$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/996fad88a62a46e3cd1327d47bc7199526476b48.roa File: 996fad88a62a46e3cd1327d47bc7199526476b48.roa (raw, json) Hash identifier: LzO5ck7ZXkBOaq5ImMDxAQs+m1d6KnbRQfXL1Mnf3co= Subject key identifier: 7B:4A:F1:75:76:3D:67:D0:72:AD:75:33:5C:9B:0F:6D:F8:42:0B:55 Certificate issuer: /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc Certificate serial: 15D9B5 Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/996fad88a62a46e3cd1327d47bc7199526476b48.roa Signing time: Thu 21 Apr 2022 08:30:01 +0000 ROA not before: Thu 21 Apr 2022 08:30:01 +0000 ROA not after: Sat 20 Apr 2024 08:30:01 +0000 asID: 265621 IP address blocks: 45.176.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431989 (0x15d9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc Validity Not Before: Apr 21 08:30:01 2022 GMT Not After : Apr 20 08:30:01 2024 GMT Subject: CN=996fad88a62a46e3cd1327d47bc7199526476b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:18:3f:d3:be:6f:00:90:a3:79:29:bc:c7: a5:d7:35:00:07:fb:a1:4b:ee:b6:3f:dc:38:a7:00: eb:28:55:ab:8d:42:34:83:a3:e9:1f:53:1b:4d:40: 49:4e:26:8d:dc:d4:d4:ac:74:f6:39:db:d6:d2:ad: bd:42:54:77:4d:4a:62:8d:73:85:25:33:a4:75:a5: 16:1c:e3:00:8e:80:86:67:58:31:d8:57:4a:09:4e: 21:2e:10:11:0e:c3:6a:ee:63:39:ad:43:f2:a0:57: be:73:9f:47:3e:00:5f:0b:a4:17:f5:a9:b6:82:64: d1:e1:12:8d:26:bd:ce:3c:56:7d:cb:af:cc:c7:95: c1:aa:6e:8d:5b:fe:f5:c5:e8:e0:10:16:cf:ec:d5: b9:a6:74:62:75:0e:8b:69:ff:84:24:9d:9f:37:47: b8:51:a5:b9:b9:b3:6b:82:b1:c0:7e:62:dc:1c:0c: bd:1e:a8:26:24:56:94:ea:2b:22:a9:1f:fb:aa:f3: 69:03:c7:62:b4:25:13:17:6e:88:a9:cc:bc:56:df: 0d:81:d4:2c:8f:46:32:8c:15:4f:23:96:21:4b:82: d1:51:7f:b0:ad:ad:ed:68:58:31:ea:50:9a:3d:9e: 1b:8f:13:bc:7c:da:ce:be:98:28:7a:70:a5:b0:43: 58:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4A:F1:75:76:3D:67:D0:72:AD:75:33:5C:9B:0F:6D:F8:42:0B:55 X509v3 Authority Key Identifier: keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/996fad88a62a46e3cd1327d47bc7199526476b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.191.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:1b:0f:9a:f9:8c:64:e0:4a:4d:96:13:c3:f0:60:30:22:de: a3:33:44:8e:f8:ab:d4:d5:59:3f:3c:7d:33:5e:0c:94:22:24: bc:99:34:12:5a:1c:ab:5e:76:20:9e:88:2b:cc:70:c7:a2:48: 20:f9:29:98:50:ee:07:da:93:7b:6d:af:f8:58:50:ca:99:cc: 61:92:32:0d:bb:ed:fe:a1:e9:34:54:90:e1:9b:7d:13:9d:1d: ed:3b:b3:09:19:12:d1:34:c1:08:c4:58:75:09:23:6b:7a:a6: d8:a7:c4:84:00:9b:0e:3d:74:ba:3e:45:33:fc:a7:4f:78:a4: 06:76:03:7b:f5:d8:3c:f1:75:8c:00:51:6e:23:48:52:ce:a3: 5c:3b:85:9c:25:65:3e:0f:22:a1:db:cc:f8:36:1b:96:c7:b5: 97:91:d8:04:5c:81:b9:cf:85:9a:4e:f9:a4:ec:3a:c4:36:1f: b1:0a:96:b5:49:4f:e9:6b:70:1a:5c:cf:2f:63:83:74:8a:4c: bd:2e:28:5b:21:f9:d4:ee:df:67:a4:3b:74:ea:b8:c0:99:68: 5b:b6:fe:35:45:e9:3c:d8:a2:3f:2c:3a:1f:57:cc:a4:82:2c: 9c:8a:80:32:9f:fe:c5:25:e6:b3:70:ee:5d:f0:c2:92:18:5b: e2:49:43:0b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDFdm1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh OTQ0ODJlYTIzZjhhMzRkNGMyOGYwY2RkNDAzOGM2NDFlNjNiYmMwHhcNMjIwNDIx MDgzMDAxWhcNMjQwNDIwMDgzMDAxWjAzMTEwLwYDVQQDEyg5OTZmYWQ4OGE2MmE0 NmUzY2QxMzI3ZDQ3YmM3MTk5NTI2NDc2YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjdgYP9O+bwCQo3kpvMel1zUAB/uhS+62P9w4pwDrKFWrjUI0 g6PpH1MbTUBJTiaN3NTUrHT2OdvW0q29QlR3TUpijXOFJTOkdaUWHOMAjoCGZ1gx 2FdKCU4hLhARDsNq7mM5rUPyoFe+c59HPgBfC6QX9am2gmTR4RKNJr3OPFZ9y6/M x5XBqm6NW/71xejgEBbP7NW5pnRidQ6Laf+EJJ2fN0e4UaW5ubNrgrHAfmLcHAy9 HqgmJFaU6isiqR/7qvNpA8ditCUTF26Iqcy8Vt8NgdQsj0YyjBVPI5YhS4LRUX+w ra3taFgx6lCaPZ4bjxO8fNrOvpgoenClsENYLQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFHtK8XV2PWfQcq11M1ybD234QgtVMB8GA1UdIwQYMBaAFOuss2xa9YVEMgiW gLMgsBm7KF6SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWE5NDQ4 MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2JiYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOThmNzkwZGQtYWVhOC00YmNkLTk4OWQtOTAyZjUw YTIxNThhLzk5NmZhZDg4YTYyYTQ2ZTNjZDEzMjdkNDdiYzcxOTk1MjY0NzZiNDgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85OGY3OTBkZC1hZWE4LTRiY2QtOTg5ZC05MDJm NTBhMjE1OGEvNWE5NDQ4MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2Ji Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC2wvzANBgkqhkiG9w0BAQsFAAOCAQEALBsPmvmMZOBKTZYT w/BgMCLeozNEjvir1NVZPzx9M14MlCIkvJk0Elocq152IJ6IK8xwx6JIIPkpmFDu B9qTe22v+FhQypnMYZIyDbvt/qHpNFSQ4Zt9E50d7TuzCRkS0TTBCMRYdQkja3qm 2KfEhACbDj10uj5FM/ynT3ikBnYDe/XYPPF1jABRbiNIUs6jXDuFnCVlPg8iodvM +DYblse1l5HYBFyBuc+Fmk75pOw6xDYfsQqWtUlP6WtwGlzPL2ODdIpMvS4oWyH5 1O7fZ6Q7dOq4wJloW7b+NUXpPNiiPyw6H1fMpIIsnIqAMp/+xSXms3DuXfDCkhhb 4klDCw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:59 2023 by rpki-client on console-ams.rpki-client.org