$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/9f41252339e67ffb73de2544c379e4166e0f73f4.roa File: 9f41252339e67ffb73de2544c379e4166e0f73f4.roa (raw, json) Hash identifier: kjyTrRqCJJq2cDLHv8K2mpnur37UktNNdUHpS5NOunI= Subject key identifier: 66:C5:96:9E:46:8D:F0:07:CB:B4:DA:EC:F9:B4:A1:55:0E:AE:3D:EA Certificate issuer: /CN=92f99288a81ebe400af2542cf1335efd001a7734 Certificate serial: 0D1E86 Authority key identifier: 48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/9f41252339e67ffb73de2544c379e4166e0f73f4.roa Signing time: Wed 24 Mar 2021 14:36:46 +0000 ROA not before: Wed 24 Mar 2021 14:36:44 +0000 ROA not after: Tue 24 Mar 2026 14:36:44 +0000 asID: 265696 IP address blocks: 45.5.172.0/22 maxlen: 23 2801:18:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.crl rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 06:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859782 (0xd1e86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f99288a81ebe400af2542cf1335efd001a7734 Validity Not Before: Mar 24 14:36:44 2021 GMT Not After : Mar 24 14:36:44 2026 GMT Subject: CN=9f41252339e67ffb73de2544c379e4166e0f73f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:e0:44:ce:c0:98:5e:69:90:d9:ce:1d:a5: af:c0:24:84:ea:ef:91:85:6a:29:91:ff:57:3a:2c: 23:1c:9c:5c:8c:3a:c9:69:70:59:91:a6:e3:6e:be: 80:3a:90:10:23:cf:e4:8d:c4:5f:14:7b:35:db:78: 43:5d:71:d7:f8:62:f6:4c:a7:42:e1:05:21:e9:7f: d8:b0:32:21:1c:a5:0e:b2:4c:16:10:bf:e7:a7:45: cd:a1:e0:97:4a:2d:e4:ae:43:6d:f9:34:ca:d6:2e: 0a:fc:4b:0b:e0:e9:de:38:6b:e0:dc:95:f9:27:92: ff:92:07:fc:bb:6c:44:a7:de:ea:80:cb:d3:73:0d: ac:f1:b0:bd:e9:8b:98:24:c5:36:52:fe:da:1c:31: 18:27:4b:25:9b:b3:cc:d0:fd:df:18:db:06:d4:96: 09:ab:4b:af:e4:76:c8:82:5f:26:7f:9d:9e:36:bb: 6e:9b:40:a4:2f:56:88:87:db:79:bc:2a:6e:46:51: 82:75:03:de:8a:3c:89:7d:a0:0a:37:9b:38:11:c6: 4a:53:49:c7:8c:d8:73:be:6f:b9:7c:a5:23:f3:1d: 65:44:5e:31:53:29:83:02:d4:ef:fc:bb:fe:d5:6d: 95:1d:60:2e:11:43:86:74:18:da:a1:fa:21:b3:0f: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C5:96:9E:46:8D:F0:07:CB:B4:DA:EC:F9:B4:A1:55:0E:AE:3D:EA X509v3 Authority Key Identifier: keyid:48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/9f41252339e67ffb73de2544c379e4166e0f73f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.172.0/22 IPv6: 2801:18:3000::/48 Signature Algorithm: sha256WithRSAEncryption 31:94:c7:d6:24:f3:72:29:4f:2d:2f:9b:04:66:ac:b3:7c:17: 02:d1:2a:05:bb:1b:d6:55:03:27:39:05:3a:54:53:22:d0:f2: 14:ef:ff:00:ab:60:21:45:0c:f5:90:9a:3e:b3:76:2d:59:4b: 0e:23:48:43:a1:6f:6b:83:51:de:36:02:06:77:fc:01:7f:e1: 9e:2c:d1:56:b1:1a:c0:b5:0c:d4:82:58:63:d0:17:fc:5a:7f: ec:6d:9d:0c:10:f3:39:20:dc:67:65:98:be:cb:63:12:c9:20: 5b:fc:08:fa:1a:a9:0a:7d:1a:46:a7:e6:56:63:0f:cf:73:ba: dd:61:38:78:f8:37:09:c5:f9:82:9d:db:d7:4a:57:b0:39:74: 89:5b:a2:1f:84:0f:f7:c2:e5:89:c2:ce:6c:f7:cf:ac:1a:b2: ca:c0:e8:61:9b:0f:42:b8:c1:f1:63:33:d5:f0:22:26:2b:bb: ec:8f:d8:45:13:4e:2f:8d:81:fa:09:16:38:73:c4:a9:24:bd: 3c:12:b3:b9:09:1b:7f:b8:c9:26:36:8e:ff:36:d7:09:93:8a: 01:35:4e:69:23:c7:85:36:44:26:5d:4b:58:f7:ff:35:37:33: 8c:a1:7b:8d:e1:f8:63:8b:f6:08:64:d4:57:7e:ff:e4:9a:01: f9:d9:e5:5d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDDR6GMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky Zjk5Mjg4YTgxZWJlNDAwYWYyNTQyY2YxMzM1ZWZkMDAxYTc3MzQwHhcNMjEwMzI0 MTQzNjQ0WhcNMjYwMzI0MTQzNjQ0WjAzMTEwLwYDVQQDEyg5ZjQxMjUyMzM5ZTY3 ZmZiNzNkZTI1NDRjMzc5ZTQxNjZlMGY3M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkgTgRM7AmF5pkNnOHaWvwCSE6u+RhWopkf9XOiwjHJxcjDrJ aXBZkabjbr6AOpAQI8/kjcRfFHs123hDXXHX+GL2TKdC4QUh6X/YsDIhHKUOskwW EL/np0XNoeCXSi3krkNt+TTK1i4K/EsL4OneOGvg3JX5J5L/kgf8u2xEp97qgMvT cw2s8bC96YuYJMU2Uv7aHDEYJ0slm7PM0P3fGNsG1JYJq0uv5HbIgl8mf52eNrtu m0CkL1aIh9t5vCpuRlGCdQPeijyJfaAKN5s4EcZKU0nHjNhzvm+5fKUj8x1lRF4x UymDAtTv/Lv+1W2VHWAuEUOGdBjaofohsw+5eQIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFGbFlp5GjfAHy7Ta7Pm0oVUOrj3qMB8GA1UdIwQYMBaAFEjrzjLr6NNWcV90 I+mRAl4WOzkxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTJmOTky ODhhODFlYmU0MDBhZjI1NDJjZjEzMzVlZmQwMDFhNzczNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjY5ZjZkZmQtYmM0ZC00NWNjLTgzNTQtNzgwMmFi YjY0NTRkLzlmNDEyNTIzMzllNjdmZmI3M2RlMjU0NGMzNzllNDE2NmUwZjczZjQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iNjlmNmRmZC1iYzRkLTQ1Y2MtODM1NC03ODAy YWJiNjQ1NGQvOTJmOTkyODhhODFlYmU0MDBhZjI1NDJjZjEzMzVlZmQwMDFhNzcz NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAi0FrDAPBAIAAjAJAwcAKAEAGDAAMA0GCSqGSIb3DQEBCwUA A4IBAQAxlMfWJPNyKU8tL5sEZqyzfBcC0SoFuxvWVQMnOQU6VFMi0PIU7/8Aq2Ah RQz1kJo+s3YtWUsOI0hDoW9rg1HeNgIGd/wBf+GeLNFWsRrAtQzUglhj0Bf8Wn/s bZ0MEPM5INxnZZi+y2MSySBb/Aj6GqkKfRpGp+ZWYw/Pc7rdYTh4+DcJxfmCndvX SlewOXSJW6IfhA/3wuWJws5s98+sGrLKwOhhmw9CuMHxYzPV8CImK7vsj9hFE04v jYH6CRY4c8SpJL08ErO5CRt/uMkmNo7/NtcJk4oBNU5pI8eFNkQmXUtY9/81NzOM oXuN4fhji/YIZNRXfv/kmgH52eVd -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:51 2023 by rpki-client on console-fra.rpki-client.org