$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa File: 60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa (raw, json) Hash identifier: 5b4+3lvn//WuL7pXj28k7DTwkC6s3tslGU5mw5sLdsc= Subject key identifier: 7C:B3:69:4F:C5:B4:08:B2:0D:1A:72:D9:A6:AB:84:8D:14:7E:FF:47 Certificate issuer: /CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed Certificate serial: 0DC017 Authority key identifier: 3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa Signing time: Wed 24 Mar 2021 14:32:02 +0000 ROA not before: Wed 24 Mar 2021 14:32:02 +0000 ROA not after: Tue 24 Mar 2026 14:32:02 +0000 asID: 265646 IP address blocks: 170.247.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.crl rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 05:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901143 (0xdc017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed Validity Not Before: Mar 24 14:32:02 2021 GMT Not After : Mar 24 14:32:02 2026 GMT Subject: CN=60edd9ce0883abf5ea58f81495a6dd1d0da8e517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:69:9f:11:91:66:d9:70:42:c4:f7:0d:68: eb:eb:78:9c:75:9a:44:dd:65:0c:a9:8c:b8:08:95: 1b:a1:31:36:da:19:ba:78:b8:0e:4d:52:8b:42:45: 5c:7b:e5:cb:17:3d:c5:31:b1:30:2f:7a:f3:fa:d3: b1:56:01:f7:0e:8c:c0:9f:3d:35:df:2d:52:91:40: a2:dc:45:a6:09:35:f8:56:d4:a1:bb:9e:b0:81:be: 2a:f4:2c:ed:c5:81:5c:27:b8:85:22:38:0b:1c:5e: 5c:8d:37:34:43:3f:26:8f:c9:d8:5e:60:13:d7:8d: 47:e6:58:1f:b1:89:18:b5:cf:7b:bd:9e:3f:9b:dd: 04:73:22:64:75:83:18:6e:e6:fd:4f:fe:02:7c:3e: 1d:e5:44:b7:8d:43:97:a3:59:a3:4d:f2:2c:90:8c: 63:ac:c3:d1:da:b4:8e:fd:c6:9d:cc:32:a5:7d:9b: d3:d2:fb:34:f2:17:53:45:17:e2:36:ff:69:d4:00: 9a:e6:d5:cc:bb:3f:04:de:08:18:c5:d2:43:d7:35: 4d:6a:85:96:ae:e6:d0:4b:b7:6e:2b:0f:3d:6a:94: 20:16:77:b2:4f:c8:e9:8b:2e:ff:b1:d6:f5:2d:d0: a6:de:e6:cf:4f:08:14:97:b5:57:5a:c0:f9:75:58: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B3:69:4F:C5:B4:08:B2:0D:1A:72:D9:A6:AB:84:8D:14:7E:FF:47 X509v3 Authority Key Identifier: keyid:3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.56.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:3a:14:7a:d9:72:f0:d8:54:fb:bc:49:6a:52:52:62:fc:9b: bf:e6:31:9d:94:8f:80:51:5a:01:d9:41:4f:5b:1f:6d:fa:b9: fc:08:8f:f8:43:15:dd:d3:25:42:1d:0e:d0:ba:ad:41:b6:66: f7:d0:4e:f2:79:26:34:16:7f:fa:d1:d6:32:d6:76:78:56:91: 42:91:0d:f1:a6:fa:d7:c3:4d:fa:4e:cc:67:41:00:0c:b5:70: 12:4b:dd:b5:95:f9:72:20:6a:5a:e4:f7:df:62:58:ef:83:b9: d4:fd:5e:65:c5:7a:90:ab:0e:d3:8a:2a:4a:3a:f2:47:2d:f0: e6:a0:46:7c:65:e9:65:fe:c5:aa:1f:10:c8:14:de:fb:1f:56: 94:4f:ab:fd:ef:64:23:bc:e4:44:bb:12:df:3b:bc:78:15:d0: c0:3b:11:21:5a:2a:6a:22:c5:0b:31:14:db:6c:c5:9d:05:14: 99:a0:86:ee:1f:99:00:9b:6f:c3:13:d5:d8:e4:2d:08:07:85: fc:60:8f:57:1b:bd:4e:27:4d:6c:23:06:b8:b4:66:ed:31:3a: f4:e6:88:69:c3:b8:25:df:39:7d:80:0a:39:ec:68:c2:3a:bb: 57:b1:8d:3d:4e:25:c2:d6:40:25:ef:0c:9a:3a:d1:fd:66:fc: eb:5a:6b:d1 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDcAXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgz YWVjNWJhNDdlMzdlNGZmMWIxMTU1YzQxOTFlYTViYmU3ZWI5ZWQwHhcNMjEwMzI0 MTQzMjAyWhcNMjYwMzI0MTQzMjAyWjAzMTEwLwYDVQQDEyg2MGVkZDljZTA4ODNh YmY1ZWE1OGY4MTQ5NWE2ZGQxZDBkYThlNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtf1pnxGRZtlwQsT3DWjr63icdZpE3WUMqYy4CJUboTE22hm6 eLgOTVKLQkVce+XLFz3FMbEwL3rz+tOxVgH3DozAnz013y1SkUCi3EWmCTX4VtSh u56wgb4q9CztxYFcJ7iFIjgLHF5cjTc0Qz8mj8nYXmAT141H5lgfsYkYtc97vZ4/ m90EcyJkdYMYbub9T/4CfD4d5US3jUOXo1mjTfIskIxjrMPR2rSO/cadzDKlfZvT 0vs08hdTRRfiNv9p1ACa5tXMuz8E3ggYxdJD1zVNaoWWrubQS7duKw89apQgFney T8jpiy7/sdb1LdCm3ubPTwgUl7VXWsD5dVjRYwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFHyzaU/FtAiyDRpy2aarhI0Ufv9HMB8GA1UdIwQYMBaAFD05qTmLWmIVi7yi 3wKqIovVn0gGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODNhZWM1 YmE0N2UzN2U0ZmYxYjExNTVjNDE5MWVhNWJiZTdlYjllZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTlmZTc1N2UtOTAwZC00YWQ5LWE4ZTUtMzNhNmJm ODZmYWFiLzYwZWRkOWNlMDg4M2FiZjVlYTU4ZjgxNDk1YTZkZDFkMGRhOGU1MTcu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85OWZlNzU3ZS05MDBkLTRhZDktYThlNS0zM2E2 YmY4NmZhYWIvODNhZWM1YmE0N2UzN2U0ZmYxYjExNTVjNDE5MWVhNWJiZTdlYjll ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqr3ODANBgkqhkiG9w0BAQsFAAOCAQEAHDoUetly8NhU+7xJ alJSYvybv+YxnZSPgFFaAdlBT1sfbfq5/AiP+EMV3dMlQh0O0LqtQbZm99BO8nkm NBZ/+tHWMtZ2eFaRQpEN8ab618NN+k7MZ0EADLVwEkvdtZX5ciBqWuT332JY74O5 1P1eZcV6kKsO04oqSjryRy3w5qBGfGXpZf7Fqh8QyBTe+x9WlE+r/e9kI7zkRLsS 3zu8eBXQwDsRIVoqaiLFCzEU22zFnQUUmaCG7h+ZAJtvwxPV2OQtCAeF/GCPVxu9 TidNbCMGuLRm7TE69OaIacO4Jd85fYAKOexowjq7V7GNPU4lwtZAJe8MmjrR/Wb8 61pr0Q== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:45 2023 by rpki-client on console-fra.rpki-client.org