$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/491260ffcb9973620ddd43a3b2962c0850ca7388.roa File: 491260ffcb9973620ddd43a3b2962c0850ca7388.roa (raw, json) Hash identifier: +RN6jE+SkgHPTVa5XVJ6fUqJYJhp720TIPYlj23pszA= Subject key identifier: B4:CE:A6:D5:FE:79:96:B1:A2:E9:CF:86:87:E4:68:1C:02:7A:26:CC Certificate issuer: /CN=580830aa46930a9ed0126869d25c20fe0e806ec5 Certificate serial: 0D92CF Authority key identifier: CD:14:06:D7:74:A5:5E:B9:84:66:FE:FD:56:67:32:EE:B8:52:C8:83 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/491260ffcb9973620ddd43a3b2962c0850ca7388.roa Signing time: Wed 24 Mar 2021 22:52:15 +0000 ROA not before: Wed 24 Mar 2021 22:47:59 +0000 ROA not after: Fri 24 Mar 2023 22:47:59 +0000 asID: 13381 IP address blocks: 200.112.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/580830aa46930a9ed0126869d25c20fe0e806ec5.crl rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/580830aa46930a9ed0126869d25c20fe0e806ec5.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889551 (0xd92cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580830aa46930a9ed0126869d25c20fe0e806ec5 Validity Not Before: Mar 24 22:47:59 2021 GMT Not After : Mar 24 22:47:59 2023 GMT Subject: CN=491260ffcb9973620ddd43a3b2962c0850ca7388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:ea:17:98:73:1c:7c:df:b1:b8:14:eb:ce: 9d:e1:aa:15:a5:86:e1:9e:55:fe:81:c5:c5:29:26: 17:79:1d:a7:a0:44:5c:4f:67:78:14:fb:94:21:a8: 2c:4e:a9:09:80:30:18:95:17:b5:ee:0f:f0:65:88: 66:21:3b:e0:ec:ae:b4:62:e7:60:61:77:99:ba:f3: 28:a4:28:d5:7d:9d:8d:87:90:77:30:0e:e5:d9:5f: c4:83:65:95:4f:74:51:ab:f9:f5:86:f2:4d:e2:bc: af:9d:50:0d:45:06:56:2c:b7:c3:73:9e:1d:65:2f: e6:7c:d2:90:35:5a:af:de:78:a9:3d:fa:b7:9c:3e: 21:05:ab:dd:8c:f7:21:a7:9a:ad:c4:e6:bd:d7:80: 38:4b:52:17:e9:8c:11:69:ce:a6:b0:c5:d3:12:8a: e1:55:5e:f8:2c:84:f7:6e:8c:f2:36:e7:37:a1:39: 38:dd:16:ef:22:7b:af:96:d3:df:a3:45:fe:3c:91: e2:6f:c5:2d:8f:1f:0c:7b:a6:c9:cd:f8:99:73:36: ef:24:7b:64:9a:79:2a:7c:33:0f:58:e8:84:77:54: f4:4d:54:57:75:92:8a:b6:00:c4:5a:32:22:e6:fc: 4b:92:16:73:af:b0:5c:3e:0d:37:f0:a5:77:12:dc: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CE:A6:D5:FE:79:96:B1:A2:E9:CF:86:87:E4:68:1C:02:7A:26:CC X509v3 Authority Key Identifier: keyid:CD:14:06:D7:74:A5:5E:B9:84:66:FE:FD:56:67:32:EE:B8:52:C8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/491260ffcb9973620ddd43a3b2962c0850ca7388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/580830aa46930a9ed0126869d25c20fe0e806ec5.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.112.243.0/24 Signature Algorithm: sha256WithRSAEncryption 03:64:f7:a5:5c:5c:a5:7a:70:73:02:d9:d0:aa:c3:10:b8:a7: f2:0c:b7:48:4b:9a:9d:2f:26:99:85:5a:49:d5:fe:e3:10:8c: a6:e2:50:0b:16:d6:e6:e8:69:c8:a3:d9:48:57:35:a2:d8:73: 8a:3f:e0:36:4f:c7:e7:e9:59:b1:80:f8:e6:0e:03:b4:b5:c6: b4:b1:42:44:a7:98:f1:e8:d6:c3:e8:62:c2:d4:c1:21:14:9a: bb:48:7e:85:3b:16:21:c0:dd:1e:bd:ff:28:fa:01:66:89:f0: a9:56:01:85:bc:5b:0f:a7:8e:38:b4:df:39:ba:ea:e7:13:d5: 22:e7:90:77:c0:5e:d6:db:e5:1a:4a:de:4e:b2:6c:77:41:17: 71:60:dc:14:cc:67:a0:b0:09:1c:ee:5f:e4:9e:67:1e:89:83: 8a:7e:85:9f:09:72:60:25:11:55:53:45:fb:0b:6d:5b:4a:22: c3:68:59:58:49:bf:dc:1a:08:ba:dc:78:50:b2:99:93:c8:4f: 1f:5c:e6:46:5f:d1:09:2e:c2:7a:8f:bf:cd:7f:27:c6:3f:dc: f2:60:5f:6f:aa:9f:d5:fb:f0:32:ba:dd:d0:9c:ac:81:11:9a: b9:05:e8:e5:a8:1a:1b:eb:a3:12:e3:07:52:12:a9:06:ec:51: 73:8b:0e:62 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDZLPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU4 MDgzMGFhNDY5MzBhOWVkMDEyNjg2OWQyNWMyMGZlMGU4MDZlYzUwHhcNMjEwMzI0 MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg0OTEyNjBmZmNiOTk3 MzYyMGRkZDQzYTNiMjk2MmMwODUwY2E3Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuPbqF5hzHHzfsbgU686d4aoVpYbhnlX+gcXFKSYXeR2noERc T2d4FPuUIagsTqkJgDAYlRe17g/wZYhmITvg7K60YudgYXeZuvMopCjVfZ2Nh5B3 MA7l2V/Eg2WVT3RRq/n1hvJN4ryvnVANRQZWLLfDc54dZS/mfNKQNVqv3nipPfq3 nD4hBavdjPchp5qtxOa914A4S1IX6YwRac6msMXTEorhVV74LIT3bozyNuc3oTk4 3RbvInuvltPfo0X+PJHib8Utjx8Me6bJzfiZczbvJHtkmnkqfDMPWOiEd1T0TVRX dZKKtgDEWjIi5vxLkhZzr7BcPg038KV3EtwFPwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFLTOptX+eZaxounPhofkaBwCeibMMB8GA1UdIwQYMBaAFM0UBtd0pV65hGb+ /VZnMu64UsiDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTgwODMw YWE0NjkzMGE5ZWQwMTI2ODY5ZDI1YzIwZmUwZTgwNmVjNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOWJjNjhjMTUtMDQxMC00OGY0LWJmMTAtYjZiODUy MGViNmZkLzQ5MTI2MGZmY2I5OTczNjIwZGRkNDNhM2IyOTYyYzA4NTBjYTczODgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85YmM2OGMxNS0wNDEwLTQ4ZjQtYmYxMC1iNmI4 NTIwZWI2ZmQvNTgwODMwYWE0NjkzMGE5ZWQwMTI2ODY5ZDI1YzIwZmUwZTgwNmVj NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMhw8zANBgkqhkiG9w0BAQsFAAOCAQEAA2T3pVxcpXpwcwLZ 0KrDELin8gy3SEuanS8mmYVaSdX+4xCMpuJQCxbW5uhpyKPZSFc1othzij/gNk/H 5+lZsYD45g4DtLXGtLFCRKeY8ejWw+hiwtTBIRSau0h+hTsWIcDdHr3/KPoBZonw qVYBhbxbD6eOOLTfObrq5xPVIueQd8Be1tvlGkreTrJsd0EXcWDcFMxnoLAJHO5f 5J5nHomDin6FnwlyYCURVVNF+wttW0oiw2hZWEm/3BoIutx4ULKZk8hPH1zmRl/R CS7Ceo+/zX8nxj/c8mBfb6qf1fvwMrrd0JysgRGauQXo5agaG+ujEuMHUhKpBuxR c4sOYg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:00 2023 by rpki-client on console-ams.rpki-client.org