$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa File: ebff22e35be9c68568db1565ba5291a2689c006b.roa (raw, json) Hash identifier: 98J9p7HcCtRghKLHFsYln0bzTgFQWx2wdofh45dC2rE= Subject key identifier: 2B:F3:EA:16:90:0C:DC:A3:75:C5:4A:DD:4E:9F:B6:CB:55:3A:1A:4B Certificate issuer: /CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61 Certificate serial: 0C9957 Authority key identifier: 05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa Signing time: Wed 24 Mar 2021 14:34:15 +0000 ROA not before: Wed 24 Mar 2021 14:34:15 +0000 ROA not after: Tue 24 Mar 2026 14:34:15 +0000 asID: 40676 IP address blocks: 190.110.120.0/21 maxlen: 24 201.159.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.crl rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 07:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825687 (0xc9957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61 Validity Not Before: Mar 24 14:34:15 2021 GMT Not After : Mar 24 14:34:15 2026 GMT Subject: CN=ebff22e35be9c68568db1565ba5291a2689c006b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:81:4d:49:8d:36:90:59:7c:96:72:d1:4d:f2: 82:07:c3:b7:0e:77:67:63:93:ba:cb:41:5d:bc:a7: a3:54:3c:a8:02:9a:fe:22:b4:9d:44:92:8a:68:45: 78:8f:58:b8:e1:fc:b6:21:96:93:e9:0b:16:f9:c3: b7:89:7c:9e:41:c3:a7:97:c1:46:ef:fb:0a:6f:b5: 0e:30:58:41:df:0b:97:27:5c:6d:5b:68:d9:7a:57: 9e:57:ea:cb:c3:92:66:4e:4f:81:d9:af:d8:f8:56: 45:5b:17:b3:5c:91:4d:c7:3f:07:cb:b7:3c:9c:8f: b0:df:41:9a:47:30:4c:c5:3f:81:45:2e:b1:d1:4d: 2a:17:bf:94:a0:32:24:76:28:f1:47:cb:fe:8e:79: eb:4f:38:6c:11:f0:10:21:7b:b7:4f:23:eb:34:d9: c6:b8:56:95:13:28:db:c9:06:b0:69:5c:c0:6e:18: b0:70:1a:dc:5b:7f:6f:3a:55:c3:3d:74:54:ec:c5: 1e:42:5d:6f:1e:0c:b7:cc:7d:39:3d:c9:d6:9d:cd: 4d:6f:a1:d1:1a:05:d3:94:61:43:db:35:ac:b6:12: 7d:ba:97:ea:3c:3f:c3:12:42:47:57:2e:d1:1e:95: 18:ee:5c:3a:7d:25:8d:29:11:82:2d:44:d8:c3:b1: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F3:EA:16:90:0C:DC:A3:75:C5:4A:DD:4E:9F:B6:CB:55:3A:1A:4B X509v3 Authority Key Identifier: keyid:05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.110.120.0/21 201.159.168.0/21 Signature Algorithm: sha256WithRSAEncryption 97:0f:5b:00:9a:b8:e1:6f:d8:c0:27:c8:29:0e:a1:ec:70:08: 14:58:ab:73:aa:6b:dc:e0:8c:b5:ee:14:80:13:c4:16:1f:a4: 4d:87:08:bb:ce:68:1b:03:69:82:e7:b1:1f:22:91:9c:12:08: 2a:5a:1e:51:22:36:19:06:6f:a4:63:7c:67:b0:cd:6d:76:5d: 76:07:7b:e3:fa:e9:ed:f1:07:92:54:56:65:3e:d0:8c:27:47: 26:f3:ae:eb:da:76:65:53:3a:74:bf:db:34:5e:bf:2a:2a:bb: 84:a9:71:59:02:63:d4:aa:9a:67:38:19:ff:0f:eb:04:a2:1a: 67:d3:de:9e:21:7a:bc:22:0a:7f:16:69:6c:b2:a0:d4:b0:1a: c1:00:75:f4:f3:d0:72:35:a7:b5:72:be:39:a9:59:bf:3d:b8: ca:fe:8a:67:88:f4:1f:77:34:9e:4f:55:ed:78:b7:30:38:6a: 07:58:6b:f2:e0:09:16:69:66:1d:ca:09:24:78:1a:1f:82:28: 5a:88:bd:12:20:35:b5:77:80:82:c3:5d:23:67:1e:75:d1:53: a9:78:86:de:2d:8b:ea:19:c7:7d:f0:ff:1d:df:34:15:30:e6: 0d:2f:67:5f:ad:8e:4d:98:a8:4c:92:d1:23:fa:c2:be:87:42: fc:54:f0:30 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDDJlXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk MjdiODk4ZDFlYTdmOTRjZDU5MzJhNjY1ODM1YzdlZjQ2NTBmNjEwHhcNMjEwMzI0 MTQzNDE1WhcNMjYwMzI0MTQzNDE1WjAzMTEwLwYDVQQDEyhlYmZmMjJlMzViZTlj Njg1NjhkYjE1NjViYTUyOTFhMjY4OWMwMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgoFNSY02kFl8lnLRTfKCB8O3DndnY5O6y0FdvKejVDyoApr+ IrSdRJKKaEV4j1i44fy2IZaT6QsW+cO3iXyeQcOnl8FG7/sKb7UOMFhB3wuXJ1xt W2jZeleeV+rLw5JmTk+B2a/Y+FZFWxezXJFNxz8Hy7c8nI+w30GaRzBMxT+BRS6x 0U0qF7+UoDIkdijxR8v+jnnrTzhsEfAQIXu3TyPrNNnGuFaVEyjbyQawaVzAbhiw cBrcW39vOlXDPXRU7MUeQl1vHgy3zH05PcnWnc1Nb6HRGgXTlGFD2zWsthJ9upfq PD/DEkJHVy7RHpUY7lw6fSWNKRGCLUTYw7ExHQIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFCvz6haQDNyjdcVK3U6ftstVOhpLMB8GA1UdIwQYMBaAFAXCS8t2ouhlj1FB rD0/t8Clsql4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWQyN2I4 OThkMWVhN2Y5NGNkNTkzMmE2NjU4MzVjN2VmNDY1MGY2MS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTAxMDM2ZjYtZDRhMC00MDgzLWE3MmMtM2ZjODk0 ZTViNDdiL2ViZmYyMmUzNWJlOWM2ODU2OGRiMTU2NWJhNTI5MWEyNjg5YzAwNmIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hMDEwMzZmNi1kNGEwLTQwODMtYTcyYy0zZmM4 OTRlNWI0N2IvYWQyN2I4OThkMWVhN2Y5NGNkNTkzMmE2NjU4MzVjN2VmNDY1MGY2 MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEA75ueAMEA8mfqDANBgkqhkiG9w0BAQsFAAOCAQEAlw9bAJq4 4W/YwCfIKQ6h7HAIFFirc6pr3OCMte4UgBPEFh+kTYcIu85oGwNpguexHyKRnBII KloeUSI2GQZvpGN8Z7DNbXZddgd74/rp7fEHklRWZT7QjCdHJvOu69p2ZVM6dL/b NF6/Kiq7hKlxWQJj1KqaZzgZ/w/rBKIaZ9PeniF6vCIKfxZpbLKg1LAawQB19PPQ cjWntXK+OalZvz24yv6KZ4j0H3c0nk9V7Xi3MDhqB1hr8uAJFmlmHcoJJHgaH4Io Woi9EiA1tXeAgsNdI2ceddFTqXiG3i2L6hnHffD/Hd80FTDmDS9nX62OTZioTJLR I/rCvodC/FTwMA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:46 2023 by rpki-client on console-fra.rpki-client.org