$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/b3dff6846c3bc843300a0510befac19f81eaa182.roa File: b3dff6846c3bc843300a0510befac19f81eaa182.roa (raw, json) Hash identifier: 7A2MPnrZUKnQxngGMmgWA6qG6He3cFDX4452aifESDs= Subject key identifier: 0E:C8:81:7F:E9:F0:E4:4A:FC:C7:05:79:7C:86:BB:A6:66:1B:28:15 Certificate issuer: /CN=2affce9463fa8415cf700b389ea137e31e6bc44d Certificate serial: 1B3E42 Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/b3dff6846c3bc843300a0510befac19f81eaa182.roa Signing time: Mon 14 Nov 2022 20:44:01 +0000 ROA not before: Mon 22 Mar 2021 14:31:13 +0000 ROA not after: Tue 24 Mar 2026 14:31:13 +0000 asID: 263801 IP address blocks: 138.122.188.0/22 maxlen: 24 168.196.244.0/22 maxlen: 24 2803:7c40::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785410 (0x1b3e42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d Validity Not Before: Mar 22 14:31:13 2021 GMT Not After : Mar 24 14:31:13 2026 GMT Subject: CN=b3dff6846c3bc843300a0510befac19f81eaa182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:06:fc:25:87:4a:de:8f:c9:76:33:13:54:9b: 66:5a:8b:97:ca:aa:24:e0:af:29:30:35:28:e6:fb: b4:9c:c1:3d:60:07:96:bc:19:fe:00:d5:72:1b:50: 05:0c:57:f3:af:aa:e6:17:64:9a:30:a3:d3:2d:52: 8b:37:79:8f:b6:d1:64:65:1b:1f:06:f7:48:30:29: 24:ee:76:df:1f:a9:85:55:fa:73:16:01:93:0b:c9: 14:3f:f5:9a:1c:20:e8:d4:d8:34:a4:58:eb:4b:12: e2:ea:9c:2a:ad:bc:0e:92:1e:62:91:b7:92:1c:23: 28:aa:1e:ea:1b:68:4f:af:b9:cb:e0:a5:a1:d6:0b: aa:f4:c9:75:78:60:fb:a6:0e:fc:3d:8d:d8:64:06: 00:53:d0:e2:22:90:bf:10:33:66:70:d7:6d:4f:5e: ba:e5:46:4e:56:72:18:f6:fd:5b:98:9e:49:ec:3e: a6:b8:aa:68:ad:9e:44:81:cb:c8:0f:44:21:eb:93: 09:9f:33:04:a5:7b:ed:52:b5:0b:e1:a6:d0:c0:8d: 68:ec:a1:1b:34:a1:88:aa:e0:36:6f:33:6d:3e:48: b1:36:de:80:d2:b1:37:34:40:f2:a5:2e:16:da:a1: c7:6f:80:2b:41:72:ff:e7:7a:b8:92:5a:6b:db:5e: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C8:81:7F:E9:F0:E4:4A:FC:C7:05:79:7C:86:BB:A6:66:1B:28:15 X509v3 Authority Key Identifier: keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/b3dff6846c3bc843300a0510befac19f81eaa182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.188.0/22 168.196.244.0/22 IPv6: 2803:7c40::/32 Signature Algorithm: sha256WithRSAEncryption 67:ff:ef:f7:bf:7e:7c:f3:6f:11:27:eb:69:48:3a:10:79:4b: 76:5f:bb:74:53:f3:e6:bc:0a:22:cb:88:7d:f0:21:2b:95:25: 8b:85:ae:3a:d3:cb:ed:9a:bd:cd:39:f1:9f:15:d0:e1:48:9c: 1c:fb:81:20:c9:d6:c1:12:83:d9:8d:19:5d:a1:7f:3f:ca:58: bb:8e:52:3f:b3:4c:23:b4:53:44:a5:4b:fa:93:88:26:27:25: e7:74:e9:c0:e6:00:91:7a:f4:5e:0c:49:bb:ed:81:1b:3b:71: 26:e7:a6:9a:21:1f:f3:74:8e:b0:50:48:53:1c:3e:c1:41:26: d4:0f:69:4d:ff:17:e4:11:94:ce:41:92:2d:d3:c9:e4:c0:93: 92:ad:7d:e5:1b:57:9b:bc:13:44:6d:47:44:25:f4:dd:49:07: 44:ae:c7:ba:d1:b5:33:62:09:f7:cc:25:64:93:95:19:69:ca: 44:c4:42:55:d6:ba:b1:b9:1d:27:cf:80:d3:d4:81:d7:f6:e5: af:98:71:c4:42:16:76:a8:54:f4:17:d5:97:f3:6b:2a:11:e9: 61:e9:3b:58:63:11:3c:d1:9d:9c:4c:9a:04:51:85:eb:47:c1: 37:68:4e:35:da:38:83:7e:8b:69:71:92:f9:75:36:4c:25:12: 6c:72:56:88 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDGz5CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh ZmZjZTk0NjNmYTg0MTVjZjcwMGIzODllYTEzN2UzMWU2YmM0NGQwHhcNMjEwMzIy MTQzMTEzWhcNMjYwMzI0MTQzMTEzWjAzMTEwLwYDVQQDEyhiM2RmZjY4NDZjM2Jj ODQzMzAwYTA1MTBiZWZhYzE5ZjgxZWFhMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkgb8JYdK3o/JdjMTVJtmWouXyqok4K8pMDUo5vu0nME9YAeW vBn+ANVyG1AFDFfzr6rmF2SaMKPTLVKLN3mPttFkZRsfBvdIMCkk7nbfH6mFVfpz FgGTC8kUP/WaHCDo1Ng0pFjrSxLi6pwqrbwOkh5ikbeSHCMoqh7qG2hPr7nL4KWh 1guq9Ml1eGD7pg78PY3YZAYAU9DiIpC/EDNmcNdtT1665UZOVnIY9v1bmJ5J7D6m uKporZ5EgcvID0Qh65MJnzMEpXvtUrUL4abQwI1o7KEbNKGIquA2bzNtPkixNt6A 0rE3NEDypS4W2qHHb4ArQXL/53q4klpr215kDwIDAQABo4ICcDCCAmwwHQYDVR0O BBYEFA7IgX/p8ORK/McFeXyGu6ZmGygVMB8GA1UdIwQYMBaAFFfFc8ohtyJgOB7N YtWFtVtJS9pTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFmZmNl OTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0ZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjViMDVkNjgtYTNkYS00NWMwLTgxYTYtYjlkMzAw MzQ3NDhmL2IzZGZmNjg0NmMzYmM4NDMzMDBhMDUxMGJlZmFjMTlmODFlYWExODIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iNWIwNWQ2OC1hM2RhLTQ1YzAtODFhNi1iOWQz MDAzNDc0OGYvMmFmZmNlOTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0 ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAop6vAMEAqjE9DANBAIAAjAHAwUAKAN8QDANBgkqhkiG9w0B AQsFAAOCAQEAZ//v979+fPNvESfraUg6EHlLdl+7dFPz5rwKIsuIffAhK5Uli4Wu OtPL7Zq9zTnxnxXQ4UicHPuBIMnWwRKD2Y0ZXaF/P8pYu45SP7NMI7RTRKVL+pOI Jicl53TpwOYAkXr0XgxJu+2BGztxJuemmiEf83SOsFBIUxw+wUEm1A9pTf8X5BGU zkGSLdPJ5MCTkq195RtXm7wTRG1HRCX03UkHRK7HutG1M2IJ98wlZJOVGWnKRMRC Vda6sbkdJ8+A09SB1/blr5hxxEIWdqhU9BfVl/NrKhHpYek7WGMRPNGdnEyaBFGF 60fBN2hONdo4g36LaXGS+XU2TCUSbHJWiA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:07 2023 by rpki-client on console-ams.rpki-client.org