMXGDdAgr1VLoOBNnGClDkx+HQFhqctd7Fa9BlBh0uI7wLuA g3I14fJU42f1xhhk0mFJzMczfQ7Lt0KM+Oh1x2XQHPEr6KeNKH9a98115FXsR3P2 BhuG8C7z+85fOj57nDtCsHK46LoKc2/clcZHBwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFLEveN2cvUBrqdiQTJpIie8MLkOTMB8GA1UdIwQYMBaAFOga64KwcVANZv00 mroTr8D/AYQUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzYTRh Y2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1Ny5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOGRmM2U5NGYtYjNjYy00ZTY0LThlNTktN2U4NTMy MjI5MWQyLzM5OTRiMTgzMTU4M2Q4MjdhOWQ4NTA3MDViZjU2N2E1MTkyZDlmYzYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84ZGYzZTk0Zi1iM2NjLTRlNjQtOGU1OS03ZTg1 MzIyMjkxZDIvYWIzYTRhY2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1 Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKh5VjANBgkqhkiG9w0BAQsFAAOCAQEAZTZ4k4c3o80Vbstj dFxtz0FSDpM9bkFmXypgBHKdkeC8oHYvqSof6i7KL8Gf3E/Pz9O1K26LlJghySju y+UDIWmeTZ9wTdjM69+jb9JuVvhxl7kIb7gYL3s1X6/4TeJbC5pH/l4oA3upse3X q4SmZiTaqZCorMyMVdEwQ0Tsk1l7MO+gMXLIn+foTBS2j2lPfcxWNqwtFhlJ8pAw bwtiG2z3ZltX5wcjLXeNhBfcZCNvrPNcvbFqxyH7Xmm8rNgodPKhMMdmiIvt+UF9 kAdJ31NZTE7WTFbluRYF24MresfYSLwj1K33Je71NOjZtEkgyHU9pNtndStZ0Jm+ b4rr5w== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:56 2023 by rpki-client on console-ams.rpki-client.org