$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/9ac269df9f67f6c3917c77152fb6247fc85b755f.roa File: 9ac269df9f67f6c3917c77152fb6247fc85b755f.roa (raw, json) Hash identifier: 6fEr4Oy0AjH8l/l9vGTdIUWleTL0SbJNil+Qf7HNAks= Subject key identifier: 0B:5C:32:12:32:5F:19:E9:22:27:EA:9A:D2:4F:8C:B1:7B:A8:D8:F3 Certificate issuer: /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8 Certificate serial: 18C6E8 Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/9ac269df9f67f6c3917c77152fb6247fc85b755f.roa Signing time: Thu 16 Jun 2022 16:31:06 +0000 ROA not before: Sat 01 Jan 2022 03:00:00 +0000 ROA not after: Sat 15 Jun 2024 03:00:00 +0000 asID: 52363 IP address blocks: 131.0.232.0/22 maxlen: 24 2803:f580::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623784 (0x18c6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8 Validity Not Before: Jan 1 03:00:00 2022 GMT Not After : Jun 15 03:00:00 2024 GMT Subject: CN=9ac269df9f67f6c3917c77152fb6247fc85b755f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:94:01:13:b6:e8:5f:64:e9:f2:1e:b0:5d: ed:a9:d6:64:78:36:62:8d:e2:82:7c:05:77:8e:71: 5e:58:98:6c:4e:d4:96:2d:13:4a:32:14:6d:c0:d6: df:ff:7e:9b:df:04:83:d5:aa:70:17:80:95:7d:99: 2c:56:ad:bf:77:53:5a:0a:aa:a9:79:35:36:ac:73: 19:17:01:a9:cf:6d:5c:5b:d4:01:61:99:07:2c:c7: fe:83:da:8b:9d:53:6b:10:46:8e:b4:94:65:d4:cf: f7:9c:78:2e:94:4c:7e:26:ad:c8:30:30:51:9c:01: f2:ba:6a:0f:ed:6f:6f:0d:9f:9c:3e:1d:e8:76:42: 30:b9:2a:0d:7c:3b:89:18:61:e0:35:da:a1:3d:13: c7:17:4b:5e:6e:f4:5d:4c:fa:ff:90:68:f6:26:39: b6:36:ea:9c:f3:0b:52:ee:47:af:73:27:78:07:da: 4d:21:65:b0:c3:b7:10:cc:9d:85:a5:01:eb:df:a4: 98:9f:f0:2b:da:31:2f:ec:a2:4c:bc:ec:51:29:87: 3f:16:0d:21:37:32:05:e9:83:23:82:28:d8:26:8f: 25:7a:9a:1a:9c:60:db:2f:93:73:0f:ab:25:58:bf: 4a:80:91:b6:1a:66:70:99:86:c4:55:f8:a6:8e:6e: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5C:32:12:32:5F:19:E9:22:27:EA:9A:D2:4F:8C:B1:7B:A8:D8:F3 X509v3 Authority Key Identifier: keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/9ac269df9f67f6c3917c77152fb6247fc85b755f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.232.0/22 IPv6: 2803:f580::/32 Signature Algorithm: sha256WithRSAEncryption 73:5b:d5:d8:cf:ac:1d:17:99:c6:38:74:11:d4:2c:a8:20:6d: 60:35:41:86:57:04:38:ea:7b:0c:c2:8c:ba:52:2b:76:e6:4b: 97:28:13:d6:14:de:3a:35:0e:a0:69:dd:80:56:d3:0a:44:e8: 42:51:97:9a:9c:ac:43:ef:8b:98:69:15:82:8d:81:e2:12:2c: 20:ba:3c:e8:30:0b:76:5b:1e:79:d3:c6:b3:5a:ae:60:f6:7c: f1:aa:d1:5b:8d:79:33:55:93:25:f0:2d:ba:ad:f5:d1:d1:1f: 15:0c:59:e1:22:52:75:d9:7d:c3:0f:09:60:d3:f1:ff:e2:9b: c7:80:03:66:c4:82:25:c2:48:1b:48:ef:cb:70:f8:c6:a5:ec: 00:e3:80:41:7d:99:73:84:22:d2:6e:84:d9:f9:f3:5a:d5:98: 82:10:41:9c:18:f4:bc:c1:91:24:f2:87:98:f3:4f:81:be:8d: 4e:03:bb:2a:13:25:44:f1:e7:bd:b8:ee:03:00:da:0d:5a:fc: cb:36:34:45:e7:c7:ba:20:bd:a5:98:e8:30:22:57:2c:51:55: 0d:b1:a4:9a:c3:84:12:6a:a4:0f:df:29:c4:66:2e:05:9a:e1: eb:82:3c:db:3f:48:5d:fb:bc:82:08:ec:54:b5:38:03:fd:e2: 50:a7:84:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDGMboMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh NjQyZjBmNWJmMWY0MjZjMTRhYjk4NGE1ZWVjNWNjMTIxOWY0YTgwHhcNMjIwMTAx MDMwMDAwWhcNMjQwNjE1MDMwMDAwWjAzMTEwLwYDVQQDEyg5YWMyNjlkZjlmNjdm NmMzOTE3Yzc3MTUyZmI2MjQ3ZmM4NWI3NTVmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArOeUARO26F9k6fIesF3tqdZkeDZijeKCfAV3jnFeWJhsTtSW LRNKMhRtwNbf/36b3wSD1apwF4CVfZksVq2/d1NaCqqpeTU2rHMZFwGpz21cW9QB YZkHLMf+g9qLnVNrEEaOtJRl1M/3nHgulEx+Jq3IMDBRnAHyumoP7W9vDZ+cPh3o dkIwuSoNfDuJGGHgNdqhPRPHF0tebvRdTPr/kGj2Jjm2Nuqc8wtS7kevcyd4B9pN IWWww7cQzJ2FpQHr36SYn/Ar2jEv7KJMvOxRKYc/Fg0hNzIF6YMjgijYJo8lepoa nGDbL5NzD6slWL9KgJG2GmZwmYbEVfimjm6uEwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFAtcMhIyXxnpIifqmtJPjLF7qNjzMB8GA1UdIwQYMBaAFMWVJLXI1WgeSuXn anIxYouHgkGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E2NDJm MGY1YmYxZjQyNmMxNGFiOTg0YTVlZWM1Y2MxMjE5ZjRhOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmE1YTE1OGMtMjdiNy00OGE2LThlOTYtYmJmOTAy YzIwNDA4LzlhYzI2OWRmOWY2N2Y2YzM5MTdjNzcxNTJmYjYyNDdmYzg1Yjc1NWYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iYTVhMTU4Yy0yN2I3LTQ4YTYtOGU5Ni1iYmY5 MDJjMjA0MDgvM2E2NDJmMGY1YmYxZjQyNmMxNGFiOTg0YTVlZWM1Y2MxMjE5ZjRh OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAoMA6DANBAIAAjAHAwUAKAP1gDANBgkqhkiG9w0BAQsFAAOC AQEAc1vV2M+sHReZxjh0EdQsqCBtYDVBhlcEOOp7DMKMulIrduZLlygT1hTeOjUO oGndgFbTCkToQlGXmpysQ++LmGkVgo2B4hIsILo86DALdlseedPGs1quYPZ88arR W415M1WTJfAtuq310dEfFQxZ4SJSddl9ww8JYNPx/+Kbx4ADZsSCJcJIG0jvy3D4 xqXsAOOAQX2Zc4Qi0m6E2fnzWtWYghBBnBj0vMGRJPKHmPNPgb6NTgO7KhMlRPHn vbjuAwDaDVr8yzY0RefHuiC9pZjoMCJXLFFVDbGkmsOEEmqkD98pxGYuBZrh64I8 2z9IXfu8ggjsVLU4A/3iUKeE0Q== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:09 2023 by rpki-client on console-ams.rpki-client.org