$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa File: 2aeb371b931ebfd72bfec74e3d69178380caa01d.roa (raw, json) Hash identifier: yx56h7uqyeXagJVU4gtXFPlPPaS/qieyJJUzKWA16qw= Subject key identifier: B2:54:65:14:A3:2D:92:8F:C4:58:73:76:19:06:3B:05:99:69:C9:8B Certificate issuer: /CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0 Certificate serial: 0D2957 Authority key identifier: C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa Signing time: Wed 24 Mar 2021 14:34:15 +0000 ROA not before: Wed 24 Mar 2021 14:34:14 +0000 ROA not after: Tue 24 Mar 2026 14:34:14 +0000 asID: 27897 IP address blocks: 158.170.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.crl rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 09:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862551 (0xd2957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0 Validity Not Before: Mar 24 14:34:14 2021 GMT Not After : Mar 24 14:34:14 2026 GMT Subject: CN=2aeb371b931ebfd72bfec74e3d69178380caa01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:3d:33:b7:fc:93:d0:c3:40:b0:ce:5b:26: 7c:dd:c3:05:2f:e9:0a:74:2e:37:c5:0d:4b:d1:aa: 1c:c3:25:8a:c7:50:0e:ea:f5:06:48:35:0d:8d:cb: 8b:a4:7e:a9:d4:99:a7:40:07:45:70:dc:8c:53:18: a7:50:51:8f:c3:c0:92:25:f5:a7:a0:19:4c:d0:27: 45:d5:b7:96:0e:ec:fb:17:ff:a1:e5:11:06:7c:1f: 63:61:0b:52:21:a2:0b:12:e4:b2:47:a3:83:19:67: 70:09:7d:e2:0e:8c:71:d1:8f:48:c0:8e:4e:8f:6c: 0a:d4:df:37:f0:5e:fc:ba:5f:9d:05:31:4e:39:52: 81:95:9a:8b:d7:8c:b7:5f:a5:b1:4c:d6:28:7d:2e: fb:0b:d2:72:a9:c8:0f:b7:0d:f8:5c:b3:07:39:66: 45:49:20:34:26:ef:0c:0f:00:4b:b0:4e:f7:af:c5: 14:77:d8:27:22:28:57:fd:03:47:23:f2:0b:2a:93: e3:b6:d3:b9:a1:7e:75:1b:c3:35:17:36:aa:00:bb: d1:3c:07:c2:94:49:d9:9b:85:50:5d:53:fc:26:ed: 92:d2:d8:dc:da:50:e0:ce:4c:b5:70:ac:60:35:9c: 86:89:af:f1:c9:07:56:77:27:43:30:76:ee:dc:e0: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:54:65:14:A3:2D:92:8F:C4:58:73:76:19:06:3B:05:99:69:C9:8B X509v3 Authority Key Identifier: keyid:C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.170.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:ca:a3:aa:b7:b2:b0:92:66:19:b1:ee:0d:68:8e:01:48:ee: 5c:e5:cb:7d:f6:e9:3c:56:ca:c5:4c:f4:2f:13:e2:ce:77:9b: 3a:6b:6e:68:2b:a9:29:49:9d:e7:2e:48:22:d6:ef:e4:b8:52: 99:a9:a3:79:92:db:46:f6:b2:e5:a7:d8:ee:e4:25:9a:b1:4d: e0:fa:06:da:ac:60:76:6d:a0:f8:60:fa:2e:f1:be:14:3e:96: e4:6f:27:d0:9f:25:2b:1c:a0:2a:83:f0:8b:1c:d9:22:33:60: 84:e0:7b:40:d7:28:4c:f8:9b:37:61:c1:52:8c:9d:71:a1:30: 62:4b:9b:3b:d4:1d:47:79:cb:f4:ea:1a:45:5f:4e:c0:5d:79: 32:71:2b:d1:53:12:7b:43:cd:cb:df:18:cc:76:98:44:b8:a9: bc:90:31:db:b1:eb:ea:6b:66:b1:9f:27:a4:c6:80:fe:3a:c6: 96:e0:f5:55:9b:3e:ef:48:24:34:eb:ff:55:b3:20:49:06:0a: 0f:e8:d4:ad:0c:3e:e5:9a:32:27:46:bf:e3:19:0e:96:45:53: 36:dc:07:55:f4:69:61:71:f5:a9:bf:77:cc:2d:07:6d:2d:27: a2:c2:8e:f9:e0:ce:a5:3c:31:0a:15:d9:26:73:50:61:00:5f: 98:99:51:8a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIDDSlXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj ZDE5NzkzZmRkNWY2ZDI4M2YzY2MxOTI1YjdkODFjZWViNDUwZjAwHhcNMjEwMzI0 MTQzNDE0WhcNMjYwMzI0MTQzNDE0WjAzMTEwLwYDVQQDEygyYWViMzcxYjkzMWVi ZmQ3MmJmZWM3NGUzZDY5MTc4MzgwY2FhMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnPw9M7f8k9DDQLDOWyZ83cMFL+kKdC43xQ1L0aocwyWKx1AO 6vUGSDUNjcuLpH6p1JmnQAdFcNyMUxinUFGPw8CSJfWnoBlM0CdF1beWDuz7F/+h 5REGfB9jYQtSIaILEuSyR6ODGWdwCX3iDoxx0Y9IwI5Oj2wK1N838F78ul+dBTFO OVKBlZqL14y3X6WxTNYofS77C9JyqcgPtw34XLMHOWZFSSA0Ju8MDwBLsE73r8UU d9gnIihX/QNHI/ILKpPjttO5oX51G8M1FzaqALvRPAfClEnZm4VQXVP8Ju2S0tjc 2lDgzky1cKxgNZyGia/xyQdWdydDMHbu3OAhdwIDAQABo4ICWjCCAlYwHQYDVR0O BBYEFLJUZRSjLZKPxFhzdhkGOwWZacmLMB8GA1UdIwQYMBaAFMmvPpC01BU67Twi 3U2+lfI+dC2zMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmNkMTk3 OTNmZGQ1ZjZkMjgzZjNjYzE5MjViN2Q4MWNlZWI0NTBmMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTM2ODBjN2QtYWZjMi00NTU2LWFjZWUtNTI3ZmU3 MDBhZDMwLzJhZWIzNzFiOTMxZWJmZDcyYmZlYzc0ZTNkNjkxNzgzODBjYWEwMWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hMzY4MGM3ZC1hZmMyLTQ1NTYtYWNlZS01Mjdm ZTcwMGFkMzAvZmNkMTk3OTNmZGQ1ZjZkMjgzZjNjYzE5MjViN2Q4MWNlZWI0NTBm MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP MA0wCwQCAAEwBQMDAJ6qMA0GCSqGSIb3DQEBCwUAA4IBAQAGyqOqt7KwkmYZse4N aI4BSO5c5ct99uk8VsrFTPQvE+LOd5s6a25oK6kpSZ3nLkgi1u/kuFKZqaN5kttG 9rLlp9ju5CWasU3g+gbarGB2baD4YPou8b4UPpbkbyfQnyUrHKAqg/CLHNkiM2CE 4HtA1yhM+Js3YcFSjJ1xoTBiS5s71B1Hecv06hpFX07AXXkycSvRUxJ7Q83L3xjM dphEuKm8kDHbsevqa2axnyekxoD+OsaW4PVVmz7vSCQ06/9VsyBJBgoP6NStDD7l mjInRr/jGQ6WRVM23AdV9GlhcfWpv3fMLQdtLSeiwo754M6lPDEKFdkmc1BhAF+Y mVGK -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:47 2023 by rpki-client on console-fra.rpki-client.org