$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/2f0417ef20e47fe1cb819c94787001ceb64c9795.roa File: 2f0417ef20e47fe1cb819c94787001ceb64c9795.roa (raw, json) Hash identifier: GKoJEE1ZleB5kMVn9T/QXzWURaweBrOeUIOrVDZuHCU= Subject key identifier: E9:C8:8B:80:BC:A8:B9:0B:A4:33:E4:10:65:ED:91:57:3C:43:65:FC Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706 Certificate serial: 1F77C3 Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/2f0417ef20e47fe1cb819c94787001ceb64c9795.roa Signing time: Fri 24 Mar 2023 16:22:11 +0000 ROA not before: Wed 17 Mar 2021 14:41:42 +0000 ROA not after: Tue 24 Mar 2026 14:41:42 +0000 asID: 52468 IP address blocks: 190.99.117.0/24 maxlen: 24 190.99.118.0/24 maxlen: 24 138.117.140.0/24 maxlen: 24 138.117.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 14:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062275 (0x1f77c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706 Validity Not Before: Mar 17 14:41:42 2021 GMT Not After : Mar 24 14:41:42 2026 GMT Subject: CN=2f0417ef20e47fe1cb819c94787001ceb64c9795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:29:cb:44:e4:9f:f0:75:bf:9b:19:c5:0f: 5c:8c:08:49:be:3d:78:81:18:11:47:45:f7:55:a7: 88:db:54:3c:ed:de:bc:a3:8d:88:d6:37:89:e6:b3: 5b:ea:48:cb:cf:c3:09:ca:d5:a2:39:87:19:2e:6d: 32:96:b6:b1:5d:41:25:c6:5b:da:8e:bd:06:f3:e3: a9:a3:ad:20:e8:ad:04:26:c7:f9:b9:39:a5:90:52: d2:eb:ce:1f:f6:ab:f5:6f:16:01:45:ee:d3:7a:c7: 24:6c:43:4d:14:8c:bc:d3:f1:6b:17:53:39:c0:78: 4f:c7:18:04:5f:45:5b:7a:38:4e:4a:e5:ed:05:bf: 4e:4e:c6:ea:02:9f:a9:87:f5:bf:e3:fd:ae:11:19: ab:68:7d:1e:e2:06:29:ef:fe:c3:f1:6d:3c:34:f8: 5b:ed:3b:d1:03:5b:46:44:7b:cf:02:56:59:c1:1f: 9b:9c:57:7e:7b:a6:61:ac:bb:ab:13:df:2e:27:c8: 2b:2b:84:bf:8b:85:8d:55:37:e3:8f:7a:a9:a7:d1: c6:64:82:78:04:d0:90:15:5f:dd:d9:6e:f8:b3:1e: 7d:0a:b0:76:da:5b:e0:18:cf:86:87:c6:c0:36:19: cd:82:08:db:71:2b:e8:19:9c:6e:9d:95:e4:53:d4: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:8B:80:BC:A8:B9:0B:A4:33:E4:10:65:ED:91:57:3C:43:65:FC X509v3 Authority Key Identifier: keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/2f0417ef20e47fe1cb819c94787001ceb64c9795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.140.0/23 190.99.117.0-190.99.118.255 Signature Algorithm: sha256WithRSAEncryption 34:b6:48:99:40:e2:c7:2c:f6:64:ca:46:87:f1:87:89:18:a3: 79:65:61:21:ba:06:c0:bc:40:44:f1:4d:c2:22:6c:2e:4c:95: 56:58:91:e1:6e:fb:ab:35:4a:5b:ca:66:84:d4:a3:8f:3a:d9: b7:1b:a6:1b:f0:61:de:74:f2:f3:82:f4:7c:bb:7d:a3:ed:28: e2:61:fa:c2:24:c8:1a:53:47:94:ca:12:50:1e:33:5b:11:85: 07:7b:e2:9a:04:6f:a1:3b:d6:d9:9a:09:68:4f:7f:56:3e:2b: e1:7a:34:65:e9:c8:db:d5:92:44:78:86:58:79:14:c1:dc:8c: c8:df:f6:74:6e:d6:ed:80:1d:12:cb:bb:b5:2e:ff:07:76:9d: 85:00:fc:5a:f1:af:a7:88:e5:90:7c:76:52:c9:7d:f6:b3:e4: 4e:ee:cf:c7:d4:f6:f1:29:57:99:22:f3:ec:d2:a3:6c:6d:77: 64:89:8f:07:3b:44:f2:4d:e0:58:b7:37:ce:c9:9e:c2:2c:bb: 7d:5c:cd:04:df:dd:38:a0:0d:18:31:12:f2:79:d4:2c:f0:07: f1:00:fa:f1:b4:c4:68:7e:9c:17:7c:31:14:eb:2d:ce:37:8f: 7c:f4:27:b6:6d:32:fa:e7:3f:b5:69:b0:2a:78:80:d2:60:97: 42:97:75:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDH3fDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1 ZGI1NzhkZGFhZWRjZjQzNzU3NDBlODVmNWY1MWRiNGUxOTM3MDYwHhcNMjEwMzE3 MTQ0MTQyWhcNMjYwMzI0MTQ0MTQyWjAzMTEwLwYDVQQDEygyZjA0MTdlZjIwZTQ3 ZmUxY2I4MTljOTQ3ODcwMDFjZWI2NGM5Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAo98py0Tkn/B1v5sZxQ9cjAhJvj14gRgRR0X3VaeI21Q87d68 o42I1jeJ5rNb6kjLz8MJytWiOYcZLm0ylraxXUElxlvajr0G8+Opo60g6K0EJsf5 uTmlkFLS684f9qv1bxYBRe7TesckbENNFIy80/FrF1M5wHhPxxgEX0VbejhOSuXt Bb9OTsbqAp+ph/W/4/2uERmraH0e4gYp7/7D8W08NPhb7TvRA1tGRHvPAlZZwR+b nFd+e6ZhrLurE98uJ8grK4S/i4WNVTfjj3qpp9HGZIJ4BNCQFV/d2W74sx59CrB2 2lvgGM+Gh8bANhnNggjbcSvoGZxunZXkU9Q5KQIDAQABo4ICaTCCAmUwHQYDVR0O BBYEFOnIi4C8qLkLpDPkEGXtkVc8Q2X8MB8GA1UdIwQYMBaAFHcSaFWyrO1PGOhN iOjSr2OwGCeCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYjU3 OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5MzcwNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjM0M2EyNDUtN2VhZi00OTU1LTkwZmEtOGU2ZDZm ZDQzYWI4LzJmMDQxN2VmMjBlNDdmZTFjYjgxOWM5NDc4NzAwMWNlYjY0Yzk3OTUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iMzQzYTI0NS03ZWFmLTQ5NTUtOTBmYS04ZTZk NmZkNDNhYjgvYTVkYjU3OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5Mzcw Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFAMEAYp1jDAMAwQAvmN1AwQAvmN2MA0GCSqGSIb3DQEBCwUAA4IB AQA0tkiZQOLHLPZkykaH8YeJGKN5ZWEhugbAvEBE8U3CImwuTJVWWJHhbvurNUpb ymaE1KOPOtm3G6Yb8GHedPLzgvR8u32j7SjiYfrCJMgaU0eUyhJQHjNbEYUHe+Ka BG+hO9bZmgloT39WPivhejRl6cjb1ZJEeIZYeRTB3IzI3/Z0btbtgB0Sy7u1Lv8H dp2FAPxa8a+niOWQfHZSyX32s+RO7s/H1PbxKVeZIvPs0qNsbXdkiY8HO0TyTeBY tzfOyZ7CLLt9XM0E3904oA0YMRLyedQs8AfxAPrxtMRofpwXfDEU6y3ON4989Ce2 bTL65z+1abAqeIDSYJdCl3Xr -----END CERTIFICATE-----Generated at Wed Jul 19 22:22:54 2023 by rpki-client on console-ams.rpki-client.org