$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa File: 40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa (raw, json) Hash identifier: wh6jQ6u/BV5p3eDxHtS9RdA+pvERJnf5EJMJeO5mXs0= Subject key identifier: CC:99:DE:D8:91:0A:6E:F4:8E:2F:09:BC:53:2F:9A:9D:72:8B:46:99 Certificate issuer: /CN=d8ec2e23c44f24767001626bdcf66010d00d9db8 Certificate serial: 0F0698 Authority key identifier: 64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa Signing time: Tue 24 May 2022 23:17:14 +0000 ROA not before: Thu 05 May 2022 03:00:00 +0000 ROA not after: Sun 05 May 2024 03:00:00 +0000 asID: 265580 IP address blocks: 45.174.252.0/22 maxlen: 24 2806:335::/36 maxlen: 40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.crl rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 09:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984728 (0xf0698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ec2e23c44f24767001626bdcf66010d00d9db8 Validity Not Before: May 5 03:00:00 2022 GMT Not After : May 5 03:00:00 2024 GMT Subject: CN=40af05052591d7109f6c6b68f4f42e19c4e9faa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:17:3c:d9:29:a4:fd:2e:3a:b7:53:fe:8c: 32:82:61:e4:73:2b:1e:46:59:ad:5b:78:d2:6f:8c: fe:eb:63:e4:5e:b2:ea:68:b9:a0:2f:e6:47:04:cd: 9a:83:f1:69:c9:db:f4:4f:e7:47:60:6f:44:a7:c3: 6f:23:f3:97:80:a7:0f:0d:ef:41:df:20:92:12:54: 87:bd:70:00:6d:93:f6:3f:02:53:9f:91:32:2d:db: 37:1b:35:28:17:09:1d:45:04:48:bf:b3:8d:34:64: bd:fb:d3:05:b5:38:dc:42:f9:af:f3:4b:89:64:58: 79:78:37:33:15:12:44:a0:21:7e:b4:f3:cc:8a:1b: 7c:78:bd:bf:0f:8b:c6:1a:9d:02:c5:5a:12:1d:e9: 5c:2c:b5:eb:21:3d:1c:f4:0f:47:0c:db:2b:c7:63: e9:24:cf:38:61:09:5a:99:b5:f6:d2:f4:74:28:4a: 8c:18:c4:7e:e8:e1:26:b7:a3:de:f4:d1:3d:d9:1f: 2a:54:c9:31:b9:71:00:e4:02:29:28:56:01:b4:90: 3e:b8:b7:d9:73:84:bc:c2:b4:eb:45:78:24:b1:5e: 20:95:e3:a8:15:ce:04:2f:e6:20:63:dd:78:66:c1: 9b:06:8b:95:8b:72:31:1e:fe:34:52:96:af:e5:06: 3b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:99:DE:D8:91:0A:6E:F4:8E:2F:09:BC:53:2F:9A:9D:72:8B:46:99 X509v3 Authority Key Identifier: keyid:64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/40af05052591d7109f6c6b68f4f42e19c4e9faa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.252.0/22 IPv6: 2806:335::/36 Signature Algorithm: sha256WithRSAEncryption 09:00:83:71:f1:f3:0c:ad:6d:68:8f:23:5a:57:30:7b:6a:6d: 87:a0:29:2d:cb:c0:b7:6e:9c:5e:ab:da:ab:8b:38:8e:bf:bb: f4:47:b4:b0:53:64:73:f7:05:a7:9e:66:0a:5f:71:3d:3c:0d: 93:d6:5f:96:e4:4c:80:04:06:9a:c1:58:1f:07:2d:d8:88:26: 6b:33:e7:86:46:14:47:b2:38:5f:a1:46:0f:d5:ce:61:3f:98: 8f:bd:8f:9d:40:6f:3e:ee:88:63:33:42:44:99:16:2e:48:cb: bf:44:ab:1a:ae:ce:ec:07:00:b5:b6:08:72:fb:78:03:a6:f5: 8b:67:ae:c2:58:8d:af:49:7e:99:54:36:0f:b2:21:44:e1:e1: f4:4c:46:20:46:65:5d:d9:44:d6:b6:72:ec:ad:f1:cb:3f:f9: 6f:76:a5:41:ef:14:8b:78:8f:ef:57:06:81:f6:8f:43:cf:2d: 84:b9:0c:c3:af:74:6f:dd:62:55:9f:bc:76:b6:48:4b:6a:f9: 4b:79:65:af:7e:cb:f8:51:a9:83:47:e6:ab:ac:19:5c:18:b4: f9:07:45:91:dd:cf:9c:41:b9:4d:e7:27:56:a7:be:3f:59:4c: d7:11:f8:de:35:ae:0a:fc:fa:be:f3:38:7d:83:ba:a1:df:6b: 1b:78:e7:43 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIDDwaYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4 ZWMyZTIzYzQ0ZjI0NzY3MDAxNjI2YmRjZjY2MDEwZDAwZDlkYjgwHhcNMjIwNTA1 MDMwMDAwWhcNMjQwNTA1MDMwMDAwWjAzMTEwLwYDVQQDEyg0MGFmMDUwNTI1OTFk NzEwOWY2YzZiNjhmNGY0MmUxOWM0ZTlmYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAySAXPNkppP0uOrdT/owygmHkcyseRlmtW3jSb4z+62PkXrLq aLmgL+ZHBM2ag/Fpydv0T+dHYG9Ep8NvI/OXgKcPDe9B3yCSElSHvXAAbZP2PwJT n5EyLds3GzUoFwkdRQRIv7ONNGS9+9MFtTjcQvmv80uJZFh5eDczFRJEoCF+tPPM iht8eL2/D4vGGp0CxVoSHelcLLXrIT0c9A9HDNsrx2PpJM84YQlambX20vR0KEqM GMR+6OEmt6Pe9NE92R8qVMkxuXEA5AIpKFYBtJA+uLfZc4S8wrTrRXgksV4gleOo Fc4EL+YgY914ZsGbBouVi3IxHv40Upav5QY7owIDAQABo4ICazCCAmcwHQYDVR0O BBYEFMyZ3tiRCm70ji8JvFMvmp1yi0aZMB8GA1UdIwQYMBaAFGR9/gcync25C1y6 1TwKNV2mnEQvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhlYzJl MjNjNDRmMjQ3NjcwMDE2MjZiZGNmNjYwMTBkMDBkOWRiOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYzIwODNlZmUtZTU2OS00MzhhLThmMGMtYmY3OTNj ZWRjZDNlLzQwYWYwNTA1MjU5MWQ3MTA5ZjZjNmI2OGY0ZjQyZTE5YzRlOWZhYTQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jMjA4M2VmZS1lNTY5LTQzOGEtOGYwYy1iZjc5 M2NlZGNkM2UvZDhlYzJlMjNjNDRmMjQ3NjcwMDE2MjZiZGNmNjYwMTBkMDBkOWRi OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg MB4wDAQCAAEwBgMEAi2u/DAOBAIAAjAIAwYEKAYDNQAwDQYJKoZIhvcNAQELBQAD ggEBAAkAg3Hx8wytbWiPI1pXMHtqbYegKS3LwLdunF6r2quLOI6/u/RHtLBTZHP3 BaeeZgpfcT08DZPWX5bkTIAEBprBWB8HLdiIJmsz54ZGFEeyOF+hRg/VzmE/mI+9 j51Abz7uiGMzQkSZFi5Iy79EqxquzuwHALW2CHL7eAOm9YtnrsJYja9JfplUNg+y IUTh4fRMRiBGZV3ZRNa2cuyt8cs/+W92pUHvFIt4j+9XBoH2j0PPLYS5DMOvdG/d YlWfvHa2SEtq+Ut5Za9+y/hRqYNH5qusGVwYtPkHRZHdz5xBuU3nJ1anvj9ZTNcR +N41rgr8+r7zOH2DuqHfaxt450M= -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:55 2023 by rpki-client on console-fra.rpki-client.org