$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9ef9f2cdc531c7c1791699516136f2e1c3296018.roa File: 9ef9f2cdc531c7c1791699516136f2e1c3296018.roa (raw, json) Hash identifier: B8oypqcMzoDnfV5aVcI//d1cvCrx7v5M5HCOIBD3MaM= Subject key identifier: 88:CF:AB:40:71:7A:E5:19:64:57:73:74:63:C0:58:3B:6D:A7:84:9B Certificate issuer: /CN=71ccf671605b5e725ec595356fba462b15442130 Certificate serial: 07B098 Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9ef9f2cdc531c7c1791699516136f2e1c3296018.roa Signing time: Mon 04 Oct 2021 20:04:33 +0000 ROA not before: Mon 04 Oct 2021 03:00:00 +0000 ROA not after: Wed 04 Oct 2023 03:00:00 +0000 asID: 271813 IP address blocks: 190.123.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503960 (0x7b098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ccf671605b5e725ec595356fba462b15442130 Validity Not Before: Oct 4 03:00:00 2021 GMT Not After : Oct 4 03:00:00 2023 GMT Subject: CN=9ef9f2cdc531c7c1791699516136f2e1c3296018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:91:bb:8c:72:2c:3e:ea:67:f7:86:d9:47: 3b:f1:d4:3b:43:25:38:e4:2c:43:7f:8c:3f:62:4e: 0d:56:03:99:e9:8a:01:12:1a:0c:7d:38:00:40:21: ab:e3:d6:ca:7b:bd:82:a9:c4:16:07:da:9e:5e:14: b1:48:f5:a5:d1:81:10:5f:84:d2:c4:b4:27:42:6d: 85:05:fe:60:18:a2:9e:b3:8e:8b:e4:95:42:24:98: aa:a4:12:1e:31:fc:23:fd:e7:3c:b9:d0:48:c7:4f: 32:8d:34:a1:51:a8:a6:0c:70:93:e4:e8:04:e6:27: 0f:58:7b:95:9d:c2:4b:35:f3:63:b0:61:8c:f1:98: c4:cc:49:e6:73:cd:c2:89:26:56:7f:46:57:1b:fb: 9a:90:de:9d:64:14:18:7a:27:66:9a:c1:60:c1:88: f0:f1:32:05:0a:06:d8:eb:8a:d4:a7:57:19:99:d2: be:8d:40:e0:9a:38:5e:d1:a8:04:d1:0d:4a:e0:49: 03:6d:ce:84:b1:db:0a:eb:c1:59:f9:53:ad:13:f8: d9:96:d6:ef:5d:f7:32:0e:82:e3:fe:0f:bd:3c:ef: 51:38:9d:5f:b2:0f:67:51:38:b3:b4:17:90:67:10: 7a:b3:25:47:2b:b7:56:26:70:17:8c:75:9c:47:f6: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CF:AB:40:71:7A:E5:19:64:57:73:74:63:C0:58:3B:6D:A7:84:9B X509v3 Authority Key Identifier: keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9ef9f2cdc531c7c1791699516136f2e1c3296018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.123.67.0/24 Signature Algorithm: sha256WithRSAEncryption 30:d0:73:c3:89:f5:de:1e:12:bc:d3:47:9e:5d:bd:ce:f0:31: 55:15:d7:d4:43:df:4e:43:4a:13:df:f7:53:1e:53:f9:b6:41: e0:aa:85:a4:02:aa:2b:44:21:ea:04:03:a3:6f:0a:49:a9:7c: 71:66:b5:3a:2f:9c:1f:bc:05:c9:a0:d8:4d:94:39:6f:b4:ad: 3c:63:b2:d3:ac:08:bf:23:c3:63:d8:4c:1a:03:09:ad:ad:ba: d3:15:b9:6b:02:10:49:3c:1d:15:0f:80:05:10:20:32:74:e6: 68:85:34:b2:00:d3:7e:40:24:23:7d:bf:1c:d1:fb:1f:c5:30: 5c:6d:eb:e0:ca:e2:53:34:80:51:1b:5b:fe:3d:e1:52:4f:6a: d2:35:59:67:34:f4:be:88:02:c3:1a:f7:e0:78:6d:82:3a:69: dc:cd:00:bf:de:4a:39:3f:92:d7:14:6c:96:44:bb:51:99:d4: 1f:25:23:56:00:51:15:ac:d7:76:86:e1:03:9c:2b:6a:0f:b8: e5:9b:9d:d8:82:47:28:22:e3:d0:b2:61:26:a7:34:f6:9f:da: f0:6d:0a:14:44:96:0d:e7:dc:d3:ec:15:ad:35:ef:56:ba:2c: 75:63:39:d5:9b:a2:38:08:d2:c0:58:28:64:b2:36:1f:71:c1: c9:23:cc:90 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDB7CYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx Y2NmNjcxNjA1YjVlNzI1ZWM1OTUzNTZmYmE0NjJiMTU0NDIxMzAwHhcNMjExMDA0 MDMwMDAwWhcNMjMxMDA0MDMwMDAwWjAzMTEwLwYDVQQDEyg5ZWY5ZjJjZGM1MzFj N2MxNzkxNjk5NTE2MTM2ZjJlMWMzMjk2MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAv5CRu4xyLD7qZ/eG2Uc78dQ7QyU45CxDf4w/Yk4NVgOZ6YoB EhoMfTgAQCGr49bKe72CqcQWB9qeXhSxSPWl0YEQX4TSxLQnQm2FBf5gGKKes46L 5JVCJJiqpBIeMfwj/ec8udBIx08yjTShUaimDHCT5OgE5icPWHuVncJLNfNjsGGM 8ZjEzEnmc83CiSZWf0ZXG/uakN6dZBQYeidmmsFgwYjw8TIFCgbY64rUp1cZmdK+ jUDgmjhe0agE0Q1K4EkDbc6EsdsK68FZ+VOtE/jZltbvXfcyDoLj/g+9PO9ROJ1f sg9nUTiztBeQZxB6syVHK7dWJnAXjHWcR/YSIQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFIjPq0BxeuUZZFdzdGPAWDttp4SbMB8GA1UdIwQYMBaAFC3pRV6DpCIyqkjn TYMYFfini1/BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFjY2Y2 NzE2MDViNWU3MjVlYzU5NTM1NmZiYTQ2MmIxNTQ0MjEzMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTYyNzQxYzctOTcwNy00OGQ0LTljOTctYjkxMWE4 YjFkZmQyLzllZjlmMmNkYzUzMWM3YzE3OTE2OTk1MTYxMzZmMmUxYzMyOTYwMTgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hNjI3NDFjNy05NzA3LTQ4ZDQtOWM5Ny1iOTEx YThiMWRmZDIvNzFjY2Y2NzE2MDViNWU3MjVlYzU5NTM1NmZiYTQ2MmIxNTQ0MjEz MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAL57QzANBgkqhkiG9w0BAQsFAAOCAQEAMNBzw4n13h4SvNNH nl29zvAxVRXX1EPfTkNKE9/3Ux5T+bZB4KqFpAKqK0Qh6gQDo28KSal8cWa1Oi+c H7wFyaDYTZQ5b7StPGOy06wIvyPDY9hMGgMJra260xW5awIQSTwdFQ+ABRAgMnTm aIU0sgDTfkAkI32/HNH7H8UwXG3r4MriUzSAURtb/j3hUk9q0jVZZzT0vogCwxr3 4Hhtgjpp3M0Av95KOT+S1xRslkS7UZnUHyUjVgBRFazXdobhA5wrag+45Zud2IJH KCLj0LJhJqc09p/a8G0KFESWDefc0+wVrTXvVrosdWM51ZuiOAjSwFgoZLI2H3HB ySPMkA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:48 2023 by rpki-client on console-fra.rpki-client.org