$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa File: 8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa (raw, json) Hash identifier: RZtqQmk0CQFzZPJvR+Cz8HziseyhzOSDMwfUhZa0llA= Subject key identifier: 66:4C:86:D4:50:F2:BA:5A:B4:5A:1B:41:7A:99:7C:2D:DA:FA:A7:F5 Certificate issuer: /CN=32c356bf43c9220bb625d50596a7ec3c7542fb23 Certificate serial: 0460 Authority key identifier: 68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa Signing time: Mon 04 Oct 2021 22:58:47 +0000 ROA not before: Mon 04 Oct 2021 03:00:00 +0000 ROA not after: Wed 04 Oct 2023 03:00:00 +0000 asID: 53856 IP address blocks: 45.224.252.0/22 maxlen: 22 2803:2a20::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.crl rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 13:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c356bf43c9220bb625d50596a7ec3c7542fb23 Validity Not Before: Oct 4 03:00:00 2021 GMT Not After : Oct 4 03:00:00 2023 GMT Subject: CN=8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:53:5a:a6:ef:5a:62:24:dd:a1:eb:a8:0c: ab:8c:6d:b8:41:f6:13:82:45:30:a7:35:f4:21:98: 7f:9a:e5:f0:43:08:72:d2:47:f0:ef:1c:81:e1:8c: ca:8e:69:0d:d1:71:ea:95:1f:63:d5:39:ce:23:68: 48:5b:49:c6:e6:67:ca:a8:23:aa:a2:1a:5c:fb:18: 55:a3:68:bc:00:29:7a:1d:4c:de:80:42:6d:99:e0: a7:61:3c:c2:6a:2a:60:b2:29:4a:e6:d7:0b:0a:8c: 5b:51:c7:b1:1d:a8:3b:fe:2d:5a:d6:e6:8d:b3:1d: 56:95:b2:8d:2e:88:3d:77:6c:5b:ca:00:dd:9f:63: c5:bd:f1:01:0a:d4:56:b3:80:88:6c:b9:9d:b7:b2: 97:47:a3:dc:90:90:22:fd:14:bf:a6:5a:54:3a:e1: 5b:38:35:c9:10:10:b5:32:87:48:53:54:3e:7d:bb: dc:05:d0:fb:08:b9:3b:ed:9a:e6:5a:d0:68:1b:cf: cd:c6:9a:2c:9e:3d:de:16:4c:72:4c:fd:1e:5d:1e: b9:99:db:0b:1a:2b:b2:d8:36:f2:eb:22:7d:0b:7a: 6b:0c:6c:4f:eb:70:33:c3:20:a4:5a:2f:b3:9a:b0: d1:28:8c:a8:58:4d:5b:bc:58:0b:2e:98:0c:2d:70: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:86:D4:50:F2:BA:5A:B4:5A:1B:41:7A:99:7C:2D:DA:FA:A7:F5 X509v3 Authority Key Identifier: keyid:68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/8419d7a8691fe0ffb0e32e86edf7c94e9ebc0895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.252.0/22 IPv6: 2803:2a20::/32 Signature Algorithm: sha256WithRSAEncryption 61:01:dd:03:56:71:78:0b:94:9f:c3:c3:7f:27:14:29:13:5a: d7:c1:b0:91:8d:22:22:40:f4:c5:d3:04:35:1b:d2:32:30:5e: 31:d3:81:2d:91:55:c8:c7:11:9b:2e:85:60:e4:7a:4f:84:0c: 8e:9d:ae:ef:2b:f8:fd:79:a5:0d:ca:32:c2:ad:a6:24:22:0d: 86:25:e2:c3:5b:53:48:eb:b2:b0:51:0a:b2:49:a9:0e:aa:78: 89:cb:f8:e2:03:aa:54:d6:94:58:cf:db:8c:77:da:e2:26:7a: 70:a8:57:e8:b0:41:a3:13:0b:42:4b:4e:f4:8a:92:28:a1:af: 7c:21:c1:a7:cf:10:26:09:20:a1:9a:62:c3:56:90:25:7e:7e: 1a:91:fe:18:be:f8:71:5f:2e:8c:90:1b:c9:53:10:42:48:83: c5:00:ea:45:4a:67:92:56:cd:45:4d:6c:be:5b:5c:86:4f:6c: d2:7e:ef:39:e9:c5:02:ba:bb:56:8b:a6:89:8d:6c:e6:c8:11: e2:8b:d0:29:39:e3:75:69:44:ca:58:71:7c:6a:cd:6a:e8:d0: 95:7a:1e:4a:2e:f8:14:a6:77:e1:f3:4d:2b:5f:9d:0a:e7:8e: 1e:98:3e:80:98:6e:37:d0:2a:6d:7b:9f:45:ca:13:a9:d4:d4: 2c:bc:f1:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzJj MzU2YmY0M2M5MjIwYmI2MjVkNTA1OTZhN2VjM2M3NTQyZmIyMzAeFw0yMTEwMDQw MzAwMDBaFw0yMzEwMDQwMzAwMDBaMDMxMTAvBgNVBAMTKDg0MTlkN2E4NjkxZmUw ZmZiMGUzMmU4NmVkZjdjOTRlOWViYzA4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgHFNapu9aYiTdoeuoDKuMbbhB9hOCRTCnNfQhmH+a5fBDCHLS R/DvHIHhjMqOaQ3RceqVH2PVOc4jaEhbScbmZ8qoI6qiGlz7GFWjaLwAKXodTN6A Qm2Z4KdhPMJqKmCyKUrm1wsKjFtRx7EdqDv+LVrW5o2zHVaVso0uiD13bFvKAN2f Y8W98QEK1FazgIhsuZ23spdHo9yQkCL9FL+mWlQ64Vs4NckQELUyh0hTVD59u9wF 0PsIuTvtmuZa0Ggbz83GmiyePd4WTHJM/R5dHrmZ2wsaK7LYNvLrIn0LemsMbE/r cDPDIKRaL7OasNEojKhYTVu8WAsumAwtcIwlAgMBAAGjggJqMIICZjAdBgNVHQ4E FgQUZkyG1FDyulq0WhtBepl8Ldr6p/UwHwYDVR0jBBgwFoAUaNX0Wvv9BXJYMPrl MGaYkSKBFQEwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zMmMzNTZi ZjQzYzkyMjBiYjYyNWQ1MDU5NmE3ZWMzYzc1NDJmYjIzLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy9hMmQ3NDcwNS00ZjJiLTRjZTQtYmU4OS0yYmZkZjM2 MDRlMjkvODQxOWQ3YTg2OTFmZTBmZmIwZTMyZTg2ZWRmN2M5NGU5ZWJjMDg5NS5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljL2EyZDc0NzA1LTRmMmItNGNlNC1iZTg5LTJiZmRm MzYwNGUyOS8zMmMzNTZiZjQzYzkyMjBiYjYyNWQ1MDU5NmE3ZWMzYzc1NDJmYjIz LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w HTAMBAIAATAGAwQCLeD8MA0EAgACMAcDBQAoAyogMA0GCSqGSIb3DQEBCwUAA4IB AQBhAd0DVnF4C5Sfw8N/JxQpE1rXwbCRjSIiQPTF0wQ1G9IyMF4x04EtkVXIxxGb LoVg5HpPhAyOna7vK/j9eaUNyjLCraYkIg2GJeLDW1NI67KwUQqySakOqniJy/ji A6pU1pRYz9uMd9riJnpwqFfosEGjEwtCS070ipIooa98IcGnzxAmCSChmmLDVpAl fn4akf4YvvhxXy6MkBvJUxBCSIPFAOpFSmeSVs1FTWy+W1yGT2zSfu856cUCurtW i6aJjWzmyBHii9ApOeN1aUTKWHF8as1q6NCVeh5KLvgUpnfh800rX50K544emD6A mG430Cpte59FyhOp1NQsvPFg -----END CERTIFICATE-----Generated at Wed Jul 19 22:22:47 2023 by rpki-client on console-ams.rpki-client.org