$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/326673d6fab2570691dcad26efbec4c926f93e5e.roa File: 326673d6fab2570691dcad26efbec4c926f93e5e.roa (raw, json) Hash identifier: CPv6HLbVwA8RWxd5llNOZ61VQ999LSImTIH1kNEU0FE= Subject key identifier: E9:BB:A5:3B:8A:F8:29:E7:AF:15:FF:16:0C:C4:0D:32:78:C9:78:E7 Certificate issuer: /CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab Certificate serial: 0E4B54 Authority key identifier: 03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/326673d6fab2570691dcad26efbec4c926f93e5e.roa Signing time: Sun 16 May 2021 21:57:54 +0000 ROA not before: Sun 16 May 2021 03:00:00 +0000 ROA not after: Wed 22 Apr 2026 03:00:00 +0000 asID: 61497 IP address blocks: 138.99.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936788 (0xe4b54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab Validity Not Before: May 16 03:00:00 2021 GMT Not After : Apr 22 03:00:00 2026 GMT Subject: CN=326673d6fab2570691dcad26efbec4c926f93e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:ef:1e:25:91:44:3a:89:bc:b0:03:13:38: 1f:2e:0d:cf:7d:a7:3c:2e:63:e3:4b:04:a7:0a:6d: 15:3f:66:3b:aa:ee:20:d2:eb:1f:cf:b6:63:bb:a5: 98:26:59:a5:30:d9:d0:28:81:91:7a:1a:11:01:d6: 33:b3:11:3a:bf:65:c4:68:30:b3:6f:90:4c:2f:1f: cc:8d:b4:64:cf:e2:4b:32:a0:0e:e1:03:17:50:94: 34:4b:10:d3:aa:56:07:aa:e8:59:9c:6c:01:bd:7e: 7b:9c:a3:e4:79:a7:33:b7:9e:88:71:02:a8:59:77: 43:dd:48:c5:bc:1b:cc:c8:9b:a6:5b:f9:d6:98:82: 30:f3:3d:d0:65:fc:0a:6a:2b:fd:0f:32:12:2a:25: c7:4c:5b:4a:28:a0:a6:ad:0f:5c:c4:d3:ea:bb:56: 63:f3:f1:3c:d8:25:42:31:42:ad:9a:2d:8d:cb:7c: 50:af:87:3c:dc:d6:f9:b7:19:67:6b:23:64:98:60: 10:14:8c:8a:94:9c:5c:bc:a6:b1:93:72:70:8e:b9: a2:1d:02:d5:c3:ce:6d:2c:41:6b:19:ec:20:37:ac: b8:5b:77:87:55:57:38:8d:e3:3d:11:ef:1c:1b:2b: 5a:eb:d1:ef:4d:2d:2d:fb:b3:06:7c:a6:22:e8:5b: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BB:A5:3B:8A:F8:29:E7:AF:15:FF:16:0C:C4:0D:32:78:C9:78:E7 X509v3 Authority Key Identifier: keyid:03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/326673d6fab2570691dcad26efbec4c926f93e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.139.0/24 Signature Algorithm: sha256WithRSAEncryption 07:3d:1b:cf:ce:ee:79:ae:00:af:1b:6d:ea:24:ee:9c:b4:62: 96:85:ab:7c:0b:81:d2:6f:1e:57:27:79:16:36:26:cd:51:33: 94:b4:4b:8a:77:b9:d5:19:fd:f0:03:62:40:8a:63:ed:ad:9d: 64:af:c0:c2:77:24:b8:be:da:95:d5:95:0e:d2:b0:e4:24:25: 86:81:e4:3d:2e:ef:e4:4e:4c:d3:07:81:2a:24:9f:fb:c7:47: 1b:2c:b2:ee:a6:12:d4:ea:c0:64:63:82:99:fa:00:16:02:c8: 4a:8f:9f:bd:ce:30:f0:e5:0a:a4:50:f6:7e:08:77:52:bb:c1: 3b:bf:be:72:22:63:e1:d6:c5:85:4a:41:2b:91:19:8f:28:fb: e6:35:f5:af:9c:ef:4a:c4:ae:1b:c5:09:d8:06:02:eb:a4:5c: ac:07:17:b0:fa:7e:8b:b5:d2:62:16:44:ce:59:0e:1a:11:72: af:b2:97:93:8e:e2:33:87:73:7f:98:ec:aa:c8:ee:d1:b4:3b: 9f:de:76:09:35:f8:b6:df:2a:de:db:65:e8:9e:c7:63:8c:2f: a9:fa:fa:dc:cb:44:96:60:fd:13:73:e4:10:50:6d:2a:74:57: c4:00:65:ac:66:58:09:a8:df:52:45:7a:e7:2f:59:34:5f:af: 75:8a:a2:80 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDktUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0 ZTY1ZDljZmEwNGQ3NDdiODhlYTI4ZmQ5YWQ5NzhlN2M3NjhmYWIwHhcNMjEwNTE2 MDMwMDAwWhcNMjYwNDIyMDMwMDAwWjAzMTEwLwYDVQQDEygzMjY2NzNkNmZhYjI1 NzA2OTFkY2FkMjZlZmJlYzRjOTI2ZjkzZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsiLvHiWRRDqJvLADEzgfLg3Pfac8LmPjSwSnCm0VP2Y7qu4g 0usfz7Zju6WYJlmlMNnQKIGRehoRAdYzsxE6v2XEaDCzb5BMLx/MjbRkz+JLMqAO 4QMXUJQ0SxDTqlYHquhZnGwBvX57nKPkeaczt56IcQKoWXdD3UjFvBvMyJumW/nW mIIw8z3QZfwKaiv9DzISKiXHTFtKKKCmrQ9cxNPqu1Zj8/E82CVCMUKtmi2Ny3xQ r4c83Nb5txlnayNkmGAQFIyKlJxcvKaxk3JwjrmiHQLVw85tLEFrGewgN6y4W3eH VVc4jeM9Ee8cGyta69HvTS0t+7MGfKYi6Fsf0QIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFOm7pTuK+CnnrxX/FgzEDTJ4yXjnMB8GA1UdIwQYMBaAFAPVabhWZqs+ob9z x9E/TVl1iBVgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDRlNjVk OWNmYTA0ZDc0N2I4OGVhMjhmZDlhZDk3OGU3Yzc2OGZhYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTI5MjAzYzYtY2JiMS00ODk0LWIyYTgtYmVkNTQ0 OTg2NGVhLzMyNjY3M2Q2ZmFiMjU3MDY5MWRjYWQyNmVmYmVjNGM5MjZmOTNlNWUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85MjkyMDNjNi1jYmIxLTQ4OTQtYjJhOC1iZWQ1 NDQ5ODY0ZWEvMDRlNjVkOWNmYTA0ZDc0N2I4OGVhMjhmZDlhZDk3OGU3Yzc2OGZh Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIpjizANBgkqhkiG9w0BAQsFAAOCAQEABz0bz87uea4Arxtt 6iTunLRiloWrfAuB0m8eVyd5FjYmzVEzlLRLine51Rn98ANiQIpj7a2dZK/Awnck uL7aldWVDtKw5CQlhoHkPS7v5E5M0weBKiSf+8dHGyyy7qYS1OrAZGOCmfoAFgLI So+fvc4w8OUKpFD2fgh3UrvBO7++ciJj4dbFhUpBK5EZjyj75jX1r5zvSsSuG8UJ 2AYC66RcrAcXsPp+i7XSYhZEzlkOGhFyr7KXk47iM4dzf5jsqsju0bQ7n952CTX4 tt8q3ttl6J7HY4wvqfr63MtElmD9E3PkEFBtKnRXxABlrGZYCajfUkV65y9ZNF+v dYqigA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:57 2023 by rpki-client on console-ams.rpki-client.org