$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa File: 1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa (raw, json) Hash identifier: KLzU+7MMPxrngaLGz1zUZ4XcT/8IqcQgFtmPhvf56a0= Subject key identifier: 26:BC:4B:EB:9B:04:27:D4:69:0D:F6:7F:B0:27:CB:41:18:9D:00:BF Certificate issuer: /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706 Certificate serial: 1260C5 Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa Signing time: Thu 07 Oct 2021 04:17:11 +0000 ROA not before: Thu 30 Sep 2021 03:00:00 +0000 ROA not after: Sat 30 Sep 2023 03:00:00 +0000 asID: 3549 IP address blocks: 170.83.216.0/22 maxlen: 24 2803:b2c0::/32 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204421 (0x1260c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706 Validity Not Before: Sep 30 03:00:00 2021 GMT Not After : Sep 30 03:00:00 2023 GMT Subject: CN=1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:a2:1a:d7:c0:ac:2e:3b:27:c4:a9:ed:20: cd:50:3f:52:0e:b6:4a:4a:15:35:db:2b:7d:bf:20: 96:e0:1d:08:38:9c:01:65:83:a0:cc:82:a7:e3:00: 41:18:ba:ef:60:49:f5:4a:b5:c1:15:83:df:ce:6a: 75:5d:a1:e6:af:cf:b0:33:4b:b9:48:c4:4e:f2:78: bc:b5:80:e1:34:54:e0:7e:6c:83:03:2d:4c:99:a5: 8c:65:8b:7c:1d:7b:c5:d3:26:40:58:e5:39:76:b9: eb:1b:10:8f:04:64:e6:88:90:44:99:f0:84:ed:d9: d8:79:14:a8:f8:53:b0:bb:8f:00:10:5d:09:50:38: f5:11:ef:16:09:82:b5:e8:aa:84:01:77:d3:71:22: cb:21:6e:03:84:78:12:18:b8:3f:5e:ee:5c:d3:7f: 69:43:61:1d:76:81:ec:da:df:28:52:0b:d5:79:46: ad:55:fe:83:05:e8:7d:d5:33:80:05:5e:1d:a7:e2: 83:a9:24:b1:db:a3:02:40:28:8f:c5:cc:02:f6:65: 4a:5a:10:c8:de:c7:a0:e2:53:ae:4d:a1:42:f6:6f: 18:3e:cc:5b:e7:94:02:99:4e:4e:21:ed:ba:87:d2: 32:7d:56:c7:fe:53:bf:5b:08:c4:7a:fc:00:17:46: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BC:4B:EB:9B:04:27:D4:69:0D:F6:7F:B0:27:CB:41:18:9D:00:BF X509v3 Authority Key Identifier: keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/1aaa0a42af67ef07c5b4f43bc7fbad0c464aec7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.216.0/22 IPv6: 2803:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption 77:f0:89:8c:7e:7b:42:fd:a4:ca:84:ba:93:f9:5a:4a:11:fd: 0d:f6:ff:e3:64:eb:cd:a0:4b:f3:4b:c0:e7:d9:c8:c4:52:80: 02:1f:08:fb:b5:15:e7:a3:f2:96:49:b2:75:ef:84:df:5f:d7: 28:ba:13:92:89:80:a7:70:1c:3a:61:ef:fd:a7:ec:f7:a4:d0: 72:65:b2:9f:89:47:4b:fd:66:d7:32:cd:f0:31:0e:c2:6e:c0: e6:55:98:da:5d:64:aa:c0:1b:93:a6:2c:1c:10:15:ee:6a:73: 08:bc:24:2a:84:8b:52:c4:71:15:58:bc:22:55:22:27:6e:a1: 9b:03:89:ec:f3:d6:51:ce:b6:2e:bb:e7:50:0d:20:de:05:a7: 18:91:ae:c6:88:fb:01:99:6e:a3:d3:54:c2:48:b2:bd:b1:b3: 84:80:00:58:d4:54:50:e2:fc:b1:39:6f:6b:d1:c1:39:b4:a6: 84:26:3f:5e:1d:27:d2:01:1b:aa:ff:2b:82:c6:1b:0c:d2:a8: bb:5f:97:d0:7a:44:73:45:17:8d:a8:1b:e6:8c:ab:40:ac:18: 72:6f:5c:1a:f7:70:ae:ad:3b:04:02:24:a1:b1:b3:99:ac:a9: b4:63:9e:e2:de:75:f8:01:f0:db:5e:69:ab:fa:01:83:00:d9: bd:92:26:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDEmDFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0 YTU4MmY2Yzc4MDdmNWZkZDMxYjY5YWUyNzBmODVkMDBjMzk3MDYwHhcNMjEwOTMw MDMwMDAwWhcNMjMwOTMwMDMwMDAwWjAzMTEwLwYDVQQDEygxYWFhMGE0MmFmNjdl ZjA3YzViNGY0M2JjN2ZiYWQwYzQ2NGFlYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAv7miGtfArC47J8Sp7SDNUD9SDrZKShU12yt9vyCW4B0IOJwB ZYOgzIKn4wBBGLrvYEn1SrXBFYPfzmp1XaHmr8+wM0u5SMRO8ni8tYDhNFTgfmyD Ay1MmaWMZYt8HXvF0yZAWOU5drnrGxCPBGTmiJBEmfCE7dnYeRSo+FOwu48AEF0J UDj1Ee8WCYK16KqEAXfTcSLLIW4DhHgSGLg/Xu5c039pQ2EddoHs2t8oUgvVeUat Vf6DBeh91TOABV4dp+KDqSSx26MCQCiPxcwC9mVKWhDI3seg4lOuTaFC9m8YPsxb 55QCmU5OIe26h9IyfVbH/lO/WwjEevwAF0Y/6wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFCa8S+ubBCfUaQ32f7Any0EYnQC/MB8GA1UdIwQYMBaAFGUKgwJwZrHds66C FoPPNNKLdGZ7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjRhNTgy ZjZjNzgwN2Y1ZmRkMzFiNjlhZTI3MGY4NWQwMGMzOTcwNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOWFlYmVkNjktMzBkZS00MjYyLWE0OTQtZDI2MmIz M2MyYzljLzFhYWEwYTQyYWY2N2VmMDdjNWI0ZjQzYmM3ZmJhZDBjNDY0YWVjN2Eu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85YWViZWQ2OS0zMGRlLTQyNjItYTQ5NC1kMjYy YjMzYzJjOWMvZjRhNTgyZjZjNzgwN2Y1ZmRkMzFiNjlhZTI3MGY4NWQwMGMzOTcw Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAqpT2DANBAIAAjAHAwUAKAOywDANBgkqhkiG9w0BAQsFAAOC AQEAd/CJjH57Qv2kyoS6k/laShH9Dfb/42TrzaBL80vA59nIxFKAAh8I+7UV56Py lkmyde+E31/XKLoTkomAp3AcOmHv/afs96TQcmWyn4lHS/1m1zLN8DEOwm7A5lWY 2l1kqsAbk6YsHBAV7mpzCLwkKoSLUsRxFVi8IlUiJ26hmwOJ7PPWUc62LrvnUA0g 3gWnGJGuxoj7AZluo9NUwkiyvbGzhIAAWNRUUOL8sTlva9HBObSmhCY/Xh0n0gEb qv8rgsYbDNKou1+X0HpEc0UXjagb5oyrQKwYcm9cGvdwrq07BAIkobGzmayptGOe 4t51+AHw215pq/oBgwDZvZIm/g== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:45 2023 by rpki-client on console-fra.rpki-client.org