$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa File: 9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa (raw, json) Hash identifier: 5+3dt5BCEKF+3IT7j10LsDTaIeWq5kDFkdylFy30uMU= Subject key identifier: C6:6D:A8:40:FD:E3:FC:18:4E:61:3F:C2:60:CD:4D:DB:13:49:F9:2A Certificate issuer: /CN=406959ed89b2c2889660cebedf0db49b63c24ea7 Certificate serial: 0D3D78 Authority key identifier: FB:77:B8:46:A1:91:C8:5B:6E:19:8F:D0:0A:75:B5:BA:3D:DA:45:66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406959ed89b2c2889660cebedf0db49b63c24ea7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa Signing time: Wed 24 Mar 2021 22:51:59 +0000 ROA not before: Wed 24 Mar 2021 22:47:59 +0000 ROA not after: Fri 24 Mar 2023 22:47:59 +0000 asID: 265696 IP address blocks: 131.196.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/406959ed89b2c2889660cebedf0db49b63c24ea7.crl rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/406959ed89b2c2889660cebedf0db49b63c24ea7.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406959ed89b2c2889660cebedf0db49b63c24ea7.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867704 (0xd3d78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406959ed89b2c2889660cebedf0db49b63c24ea7 Validity Not Before: Mar 24 22:47:59 2021 GMT Not After : Mar 24 22:47:59 2023 GMT Subject: CN=9cccb273001465d9ef0d372fb7fff661b0cb5e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:69:63:45:89:df:e4:7b:3a:f0:12:83:1a: 98:04:ae:a3:3b:6d:02:68:93:8f:9f:ca:88:20:6d: 84:4d:1b:7b:af:6c:05:1b:c4:89:ef:7d:56:3f:2c: 84:83:f0:30:4b:8e:96:51:fa:15:b2:f8:3a:05:f6: f1:f9:15:52:a8:23:82:a0:a1:83:2c:bd:cc:a7:04: 90:0b:d8:d0:4e:d8:48:fb:62:36:df:b6:d2:54:d2: e1:d8:80:01:c2:6e:8a:e6:5e:62:88:41:27:7f:db: 4f:14:a9:d8:74:ac:b1:50:55:7f:28:d9:14:0d:12: 36:56:21:91:22:0d:cd:e7:1f:08:a7:40:96:fb:ee: 03:5b:1c:ac:db:8e:da:16:a1:f7:7b:4f:10:9e:d3: e6:76:be:fb:2d:f7:4a:43:90:59:61:89:62:21:65: c3:62:0e:e4:96:98:2e:7c:a7:a0:79:05:37:23:05: 57:b8:49:16:23:0e:cb:8c:d8:1b:bc:a0:6e:1e:8c: 0c:18:bc:72:b9:24:02:6b:d7:dd:74:b7:2d:1e:96: c1:c9:fb:b2:1e:a2:7d:70:4a:68:f4:e8:a1:09:30: 98:71:d8:ab:6a:ba:12:05:6c:e0:00:b1:a0:15:e7: ee:29:34:0d:e3:fe:ec:81:e2:c1:75:12:23:39:a5: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6D:A8:40:FD:E3:FC:18:4E:61:3F:C2:60:CD:4D:DB:13:49:F9:2A X509v3 Authority Key Identifier: keyid:FB:77:B8:46:A1:91:C8:5B:6E:19:8F:D0:0A:75:B5:BA:3D:DA:45:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406959ed89b2c2889660cebedf0db49b63c24ea7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/406959ed89b2c2889660cebedf0db49b63c24ea7.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.214.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:29:4a:24:12:a2:0f:fe:98:30:25:a5:29:a0:4f:08:65:d2: 2b:2f:d4:cd:42:85:71:ab:88:17:9c:5d:95:d0:ce:70:48:a0: ea:5a:39:25:a6:d5:bc:46:04:90:7e:48:94:2b:3d:9b:5c:8a: d9:e4:e3:5d:dd:9b:c8:e9:49:fa:46:80:6e:15:d6:8c:7f:72: d9:8d:60:22:86:59:c6:93:50:cc:88:18:54:9d:fc:61:1e:7b: 80:a8:b6:c3:58:66:11:37:77:34:51:38:36:77:54:79:4b:4f: 28:3e:99:d1:ff:55:b0:5d:85:2d:8d:e7:b8:78:43:00:37:80: d2:0b:d1:30:76:85:b0:5c:8e:69:cb:e6:60:b5:89:ec:4c:fe: e7:40:5d:6f:41:ea:84:e4:0f:15:c6:f3:ae:ab:76:00:0b:24: 66:22:3c:11:2f:14:0d:8b:60:40:d1:ce:15:63:0f:77:76:b0: b2:88:1e:8b:c5:e4:8e:5a:fd:3b:c7:ed:49:60:6f:02:59:2a: 9a:0e:76:69:b0:3e:ed:6c:56:ce:52:15:6c:28:de:fb:88:72: 13:fc:12:77:43:83:b6:0f:cb:0d:18:cf:3d:6a:d0:5e:c5:f8: 52:ac:70:7e:f1:9f:0c:a0:c0:44:ec:67:07:16:80:64:47:fa: e7:e1:8d:4e -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDT14MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw Njk1OWVkODliMmMyODg5NjYwY2ViZWRmMGRiNDliNjNjMjRlYTcwHhcNMjEwMzI0 MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg5Y2NjYjI3MzAwMTQ2 NWQ5ZWYwZDM3MmZiN2ZmZjY2MWIwY2I1ZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAu6ZpY0WJ3+R7OvASgxqYBK6jO20CaJOPn8qIIG2ETRt7r2wF G8SJ731WPyyEg/AwS46WUfoVsvg6Bfbx+RVSqCOCoKGDLL3MpwSQC9jQTthI+2I2 37bSVNLh2IABwm6K5l5iiEEnf9tPFKnYdKyxUFV/KNkUDRI2ViGRIg3N5x8Ip0CW ++4DWxys247aFqH3e08QntPmdr77LfdKQ5BZYYliIWXDYg7klpgufKegeQU3IwVX uEkWIw7LjNgbvKBuHowMGLxyuSQCa9fddLctHpbByfuyHqJ9cEpo9OihCTCYcdir aroSBWzgALGgFefuKTQN4/7sgeLBdRIjOaUCzwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMZtqED94/wYTmE/wmDNTdsTSfkqMB8GA1UdIwQYMBaAFPt3uEahkchbbhmP 0Ap1tbo92kVmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDA2OTU5 ZWQ4OWIyYzI4ODk2NjBjZWJlZGYwZGI0OWI2M2MyNGVhNy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmQ3ZTM2NmQtNzI1Zi00YWIzLTk2NTItODU3ZTRh MzlmNGQ2LzljY2NiMjczMDAxNDY1ZDllZjBkMzcyZmI3ZmZmNjYxYjBjYjVlNGQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iZDdlMzY2ZC03MjVmLTRhYjMtOTY1Mi04NTdl NGEzOWY0ZDYvNDA2OTU5ZWQ4OWIyYzI4ODk2NjBjZWJlZGYwZGI0OWI2M2MyNGVh Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYPE1jANBgkqhkiG9w0BAQsFAAOCAQEAfSlKJBKiD/6YMCWl KaBPCGXSKy/UzUKFcauIF5xdldDOcEig6lo5JabVvEYEkH5IlCs9m1yK2eTjXd2b yOlJ+kaAbhXWjH9y2Y1gIoZZxpNQzIgYVJ38YR57gKi2w1hmETd3NFE4NndUeUtP KD6Z0f9VsF2FLY3nuHhDADeA0gvRMHaFsFyOacvmYLWJ7Ez+50Bdb0HqhOQPFcbz rqt2AAskZiI8ES8UDYtgQNHOFWMPd3awsogei8Xkjlr9O8ftSWBvAlkqmg52abA+ 7WxWzlIVbCje+4hyE/wSd0ODtg/LDRjPPWrQXsX4UqxwfvGfDKDAROxnBxaAZEf6 5+GNTg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:09 2023 by rpki-client on console-ams.rpki-client.org