$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/6084441422a4392a6dd7fe71c81c6e66146d5757.roa File: 6084441422a4392a6dd7fe71c81c6e66146d5757.roa (raw, json) Hash identifier: tf4AzL9XVOM3Mj7/kwET8CiT1f4bzUqiDDDkIbfQm8Y= Subject key identifier: 9C:49:E1:09:28:ED:88:09:EF:F9:89:5E:39:14:62:31:66:E5:FF:C0 Certificate issuer: /CN=5170c241e6d2b694522a5ce5c5c6f3a36359d873 Certificate serial: 01F335 Authority key identifier: FF:BE:C7:3B:95:1A:6F:EE:98:70:45:7F:73:67:23:2B:A1:46:29:03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5170c241e6d2b694522a5ce5c5c6f3a36359d873.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/6084441422a4392a6dd7fe71c81c6e66146d5757.roa Signing time: Wed 24 Mar 2021 14:32:50 +0000 ROA not before: Wed 24 Mar 2021 14:32:50 +0000 ROA not after: Tue 24 Mar 2026 14:32:50 +0000 asID: 52371 IP address blocks: 186.159.120.0/22 maxlen: 24 186.159.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/5170c241e6d2b694522a5ce5c5c6f3a36359d873.crl rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/5170c241e6d2b694522a5ce5c5c6f3a36359d873.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5170c241e6d2b694522a5ce5c5c6f3a36359d873.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127797 (0x1f335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5170c241e6d2b694522a5ce5c5c6f3a36359d873 Validity Not Before: Mar 24 14:32:50 2021 GMT Not After : Mar 24 14:32:50 2026 GMT Subject: CN=6084441422a4392a6dd7fe71c81c6e66146d5757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:8d:f4:e8:ab:f5:2c:92:ec:ec:c6:a2:81: f1:f3:48:72:38:9c:aa:c2:2b:43:34:20:de:77:38: d9:b9:d9:cb:f4:1a:a2:77:c6:aa:e9:d7:92:55:fb: 3a:c9:ee:99:65:6a:98:27:07:e6:d0:fd:ed:ae:74: e8:85:67:6d:d4:56:9e:5b:f5:9d:60:e9:21:ba:58: 8f:6d:a0:c6:22:2d:2a:6c:dd:aa:95:21:00:3b:f0: 4c:1e:7c:80:08:3c:2d:e1:c4:15:41:5c:89:25:81: cf:49:f3:bb:8d:30:9c:05:56:53:94:9e:e3:23:0e: cf:02:c8:f9:39:4a:c8:be:5b:e8:ba:ed:88:43:89: 84:84:f3:6c:15:2f:4e:ae:30:59:81:df:cf:b5:76: af:3e:81:9d:dc:0a:2b:28:b2:36:d7:a5:b3:0b:b0: 55:c4:1d:91:a3:22:2d:a1:4e:88:f3:7e:d2:be:0f: 11:84:dc:9d:0f:54:b7:ca:70:36:ed:44:83:3a:61: 4c:db:a8:b1:ea:91:08:81:91:05:02:79:9c:7f:f8: fc:2b:e5:b7:3c:a4:f4:f7:71:55:19:d7:e6:85:ce: 39:0d:79:97:b7:36:d0:9a:95:1a:42:f3:24:b1:b4: 4e:7b:e2:a5:45:9a:c2:c9:94:2e:de:2f:a8:9f:e1: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:E1:09:28:ED:88:09:EF:F9:89:5E:39:14:62:31:66:E5:FF:C0 X509v3 Authority Key Identifier: keyid:FF:BE:C7:3B:95:1A:6F:EE:98:70:45:7F:73:67:23:2B:A1:46:29:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5170c241e6d2b694522a5ce5c5c6f3a36359d873.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/6084441422a4392a6dd7fe71c81c6e66146d5757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a679c576-6763-4281-9c12-81a21011cffc/5170c241e6d2b694522a5ce5c5c6f3a36359d873.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.159.120.0/22 186.159.126.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:b5:1f:31:35:0e:20:b6:82:03:2c:fb:13:79:9c:e1:ed:18: ad:d7:09:7b:c6:8d:1f:38:a1:03:95:2a:31:aa:0e:61:5b:40: 54:b6:b4:e6:e1:1d:95:8a:44:27:fa:7b:c8:8f:42:31:a6:1a: a4:23:d7:1f:16:af:16:7c:7b:47:6b:bd:6a:3f:a9:81:fd:ba: 11:77:a6:ad:8c:eb:fc:c5:06:04:e1:8f:44:90:fe:14:fc:62: b0:41:cf:48:27:56:94:f3:7a:9d:72:55:c2:c1:8f:57:ef:e7: e5:0f:98:5f:ae:7e:7e:b3:73:0a:49:43:17:92:1f:d2:ec:e5: 54:12:38:b1:8e:fe:ba:66:36:1d:3b:26:c6:a4:54:56:f5:44: 03:91:8d:f0:09:da:0a:a9:e2:7d:ff:d5:42:32:86:23:86:0c: fe:a0:7a:1e:cb:59:95:4b:b0:92:a6:26:b0:56:65:92:9c:cd: ee:38:99:bc:9c:de:3d:c6:a5:67:06:b1:8f:20:0e:8b:46:e2: a8:db:0b:f3:7a:f2:0e:e8:86:7b:81:09:54:48:76:06:7a:c6: 9a:f8:2e:96:38:42:a8:b5:13:d2:9a:af:2b:c1:b2:66:1c:b7: f1:06:d5:39:4b:8e:04:fc:ec:fb:e8:6d:43:b0:46:cf:23:6b: 59:b5:61:ff -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDAfM1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx NzBjMjQxZTZkMmI2OTQ1MjJhNWNlNWM1YzZmM2EzNjM1OWQ4NzMwHhcNMjEwMzI0 MTQzMjUwWhcNMjYwMzI0MTQzMjUwWjAzMTEwLwYDVQQDEyg2MDg0NDQxNDIyYTQz OTJhNmRkN2ZlNzFjODFjNmU2NjE0NmQ1NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjkON9Oir9SyS7OzGooHx80hyOJyqwitDNCDedzjZudnL9Bqi d8aq6deSVfs6ye6ZZWqYJwfm0P3trnTohWdt1FaeW/WdYOkhuliPbaDGIi0qbN2q lSEAO/BMHnyACDwt4cQVQVyJJYHPSfO7jTCcBVZTlJ7jIw7PAsj5OUrIvlvouu2I Q4mEhPNsFS9OrjBZgd/PtXavPoGd3AorKLI216WzC7BVxB2RoyItoU6I837Svg8R hNydD1S3ynA27USDOmFM26ix6pEIgZEFAnmcf/j8K+W3PKT093FVGdfmhc45DXmX tzbQmpUaQvMksbROe+KlRZrCyZQu3i+on+G5eQIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFJxJ4Qko7YgJ7/mJXjkUYjFm5f/AMB8GA1UdIwQYMBaAFP++xzuVGm/umHBF f3NnIyuhRikDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTE3MGMy NDFlNmQyYjY5NDUyMmE1Y2U1YzVjNmYzYTM2MzU5ZDg3My5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTY3OWM1NzYtNjc2My00MjgxLTljMTItODFhMjEw MTFjZmZjLzYwODQ0NDE0MjJhNDM5MmE2ZGQ3ZmU3MWM4MWM2ZTY2MTQ2ZDU3NTcu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hNjc5YzU3Ni02NzYzLTQyODEtOWMxMi04MWEy MTAxMWNmZmMvNTE3MGMyNDFlNmQyYjY5NDUyMmE1Y2U1YzVjNmYzYTM2MzU5ZDg3 My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEArqfeAMEALqffjANBgkqhkiG9w0BAQsFAAOCAQEAKrUfMTUO ILaCAyz7E3mc4e0YrdcJe8aNHzihA5UqMaoOYVtAVLa05uEdlYpEJ/p7yI9CMaYa pCPXHxavFnx7R2u9aj+pgf26EXemrYzr/MUGBOGPRJD+FPxisEHPSCdWlPN6nXJV wsGPV+/n5Q+YX65+frNzCklDF5If0uzlVBI4sY7+umY2HTsmxqRUVvVEA5GN8Ana Cqniff/VQjKGI4YM/qB6HstZlUuwkqYmsFZlkpzN7jiZvJzePcalZwaxjyAOi0bi qNsL83ryDuiGe4EJVEh2BnrGmvguljhCqLUT0pqvK8GyZhy38QbVOUuOBPzs++ht Q7BGzyNrWbVh/w== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:03 2023 by rpki-client on console-ams.rpki-client.org