$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/cb910dc38529792c9d77f06468ccfa74d35b2ace.roa File: cb910dc38529792c9d77f06468ccfa74d35b2ace.roa (raw, json) Hash identifier: R1UQFM4vrm5aGZtoaKdoz5GR5Fj0OPFw7R0xL3oiniQ= Subject key identifier: 03:53:2D:66:DE:9D:B8:57:9F:43:F5:2D:1D:9F:C7:FB:5F:CF:D4:F5 Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4 Certificate serial: 1C5EB0 Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/cb910dc38529792c9d77f06468ccfa74d35b2ace.roa Signing time: Thu 22 Sep 2022 21:12:31 +0000 ROA not before: Thu 22 Sep 2022 21:10:21 +0000 ROA not after: Sun 22 Sep 2024 21:10:21 +0000 asID: 22368 IP address blocks: 190.96.192.0/21 maxlen: 21 190.96.192.0/24 maxlen: 24 190.96.193.0/24 maxlen: 24 190.96.194.0/23 maxlen: 23 190.96.196.0/23 maxlen: 23 190.96.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 09:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859248 (0x1c5eb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4 Validity Not Before: Sep 22 21:10:21 2022 GMT Not After : Sep 22 21:10:21 2024 GMT Subject: CN=cb910dc38529792c9d77f06468ccfa74d35b2ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:1f:52:2c:6c:b7:70:ac:81:b0:50:14:0c: 2a:8a:f6:02:f8:ba:06:df:f2:50:f3:d5:0c:12:35: be:08:1e:3c:b3:0b:2f:23:a5:a7:55:f8:01:bb:4e: 3f:8d:de:f8:3a:14:53:3c:b0:a7:b7:04:f7:27:55: 6d:82:52:fb:84:9a:6e:ab:6c:0f:34:6e:81:33:47: 0d:82:59:27:ad:65:b3:bd:df:58:c4:7c:27:2c:e2: 49:1a:ad:c2:f6:c4:d4:2e:31:d8:21:bd:93:d9:37: b7:41:40:46:2b:5f:50:ce:c1:61:26:70:64:3b:a7: d3:42:78:96:de:4d:0b:75:93:95:07:36:cd:d8:e5: b6:ef:9b:3d:2c:39:e9:3f:1f:50:5a:48:aa:f1:f5: a1:46:b4:56:ba:df:90:0a:dd:f5:c2:c8:1c:78:d9: 7d:be:0f:40:e6:80:01:78:24:fa:01:a8:34:3a:c7: 08:df:04:40:19:a7:5c:8d:1c:a9:0f:13:c2:bc:4d: ae:45:4d:35:52:d2:46:c5:cf:59:34:a3:9b:cf:65: ba:01:ed:b3:ca:6d:26:bb:02:62:37:3f:fa:3f:f7: e1:59:02:3b:16:a5:cb:75:ae:a5:c4:ce:6f:55:a5: 37:81:ab:cd:09:c5:5b:b7:50:09:37:2a:05:ee:4b: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:53:2D:66:DE:9D:B8:57:9F:43:F5:2D:1D:9F:C7:FB:5F:CF:D4:F5 X509v3 Authority Key Identifier: keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/cb910dc38529792c9d77f06468ccfa74d35b2ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.96.192.0/21 Signature Algorithm: sha256WithRSAEncryption af:b2:cb:5f:40:64:5a:6c:9b:12:3e:3a:bc:d5:69:2e:9a:32: 8d:fd:27:c1:9c:0d:7d:f7:da:76:a4:3e:23:67:79:e2:84:d8: 2a:c4:5b:96:f0:75:6b:6b:e1:a3:e6:98:87:53:14:39:67:a2: 1e:a1:a9:6c:ac:79:3e:92:4e:99:a2:9d:94:f9:dc:5b:8b:1e: 08:17:1d:5d:b1:0d:b7:ec:f2:0b:74:a2:01:b9:90:d4:ab:ce: 2a:97:74:00:33:e4:d3:9a:37:dc:9e:2b:ce:dd:8c:ab:eb:af: 45:53:90:9e:77:2d:8d:2b:f1:86:c8:8b:b6:e6:a9:fb:cb:f9: 3a:14:0d:76:da:64:0d:b2:02:fd:fd:71:fc:a1:31:04:cd:a4: 09:0d:d1:cb:97:2e:ab:69:18:02:48:6e:0f:c5:33:2b:c4:a2: fd:dd:81:c3:fe:0c:17:d0:28:8d:90:39:50:31:21:78:ea:f4: d6:a8:a4:7d:1e:c7:50:c3:d1:82:58:dc:b5:d7:d8:f9:f2:65: 7e:94:ba:1a:bd:29:65:46:c5:14:c2:26:f5:e3:b9:af:32:2a: 8e:2b:ac:87:34:b5:85:18:00:91:7b:a3:8e:02:1e:89:d0:70: 15:2f:08:72:97:95:62:89:e3:ee:f7:ef:4f:3c:8a:b3:4f:8d: 28:e8:93:e2 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDHF6wMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjIwOTIy MjExMDIxWhcNMjQwOTIyMjExMDIxWjAzMTEwLwYDVQQDEyhjYjkxMGRjMzg1Mjk3 OTJjOWQ3N2YwNjQ2OGNjZmE3NGQzNWIyYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3Z4fUixst3CsgbBQFAwqivYC+LoG3/JQ89UMEjW+CB48swsv I6WnVfgBu04/jd74OhRTPLCntwT3J1VtglL7hJpuq2wPNG6BM0cNglknrWWzvd9Y xHwnLOJJGq3C9sTULjHYIb2T2Te3QUBGK19QzsFhJnBkO6fTQniW3k0LdZOVBzbN 2OW275s9LDnpPx9QWkiq8fWhRrRWut+QCt31wsgceNl9vg9A5oABeCT6Aag0OscI 3wRAGadcjRypDxPCvE2uRU01UtJGxc9ZNKObz2W6Ae2zym0muwJiNz/6P/fhWQI7 FqXLda6lxM5vVaU3gavNCcVbt1AJNyoF7ktTvQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFANTLWbenbhXn0P1LR2fx/tfz9T1MB8GA1UdIwQYMBaAFGG2jf2H687Wyisk 4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx MTY1ZTkyL2NiOTEwZGMzODUyOTc5MmM5ZDc3ZjA2NDY4Y2NmYTc0ZDM1YjJhY2Uu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3 NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA75gwDANBgkqhkiG9w0BAQsFAAOCAQEAr7LLX0BkWmybEj46 vNVpLpoyjf0nwZwNfffadqQ+I2d54oTYKsRblvB1a2vho+aYh1MUOWeiHqGpbKx5 PpJOmaKdlPncW4seCBcdXbENt+zyC3SiAbmQ1KvOKpd0ADPk05o33J4rzt2Mq+uv RVOQnnctjSvxhsiLtuap+8v5OhQNdtpkDbIC/f1x/KExBM2kCQ3Ry5cuq2kYAkhu D8UzK8Si/d2Bw/4MF9AojZA5UDEheOr01qikfR7HUMPRgljctdfY+fJlfpS6Gr0p ZUbFFMIm9eO5rzIqjiushzS1hRgAkXujjgIeidBwFS8IcpeVYonj7vfvTzyKs0+N KOiT4g== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:51 2023 by rpki-client on console-fra.rpki-client.org