$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS14709.roa File: AS14709.roa (raw, json) Hash identifier: DY9wYVthJ2NS5JWFm+Br1HVXBXFOazTS87nd6fMR5T4= Subject key identifier: FA:4A:16:1D:72:45:9E:02:3C:BE:21:82:86:C3:1C:1F:95:14:41:63 Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 1A0EF6C954BC5C962BFCAB2B4393DA37FC23C313 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS14709.roa Signing time: Tue 05 Mar 2024 17:54:55 +0000 ROA not before: Tue 05 Mar 2024 17:49:55 +0000 ROA not after: Tue 04 Mar 2025 17:54:55 +0000 asID: 14709 IP address blocks: 138.186.88.0/22 maxlen: 24 181.197.52.0/22 maxlen: 24 181.197.124.0/22 maxlen: 24 190.57.32.0/20 maxlen: 24 190.140.250.0/24 maxlen: 24 190.141.31.0/24 maxlen: 24 190.141.172.0/24 maxlen: 24 200.46.1.0/24 maxlen: 24 200.108.32.0/19 maxlen: 24 2800:ce0::/32 maxlen: 56 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0e:f6:c9:54:bc:5c:96:2b:fc:ab:2b:43:93:da:37:fc:23:c3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Mar 5 17:49:55 2024 GMT Not After : Mar 4 17:54:55 2025 GMT Subject: CN=FA4A161D72459E023CBE218286C31C1F95144163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:a7:07:56:44:fa:89:58:62:7e:eb:44:53: 81:4c:30:c2:21:8c:4a:b9:96:63:8a:c0:de:38:a6: 83:51:e5:01:5c:c5:e8:1c:8c:60:91:e1:bd:df:86: a9:8f:e2:ec:3e:05:ea:7e:2e:ea:3d:5c:94:36:b7: 89:0a:6c:33:e2:64:d0:07:9b:db:05:ec:6d:81:06: ec:6e:92:dc:a4:f7:81:5e:73:2e:31:4b:87:73:90: 01:c7:03:49:0c:4a:18:31:b8:9e:dc:a1:3b:02:47: 1a:6b:69:d4:45:c6:9b:a7:e9:25:1b:eb:87:5b:ec: f3:bd:c1:ec:f3:fd:f4:43:36:ac:60:46:eb:e0:8e: 5b:0a:ae:33:e0:41:e0:86:56:11:f3:c4:26:f8:a8: ed:08:44:94:8e:b6:69:f6:a3:c8:2a:29:a8:f9:b9: 13:ed:83:1c:38:d6:e0:07:fc:51:14:7e:17:d8:5f: 66:01:54:cd:70:81:ef:67:3b:ef:4b:b5:54:58:04: 9d:d5:91:a3:09:61:e6:0d:f6:a2:c3:6d:ae:06:bb: bb:e1:b7:d9:2e:6c:16:2c:22:a2:21:06:cc:25:22: 22:91:37:b9:dc:dc:e5:a2:6b:ba:90:4c:69:58:2f: 18:a5:0c:0e:96:0f:eb:3d:6b:37:ed:f9:02:04:8f: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:16:1D:72:45:9E:02:3C:BE:21:82:86:C3:1C:1F:95:14:41:63 X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS14709.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.88.0/22 181.197.52.0/22 181.197.124.0/22 190.57.32.0/20 190.140.250.0/24 190.141.31.0/24 190.141.172.0/24 200.46.1.0/24 200.108.32.0/19 IPv6: 2800:ce0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:ff:68:ec:16:ec:75:2e:e5:4e:7c:c9:a9:85:22:27:25:70: bc:99:84:e8:3f:69:96:71:4d:69:09:e1:04:1b:d5:13:17:b7: e6:53:88:95:0a:c0:3c:57:ce:14:38:f9:59:94:ab:64:3d:55: d5:c2:36:85:a7:9f:e8:c0:d7:32:8b:b7:da:f9:f4:26:e7:95: 29:52:b3:b4:14:dc:27:22:2d:04:7a:6e:65:84:6e:0b:25:7a: 2a:8e:49:bf:ad:cd:ff:8b:82:1b:ef:7a:7e:4a:eb:6c:76:6b: d7:d2:b9:53:a2:5f:bc:0a:ef:82:4e:72:ec:15:83:cb:a7:f7: 1d:d6:e1:01:e2:ae:1f:27:67:37:c5:9e:6e:73:e6:74:b6:7f: 98:90:a4:5e:18:46:a1:1e:ef:28:fc:99:d8:6c:a9:82:94:55: 11:4d:ba:9a:2f:ef:f8:db:0b:20:4c:53:0f:b1:43:be:06:8d: 13:47:03:84:9f:dd:e7:1a:38:6c:8e:4e:04:c7:1d:78:16:51: a3:33:fe:21:da:ad:48:51:6c:74:63:a5:f5:ce:9b:e0:80:39: d3:73:c4:6a:80:28:7c:b4:c1:8f:8b:88:3f:82:f0:f7:07:58: e3:08:7a:c2:9d:b7:f0:db:59:f9:03:5d:db:26:3c:01:38:e2: e3:3d:36:16 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUGg72yVS8XJYr/KsrQ5PaN/wjwxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNDAzMDUxNzQ5NTVaFw0yNTAzMDQxNzU0NTVaMDMxMTAvBgNV BAMTKEZBNEExNjFENzI0NTlFMDIzQ0JFMjE4Mjg2QzMxQzFGOTUxNDQxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HKcHVkT6iVhifutEU4FMMMIh jEq5lmOKwN44poNR5QFcxegcjGCR4b3fhqmP4uw+Bep+Luo9XJQ2t4kKbDPiZNAH m9sF7G2BBuxuktyk94Fecy4xS4dzkAHHA0kMShgxuJ7coTsCRxpradRFxpun6SUb 64db7PO9wezz/fRDNqxgRuvgjlsKrjPgQeCGVhHzxCb4qO0IRJSOtmn2o8gqKaj5 uRPtgxw41uAH/FEUfhfYX2YBVM1wge9nO+9LtVRYBJ3VkaMJYeYN9qLDba4Gu7vh t9kubBYsIqIhBswlIiKRN7nc3OWia7qQTGlYLxilDA6WD+s9azft+QIEjw0DAgMB AAGjggLXMIIC0zAdBgNVHQ4EFgQU+koWHXJFngI8viGChsMcH5UUQWMwHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMxNDcwOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBeBggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAoq6WAME ArXFNAMEArXFfAMEBL45IAMEAL6M+gMEAL6NHwMEAL6NrAMEAMguAQMEBchsIDAN BAIAAjAHAwUAKAAM4DANBgkqhkiG9w0BAQsFAAOCAQEAXv9o7BbsdS7lTnzJqYUi JyVwvJmE6D9plnFNaQnhBBvVExe35lOIlQrAPFfOFDj5WZSrZD1V1cI2haef6MDX Mou32vn0JueVKVKztBTcJyItBHpuZYRuCyV6Ko5Jv63N/4uCG+96fkrrbHZr19K5 U6JfvArvgk5y7BWDy6f3HdbhAeKuHydnN8WebnPmdLZ/mJCkXhhGoR7vKPyZ2Gyp gpRVEU26mi/v+NsLIExTD7FDvgaNE0cDhJ/d5xo4bI5OBMcdeBZRozP+IdqtSFFs dGOl9c6b4IA503PEaoAofLTBj4uIP4Lw9wdY4wh6wp238NtZ+QNd2yY8ATji4z02 Fg== -----END CERTIFICATE-----Generated at Thu May 16 15:20:36 2024 by rpki-client on console-ams.rpki-client.org