$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/4a25a61aa31027dfa97d47f63755af7d32efee2c.roa File: 4a25a61aa31027dfa97d47f63755af7d32efee2c.roa (raw, json) Hash identifier: xr0EwyPcn9AqEwA6mf6BcNXJgBsiwY8nQaf/hFnBhd0= Subject key identifier: 06:21:D9:20:5E:0B:A8:5A:E0:64:4F:DD:69:61:86:2E:40:1E:DB:50 Certificate issuer: /CN=93c6853cfb5dfd892260ae54bb779c64ff4de7ab Certificate serial: 0DC6E1 Authority key identifier: 70:16:AA:00:A5:DB:F9:E8:0B:F6:19:99:E6:8D:A4:20:4E:FA:DA:3B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/4a25a61aa31027dfa97d47f63755af7d32efee2c.roa Signing time: Wed 24 Mar 2021 14:41:20 +0000 ROA not before: Wed 24 Mar 2021 14:41:20 +0000 ROA not after: Tue 24 Mar 2026 14:41:20 +0000 asID: 61468 IP address blocks: 192.188.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.crl rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902881 (0xdc6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c6853cfb5dfd892260ae54bb779c64ff4de7ab Validity Not Before: Mar 24 14:41:20 2021 GMT Not After : Mar 24 14:41:20 2026 GMT Subject: CN=4a25a61aa31027dfa97d47f63755af7d32efee2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:0e:57:0f:9b:ed:0d:6a:31:12:4b:b1:ee: d3:4c:73:d8:e8:d4:1a:b5:6f:2d:8e:a5:db:91:21: 84:71:aa:32:a2:e4:e1:b7:36:dc:0d:90:d7:f6:7e: e3:83:16:f0:76:90:e4:a5:47:54:74:b6:a2:e0:d8: cf:2c:2f:c5:b1:42:30:1e:c2:fd:63:ab:81:a4:92: 53:89:27:6c:a4:e0:27:9e:a7:70:4d:16:f1:64:0f: 85:ec:1a:42:e2:ef:46:7c:b4:82:9b:2d:f8:08:f8: be:5e:e4:62:f5:54:43:fd:4a:0f:0e:1b:67:ae:f6: dd:9d:c5:1d:8e:fd:4f:45:50:7e:d9:83:1d:51:22: b9:41:fc:c9:9d:9c:b7:c2:b1:e7:3f:34:2e:73:cf: e8:f0:a7:7c:9f:f9:97:7b:3d:6a:8e:9b:cd:6c:9e: 8b:24:a5:60:2f:2f:35:ec:ad:0c:63:a3:47:21:95: 4a:67:10:38:da:eb:08:fd:22:a0:a9:43:ea:fc:b0: 73:52:81:44:24:8e:a1:92:82:dd:5d:28:4e:7a:3f: a2:d4:e0:b8:e2:98:52:c9:f7:f8:9e:1a:19:bb:9f: 5b:ee:5e:21:92:98:c2:a8:f9:67:2b:d0:d0:e1:1b: 0c:25:fb:b5:cb:1e:f1:c5:f5:ff:08:ef:94:f5:1e: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:D9:20:5E:0B:A8:5A:E0:64:4F:DD:69:61:86:2E:40:1E:DB:50 X509v3 Authority Key Identifier: keyid:70:16:AA:00:A5:DB:F9:E8:0B:F6:19:99:E6:8D:A4:20:4E:FA:DA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/4a25a61aa31027dfa97d47f63755af7d32efee2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.188.49.0/24 Signature Algorithm: sha256WithRSAEncryption 51:44:b4:eb:b7:46:16:fe:88:7c:b5:f4:6e:a9:03:dd:6b:17: 0b:56:cb:9b:9d:91:2a:c3:f0:a9:f5:91:23:53:25:2e:0c:a7: 02:47:40:93:34:40:ad:18:9b:f8:09:8b:58:a2:2d:fe:09:03: 37:2e:85:f0:31:07:51:4b:61:c2:bb:b7:36:e7:54:e7:4d:5e: d3:1b:4a:86:2a:94:8b:10:32:51:d0:da:47:ef:c5:e0:20:88: 4c:c0:ac:f8:25:a5:54:05:b5:86:1e:22:79:2f:3a:1c:41:fd: 9d:a7:4a:8d:fb:c8:4b:52:1f:51:35:a4:7b:04:6d:c8:b4:8e: fe:f6:ef:1b:d3:07:78:11:28:31:e0:b1:dd:e8:bf:b7:54:26: b1:b0:15:f7:76:cc:16:4e:92:1e:e5:79:20:51:89:f6:2f:d5: 73:13:04:5e:12:e6:a0:95:34:e9:3d:5f:3d:92:9f:39:67:de: 78:b6:a5:a3:bb:1d:b2:ce:4d:60:c9:b9:1e:37:c4:52:1d:a9: 95:cb:5f:d6:47:58:44:34:96:26:8d:2e:8e:d2:c4:81:b6:67: 89:24:9f:19:6c:af:90:1c:ec:1f:4d:ff:25:b6:17:6d:26:82: 35:d5:e0:9b:43:4b:37:b3:64:76:b2:bb:48:be:ac:5b:d5:64: 8a:e2:b8:f1 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDcbhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkz YzY4NTNjZmI1ZGZkODkyMjYwYWU1NGJiNzc5YzY0ZmY0ZGU3YWIwHhcNMjEwMzI0 MTQ0MTIwWhcNMjYwMzI0MTQ0MTIwWjAzMTEwLwYDVQQDEyg0YTI1YTYxYWEzMTAy N2RmYTk3ZDQ3ZjYzNzU1YWY3ZDMyZWZlZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAq3sOVw+b7Q1qMRJLse7TTHPY6NQatW8tjqXbkSGEcaoyouTh tzbcDZDX9n7jgxbwdpDkpUdUdLai4NjPLC/FsUIwHsL9Y6uBpJJTiSdspOAnnqdw TRbxZA+F7BpC4u9GfLSCmy34CPi+XuRi9VRD/UoPDhtnrvbdncUdjv1PRVB+2YMd USK5QfzJnZy3wrHnPzQuc8/o8Kd8n/mXez1qjpvNbJ6LJKVgLy817K0MY6NHIZVK ZxA42usI/SKgqUPq/LBzUoFEJI6hkoLdXShOej+i1OC44phSyff4nhoZu59b7l4h kpjCqPlnK9DQ4RsMJfu1yx7xxfX/CO+U9R628QIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFAYh2SBeC6ha4GRP3Wlhhi5AHttQMB8GA1UdIwQYMBaAFHAWqgCl2/noC/YZ meaNpCBO+to7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTNjNjg1 M2NmYjVkZmQ4OTIyNjBhZTU0YmI3NzljNjRmZjRkZTdhYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTgzODg4NTYtZjE2MS00ZWFhLWFlMDMtNjllMmFk YWQ3OGY4LzRhMjVhNjFhYTMxMDI3ZGZhOTdkNDdmNjM3NTVhZjdkMzJlZmVlMmMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hODM4ODg1Ni1mMTYxLTRlYWEtYWUwMy02OWUy YWRhZDc4ZjgvOTNjNjg1M2NmYjVkZmQ4OTIyNjBhZTU0YmI3NzljNjRmZjRkZTdh Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMC8MTANBgkqhkiG9w0BAQsFAAOCAQEAUUS067dGFv6IfLX0 bqkD3WsXC1bLm52RKsPwqfWRI1MlLgynAkdAkzRArRib+AmLWKIt/gkDNy6F8DEH UUthwru3NudU501e0xtKhiqUixAyUdDaR+/F4CCITMCs+CWlVAW1hh4ieS86HEH9 nadKjfvIS1IfUTWkewRtyLSO/vbvG9MHeBEoMeCx3ei/t1QmsbAV93bMFk6SHuV5 IFGJ9i/VcxMEXhLmoJU06T1fPZKfOWfeeLalo7sdss5NYMm5HjfEUh2plctf1kdY RDSWJo0ujtLEgbZniSSfGWyvkBzsH03/JbYXbSaCNdXgm0NLN7NkdrK7SL6sW9Vk iuK48Q== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:48 2023 by rpki-client on console-fra.rpki-client.org