$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/7902ac60683cd4a2ff79711577e631496a8b8801.roa File: 7902ac60683cd4a2ff79711577e631496a8b8801.roa (raw, json) Hash identifier: fsl7UR+7AUPFyKRI+0po/neb5gACfbtTwZfn0IYzAIc= Subject key identifier: AB:BD:73:DF:D6:0C:D6:AB:5F:BA:34:1A:CE:0D:23:8B:4C:F3:13:8A Certificate issuer: /CN=54a3bca48dfc42afc7c19f9e5e976a803425265b Certificate serial: 11C10E Authority key identifier: 04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/7902ac60683cd4a2ff79711577e631496a8b8801.roa Signing time: Mon 17 Apr 2023 08:30:00 +0000 ROA not before: Sun 16 Apr 2023 08:30:00 +0000 ROA not after: Tue 15 Apr 2025 08:30:00 +0000 asID: 269894 IP address blocks: 45.191.96.0/22 maxlen: 24 2803:44e0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.crl rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 20:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163534 (0x11c10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a3bca48dfc42afc7c19f9e5e976a803425265b Validity Not Before: Apr 16 08:30:00 2023 GMT Not After : Apr 15 08:30:00 2025 GMT Subject: CN=7902ac60683cd4a2ff79711577e631496a8b8801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:59:9b:5d:b6:70:4c:5f:cb:6a:14:49:38: 81:a9:d1:07:64:41:6d:43:1f:69:37:96:e9:af:c1: 73:4f:f5:61:b5:06:bb:fb:b5:85:42:08:7b:3c:c1: 17:89:c1:cc:8f:a5:25:76:0d:36:a0:31:37:0e:6e: 59:78:75:d2:09:c5:d4:67:ea:05:97:9d:a2:72:1d: 62:ff:de:3f:ec:be:4c:38:b1:49:6d:0c:99:c6:a8: 8c:50:86:66:67:c2:bf:4f:11:df:62:23:b6:3b:61: 94:be:c4:dd:66:fb:0c:a8:77:37:8e:46:76:39:8c: b1:82:36:04:ae:cb:22:2e:07:f7:2e:1d:00:44:18: e7:f5:3d:ed:3f:ee:2e:e1:dc:cc:16:d8:20:ad:35: 0d:60:88:34:f8:af:c6:f8:55:b9:b4:e7:ac:a9:32: 80:64:d0:99:99:8b:15:10:17:47:1e:02:1c:b1:14: 67:58:be:e5:56:d7:3d:56:36:d9:7e:68:03:c2:4c: 1b:3c:3e:4d:5b:5c:33:b4:3a:a7:bf:56:8b:ab:eb: f5:48:c6:14:01:bc:da:42:94:2b:e8:16:a3:f7:f4: b8:f7:1f:29:68:2d:ae:05:7a:c3:a2:a4:de:0f:58: 91:6c:e3:f7:ee:36:40:d8:d5:f8:7d:d3:e9:04:c9: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BD:73:DF:D6:0C:D6:AB:5F:BA:34:1A:CE:0D:23:8B:4C:F3:13:8A X509v3 Authority Key Identifier: keyid:04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/7902ac60683cd4a2ff79711577e631496a8b8801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.96.0/22 IPv6: 2803:44e0::/32 Signature Algorithm: sha256WithRSAEncryption 12:a5:85:80:b0:50:8b:e4:89:1d:78:83:3a:fc:7b:19:13:32: a5:25:15:d0:a2:9c:2b:de:6d:80:ac:21:67:9b:96:a8:6c:34: b1:a3:c4:a1:5c:42:ee:4c:bc:7c:9e:79:e4:8e:b6:09:76:73: 39:b1:df:1d:e0:a0:bd:ca:d0:5e:f7:3a:c4:f1:81:9c:a2:ce: 31:12:44:f2:98:cb:f2:ae:82:80:7b:cb:f8:de:49:f7:4d:4c: 9b:53:33:af:cb:73:42:9f:92:44:fd:33:b8:ac:c8:f1:7b:70: 48:b0:ed:d3:05:4c:38:eb:ce:8e:56:a6:09:76:cc:83:66:77: 6a:93:96:c4:e3:8f:49:86:7b:36:62:6c:12:b4:ff:1c:2b:1f: 3f:2d:6d:3d:58:a7:e0:57:d2:e5:99:0a:3a:66:bd:f9:99:10: c5:83:59:ed:6e:72:f5:b5:8b:d8:03:7b:42:7d:ee:e7:2c:35: 8d:9c:cc:64:13:72:0b:1f:b0:c7:1e:73:e8:d8:56:ed:1a:37: 9d:a9:26:45:12:15:af:19:dc:48:a6:e8:41:b7:28:1c:a1:f5: 9d:aa:d3:8b:2d:60:03:24:86:83:30:de:6f:66:47:98:d2:29: 7f:32:d2:22:8d:0e:69:ba:21:d3:cc:55:f7:39:84:be:93:56: fe:42:6b:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDEcEOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0 YTNiY2E0OGRmYzQyYWZjN2MxOWY5ZTVlOTc2YTgwMzQyNTI2NWIwHhcNMjMwNDE2 MDgzMDAwWhcNMjUwNDE1MDgzMDAwWjAzMTEwLwYDVQQDEyg3OTAyYWM2MDY4M2Nk NGEyZmY3OTcxMTU3N2U2MzE0OTZhOGI4ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjgtZm122cExfy2oUSTiBqdEHZEFtQx9pN5bpr8FzT/VhtQa7 +7WFQgh7PMEXicHMj6Uldg02oDE3Dm5ZeHXSCcXUZ+oFl52ich1i/94/7L5MOLFJ bQyZxqiMUIZmZ8K/TxHfYiO2O2GUvsTdZvsMqHc3jkZ2OYyxgjYErssiLgf3Lh0A RBjn9T3tP+4u4dzMFtggrTUNYIg0+K/G+FW5tOesqTKAZNCZmYsVEBdHHgIcsRRn WL7lVtc9VjbZfmgDwkwbPD5NW1wztDqnv1aLq+v1SMYUAbzaQpQr6Baj9/S49x8p aC2uBXrDoqTeD1iRbOP37jZA2NX4fdPpBMn6OwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFKu9c9/WDNarX7o0Gs4NI4tM8xOKMB8GA1UdIwQYMBaAFARhR4VRDPaRWuPE PJxZzh/jkmx9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTRhM2Jj YTQ4ZGZjNDJhZmM3YzE5ZjllNWU5NzZhODAzNDI1MjY1Yi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOWMzNDQ1ZmQtMjMwOC00YTA2LWFmMWYtZTgxNDNh NDlkNDdlLzc5MDJhYzYwNjgzY2Q0YTJmZjc5NzExNTc3ZTYzMTQ5NmE4Yjg4MDEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85YzM0NDVmZC0yMzA4LTRhMDYtYWYxZi1lODE0 M2E0OWQ0N2UvNTRhM2JjYTQ4ZGZjNDJhZmM3YzE5ZjllNWU5NzZhODAzNDI1MjY1 Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi2/YDANBAIAAjAHAwUAKANE4DANBgkqhkiG9w0BAQsFAAOC AQEAEqWFgLBQi+SJHXiDOvx7GRMypSUV0KKcK95tgKwhZ5uWqGw0saPEoVxC7ky8 fJ555I62CXZzObHfHeCgvcrQXvc6xPGBnKLOMRJE8pjL8q6CgHvL+N5J901Mm1Mz r8tzQp+SRP0zuKzI8XtwSLDt0wVMOOvOjlamCXbMg2Z3apOWxOOPSYZ7NmJsErT/ HCsfPy1tPVin4FfS5ZkKOma9+ZkQxYNZ7W5y9bWL2AN7Qn3u5yw1jZzMZBNyCx+w xx5z6NhW7Ro3nakmRRIVrxncSKboQbcoHKH1narTiy1gAySGgzDeb2ZHmNIpfzLS Io0Oaboh08xV9zmEvpNW/kJrdg== -----END CERTIFICATE-----Generated at Wed Jul 19 22:21:09 2023 by rpki-client on console-fra.rpki-client.org