$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa File: 3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa (raw, json) Hash identifier: sW452JeZ3vMApPLLm3dC7Cn0b5X/ImxSViQnKAoZXFk= Subject key identifier: 0B:D2:F1:D7:CB:5C:E3:DD:7C:64:95:15:19:00:5F:F2:6D:95:A0:EC Certificate issuer: /CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4 Certificate serial: 0D9DCA Authority key identifier: D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa Signing time: Thu 15 Apr 2021 13:15:03 +0000 ROA not before: Wed 24 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 61522 IP address blocks: 45.68.16.0/22 maxlen: 22 200.23.206.0/24 maxlen: 24 2801:14:9000::/64 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892362 (0xd9dca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4 Validity Not Before: Mar 24 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=3cd44846e74eba024e3b25e12e8a3683a6ea7eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:8b:d2:07:0f:0c:c2:da:0b:26:54:ee:d9: 90:d8:1d:a4:73:c1:7e:b7:c1:89:c4:33:78:2e:ef: 45:99:bd:d6:0d:e2:1c:d7:c7:8d:08:8b:16:0f:4a: 6c:24:02:06:e8:ec:74:0a:cf:25:e6:a7:df:25:bc: f7:d2:6f:e0:ef:8a:50:1f:11:cd:0e:49:a6:1e:6f: 5a:c3:10:eb:9d:35:d5:e6:61:bf:b0:34:27:37:56: ec:56:91:84:58:ca:88:4a:3e:9b:d7:61:17:fa:08: 46:4a:4a:5a:41:db:b3:a2:6a:71:4a:75:d4:b9:8a: 09:2c:d5:cd:e9:e5:ac:6c:4d:9a:e8:e9:f2:d4:ce: 72:9d:6d:b0:69:fa:e7:db:92:91:48:06:8a:71:3a: 65:ee:9a:fb:0d:5d:24:a6:24:1b:74:ad:57:e5:2d: 4c:9f:69:20:4b:a3:b9:14:ea:c2:8b:c0:97:3a:d8: be:46:2b:9b:20:38:6e:2e:fb:e8:cb:9b:98:5a:da: 80:cf:95:f5:d0:b6:c7:d7:40:f2:2c:83:ac:bb:89: 08:73:e4:f4:69:b9:aa:12:e7:e3:70:d6:bb:af:df: 16:6a:ec:34:7e:f5:4d:9e:4a:d9:1f:b7:33:e2:81: dd:20:dc:45:f5:12:8b:7e:21:00:f0:8a:67:67:c9: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:F1:D7:CB:5C:E3:DD:7C:64:95:15:19:00:5F:F2:6D:95:A0:EC X509v3 Authority Key Identifier: keyid:D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3cd44846e74eba024e3b25e12e8a3683a6ea7eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.16.0/22 200.23.206.0/24 IPv6: 2801:14:9000::/64 Signature Algorithm: sha256WithRSAEncryption 3a:18:aa:60:41:6b:b5:3a:30:40:d5:e4:c1:6a:5f:58:8d:77: 61:05:f0:3a:2a:d8:14:cd:fd:a3:c5:cd:52:eb:59:1d:26:a4: 48:9b:19:64:fd:81:7d:80:f9:b2:8f:e8:fc:e9:bb:99:d2:fe: dd:7d:a4:be:7e:b9:f7:6a:b6:3e:68:dd:67:58:e8:54:6a:a9: 9b:7d:1c:e3:a2:6c:6f:0b:96:2d:a3:d1:8e:4a:a9:0e:84:e3: 73:16:80:e6:53:ce:0f:eb:09:16:18:2c:b7:09:00:fb:5d:b4: 4d:e0:a3:05:3f:61:42:2b:14:7b:33:6b:30:13:f5:51:22:0a: ce:e9:2f:3f:e8:61:49:39:f7:cf:47:28:61:71:a2:57:06:2a: 28:61:89:4f:eb:45:ae:ec:1c:03:f5:7b:86:70:2b:83:18:e7: 34:24:78:5f:04:fc:d8:00:6c:77:90:7f:fc:d9:d2:3e:db:7e: f5:07:c0:f4:82:d0:73:ef:0b:8f:46:30:f3:48:4b:56:15:90: 71:45:c7:bb:48:f2:6b:49:c3:41:24:36:a8:a1:ae:4c:35:70: 88:f2:c4:7e:f0:20:fa:e2:24:07:28:95:a5:69:73:7e:a1:54: cb:37:d6:e6:e0:c9:e1:21:97:f8:20:1c:1b:c7:3c:9b:38:3e: 51:ff:70:5a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDDZ3KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4 MWFhMmRlOWQ4MTIyMWZlZmE1MjRmZDY5NDQ4OWNlOGI2N2M4ZDQwHhcNMjEwMzI0 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzY2Q0NDg0NmU3NGVi YTAyNGUzYjI1ZTEyZThhMzY4M2E2ZWE3ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAr+yL0gcPDMLaCyZU7tmQ2B2kc8F+t8GJxDN4Lu9Fmb3WDeIc 18eNCIsWD0psJAIG6Ox0Cs8l5qffJbz30m/g74pQHxHNDkmmHm9awxDrnTXV5mG/ sDQnN1bsVpGEWMqISj6b12EX+ghGSkpaQduzompxSnXUuYoJLNXN6eWsbE2a6Ony 1M5ynW2wafrn25KRSAaKcTpl7pr7DV0kpiQbdK1X5S1Mn2kgS6O5FOrCi8CXOti+ RiubIDhuLvvoy5uYWtqAz5X10LbH10DyLIOsu4kIc+T0abmqEufjcNa7r98Wauw0 fvVNnkrZH7cz4oHdINxF9RKLfiEA8IpnZ8mheQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFAvS8dfLXOPdfGSVFRkAX/JtlaDsMB8GA1UdIwQYMBaAFND0yiB9ta1SrdTk iAHO3sMCYpgyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgxYWEy ZGU5ZDgxMjIxZmVmYTUyNGZkNjk0NDg5Y2U4YjY3YzhkNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmUwZGViYjYtYmRhMy00ODI4LTk4NmQtZTJmMTJl N2E1MjMxLzNjZDQ0ODQ2ZTc0ZWJhMDI0ZTNiMjVlMTJlOGEzNjgzYTZlYTdlZWEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iZTBkZWJiNi1iZGEzLTQ4MjgtOTg2ZC1lMmYx MmU3YTUyMzEvZjgxYWEyZGU5ZDgxMjIxZmVmYTUyNGZkNjk0NDg5Y2U4YjY3Yzhk NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQp MCcwEgQCAAEwDAMEAi1EEAMEAMgXzjARBAIAAjALAwkAKAEAFJAAAAAwDQYJKoZI hvcNAQELBQADggEBADoYqmBBa7U6MEDV5MFqX1iNd2EF8Doq2BTN/aPFzVLrWR0m pEibGWT9gX2A+bKP6Pzpu5nS/t19pL5+ufdqtj5o3WdY6FRqqZt9HOOibG8Lli2j 0Y5KqQ6E43MWgOZTzg/rCRYYLLcJAPtdtE3gowU/YUIrFHszazAT9VEiCs7pLz/o YUk5989HKGFxolcGKihhiU/rRa7sHAP1e4ZwK4MY5zQkeF8E/NgAbHeQf/zZ0j7b fvUHwPSC0HPvC49GMPNIS1YVkHFFx7tI8mtJw0EkNqihrkw1cIjyxH7wIPriJAco laVpc36hVMs31ubgyeEhl/ggHBvHPJs4PlH/cFo= -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:53 2023 by rpki-client on console-fra.rpki-client.org