$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa File: f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa (raw, json) Hash identifier: iDQDQvcHTKln2Ju62lR65t54KnMR12upCDFT001gsfw= Subject key identifier: F3:A4:26:17:8B:A2:BB:5B:C7:68:63:73:07:3C:E8:85:14:6C:DB:F0 Certificate issuer: /CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6 Certificate serial: 0D4D35 Authority key identifier: B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa Signing time: Wed 24 Mar 2021 14:40:51 +0000 ROA not before: Wed 24 Mar 2021 14:40:50 +0000 ROA not after: Tue 24 Mar 2026 14:40:50 +0000 asID: 266839 IP address blocks: 181.191.232.0/22 maxlen: 24 2803:8820::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.crl rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871733 (0xd4d35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6 Validity Not Before: Mar 24 14:40:50 2021 GMT Not After : Mar 24 14:40:50 2026 GMT Subject: CN=f527866a991c5f0e0e58f5737b9132575b6ac9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:99:21:c0:9e:92:e1:61:2d:a4:e3:cb:7f:3e: 9d:98:29:2a:da:46:84:cf:8d:2d:fd:ab:81:11:b3: 4a:ce:cd:5f:3c:b4:9e:4a:93:85:1f:d8:ec:24:f9: 25:14:9f:3e:a2:b5:fe:39:ff:97:b7:6b:b5:2c:d6: dd:49:e3:b2:72:bb:9a:43:f6:ce:74:32:03:7f:ff: 99:5f:11:ed:83:77:3e:2a:2d:7c:7b:86:47:61:ce: 4d:6b:8b:00:bd:74:e7:97:78:46:99:fd:af:6d:92: a6:2d:9b:5a:3a:fa:41:8a:8e:b8:4c:9a:87:20:b4: 0e:6d:de:2b:8e:96:d2:c1:a1:08:ca:44:b7:98:30: 1e:f4:96:39:5b:f7:c8:69:7b:4c:77:86:18:36:75: fd:78:0a:12:99:ae:ad:49:a7:10:78:0a:4d:29:21: 0e:01:8b:6a:26:46:e1:e5:6a:1f:91:2d:7a:12:68: 5b:81:f0:48:34:62:fc:41:ca:ba:61:0d:df:fc:6a: 83:86:cf:0c:c7:73:0a:95:3b:59:b8:42:7e:8c:da: c4:47:53:25:b3:4c:a8:95:97:7e:6f:5d:44:98:14: 86:46:29:97:b3:90:e0:d9:5b:e6:98:22:bb:58:fe: d7:dd:e3:7b:cb:bb:01:c6:e5:2e:5e:95:30:eb:0c: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:26:17:8B:A2:BB:5B:C7:68:63:73:07:3C:E8:85:14:6C:DB:F0 X509v3 Authority Key Identifier: keyid:B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.191.232.0/22 IPv6: 2803:8820::/32 Signature Algorithm: sha256WithRSAEncryption 83:d6:40:f7:15:9b:6d:f8:0f:ea:f3:41:9a:8b:0d:61:d0:5b: 00:67:96:07:e7:6a:d5:c8:ef:ed:bf:e9:b7:ce:68:64:f7:dc: 6c:d3:6e:e2:a1:30:6c:28:d4:78:e6:59:0f:23:bc:d2:86:a1: 1f:76:7c:df:45:6d:3c:8e:8d:21:bb:11:3b:94:b1:78:4b:98: 87:db:71:f9:7c:7e:66:b1:88:0f:9a:fc:96:28:51:91:d2:06: d1:ba:85:84:90:84:01:3c:64:91:b1:0f:c2:50:44:a1:75:b5: 5c:da:4c:ad:98:f3:02:f8:60:28:8a:8e:70:da:24:50:62:61: 16:4b:ac:44:11:a9:e4:3c:59:39:d8:e9:c7:fc:15:61:80:ea: 74:77:cb:dc:21:6e:62:cc:9c:7e:19:64:fa:4a:5f:2a:1e:a2: d7:af:fa:78:df:53:19:af:35:98:c2:26:c5:c1:30:bd:1f:76: e5:29:72:69:c5:df:1b:42:3a:8a:25:98:c8:c4:fb:4c:e2:2b: 86:7e:b8:47:34:fa:08:96:1e:5e:45:2a:ea:92:e0:df:f7:c2: f6:17:63:d2:f0:7a:30:aa:1e:a7:cf:86:b2:5b:80:79:4c:31: 08:f1:c1:68:eb:68:b4:52:f5:5a:2f:14:2b:e4:54:07:7b:fc: b8:28:08:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDDU01MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm ZjY2YjhhN2RlOGZiYWFiZGE2ZGY4OWQyNGRjODliNjYzYzY3YjYwHhcNMjEwMzI0 MTQ0MDUwWhcNMjYwMzI0MTQ0MDUwWjAzMTEwLwYDVQQDEyhmNTI3ODY2YTk5MWM1 ZjBlMGU1OGY1NzM3YjkxMzI1NzViNmFjOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAh5khwJ6S4WEtpOPLfz6dmCkq2kaEz40t/auBEbNKzs1fPLSe SpOFH9jsJPklFJ8+orX+Of+Xt2u1LNbdSeOycruaQ/bOdDIDf/+ZXxHtg3c+Ki18 e4ZHYc5Na4sAvXTnl3hGmf2vbZKmLZtaOvpBio64TJqHILQObd4rjpbSwaEIykS3 mDAe9JY5W/fIaXtMd4YYNnX9eAoSma6tSacQeApNKSEOAYtqJkbh5WofkS16Emhb gfBINGL8Qcq6YQ3f/GqDhs8Mx3MKlTtZuEJ+jNrER1Mls0yolZd+b11EmBSGRimX s5Dg2VvmmCK7WP7X3eN7y7sBxuUuXpUw6wwZSwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFPOkJheLortbx2hjcwc86IUUbNvwMB8GA1UdIwQYMBaAFLUk7nhWBt35tNKs 9OdrBbDkJ2Q1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGZmNjZi OGE3ZGU4ZmJhYWJkYTZkZjg5ZDI0ZGM4OWI2NjNjNjdiNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOGYxYTNmMzAtOTg2ZS00MWU3LWI0M2YtMGFmODVi ZTBmZjZlL2Y1Mjc4NjZhOTkxYzVmMGUwZTU4ZjU3MzdiOTEzMjU3NWI2YWM5Zjgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84ZjFhM2YzMC05ODZlLTQxZTctYjQzZi0wYWY4 NWJlMGZmNmUvNGZmNjZiOGE3ZGU4ZmJhYWJkYTZkZjg5ZDI0ZGM4OWI2NjNjNjdi Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEArW/6DANBAIAAjAHAwUAKAOIIDANBgkqhkiG9w0BAQsFAAOC AQEAg9ZA9xWbbfgP6vNBmosNYdBbAGeWB+dq1cjv7b/pt85oZPfcbNNu4qEwbCjU eOZZDyO80oahH3Z830VtPI6NIbsRO5SxeEuYh9tx+Xx+ZrGID5r8lihRkdIG0bqF hJCEATxkkbEPwlBEoXW1XNpMrZjzAvhgKIqOcNokUGJhFkusRBGp5DxZOdjpx/wV YYDqdHfL3CFuYsycfhlk+kpfKh6i16/6eN9TGa81mMImxcEwvR925SlyacXfG0I6 iiWYyMT7TOIrhn64RzT6CJYeXkUq6pLg3/fC9hdj0vB6MKoep8+GsluAeUwxCPHB aOtotFL1Wi8UK+RUB3v8uCgIBA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:56 2023 by rpki-client on console-ams.rpki-client.org