$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/6529e9c5f9a97744d7cd05d20744bec9abb75dd0.roa File: 6529e9c5f9a97744d7cd05d20744bec9abb75dd0.roa (raw, json) Hash identifier: N8a7D1ICTLZ0LDCcoQvC+CFZagsoD9eoJiTicBaKfME= Subject key identifier: DF:68:EE:79:3D:A0:46:60:09:94:70:82:8C:0F:1E:E0:60:21:53:E0 Certificate issuer: /CN=b937c1111990e7b39c1f43b075333acd225a29b1 Certificate serial: 0D3294 Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/6529e9c5f9a97744d7cd05d20744bec9abb75dd0.roa Signing time: Wed 24 Mar 2021 14:46:28 +0000 ROA not before: Wed 24 Mar 2021 14:46:28 +0000 ROA not after: Tue 24 Mar 2026 14:46:28 +0000 asID: 28103 IP address blocks: 131.161.252.0/22 maxlen: 24 138.186.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864916 (0xd3294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1 Validity Not Before: Mar 24 14:46:28 2021 GMT Not After : Mar 24 14:46:28 2026 GMT Subject: CN=6529e9c5f9a97744d7cd05d20744bec9abb75dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ca:ae:e3:ca:31:67:d3:cf:05:5b:07:bb:07: 6f:23:96:a8:b0:23:04:c0:44:ed:a3:da:e1:2d:db: 09:61:05:f0:cf:c1:80:e8:14:6b:56:af:96:14:ed: e6:4d:26:8f:ce:0d:d3:d6:7d:61:97:31:20:0b:86: bf:52:c0:00:d7:01:e8:21:4c:ee:13:50:27:71:52: 0d:1f:0d:25:2f:5f:28:cc:05:57:0b:e9:ed:86:85: 1b:d3:46:c8:c5:1e:3b:9d:b1:e3:2f:fd:f9:34:22: e5:96:56:41:65:5c:16:f6:91:67:21:3b:e2:0c:fd: de:d1:0b:e1:31:06:5e:79:24:2d:ee:55:7f:dc:b0: 7f:6f:d9:a9:18:40:f9:0c:98:b1:51:d6:95:86:9a: 96:f0:20:89:b0:ce:3b:7d:2e:2f:72:05:82:8a:21: c3:c2:a3:54:5f:1e:ed:b9:e1:bf:eb:17:df:a7:85: 0b:ef:2b:00:52:44:1b:3c:57:3a:1b:02:e6:38:7f: 59:2f:21:c9:72:1c:27:0f:d7:1c:54:eb:ca:f0:e7: 17:32:bf:b1:95:75:b0:ba:74:df:00:fb:6d:12:55: 9d:f9:9d:97:e4:4d:62:99:95:97:38:ea:45:5f:af: 00:cf:43:60:6a:b0:d3:a3:9c:29:8a:0c:9f:ce:00: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:68:EE:79:3D:A0:46:60:09:94:70:82:8C:0F:1E:E0:60:21:53:E0 X509v3 Authority Key Identifier: keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/6529e9c5f9a97744d7cd05d20744bec9abb75dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.252.0/22 138.186.60.0/22 Signature Algorithm: sha256WithRSAEncryption 63:57:eb:19:3f:1b:58:29:0f:e3:9d:1f:33:b6:22:02:d5:96: 4f:3c:e3:f0:0a:05:f2:0e:04:8b:57:37:ae:6f:fb:59:bf:ba: aa:77:2b:45:ac:80:c1:45:3b:46:1f:5d:5f:77:c7:83:88:f4: d7:a4:a6:e2:2c:7f:f0:90:60:ec:0b:4b:0f:bc:db:18:78:3e: ff:68:95:c7:08:16:ff:74:d9:7f:d2:1c:76:4c:e2:f9:29:46: a0:e7:07:df:30:44:2d:06:e0:93:d4:5f:6d:d0:1c:68:df:bb: ad:5e:c2:48:c0:dc:1e:10:17:52:cd:81:30:ef:74:c8:06:bb: ba:6b:93:f4:3a:64:08:5e:8d:df:9a:73:cf:09:d0:c1:0d:7d: c1:08:ba:73:3c:c4:7f:39:c2:48:fd:cb:66:5c:58:08:ab:86: 71:05:0c:f5:83:c1:4a:12:a2:e1:37:15:ff:94:67:d7:16:c3: aa:00:4b:a5:de:34:51:30:c1:2a:aa:e5:be:22:18:a9:90:29: 76:9e:44:9e:9d:78:65:aa:53:a9:c3:4e:5e:52:22:6d:b9:80: da:21:5a:0c:35:c4:e2:f9:a1:8a:00:0e:16:55:c2:9f:d9:72: 90:15:92:07:b3:3f:2c:2b:1f:3b:dd:41:09:9f:ca:90:df:e8: c4:a9:6e:c6 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDDTKUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI5 MzdjMTExMTk5MGU3YjM5YzFmNDNiMDc1MzMzYWNkMjI1YTI5YjEwHhcNMjEwMzI0 MTQ0NjI4WhcNMjYwMzI0MTQ0NjI4WjAzMTEwLwYDVQQDEyg2NTI5ZTljNWY5YTk3 NzQ0ZDdjZDA1ZDIwNzQ0YmVjOWFiYjc1ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA0squ48oxZ9PPBVsHuwdvI5aosCMEwETto9rhLdsJYQXwz8GA 6BRrVq+WFO3mTSaPzg3T1n1hlzEgC4a/UsAA1wHoIUzuE1AncVINHw0lL18ozAVX C+nthoUb00bIxR47nbHjL/35NCLlllZBZVwW9pFnITviDP3e0QvhMQZeeSQt7lV/ 3LB/b9mpGED5DJixUdaVhpqW8CCJsM47fS4vcgWCiiHDwqNUXx7tueG/6xffp4UL 7ysAUkQbPFc6GwLmOH9ZLyHJchwnD9ccVOvK8OcXMr+xlXWwunTfAPttElWd+Z2X 5E1imZWXOOpFX68Az0NgarDTo5wpigyfzgBPwQIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFN9o7nk9oEZgCZRwgowPHuBgIVPgMB8GA1UdIwQYMBaAFB7ao562PcAyfXe7 X5GELT47olGvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjkzN2Mx MTExOTkwZTdiMzljMWY0M2IwNzUzMzNhY2QyMjVhMjliMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTIzYzk3MWYtMjI2Mi00NGU2LWIzMDktM2Y1OWJm YzJkMGY1LzY1MjllOWM1ZjlhOTc3NDRkN2NkMDVkMjA3NDRiZWM5YWJiNzVkZDAu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hMjNjOTcxZi0yMjYyLTQ0ZTYtYjMwOS0zZjU5 YmZjMmQwZjUvYjkzN2MxMTExOTkwZTdiMzljMWY0M2IwNzUzMzNhY2QyMjVhMjli MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAoOh/AMEAoq6PDANBgkqhkiG9w0BAQsFAAOCAQEAY1frGT8b WCkP450fM7YiAtWWTzzj8AoF8g4Ei1c3rm/7Wb+6qncrRayAwUU7Rh9dX3fHg4j0 16Sm4ix/8JBg7AtLD7zbGHg+/2iVxwgW/3TZf9Icdkzi+SlGoOcH3zBELQbgk9Rf bdAcaN+7rV7CSMDcHhAXUs2BMO90yAa7umuT9DpkCF6N35pzzwnQwQ19wQi6czzE fznCSP3LZlxYCKuGcQUM9YPBShKi4TcV/5Rn1xbDqgBLpd40UTDBKqrlviIYqZAp dp5Enp14ZapTqcNOXlIibbmA2iFaDDXE4vmhigAOFlXCn9lykBWSB7M/LCsfO91B CZ/KkN/oxKluxg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:02 2023 by rpki-client on console-ams.rpki-client.org