$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/f9029aaf755a3be2881af7e49da3d975e1692bed.roa File: f9029aaf755a3be2881af7e49da3d975e1692bed.roa (raw, json) Hash identifier: +oq+CvGGmqioXkoS/KXo7BJcy7qy8J531b3wIuE5bsM= Subject key identifier: 71:18:01:0B:D0:92:33:85:97:36:73:09:C3:DC:C0:AE:99:8C:81:6C Certificate issuer: /CN=14dd9710595884a6cdc2418a4de21b5c2b40042b Certificate serial: 0BF34F Authority key identifier: 82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/f9029aaf755a3be2881af7e49da3d975e1692bed.roa Signing time: Wed 24 Mar 2021 14:43:28 +0000 ROA not before: Wed 24 Mar 2021 14:43:28 +0000 ROA not after: Tue 24 Mar 2026 14:43:28 +0000 asID: 23470 IP address blocks: 45.170.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.crl rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783183 (0xbf34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14dd9710595884a6cdc2418a4de21b5c2b40042b Validity Not Before: Mar 24 14:43:28 2021 GMT Not After : Mar 24 14:43:28 2026 GMT Subject: CN=f9029aaf755a3be2881af7e49da3d975e1692bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:70:b7:9e:51:64:a0:af:9d:27:7e:0f:43: 0b:84:7d:f6:82:f3:51:db:00:dd:bd:c9:8d:5c:76: 45:25:e2:0d:83:70:0b:9c:97:82:ed:4d:d6:2d:f7: 7a:45:41:dc:84:f5:d3:75:ec:7e:af:56:21:14:f3: 05:fe:9f:a2:19:d1:5c:c6:1e:0a:52:7d:80:15:51: b0:1f:87:aa:b0:e1:a3:56:c4:20:44:2a:ad:64:f2: 95:69:f4:dd:3e:74:59:87:b4:ec:84:0f:d4:51:e3: 9b:c6:b8:d8:0f:5d:22:19:c3:cf:9d:1b:72:b9:c9: 84:bd:f5:5d:fd:b3:f5:5e:19:a1:f7:8d:96:8e:a6: c4:06:25:68:94:30:4d:61:98:16:9e:c4:73:b3:db: 72:32:be:ce:a8:cc:00:42:31:1b:c1:b8:a2:32:58: c6:3c:fc:53:25:3c:1b:9f:d5:d3:5f:0c:4a:b2:52: 34:86:35:93:35:c7:42:2b:47:6a:bc:31:71:a8:4e: 2f:9f:a0:7f:67:9f:82:a3:1d:d0:90:4a:59:a0:83: 10:60:21:f2:d6:c6:99:17:7b:f4:97:0c:52:e7:2b: a7:08:9b:1b:8e:1e:a5:82:5e:d4:5a:32:93:ba:6f: 4c:7c:4f:8d:b6:ab:93:75:22:ce:22:d0:1e:66:3f: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:18:01:0B:D0:92:33:85:97:36:73:09:C3:DC:C0:AE:99:8C:81:6C X509v3 Authority Key Identifier: keyid:82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/f9029aaf755a3be2881af7e49da3d975e1692bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.249.0/24 Signature Algorithm: sha256WithRSAEncryption 68:cf:b3:73:5b:cb:52:67:26:85:4b:99:7c:74:91:61:8c:8e: 1d:c1:0b:ca:30:65:9f:65:35:85:d4:a1:2e:fa:c3:4c:f3:06: 94:c5:63:2f:ad:73:c4:4c:57:49:ff:ea:4e:05:21:75:ab:74: c4:a1:18:0d:0a:d9:fa:99:0c:16:68:bc:4d:35:9f:e0:7f:bb: e0:1c:37:ce:90:3f:84:64:28:61:8f:ab:a3:22:f3:c5:b2:b2: 6e:59:c3:8e:cc:33:c6:a4:aa:7a:d9:78:b5:0e:2b:d5:c7:e4: 3f:28:b4:40:7e:a1:9d:6c:91:bd:2f:9b:90:07:1e:18:e6:cc: fc:30:fb:43:de:a2:11:ac:ad:d7:53:98:0b:85:17:75:eb:3f: 04:fc:3a:18:09:76:0e:ab:80:f4:dd:3d:a1:06:68:8d:da:d8: d4:25:ae:71:62:15:24:bf:16:40:d1:2a:f8:84:30:86:66:ac: ec:e2:b0:84:4d:4b:35:56:45:8b:0b:ea:a8:e1:c2:27:40:7e: a2:d7:e6:9d:ed:a6:67:7e:56:29:ff:58:4a:9b:9e:f2:50:ca: 89:3b:ad:41:ea:cc:e8:82:b5:08:6c:5b:e0:1c:d7:18:57:ab: d2:fc:a9:5c:1f:eb:d8:d3:d9:aa:da:ca:bf:6f:37:5a:43:87: 17:d2:0b:33 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDC/NPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0 ZGQ5NzEwNTk1ODg0YTZjZGMyNDE4YTRkZTIxYjVjMmI0MDA0MmIwHhcNMjEwMzI0 MTQ0MzI4WhcNMjYwMzI0MTQ0MzI4WjAzMTEwLwYDVQQDEyhmOTAyOWFhZjc1NWEz YmUyODgxYWY3ZTQ5ZGEzZDk3NWUxNjkyYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsdpwt55RZKCvnSd+D0MLhH32gvNR2wDdvcmNXHZFJeINg3AL nJeC7U3WLfd6RUHchPXTdex+r1YhFPMF/p+iGdFcxh4KUn2AFVGwH4eqsOGjVsQg RCqtZPKVafTdPnRZh7TshA/UUeObxrjYD10iGcPPnRtyucmEvfVd/bP1Xhmh942W jqbEBiVolDBNYZgWnsRzs9tyMr7OqMwAQjEbwbiiMljGPPxTJTwbn9XTXwxKslI0 hjWTNcdCK0dqvDFxqE4vn6B/Z5+Cox3QkEpZoIMQYCHy1saZF3v0lwxS5yunCJsb jh6lgl7UWjKTum9MfE+NtquTdSLOItAeZj95UQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFHEYAQvQkjOFlzZzCcPcwK6ZjIFsMB8GA1UdIwQYMBaAFIKYaRCqaRyBIcm5 fQQmJmMkLQmpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTRkZDk3 MTA1OTU4ODRhNmNkYzI0MThhNGRlMjFiNWMyYjQwMDQyYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYWU3MTY0YTgtZjM2Ni00ZDYzLTk2MjktZjViODU5 NmE1NWFhL2Y5MDI5YWFmNzU1YTNiZTI4ODFhZjdlNDlkYTNkOTc1ZTE2OTJiZWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hZTcxNjRhOC1mMzY2LTRkNjMtOTYyOS1mNWI4 NTk2YTU1YWEvMTRkZDk3MTA1OTU4ODRhNmNkYzI0MThhNGRlMjFiNWMyYjQwMDQy Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC2q+TANBgkqhkiG9w0BAQsFAAOCAQEAaM+zc1vLUmcmhUuZ fHSRYYyOHcELyjBln2U1hdShLvrDTPMGlMVjL61zxExXSf/qTgUhdat0xKEYDQrZ +pkMFmi8TTWf4H+74Bw3zpA/hGQoYY+royLzxbKyblnDjswzxqSqetl4tQ4r1cfk Pyi0QH6hnWyRvS+bkAceGObM/DD7Q96iEayt11OYC4UXdes/BPw6GAl2DquA9N09 oQZojdrY1CWucWIVJL8WQNEq+IQwhmas7OKwhE1LNVZFiwvqqOHCJ0B+otfmne2m Z35WKf9YSpue8lDKiTutQerM6IK1CGxb4BzXGFer0vypXB/r2NPZqtrKv283WkOH F9ILMw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:06 2023 by rpki-client on console-ams.rpki-client.org