$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/d3093e8cb2ee71e6113c3e51c14fe492b8068217.roa File: d3093e8cb2ee71e6113c3e51c14fe492b8068217.roa (raw, json) Hash identifier: +lK2FnTXtHb9b5UWjOiwyoDEh2SadM5PiJA+hzMG35k= Subject key identifier: 53:72:C0:0C:93:D2:0E:BC:CA:1E:67:FD:BD:3F:C2:29:C1:32:3D:B0 Certificate issuer: /CN=60077339e10a0ec2c6761ec2643f8be039720bbc Certificate serial: 0DC264 Authority key identifier: 0C:F7:D2:FA:4C:E2:E7:13:8F:E7:2C:FF:8D:E9:A3:7D:5E:27:F4:51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/d3093e8cb2ee71e6113c3e51c14fe492b8068217.roa Signing time: Wed 24 Mar 2021 14:30:44 +0000 ROA not before: Wed 24 Mar 2021 14:30:44 +0000 ROA not after: Tue 24 Mar 2026 14:30:44 +0000 asID: 263780 IP address blocks: 138.118.216.0/22 maxlen: 24 170.78.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.crl rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901732 (0xdc264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60077339e10a0ec2c6761ec2643f8be039720bbc Validity Not Before: Mar 24 14:30:44 2021 GMT Not After : Mar 24 14:30:44 2026 GMT Subject: CN=d3093e8cb2ee71e6113c3e51c14fe492b8068217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:43:13:68:49:c3:58:f9:34:8f:04:9d:e3: 7c:f6:f3:53:a7:4d:c4:0f:c0:02:4c:4c:89:2d:5a: db:74:88:5c:c1:3a:4e:ea:ad:90:7d:37:d0:f3:66: 49:6b:dd:55:60:7a:91:49:5f:89:6a:8b:67:27:3d: 3d:54:70:86:cb:b9:cb:33:9e:c2:83:e1:e2:98:3d: 88:c2:82:c9:1e:fd:4d:43:b4:2e:51:dd:ca:ab:fa: bf:1f:f9:0e:a8:c4:2d:f9:aa:f9:61:04:0b:97:8c: 19:b8:b3:af:03:4e:10:da:a2:ec:7d:8a:f6:d7:ad: 4e:92:89:8b:d5:e9:10:8c:9c:03:e3:3f:51:d3:b8: 6e:19:04:dc:59:58:a7:2f:5d:2f:8d:7e:a9:95:10: c3:f8:81:7f:06:d3:75:44:47:d2:76:3c:10:9d:8d: 2b:59:b0:12:5d:66:37:76:83:b1:ee:34:81:d6:ff: 87:ce:b6:d1:ba:23:de:b2:a0:0a:6f:e4:74:eb:a4: ca:81:22:48:1e:e3:a7:5e:e2:6e:86:94:62:19:d2: bb:15:27:d9:90:0a:75:58:c4:43:3a:77:41:cc:65: cb:74:84:a0:56:6e:d4:cc:a9:cf:f2:6d:2b:e4:93: 59:5e:d7:96:ac:f6:3f:a8:c0:68:12:30:4a:fd:16: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:72:C0:0C:93:D2:0E:BC:CA:1E:67:FD:BD:3F:C2:29:C1:32:3D:B0 X509v3 Authority Key Identifier: keyid:0C:F7:D2:FA:4C:E2:E7:13:8F:E7:2C:FF:8D:E9:A3:7D:5E:27:F4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/d3093e8cb2ee71e6113c3e51c14fe492b8068217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.216.0/22 170.78.124.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a7:f2:2c:70:b7:56:7e:42:54:de:dd:6b:5d:61:c6:2a:ad: 4b:61:b4:99:c8:ce:36:50:c1:33:0e:ad:fd:f6:70:d6:e5:5c: c9:5b:a7:81:bf:29:f7:4f:fd:45:d5:48:2e:31:c5:c0:b2:13: f2:19:13:e4:c5:b2:e4:fe:40:ed:a1:a1:67:85:12:87:fe:6e: 14:3c:58:8e:89:5c:fd:2e:ea:99:2f:c8:a4:a7:52:bf:22:62: 72:7a:c3:12:3e:26:d4:89:e2:c5:c3:b6:e2:71:29:a7:b3:84: 1d:be:18:31:96:be:da:7a:2e:21:af:9f:51:ad:ef:f1:8f:4a: 78:69:99:5a:b4:0e:87:1b:b1:30:35:6b:c1:fc:32:28:db:d3: 08:ea:3c:31:3a:19:3f:fa:fb:8f:a5:93:74:c0:8c:92:01:d8: 02:de:f3:e3:3e:02:fa:d4:c0:c9:d9:57:7d:23:f2:d6:b0:49: c6:8f:9a:7d:51:fe:28:d4:05:1a:eb:f4:65:9e:c3:b8:0c:76: b1:99:df:4c:34:b6:40:44:24:6f:f4:d6:5e:35:87:00:0a:40: 2f:af:98:bb:92:45:a2:c9:22:e8:53:1a:c0:b3:8c:06:2c:95: f4:9d:9d:63:ab:5b:f9:6a:8b:0f:37:ad:c6:af:8b:85:fa:5c: f6:ed:70:3c -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDDcJkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw MDc3MzM5ZTEwYTBlYzJjNjc2MWVjMjY0M2Y4YmUwMzk3MjBiYmMwHhcNMjEwMzI0 MTQzMDQ0WhcNMjYwMzI0MTQzMDQ0WjAzMTEwLwYDVQQDEyhkMzA5M2U4Y2IyZWU3 MWU2MTEzYzNlNTFjMTRmZTQ5MmI4MDY4MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwvRDE2hJw1j5NI8EneN89vNTp03ED8ACTEyJLVrbdIhcwTpO 6q2QfTfQ82ZJa91VYHqRSV+JaotnJz09VHCGy7nLM57Cg+HimD2IwoLJHv1NQ7Qu Ud3Kq/q/H/kOqMQt+ar5YQQLl4wZuLOvA04Q2qLsfYr2161OkomL1ekQjJwD4z9R 07huGQTcWVinL10vjX6plRDD+IF/BtN1REfSdjwQnY0rWbASXWY3doOx7jSB1v+H zrbRuiPesqAKb+R066TKgSJIHuOnXuJuhpRiGdK7FSfZkAp1WMRDOndBzGXLdISg Vm7UzKnP8m0r5JNZXteWrPY/qMBoEjBK/RY0RwIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFFNywAyT0g68yh5n/b0/winBMj2wMB8GA1UdIwQYMBaAFAz30vpM4ucTj+cs /43po31eJ/RRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjAwNzcz MzllMTBhMGVjMmM2NzYxZWMyNjQzZjhiZTAzOTcyMGJiYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjhlNGM3ZmQtZDQ0Ny00MGEzLTlkZDEtZTlmNGNj YTkxM2QyL2QzMDkzZThjYjJlZTcxZTYxMTNjM2U1MWMxNGZlNDkyYjgwNjgyMTcu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iOGU0YzdmZC1kNDQ3LTQwYTMtOWRkMS1lOWY0 Y2NhOTEzZDIvNjAwNzczMzllMTBhMGVjMmM2NzYxZWMyNjQzZjhiZTAzOTcyMGJi Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAop22AMEAqpOfDANBgkqhkiG9w0BAQsFAAOCAQEAEafyLHC3 Vn5CVN7da11hxiqtS2G0mcjONlDBMw6t/fZw1uVcyVungb8p90/9RdVILjHFwLIT 8hkT5MWy5P5A7aGhZ4USh/5uFDxYjolc/S7qmS/IpKdSvyJicnrDEj4m1InixcO2 4nEpp7OEHb4YMZa+2nouIa+fUa3v8Y9KeGmZWrQOhxuxMDVrwfwyKNvTCOo8MToZ P/r7j6WTdMCMkgHYAt7z4z4C+tTAydlXfSPy1rBJxo+afVH+KNQFGuv0ZZ7DuAx2 sZnfTDS2QEQkb/TWXjWHAApAL6+Yu5JFoski6FMawLOMBiyV9J2dY6tb+WqLDzet xq+Lhfpc9u1wPA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:08 2023 by rpki-client on console-ams.rpki-client.org