$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa File: 65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa (raw, json) Hash identifier: CEAOQo3csEwSabkdYZ1J5QCOJTONY7Fd43qQPs4u3XY= Subject key identifier: 1E:3C:29:CB:9A:E9:7A:29:12:9C:42:48:F5:19:EB:97:7A:60:97:0B Certificate issuer: /CN=296ae134c63fda98feba9ece79438406ecc84f03 Certificate serial: 214562 Authority key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa Signing time: Tue 13 Jun 2023 00:29:04 +0000 ROA not before: Mon 12 Jun 2023 00:29:04 +0000 ROA not after: Fri 13 Jun 2025 00:29:04 +0000 asID: 17079 IP address blocks: 181.189.176.0/20 maxlen: 24 143.0.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jul 2023 20:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180450 (0x214562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296ae134c63fda98feba9ece79438406ecc84f03 Validity Not Before: Jun 12 00:29:04 2023 GMT Not After : Jun 13 00:29:04 2025 GMT Subject: CN=65421a9cd7f632b95eff6444fc35f3b0cf33ab11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:dc:c7:12:96:b5:ad:3c:f4:02:bb:ff:95: d6:74:45:57:6f:a6:4e:29:50:fc:8b:71:21:e8:1e: 92:8d:7c:6a:12:31:d7:88:3c:23:17:59:52:de:09: 39:0b:e3:01:b7:da:30:c3:5c:16:31:ab:69:26:7a: 1f:69:5b:85:8a:4f:57:73:0c:4f:41:33:2d:be:6c: fc:3c:83:9a:28:dc:9f:9b:8c:7f:a6:50:be:9f:0b: c3:bb:8b:14:15:38:4a:6a:66:63:bb:c7:95:9b:8d: 0d:13:7a:32:62:89:83:08:b6:c2:94:3c:9d:6f:b3: cd:e5:78:31:8c:aa:9e:f7:82:57:a0:47:32:7d:79: 48:95:21:99:3f:fc:ff:8e:ed:98:1a:03:9c:0e:35: c6:e9:8e:b8:8b:1e:e0:f9:0a:59:27:c2:0c:6f:1f: 2b:fb:d6:e6:92:62:62:c6:d4:40:bb:b7:4a:af:46: 9d:61:04:5a:b4:b5:45:df:ea:c9:3f:45:84:92:40: 8a:1e:3c:68:70:91:41:e6:1d:73:27:95:ff:d3:52: b5:ac:d6:58:d6:ee:ac:78:1b:12:99:a5:40:0c:7b: 70:77:fa:15:c3:ef:2d:9c:77:a1:f4:ce:7e:6e:0b: 21:0e:29:13:b4:be:bf:97:7f:7b:c2:2c:21:fb:5a: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3C:29:CB:9A:E9:7A:29:12:9C:42:48:F5:19:EB:97:7A:60:97:0B X509v3 Authority Key Identifier: keyid:8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.104.0/22 181.189.176.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:6d:db:6b:85:3d:55:98:b3:dd:16:41:a5:b9:19:c9:89:a9: 96:54:c9:f9:42:c4:04:92:a6:dc:34:42:80:62:eb:7b:0d:47: a5:d7:c4:60:4e:79:44:b9:4a:9c:ba:32:eb:60:1f:39:d0:ee: 43:a1:44:ce:b3:e7:03:79:94:74:10:ae:d4:16:53:30:7c:2f: 2f:d6:67:b4:ad:57:c6:76:0e:ed:d6:2f:46:e5:c9:f6:45:52: 04:37:76:0b:5a:ed:b7:67:a7:36:7b:fa:2d:f5:2d:4b:c3:dd: 05:0c:57:fd:d6:d5:74:c3:7c:52:43:0d:c2:7e:df:ad:77:59: 30:7b:4f:22:0d:74:46:d4:29:12:1a:4d:aa:8a:db:0c:97:e6: 2f:fd:76:86:de:4c:ad:c5:a7:4e:ae:64:ba:c8:8a:5f:2e:61: 6e:17:98:53:0e:1b:2f:08:07:96:60:0b:aa:1a:d0:dc:f3:aa: 77:09:ef:be:db:45:5f:f8:d4:89:6f:ba:5c:96:20:9b:3c:95: 40:11:2b:20:65:8f:c8:a6:ef:14:2f:f4:57:61:1c:14:b9:d7: 0a:3e:53:eb:74:86:b6:64:e1:ac:4b:82:a0:9d:38:04:17:72: cd:9c:44:e1:18:a3:2f:bc:59:70:20:42:d4:26:b1:e0:a7:8a: a0:04:76:7a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDIUViMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5 NmFlMTM0YzYzZmRhOThmZWJhOWVjZTc5NDM4NDA2ZWNjODRmMDMwHhcNMjMwNjEy MDAyOTA0WhcNMjUwNjEzMDAyOTA0WjAzMTEwLwYDVQQDEyg2NTQyMWE5Y2Q3ZjYz MmI5NWVmZjY0NDRmYzM1ZjNiMGNmMzNhYjExMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAukrcxxKWta089AK7/5XWdEVXb6ZOKVD8i3Eh6B6SjXxqEjHX iDwjF1lS3gk5C+MBt9oww1wWMatpJnofaVuFik9XcwxPQTMtvmz8PIOaKNyfm4x/ plC+nwvDu4sUFThKamZju8eVm40NE3oyYomDCLbClDydb7PN5XgxjKqe94JXoEcy fXlIlSGZP/z/ju2YGgOcDjXG6Y64ix7g+QpZJ8IMbx8r+9bmkmJixtRAu7dKr0ad YQRatLVF3+rJP0WEkkCKHjxocJFB5h1zJ5X/01K1rNZY1u6seBsSmaVADHtwd/oV w+8tnHeh9M5+bgshDikTtL6/l397wiwh+1qpjwIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFB48Kcua6XopEpxCSPUZ65d6YJcLMB8GA1UdIwQYMBaAFIzP9q2aExRzWKzi 2MfjuPUONDASMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk2YWUx MzRjNjNmZGE5OGZlYmE5ZWNlNzk0Mzg0MDZlY2M4NGYwMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmY3NzBkMmMtODE1OC00ZWIwLWE1NWMtYjViZTYz ZWNiODE3LzY1NDIxYTljZDdmNjMyYjk1ZWZmNjQ0NGZjMzVmM2IwY2YzM2FiMTEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iZjc3MGQyYy04MTU4LTRlYjAtYTU1Yy1iNWJl NjNlY2I4MTcvMjk2YWUxMzRjNjNmZGE5OGZlYmE5ZWNlNzk0Mzg0MDZlY2M4NGYw My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAo8AaAMEBLW9sDANBgkqhkiG9w0BAQsFAAOCAQEAnm3ba4U9 VZiz3RZBpbkZyYmpllTJ+ULEBJKm3DRCgGLrew1HpdfEYE55RLlKnLoy62AfOdDu Q6FEzrPnA3mUdBCu1BZTMHwvL9ZntK1XxnYO7dYvRuXJ9kVSBDd2C1rtt2enNnv6 LfUtS8PdBQxX/dbVdMN8UkMNwn7frXdZMHtPIg10RtQpEhpNqorbDJfmL/12ht5M rcWnTq5kusiKXy5hbheYUw4bLwgHlmALqhrQ3POqdwnvvttFX/jUiW+6XJYgmzyV QBErIGWPyKbvFC/0V2EcFLnXCj5T63SGtmThrEuCoJ04BBdyzZxE4RijL7xZcCBC 1Cax4KeKoAR2eg== -----END CERTIFICATE-----Generated at Wed Jul 19 22:22:58 2023 by rpki-client on console-ams.rpki-client.org