$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa File: 2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa (raw, json) Hash identifier: b2h2bbl9Ubew0rduQ5D7EvyrcnbuU8FfM8ZnJdX+GKk= Subject key identifier: 93:91:F8:29:37:2A:B4:94:3E:A4:80:FB:DE:16:D7:94:9C:52:58:1B Certificate issuer: /CN=09e0adac59b7e340818728c50db0e80398835f20 Certificate serial: 0965B0 Authority key identifier: AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa Signing time: Mon 11 Jul 2022 13:36:49 +0000 ROA not before: Mon 11 Jul 2022 03:00:00 +0000 ROA not after: Sun 11 Jul 2027 03:00:00 +0000 asID: 269763 IP address blocks: 45.183.60.0/22 maxlen: 24 2803:3560::/32 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/09e0adac59b7e340818728c50db0e80398835f20.crl rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/09e0adac59b7e340818728c50db0e80398835f20.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 03:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615856 (0x965b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e0adac59b7e340818728c50db0e80398835f20 Validity Not Before: Jul 11 03:00:00 2022 GMT Not After : Jul 11 03:00:00 2027 GMT Subject: CN=2fa82d66f108983d8cb09ebe13860e3f5c9da8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:ee:4e:70:b6:46:5a:dc:c1:43:7d:04:f8: fe:62:b7:7c:e1:1d:0b:47:a2:ac:71:0a:08:d3:f4: 30:13:85:52:a7:bf:c5:c0:69:6d:f2:ff:9c:c4:8b: ef:59:66:02:6b:19:01:72:63:72:aa:62:35:ce:a1: 6c:c1:20:82:42:ff:fb:c8:7c:de:42:47:4e:10:bc: d3:fa:82:9a:29:6c:55:4b:14:5e:17:09:1f:93:40: da:a6:00:8e:15:e8:4c:ed:61:c5:58:1b:ae:6d:76: 7a:eb:e8:5a:23:20:42:e2:69:7a:0b:3d:b9:43:d5: 13:b3:00:a9:21:0f:2e:c8:4d:5e:27:79:fd:29:0b: 6f:24:e8:34:e8:bd:28:77:e8:88:55:fb:f1:4d:75: 06:a3:c2:86:34:b1:bc:d8:19:6b:f6:64:fb:a1:1b: 53:d6:5b:dd:65:32:30:e6:7f:ee:8d:1e:b7:c1:35: d3:09:87:d3:b7:9b:7d:8a:a5:db:fc:3c:8f:82:28: 8a:1f:c4:37:68:3b:58:93:70:02:35:c0:f8:e1:0c: c1:73:5a:16:a2:23:e3:29:93:92:af:82:70:db:30: 46:f9:51:c6:73:4e:72:81:01:d0:0c:28:bf:b4:07: 87:74:a5:e5:e7:fd:9a:b5:58:b6:d1:d4:b5:84:d0: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:F8:29:37:2A:B4:94:3E:A4:80:FB:DE:16:D7:94:9C:52:58:1B X509v3 Authority Key Identifier: keyid:AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/09e0adac59b7e340818728c50db0e80398835f20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.60.0/22 IPv6: 2803:3560::/32 Signature Algorithm: sha256WithRSAEncryption 87:a0:ec:2d:9a:43:a9:d4:28:3e:f5:b2:7c:2f:bb:b8:e1:d0: 63:ed:48:9f:d5:a0:18:b1:9c:bf:ad:4b:ec:9e:95:ae:3f:d3: bf:71:83:32:e1:c4:c5:4b:85:4e:67:de:77:0f:05:34:ef:44: 4d:d7:e8:a2:c7:04:1f:50:db:8e:68:8e:41:3c:a4:38:35:ec: d0:58:dd:3c:50:7d:a6:ab:30:f8:9a:54:42:1a:27:a0:e5:f9: 32:aa:56:00:f7:73:7c:0e:18:39:bb:18:b1:5d:1d:c1:4d:4d: 47:db:1a:0a:3f:47:61:26:3c:b1:8a:55:1e:04:ca:57:85:b2: 39:69:89:b6:b1:bd:9c:3d:52:c2:61:e8:d1:05:cf:7d:bc:5d: 66:f6:59:2f:e4:b2:95:f8:55:b4:d0:da:f2:e0:a7:7a:33:23: 75:41:29:de:b9:ca:08:9a:74:24:5f:29:79:da:6c:8d:5e:5e: e2:c7:f9:99:e3:02:75:fa:8a:c5:02:05:26:1d:3e:99:a0:03: 40:9a:80:fe:8a:25:76:39:54:a8:79:1c:ab:6d:0d:b8:72:01: 7e:01:1c:1c:69:e4:89:a6:1c:d1:26:c5:a6:7c:d2:ce:72:e1: 7d:0c:70:33:0b:72:de:07:00:4c:08:ec:3b:8e:07:7f:e3:51: 66:ad:75:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDCWWwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5 ZTBhZGFjNTliN2UzNDA4MTg3MjhjNTBkYjBlODAzOTg4MzVmMjAwHhcNMjIwNzEx MDMwMDAwWhcNMjcwNzExMDMwMDAwWjAzMTEwLwYDVQQDEygyZmE4MmQ2NmYxMDg5 ODNkOGNiMDllYmUxMzg2MGUzZjVjOWRhOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA11fuTnC2RlrcwUN9BPj+Yrd84R0LR6KscQoI0/QwE4VSp7/F wGlt8v+cxIvvWWYCaxkBcmNyqmI1zqFswSCCQv/7yHzeQkdOELzT+oKaKWxVSxRe Fwkfk0DapgCOFehM7WHFWBuubXZ66+haIyBC4ml6Cz25Q9UTswCpIQ8uyE1eJ3n9 KQtvJOg06L0od+iIVfvxTXUGo8KGNLG82Blr9mT7oRtT1lvdZTIw5n/ujR63wTXT CYfTt5t9iqXb/DyPgiiKH8Q3aDtYk3ACNcD44QzBc1oWoiPjKZOSr4Jw2zBG+VHG c05ygQHQDCi/tAeHdKXl5/2atVi20dS1hNBQHQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFJOR+Ck3KrSUPqSA+94W15ScUlgbMB8GA1UdIwQYMBaAFK5SNCa2lLfR5DlS cCjOzEg8mvFoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDllMGFk YWM1OWI3ZTM0MDgxODcyOGM1MGRiMGU4MDM5ODgzNWYyMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTljOTVjYmItNDc4Ni00MzM3LThjOWEtMGMyYjNm MTE5ZjVhLzJmYTgyZDY2ZjEwODk4M2Q4Y2IwOWViZTEzODYwZTNmNWM5ZGE4YmIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hOWM5NWNiYi00Nzg2LTQzMzctOGM5YS0wYzJi M2YxMTlmNWEvMDllMGFkYWM1OWI3ZTM0MDgxODcyOGM1MGRiMGU4MDM5ODgzNWYy MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi23PDANBAIAAjAHAwUAKAM1YDANBgkqhkiG9w0BAQsFAAOC AQEAh6DsLZpDqdQoPvWyfC+7uOHQY+1In9WgGLGcv61L7J6Vrj/Tv3GDMuHExUuF Tmfedw8FNO9ETdfooscEH1DbjmiOQTykODXs0FjdPFB9pqsw+JpUQhonoOX5MqpW APdzfA4YObsYsV0dwU1NR9saCj9HYSY8sYpVHgTKV4WyOWmJtrG9nD1SwmHo0QXP fbxdZvZZL+SylfhVtNDa8uCnejMjdUEp3rnKCJp0JF8pedpsjV5e4sf5meMCdfqK xQIFJh0+maADQJqA/ooldjlUqHkcq20NuHIBfgEcHGnkiaYc0SbFpnzSznLhfQxw Mwty3gcATAjsO44Hf+NRZq11wQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:49 2023 by rpki-client on console-fra.rpki-client.org