$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa File: 9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa (raw, json) Hash identifier: UE9OGRAOYrmXbcFkSvOL268WJzH8Wb8PDzabBPEamJs= Subject key identifier: CB:E0:FF:BE:80:29:70:D0:A0:AE:ED:04:44:2D:ED:28:E3:1C:82:B0 Certificate issuer: /CN=639b361009f26cf93180d6f26a1524716c25477c Certificate serial: 1883B9 Authority key identifier: 3B:1E:46:00:3B:4B:E1:AD:EB:B0:82:8F:B1:59:84:78:0B:8D:B1:B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa Signing time: Fri 24 Mar 2023 08:30:34 +0000 ROA not before: Thu 23 Mar 2023 08:30:34 +0000 ROA not after: Sat 22 Mar 2025 08:30:34 +0000 asID: 269858 IP address blocks: 45.189.196.0/24 maxlen: 24 45.189.197.0/24 maxlen: 24 45.189.198.0/24 maxlen: 24 45.189.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/639b361009f26cf93180d6f26a1524716c25477c.crl rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/639b361009f26cf93180d6f26a1524716c25477c.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 13:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606585 (0x1883b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639b361009f26cf93180d6f26a1524716c25477c Validity Not Before: Mar 23 08:30:34 2023 GMT Not After : Mar 22 08:30:34 2025 GMT Subject: CN=9349223b68d4ab0fe7781bb5ba076f0286b4b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:29:65:b7:c3:a6:c0:38:5c:ed:a3:fe:aa: ba:0e:37:d4:93:e4:76:e0:54:fb:9a:24:38:43:87: dd:f7:fb:ce:bd:15:d1:72:ac:26:e2:27:26:d5:35: 0a:70:26:50:9c:79:0c:22:99:e6:ab:71:59:bc:d7: 80:4d:fe:4f:61:0c:c1:20:2f:c0:56:33:ba:3e:42: fc:95:35:5d:dd:d3:2a:55:18:70:f7:90:46:95:05: 6a:a3:37:9b:97:d8:17:f2:43:4a:2b:62:7a:53:cb: 4d:2c:25:ac:2c:f4:00:48:96:4c:33:86:79:c8:06: ae:90:7a:67:3d:bf:4a:03:e7:01:29:6b:60:2a:3b: 11:e4:83:8a:34:f8:da:5e:87:b9:47:6e:1d:04:69: bf:ab:b6:85:34:50:7a:9a:6d:cb:e2:88:75:f1:3b: 65:e0:27:a2:4c:46:63:0e:19:b7:cf:8e:55:c8:48: 1f:5f:00:45:cf:73:c5:82:94:02:a1:a0:70:b2:a6: d4:53:a8:d9:4c:a2:71:85:a2:65:76:b0:e0:55:85: 5b:03:ad:e4:3f:85:bb:11:c1:3c:ab:52:c6:27:23: 9e:fd:13:83:67:8a:ee:fd:14:aa:50:38:62:21:90: 26:ca:25:86:15:3f:30:5f:10:ba:6c:13:8e:b4:24: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E0:FF:BE:80:29:70:D0:A0:AE:ED:04:44:2D:ED:28:E3:1C:82:B0 X509v3 Authority Key Identifier: keyid:3B:1E:46:00:3B:4B:E1:AD:EB:B0:82:8F:B1:59:84:78:0B:8D:B1:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/9349223b68d4ab0fe7781bb5ba076f0286b4b209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/639b361009f26cf93180d6f26a1524716c25477c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.196.0/22 Signature Algorithm: sha256WithRSAEncryption 66:4d:f7:a3:2b:16:32:db:6a:cf:00:04:92:d2:61:22:0b:c6: 43:48:98:7a:4e:3f:67:9d:5e:c1:de:78:85:0b:52:25:a2:6d: e8:43:4e:86:e7:ae:39:c0:76:23:f3:a2:d6:bc:cc:03:59:cb: ae:57:91:4a:68:7d:b5:6b:22:a3:d1:85:8f:1f:82:31:c2:45: a6:13:fd:0f:84:3f:08:81:d6:c2:39:7a:79:52:1f:db:21:e6: d8:41:e0:c8:49:21:24:86:6a:81:7f:2e:3a:c4:29:66:d6:9d: 4f:e2:f7:23:c0:35:54:b2:a9:e3:8a:e7:c9:7f:b7:cd:42:5b: cb:f5:b7:d3:0b:77:65:93:64:ff:b3:ef:ee:eb:30:51:cb:4c: 9e:f9:f9:6d:85:08:56:f4:5f:f6:1f:20:18:6d:f1:0c:b1:a8: 9d:55:bb:7a:6b:dc:cc:89:a6:cd:e0:38:b6:8f:9b:b4:01:0d: 9c:ba:c1:c5:c6:49:03:a9:1b:e0:f7:fb:fc:bc:88:b0:03:07: 55:dc:41:d2:d4:95:4f:da:13:f4:b9:f1:c9:04:64:fe:f5:67: c6:ad:61:93:70:f0:f9:5a:85:ae:03:2e:e8:4b:7e:3a:35:57: 25:d7:c9:c3:53:1a:a5:b1:9e:df:d1:73:67:bd:55:bb:cb:66: c3:b4:66:b5 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDGIO5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz OWIzNjEwMDlmMjZjZjkzMTgwZDZmMjZhMTUyNDcxNmMyNTQ3N2MwHhcNMjMwMzIz MDgzMDM0WhcNMjUwMzIyMDgzMDM0WjAzMTEwLwYDVQQDEyg5MzQ5MjIzYjY4ZDRh YjBmZTc3ODFiYjViYTA3NmYwMjg2YjRiMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmnkpZbfDpsA4XO2j/qq6DjfUk+R24FT7miQ4Q4fd9/vOvRXR cqwm4icm1TUKcCZQnHkMIpnmq3FZvNeATf5PYQzBIC/AVjO6PkL8lTVd3dMqVRhw 95BGlQVqozebl9gX8kNKK2J6U8tNLCWsLPQASJZMM4Z5yAaukHpnPb9KA+cBKWtg KjsR5IOKNPjaXoe5R24dBGm/q7aFNFB6mm3L4oh18Ttl4CeiTEZjDhm3z45VyEgf XwBFz3PFgpQCoaBwsqbUU6jZTKJxhaJldrDgVYVbA63kP4W7EcE8q1LGJyOe/ROD Z4ru/RSqUDhiIZAmyiWGFT8wXxC6bBOOtCTThQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMvg/76AKXDQoK7tBEQt7SjjHIKwMB8GA1UdIwQYMBaAFDseRgA7S+Gt67CC j7FZhHgLjbG5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjM5YjM2 MTAwOWYyNmNmOTMxODBkNmYyNmExNTI0NzE2YzI1NDc3Yy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjdiNGYzYTQtZTg2MS00NDY2LWJhMjItODk3NTZj ZjcyNDgyLzkzNDkyMjNiNjhkNGFiMGZlNzc4MWJiNWJhMDc2ZjAyODZiNGIyMDku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iN2I0ZjNhNC1lODYxLTQ0NjYtYmEyMi04OTc1 NmNmNzI0ODIvNjM5YjM2MTAwOWYyNmNmOTMxODBkNmYyNmExNTI0NzE2YzI1NDc3 Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAi29xDANBgkqhkiG9w0BAQsFAAOCAQEAZk33oysWMttqzwAE ktJhIgvGQ0iYek4/Z51ewd54hQtSJaJt6ENOhueuOcB2I/Oi1rzMA1nLrleRSmh9 tWsio9GFjx+CMcJFphP9D4Q/CIHWwjl6eVIf2yHm2EHgyEkhJIZqgX8uOsQpZtad T+L3I8A1VLKp44rnyX+3zUJby/W30wt3ZZNk/7Pv7uswUctMnvn5bYUIVvRf9h8g GG3xDLGonVW7emvczImmzeA4to+btAENnLrBxcZJA6kb4Pf7/LyIsAMHVdxB0tSV T9oT9LnxyQRk/vVnxq1hk3Dw+VqFrgMu6Et+OjVXJdfJw1MapbGe39FzZ71Vu8tm w7RmtQ== -----END CERTIFICATE-----Generated at Wed Jul 19 22:22:55 2023 by rpki-client on console-ams.rpki-client.org