$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/421cf151eb57876d5be15145a8cb3c85db6035c8.roa File: 421cf151eb57876d5be15145a8cb3c85db6035c8.roa (raw, json) Hash identifier: TxPjsgvQnN4bBqQUzPRz9NkJ3BUpkVtNMPNV7ljmQAM= Subject key identifier: C9:B1:E8:46:34:3D:AF:BC:3D:C9:F0:E3:18:CD:18:91:91:9B:2C:AD Certificate issuer: /CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed Certificate serial: 0DBDA5 Authority key identifier: 3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/421cf151eb57876d5be15145a8cb3c85db6035c8.roa Signing time: Wed 24 Mar 2021 14:32:02 +0000 ROA not before: Wed 24 Mar 2021 14:32:02 +0000 ROA not after: Tue 24 Mar 2026 14:32:02 +0000 asID: 265646 IP address blocks: 170.247.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.crl rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 05:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900517 (0xdbda5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed Validity Not Before: Mar 24 14:32:02 2021 GMT Not After : Mar 24 14:32:02 2026 GMT Subject: CN=421cf151eb57876d5be15145a8cb3c85db6035c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:e8:b2:5a:5f:12:0d:93:40:9e:f7:e4:9e: 02:98:38:fb:4e:61:0e:72:98:c7:4c:ce:fc:f2:2a: ca:d0:6a:55:ef:0e:5b:d1:4c:25:c0:f8:21:87:73: 54:16:b7:f1:ed:e6:3d:d1:2c:03:9f:fd:e7:05:78: 70:45:7f:f2:dc:ec:60:8e:ad:bb:ec:ca:c6:98:c8: 0a:03:cd:ba:78:ff:c9:21:bc:9d:f7:bd:22:ca:2a: 2d:d9:2d:7f:08:51:37:92:0d:24:6d:72:b7:64:fb: 33:fd:75:65:66:0f:bc:b1:2f:9c:b8:8d:63:4d:0d: 58:88:1f:a7:a8:f9:ac:84:e2:fc:63:76:6d:67:80: 21:3d:4b:41:6e:88:31:d2:eb:ea:ea:02:5f:30:74: 9d:6c:91:8c:f7:4b:42:7a:fa:69:6c:29:cf:9d:23: 66:6b:75:ef:ea:ff:8d:4b:70:89:2d:95:bf:c5:21: 83:01:0c:87:00:ab:df:da:6c:51:76:44:c1:86:25: 27:a1:03:ee:9c:01:08:67:e5:ef:21:49:df:b5:c2: ab:06:cd:17:41:c5:a0:de:b7:c6:94:ab:53:38:81: 9f:67:7d:76:36:45:00:ba:b7:4c:9a:28:d0:6b:e8: 01:4c:81:76:a4:7f:06:99:86:7a:ff:ce:2b:57:09: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B1:E8:46:34:3D:AF:BC:3D:C9:F0:E3:18:CD:18:91:91:9B:2C:AD X509v3 Authority Key Identifier: keyid:3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/421cf151eb57876d5be15145a8cb3c85db6035c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:b3:84:07:d3:2c:6b:d1:7d:d9:fa:76:63:04:32:80:3a:1c: 36:d7:4d:8d:84:5a:e1:39:51:65:1b:d6:66:18:b3:6f:31:d5: 3a:b2:d9:7b:a1:dd:17:4e:57:41:2b:fa:a0:f7:2a:8c:b5:30: 97:1e:8a:d8:cf:77:e5:dd:17:9f:92:ee:80:97:88:a2:5f:1c: a2:69:2c:dd:7b:c8:ee:02:81:b8:28:33:be:37:19:8f:c9:ea: e8:a1:6d:bf:d3:f4:05:aa:a9:3f:ad:29:83:5a:c4:2a:24:87: 45:fd:55:35:b7:e9:cf:e0:60:be:9a:81:42:ab:c8:e7:00:ac: 05:3b:39:4c:ac:58:82:c8:ad:f2:0e:2a:10:a8:6c:4e:68:29: 8b:e3:d5:37:67:04:9c:c8:70:aa:db:e6:e7:55:75:ea:9f:12: 1f:d4:11:2a:e6:d5:e0:cc:40:bd:3b:94:26:9f:55:b9:6d:e6: 7a:fd:9c:d8:a7:92:3d:cf:89:72:14:a8:e8:2c:4b:12:05:b7: 18:27:46:82:77:2d:ab:dc:bd:29:0a:ee:13:dc:62:a6:7c:88: 62:1e:2c:67:c5:0d:27:38:d8:9a:9e:e4:ea:25:e1:b7:e5:83: ed:71:f1:53:2a:1e:b4:c9:73:ca:cb:87:5f:cd:d3:44:fd:cd: fa:13:20:cc -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDb2lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgz YWVjNWJhNDdlMzdlNGZmMWIxMTU1YzQxOTFlYTViYmU3ZWI5ZWQwHhcNMjEwMzI0 MTQzMjAyWhcNMjYwMzI0MTQzMjAyWjAzMTEwLwYDVQQDEyg0MjFjZjE1MWViNTc4 NzZkNWJlMTUxNDVhOGNiM2M4NWRiNjAzNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmGLoslpfEg2TQJ735J4CmDj7TmEOcpjHTM788irK0GpV7w5b 0UwlwPghh3NUFrfx7eY90SwDn/3nBXhwRX/y3Oxgjq277MrGmMgKA826eP/JIbyd 970iyiot2S1/CFE3kg0kbXK3ZPsz/XVlZg+8sS+cuI1jTQ1YiB+nqPmshOL8Y3Zt Z4AhPUtBbogx0uvq6gJfMHSdbJGM90tCevppbCnPnSNma3Xv6v+NS3CJLZW/xSGD AQyHAKvf2mxRdkTBhiUnoQPunAEIZ+XvIUnftcKrBs0XQcWg3rfGlKtTOIGfZ312 NkUAurdMmijQa+gBTIF2pH8GmYZ6/84rVwmYnwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMmx6EY0Pa+8Pcnw4xjNGJGRmyytMB8GA1UdIwQYMBaAFD05qTmLWmIVi7yi 3wKqIovVn0gGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODNhZWM1 YmE0N2UzN2U0ZmYxYjExNTVjNDE5MWVhNWJiZTdlYjllZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTlmZTc1N2UtOTAwZC00YWQ5LWE4ZTUtMzNhNmJm ODZmYWFiLzQyMWNmMTUxZWI1Nzg3NmQ1YmUxNTE0NWE4Y2IzYzg1ZGI2MDM1Yzgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85OWZlNzU3ZS05MDBkLTRhZDktYThlNS0zM2E2 YmY4NmZhYWIvODNhZWM1YmE0N2UzN2U0ZmYxYjExNTVjNDE5MWVhNWJiZTdlYjll ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqr3ODANBgkqhkiG9w0BAQsFAAOCAQEAC7OEB9Msa9F92fp2 YwQygDocNtdNjYRa4TlRZRvWZhizbzHVOrLZe6HdF05XQSv6oPcqjLUwlx6K2M93 5d0Xn5LugJeIol8comks3XvI7gKBuCgzvjcZj8nq6KFtv9P0BaqpP60pg1rEKiSH Rf1VNbfpz+BgvpqBQqvI5wCsBTs5TKxYgsit8g4qEKhsTmgpi+PVN2cEnMhwqtvm 51V16p8SH9QRKubV4MxAvTuUJp9VuW3mev2c2KeSPc+JchSo6CxLEgW3GCdGgnct q9y9KQruE9xipnyIYh4sZ8UNJzjYmp7k6iXht+WD7XHxUyoetMlzysuHX83TRP3N +hMgzA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:45 2023 by rpki-client on console-fra.rpki-client.org