$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa File: 34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa (raw, json) Hash identifier: Qd8KawNClzj29ORarK8eZtr4L59Uja9j/FN2iL2mx1g= Subject key identifier: 31:A3:A6:0B:3C:44:24:05:97:DA:02:25:53:EC:BC:99:AF:62:7A:0D Certificate issuer: /CN=233C81F942C5DC516A2998AA4C482074A3A18024 Certificate serial: 0DC68477F8132B0744ECBF31E0CB2FF1123C39F5 Authority key identifier: 23:3C:81:F9:42:C5:DC:51:6A:29:98:AA:4C:48:20:74:A3:A1:80:24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/233C81F942C5DC516A2998AA4C482074A3A18024.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa Signing time: Tue 05 Mar 2024 17:54:52 +0000 ROA not before: Tue 05 Mar 2024 17:49:52 +0000 ROA not after: Tue 04 Mar 2025 17:54:52 +0000 asID: 265852 IP address blocks: 45.225.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/233C81F942C5DC516A2998AA4C482074A3A18024.crl rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/233C81F942C5DC516A2998AA4C482074A3A18024.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/233C81F942C5DC516A2998AA4C482074A3A18024.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 23:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c6:84:77:f8:13:2b:07:44:ec:bf:31:e0:cb:2f:f1:12:3c:39:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233C81F942C5DC516A2998AA4C482074A3A18024 Validity Not Before: Mar 5 17:49:52 2024 GMT Not After : Mar 4 17:54:52 2025 GMT Subject: CN=31A3A60B3C44240597DA022553ECBC99AF627A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:4c:35:f3:83:04:05:e2:dd:0e:19:60:ab: 4e:dc:04:e9:2d:8d:8d:83:7f:75:6d:f7:d4:6b:55: 28:31:4d:d6:e4:9a:68:f5:c2:ba:0d:c7:67:7c:58: 47:eb:d6:37:5b:b1:5c:d2:4d:2b:83:30:cb:19:56: 00:26:0d:90:1f:5b:29:b8:85:94:55:de:d7:89:ce: 4b:59:08:00:9e:44:a9:80:ba:7d:2e:70:d6:fb:93: e8:d3:1f:ae:46:5e:2c:a5:08:d6:9c:50:c7:6b:e5: ce:8c:c2:fd:bf:6c:5b:36:22:a1:96:91:13:a5:ca: ad:11:68:65:da:8c:98:f6:ba:0e:9a:af:ba:5a:0d: 92:f0:c2:04:f6:e2:80:cc:77:a2:c6:0e:f9:0d:84: ed:48:da:b5:e8:77:66:9e:d9:e5:5c:d7:e3:e7:6a: 84:fa:00:e5:ad:99:e7:59:82:f6:bb:be:2a:50:ae: 52:09:09:d6:98:58:0d:97:4c:ce:32:75:37:25:18: f1:d7:12:f7:fb:6e:9f:44:51:87:26:e6:ff:46:c4: ff:81:cf:61:96:db:7c:e2:4f:c8:df:5a:31:12:38: 53:ea:83:7c:28:a2:df:ee:72:c7:7a:c2:09:1f:40: 9d:77:2c:3b:24:16:55:e7:34:b3:d9:8c:13:40:fd: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:A6:0B:3C:44:24:05:97:DA:02:25:53:EC:BC:99:AF:62:7A:0D X509v3 Authority Key Identifier: keyid:23:3C:81:F9:42:C5:DC:51:6A:29:98:AA:4C:48:20:74:A3:A1:80:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/233C81F942C5DC516A2998AA4C482074A3A18024.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/233C81F942C5DC516A2998AA4C482074A3A18024.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.212.0/22 Signature Algorithm: sha256WithRSAEncryption b4:1f:fd:fc:eb:6f:15:90:ff:e6:5c:dd:39:a1:63:a7:bf:76: c7:2d:69:d5:cc:18:ce:c7:ac:bb:93:90:65:54:7d:f5:10:46: 15:f8:75:05:7d:5e:8c:61:01:f5:04:cf:7c:81:8a:68:c6:8d: fc:8f:dd:cd:2e:40:7a:61:19:a4:87:a2:9e:cb:65:ad:83:f3: ee:75:9b:d7:2d:83:a3:6f:e5:1f:3b:fa:8f:61:df:3c:56:8d: ce:52:fc:11:23:04:e3:d1:97:0d:08:c9:81:1b:e0:f5:fc:83: 9b:2b:38:01:28:d0:26:d2:f4:70:f2:b8:cc:a5:78:eb:c1:df: 61:97:7f:7a:c1:97:73:6b:e6:ba:0a:4d:01:ba:5b:80:3c:58: 68:9b:16:d2:c4:ba:48:12:19:ab:1e:95:ea:03:cf:e7:77:8c: 12:af:ab:d8:1b:5f:2b:37:01:af:ed:37:35:b5:d9:87:29:21: 96:83:a1:be:ce:e3:6e:e0:d3:a0:67:27:bb:6f:59:88:08:77: 8a:14:4f:3b:9f:1d:c1:25:a4:90:46:17:17:13:ae:0d:d3:8b: ed:7a:1c:7c:34:e5:17:27:71:06:52:35:56:23:0f:89:2d:21: 0d:63:56:f0:6e:15:01:62:2f:d9:42:26:e0:5f:f1:b7:b9:5c: e8:47:91:6e -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUDcaEd/gTKwdE7L8x4Msv8RI8OfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQzgxRjk0MkM1REM1MTZBMjk5OEFBNEM0ODIwNzRB M0ExODAyNDAeFw0yNDAzMDUxNzQ5NTJaFw0yNTAzMDQxNzU0NTJaMDMxMTAvBgNV BAMTKDMxQTNBNjBCM0M0NDI0MDU5N0RBMDIyNTUzRUNCQzk5QUY2MjdBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOkw184MEBeLdDhlgq07cBOkt jY2Df3Vt99RrVSgxTdbkmmj1wroNx2d8WEfr1jdbsVzSTSuDMMsZVgAmDZAfWym4 hZRV3teJzktZCACeRKmAun0ucNb7k+jTH65GXiylCNacUMdr5c6Mwv2/bFs2IqGW kROlyq0RaGXajJj2ug6ar7paDZLwwgT24oDMd6LGDvkNhO1I2rXod2ae2eVc1+Pn aoT6AOWtmedZgva7vipQrlIJCdaYWA2XTM4ydTclGPHXEvf7bp9EUYcm5v9GxP+B z2GW23ziT8jfWjESOFPqg3woot/ucsd6wgkfQJ13LDskFlXnNLPZjBNA/S6PAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUMaOmCzxEJAWX2gIlU+y8ma9ieg0wHwYDVR0j BBgwFoAUIzyB+ULF3FFqKZiqTEggdKOhgCQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85OUYwMjAxN0MyNjlBQzRGQ0UzNzlEMDdDMzQ0RTEzRjQ0 NEU1NTYzQ0FGNzFBQkUyMURBRDdCQ0MyRjJENzVBLzAvMjMzQzgxRjk0MkM1REM1 MTZBMjk5OEFBNEM0ODIwNzRBM0ExODAyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzNDODFGOTQyQzVEQzUxNkEy OTk4QUE0QzQ4MjA3NEEzQTE4MDI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTlGMDIwMTdDMjY5QUM0RkNFMzc5RDA3QzM0NEUxM0Y0NDRFNTU2M0NB RjcxQUJFMjFEQUQ3QkNDMkYyRDc1QS8wLzM0MzUyZTMyMzIzNTJlMzIzMTMyMmUz MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeHU MA0GCSqGSIb3DQEBCwUAA4IBAQC0H/38628VkP/mXN05oWOnv3bHLWnVzBjOx6y7 k5BlVH31EEYV+HUFfV6MYQH1BM98gYpoxo38j93NLkB6YRmkh6Key2Wtg/PudZvX LYOjb+UfO/qPYd88Vo3OUvwRIwTj0ZcNCMmBG+D1/IObKzgBKNAm0vRw8rjMpXjr wd9hl396wZdza+a6Ck0BuluAPFhomxbSxLpIEhmrHpXqA8/nd4wSr6vYG18rNwGv 7Tc1tdmHKSGWg6G+zuNu4NOgZye7b1mICHeKFE87nx3BJaSQRhcXE64N04vtehx8 NOUXJ3EGUjVWIw+JLSENY1bwbhUBYi/ZQibgX/G3uVzoR5Fu -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:01 2024 by rpki-client on console-ams.rpki-client.org