$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa File: 9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa (raw, json) Hash identifier: lRbzD3CTxoUU8cBJpm5I1AhI/kaA69yr8NlypnrvEHA= Subject key identifier: F2:DC:B2:27:2A:C3:07:E2:EF:A5:F5:19:9E:A5:02:6E:32:84:9D:71 Certificate issuer: /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874 Certificate serial: 0DA9FD Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa Signing time: Wed 24 Mar 2021 14:42:15 +0000 ROA not before: Wed 24 Mar 2021 14:42:15 +0000 ROA not after: Tue 24 Mar 2026 14:42:15 +0000 asID: 262234 IP address blocks: 131.108.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895485 (0xda9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874 Validity Not Before: Mar 24 14:42:15 2021 GMT Not After : Mar 24 14:42:15 2026 GMT Subject: CN=9cc021bdf8145a57ddb384aaf8bd22722c4c1664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:02:6b:26:57:4e:04:4c:2a:6d:27:97:8a:0b: f2:f0:eb:d6:61:34:3d:1e:02:ee:fb:09:ab:80:1c: ed:5f:ab:5d:4d:67:df:47:e6:6b:53:1d:9e:1d:f8: 2f:91:81:12:91:17:62:16:52:ff:ac:31:54:68:b9: 82:1b:a9:df:52:66:a2:89:f0:7c:28:5e:af:79:b3: 0b:eb:c5:86:5b:7a:22:50:e0:79:d3:c1:a7:ee:01: 9c:64:88:f6:34:9a:eb:83:1e:cb:8b:31:90:26:ed: 46:eb:f6:81:36:90:04:d4:18:d9:df:cd:e0:6a:7a: 75:e6:3d:5a:c5:c2:16:ef:43:18:4f:09:74:a6:70: 85:a8:e5:6a:63:52:21:9b:14:33:e3:05:4d:fc:94: 6a:ff:12:2b:bc:dd:2d:09:75:3d:65:5d:78:24:dc: 75:c9:2e:29:c3:c9:8c:7b:00:9a:03:0a:76:1f:5f: df:00:43:95:d4:6c:c4:3d:21:f9:75:83:6d:38:69: 0b:4a:97:6f:2a:23:ae:4d:2d:69:2d:68:17:2d:cf: 73:31:c4:5d:c2:53:6e:95:0e:3a:24:9e:ce:ba:1a: 7a:84:67:99:a6:7c:58:d7:cd:4c:d7:42:c4:fe:77: 92:ff:5b:dd:03:09:76:11:7d:0c:0e:55:e7:20:bd: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DC:B2:27:2A:C3:07:E2:EF:A5:F5:19:9E:A5:02:6E:32:84:9D:71 X509v3 Authority Key Identifier: keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.232.0/22 Signature Algorithm: sha256WithRSAEncryption 32:85:41:e1:83:a6:0e:68:3e:49:f8:3d:cc:1d:c2:cf:ae:66: 61:e1:b7:a6:b2:8d:a8:f9:9c:cd:99:ee:37:00:f6:bf:98:6c: 4e:5d:74:29:b1:35:5b:19:87:32:bc:c5:95:65:2c:7e:37:b0: 67:8c:7b:17:e2:d5:6b:a2:92:bf:09:ff:4c:85:dc:37:e0:7d: b9:c9:96:19:41:0c:f0:05:26:f4:8e:8d:b6:0b:93:12:f7:d3: 89:67:28:b3:27:ee:2a:47:c1:c2:33:fa:9a:89:15:ec:98:9c: 11:49:85:ee:b1:43:bb:c7:99:23:35:5a:f3:69:89:ce:2c:c7: 5f:14:70:f1:d2:38:bd:80:2a:0e:80:8b:ff:48:3f:1f:76:1f: ba:e5:5c:07:0c:98:59:de:fd:d5:bb:0a:d2:5a:13:27:bd:1c: 3c:eb:ff:05:1e:28:ea:08:86:ec:d7:c2:5b:67:a4:8d:af:88: 86:d6:a8:44:95:97:e8:07:ab:88:05:ae:52:01:8f:3a:c1:19: c5:5b:8a:d4:61:9a:af:2a:7c:ff:69:68:0a:1e:38:93:ab:77: 51:d3:59:25:d3:8a:f6:61:ce:be:a6:86:fc:0b:38:be:d9:20: f6:9b:70:32:16:c6:f6:86:61:8c:b3:a1:c5:9d:ea:71:55:94: 72:53:bb:30 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDan9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw MDI5ZGQ5MDI0YzJjNDlkYzhlYjRhNDhkZjQ0YmZkMDE1Zjg4NzQwHhcNMjEwMzI0 MTQ0MjE1WhcNMjYwMzI0MTQ0MjE1WjAzMTEwLwYDVQQDEyg5Y2MwMjFiZGY4MTQ1 YTU3ZGRiMzg0YWFmOGJkMjI3MjJjNGMxNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgQJrJldOBEwqbSeXigvy8OvWYTQ9HgLu+wmrgBztX6tdTWff R+ZrUx2eHfgvkYESkRdiFlL/rDFUaLmCG6nfUmaiifB8KF6vebML68WGW3oiUOB5 08Gn7gGcZIj2NJrrgx7LizGQJu1G6/aBNpAE1BjZ383ganp15j1axcIW70MYTwl0 pnCFqOVqY1IhmxQz4wVN/JRq/xIrvN0tCXU9ZV14JNx1yS4pw8mMewCaAwp2H1/f AEOV1GzEPSH5dYNtOGkLSpdvKiOuTS1pLWgXLc9zMcRdwlNulQ46JJ7Ouhp6hGeZ pnxY181M10LE/neS/1vdAwl2EX0MDlXnIL179wIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFPLcsicqwwfi76X1GZ6lAm4yhJ1xMB8GA1UdIwQYMBaAFCCs+h/hmG4P7Q/l p0pWKh+S/dxLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTAwMjlk ZDkwMjRjMmM0OWRjOGViNGE0OGRmNDRiZmQwMTVmODg3NC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTM0NWQyZWItMzA1NS00MjUyLWFlNGUtZDBiOTkx YmFmNWNiLzljYzAyMWJkZjgxNDVhNTdkZGIzODRhYWY4YmQyMjcyMmM0YzE2NjQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85MzQ1ZDJlYi0zMDU1LTQyNTItYWU0ZS1kMGI5 OTFiYWY1Y2IvNTAwMjlkZDkwMjRjMmM0OWRjOGViNGE0OGRmNDRiZmQwMTVmODg3 NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAoNs6DANBgkqhkiG9w0BAQsFAAOCAQEAMoVB4YOmDmg+Sfg9 zB3Cz65mYeG3prKNqPmczZnuNwD2v5hsTl10KbE1WxmHMrzFlWUsfjewZ4x7F+LV a6KSvwn/TIXcN+B9ucmWGUEM8AUm9I6NtguTEvfTiWcosyfuKkfBwjP6mokV7Jic EUmF7rFDu8eZIzVa82mJzizHXxRw8dI4vYAqDoCL/0g/H3YfuuVcBwyYWd791bsK 0loTJ70cPOv/BR4o6giG7NfCW2ekja+IhtaoRJWX6AeriAWuUgGPOsEZxVuK1GGa ryp8/2loCh44k6t3UdNZJdOK9mHOvqaG/As4vtkg9ptwMhbG9oZhjLOhxZ3qcVWU clO7MA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:57 2023 by rpki-client on console-ams.rpki-client.org