$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/b186f100f5b7ca235cec63c686a79c8b1d636a70.roa File: b186f100f5b7ca235cec63c686a79c8b1d636a70.roa (raw, json) Hash identifier: RQxboG5hv52Vfkx9SXfkWm5BE6NvS4YANvfPx0xvujA= Subject key identifier: F3:6E:BB:A3:60:D3:A1:E8:09:55:28:81:EF:D5:22:4E:89:7B:B8:C2 Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4 Certificate serial: 1C4C7C Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/b186f100f5b7ca235cec63c686a79c8b1d636a70.roa Signing time: Thu 22 Sep 2022 21:02:58 +0000 ROA not before: Thu 22 Sep 2022 21:00:56 +0000 ROA not after: Sun 22 Sep 2024 21:00:56 +0000 asID: 22368 IP address blocks: 190.13.32.0/21 maxlen: 21 190.13.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 09:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854588 (0x1c4c7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4 Validity Not Before: Sep 22 21:00:56 2022 GMT Not After : Sep 22 21:00:56 2024 GMT Subject: CN=b186f100f5b7ca235cec63c686a79c8b1d636a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:28:14:e1:f5:6b:d8:68:a1:fa:40:69:a3: 04:ed:d3:b1:b3:15:21:af:d3:ab:eb:7e:5b:50:71: bf:0f:aa:dd:7f:4e:61:48:08:05:b0:fa:bb:6e:31: ca:7b:8b:d3:ee:63:53:f1:97:2e:d4:be:f1:b5:e1: 42:57:3e:b9:dc:f5:d2:df:e2:f4:94:3c:8f:f1:f6: ac:c7:e7:d4:99:8e:5d:ae:8d:e3:05:c7:4e:bf:f4: ce:71:0c:ca:a4:56:59:01:0c:2c:36:e1:ee:79:39: dc:b3:83:73:b9:e8:b1:1c:74:9b:5c:47:2d:4a:c9: ce:c1:7d:cb:30:77:14:a4:26:78:39:19:d8:91:09: 5f:1d:f4:93:76:83:5e:df:a5:9b:dd:4e:29:62:37: 69:ed:89:cd:4d:4e:13:d7:89:0f:6c:0c:6e:c2:f9: d3:f2:c7:a8:6f:ac:02:0e:0b:ea:ee:82:10:1e:33: 41:43:24:fa:d0:5f:95:d3:24:66:0c:9b:c7:74:93: e1:f7:d7:1e:b1:61:27:66:e7:61:11:59:04:82:58: 7e:4d:c2:e2:68:35:c1:53:70:d5:61:68:2d:19:ef: 28:c9:6c:de:9b:9c:f4:47:92:30:eb:ad:5a:d2:9d: 28:4a:5d:58:63:40:3b:85:39:97:df:28:fd:0a:e3: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6E:BB:A3:60:D3:A1:E8:09:55:28:81:EF:D5:22:4E:89:7B:B8:C2 X509v3 Authority Key Identifier: keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/b186f100f5b7ca235cec63c686a79c8b1d636a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.13.32.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:7c:24:4b:12:e3:64:0f:ad:42:d6:a4:2d:b7:03:9d:88:26: 82:9e:f3:be:08:01:88:b3:2b:a5:45:24:3d:df:38:c5:91:2e: fc:8d:78:d3:52:71:5e:f5:f1:ac:b3:6d:6d:f7:1d:0e:5c:2e: b9:c6:8a:93:aa:5f:f5:fb:c5:0d:70:9b:cd:75:19:78:35:6a: 94:76:4f:ca:d7:6e:69:d0:a0:2a:13:db:09:a3:17:90:c5:78: 2b:6b:6c:27:58:32:1c:78:12:19:04:9f:3e:7a:f3:e7:8d:fe: 20:c6:4d:b5:a7:d3:c1:06:6e:11:14:ed:c3:1c:02:cf:50:a1: 8a:2e:26:31:f0:4f:65:3d:a5:46:7f:f4:00:b2:64:a7:54:a6: a2:63:0f:01:99:29:56:ff:17:aa:64:1b:7a:5b:23:b7:0d:ff: 6e:c3:fb:c3:e9:67:88:ed:7b:79:ff:6a:ba:f6:40:74:82:a1: 73:b6:3f:28:e3:58:82:0a:f2:6e:9a:fe:bb:92:bb:2c:56:52: 59:ee:ef:84:0a:69:18:1c:5a:a0:88:2a:f0:17:dd:8c:46:a2: b4:19:13:16:9e:98:25:ed:05:aa:8c:b3:98:70:1c:1a:93:80: c9:a3:ea:39:af:1d:7d:75:33:8b:c7:62:15:a1:7c:81:bf:06: 5c:d0:8b:9f -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDHEx8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjIwOTIy MjEwMDU2WhcNMjQwOTIyMjEwMDU2WjAzMTEwLwYDVQQDEyhiMTg2ZjEwMGY1Yjdj YTIzNWNlYzYzYzY4NmE3OWM4YjFkNjM2YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwfYoFOH1a9hoofpAaaME7dOxsxUhr9Or635bUHG/D6rdf05h SAgFsPq7bjHKe4vT7mNT8Zcu1L7xteFCVz653PXS3+L0lDyP8fasx+fUmY5dro3j BcdOv/TOcQzKpFZZAQwsNuHueTncs4NzueixHHSbXEctSsnOwX3LMHcUpCZ4ORnY kQlfHfSTdoNe36Wb3U4pYjdp7YnNTU4T14kPbAxuwvnT8seob6wCDgvq7oIQHjNB QyT60F+V0yRmDJvHdJPh99cesWEnZudhEVkEglh+TcLiaDXBU3DVYWgtGe8oyWze m5z0R5Iw661a0p0oSl1YY0A7hTmX3yj9CuOiCQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFPNuu6Ng06HoCVUoge/VIk6Je7jCMB8GA1UdIwQYMBaAFGG2jf2H687Wyisk 4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx MTY1ZTkyL2IxODZmMTAwZjViN2NhMjM1Y2VjNjNjNjg2YTc5YzhiMWQ2MzZhNzAu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3 NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBL4NIDANBgkqhkiG9w0BAQsFAAOCAQEAHXwkSxLjZA+tQtak LbcDnYgmgp7zvggBiLMrpUUkPd84xZEu/I1401JxXvXxrLNtbfcdDlwuucaKk6pf 9fvFDXCbzXUZeDVqlHZPytduadCgKhPbCaMXkMV4K2tsJ1gyHHgSGQSfPnrz543+ IMZNtafTwQZuERTtwxwCz1Chii4mMfBPZT2lRn/0ALJkp1SmomMPAZkpVv8XqmQb elsjtw3/bsP7w+lniO17ef9quvZAdIKhc7Y/KONYggrybpr+u5K7LFZSWe7vhApp GBxaoIgq8BfdjEaitBkTFp6YJe0FqoyzmHAcGpOAyaPqOa8dfXUzi8diFaF8gb8G XNCLnw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:51 2023 by rpki-client on console-fra.rpki-client.org