$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS21599.roa File: AS21599.roa (raw, json) Hash identifier: sgC90yI6WlRxcyKZfoYNbnw/CMC+u6HjNzG00qUJIck= Subject key identifier: 6A:02:20:A9:93:7F:03:03:EB:DE:06:95:03:83:6B:E0:4A:6E:3B:2A Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E Certificate serial: 6E12D96E8273CE38D6C32B022138AA755A975252 Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS21599.roa Signing time: Tue 05 Mar 2024 17:54:54 +0000 ROA not before: Tue 05 Mar 2024 17:49:54 +0000 ROA not after: Tue 04 Mar 2025 17:54:54 +0000 asID: 21599 IP address blocks: 190.5.224.0/19 maxlen: 24 190.122.160.0/20 maxlen: 24 200.46.0.0/16 maxlen: 24 200.90.128.0/20 maxlen: 24 200.115.128.0/19 maxlen: 24 201.218.192.0/18 maxlen: 24 2803:600::/32 maxlen: 56 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 May 2024 01:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:d9:6e:82:73:ce:38:d6:c3:2b:02:21:38:aa:75:5a:97:52:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Validity Not Before: Mar 5 17:49:54 2024 GMT Not After : Mar 4 17:54:54 2025 GMT Subject: CN=6A0220A9937F0303EBDE069503836BE04A6E3B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:10:df:10:0e:0e:24:76:0d:4e:d8:4f:b2: cd:54:64:ef:01:89:bc:61:95:98:87:7d:4c:4e:fb: 24:c0:4a:f7:1f:f3:9a:3b:a5:74:2d:61:c3:e3:93: aa:18:62:ae:03:ff:8e:90:c9:33:74:f3:eb:43:ca: 12:00:a0:d4:e9:f9:95:0e:0e:0c:1c:01:2d:8f:2a: b2:98:b2:65:4a:8a:fe:6a:4e:21:83:e1:eb:a3:1a: c0:31:f0:58:63:49:80:20:26:f9:ae:c8:57:f4:a4: bc:e0:c6:68:7e:87:2e:7c:8e:c6:db:d0:2a:17:fa: 46:39:db:83:76:4f:8a:e8:07:d4:c1:99:91:2a:86: e7:78:0d:0a:e4:07:3a:c7:16:ac:e8:94:5b:03:44: a4:6a:cd:1b:bb:56:c1:00:42:55:8c:06:e2:81:f5: cf:e4:10:2e:26:d4:2f:2e:e0:43:32:1c:a0:a1:7d: 92:6d:7c:55:cd:4b:75:53:8b:66:c8:b5:f3:97:e6: a7:6a:4f:83:54:85:d5:cf:d6:ea:43:7d:f9:65:2e: ef:5a:98:2f:4f:08:a6:52:ac:e4:9c:c7:c8:c6:dc: 46:f4:49:40:7c:63:a7:ac:49:9b:9c:d1:7d:33:d0: b0:b5:61:be:f1:32:d9:19:af:eb:90:dc:c8:67:86: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:02:20:A9:93:7F:03:03:EB:DE:06:95:03:83:6B:E0:4A:6E:3B:2A X509v3 Authority Key Identifier: keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS21599.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.5.224.0/19 190.122.160.0/20 200.46.0.0/16 200.90.128.0/20 200.115.128.0/19 201.218.192.0/18 IPv6: 2803:600::/32 Signature Algorithm: sha256WithRSAEncryption 06:65:50:78:25:31:b2:4e:8b:14:42:6c:69:c7:a2:3c:11:00: 2f:4d:3f:c3:5f:e1:8c:6a:d9:2e:29:76:6d:84:1e:c5:8d:84: 0f:33:e5:c6:41:3a:9f:39:1b:cf:c2:be:9a:33:9e:80:02:ce: ad:9b:6b:40:9f:60:a9:f7:98:f6:e6:eb:1b:2e:31:bd:68:a2: 2b:25:b3:f4:7a:01:c5:85:e9:d6:80:43:8f:74:48:dd:42:78: 61:a2:95:a5:8b:b0:4f:cb:23:37:a3:94:35:d0:25:99:eb:58: df:64:23:fc:d8:3b:35:7c:f9:26:e7:51:79:54:3e:4f:68:53: c7:c3:cc:0a:dd:82:30:bb:8c:dc:b9:7c:e2:b7:ce:1c:71:c5: 72:55:06:e9:c5:28:c1:7f:3d:57:7e:e0:a9:11:f9:f8:dd:ae: 73:01:dd:30:cd:64:53:36:8d:c1:83:86:07:79:d0:41:ae:81: d3:a1:7c:9c:2b:00:68:b6:fb:52:b3:69:bb:84:78:55:2e:a3: ea:69:69:76:85:72:68:b2:dc:9d:da:35:19:50:ba:58:a1:69: 28:ab:30:be:28:18:11:21:c3:ed:db:d1:16:36:04:00:e2:6c: 48:1d:d0:94:6f:48:47:68:30:1d:97:1f:aa:81:34:ec:3b:6f: a3:26:1b:a3 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIUbhLZboJzzjjWwysCITiqdVqXUlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0 QzQ3NEIxRTAeFw0yNDAzMDUxNzQ5NTRaFw0yNTAzMDQxNzU0NTRaMDMxMTAvBgNV BAMTKDZBMDIyMEE5OTM3RjAzMDNFQkRFMDY5NTAzODM2QkUwNEE2RTNCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1RDfEA4OJHYNTthPss1UZO8B ibxhlZiHfUxO+yTASvcf85o7pXQtYcPjk6oYYq4D/46QyTN08+tDyhIAoNTp+ZUO DgwcAS2PKrKYsmVKiv5qTiGD4eujGsAx8FhjSYAgJvmuyFf0pLzgxmh+hy58jsbb 0CoX+kY524N2T4roB9TBmZEqhud4DQrkBzrHFqzolFsDRKRqzRu7VsEAQlWMBuKB 9c/kEC4m1C8u4EMyHKChfZJtfFXNS3VTi2bItfOX5qdqT4NUhdXP1upDffllLu9a mC9PCKZSrOScx8jG3Eb0SUB8Y6esSZuc0X0z0LC1Yb7xMtkZr+uQ3Mhnhpe7AgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUagIgqZN/AwPr3gaVA4Nr4EpuOyowHwYDVR0j BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyMTU5OS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8MDowKQQCAAEwIwMEBb4F4AME BL56oAMDAMguAwQEyFqAAwQFyHOAAwQGydrAMA0EAgACMAcDBQAoAwYAMA0GCSqG SIb3DQEBCwUAA4IBAQAGZVB4JTGyTosUQmxpx6I8EQAvTT/DX+GMatkuKXZthB7F jYQPM+XGQTqfORvPwr6aM56AAs6tm2tAn2Cp95j25usbLjG9aKIrJbP0egHFhenW gEOPdEjdQnhhopWli7BPyyM3o5Q10CWZ61jfZCP82Ds1fPkm51F5VD5PaFPHw8wK 3YIwu4zcuXzit84cccVyVQbpxSjBfz1XfuCpEfn43a5zAd0wzWRTNo3Bg4YHedBB roHToXycKwBotvtSs2m7hHhVLqPqaWl2hXJostyd2jUZULpYoWkoqzC+KBgRIcPt 29EWNgQA4mxIHdCUb0hHaDAdlx+qgTTsO2+jJhuj -----END CERTIFICATE-----Generated at Wed May 8 15:17:53 2024 by rpki-client on console-fra.rpki-client.org