$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa File: 0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa (raw, json) Hash identifier: 7yZNg6pKYGg6hG1zI8lVP1Y3NhIsEoMpMYKxlKUNbAo= Subject key identifier: 3B:E5:31:D9:DE:30:24:6B:96:5F:5C:98:F7:EC:01:3F:F5:1C:83:36 Certificate issuer: /CN=0eac785678f99fbead8c368618cbd460db057aa3 Certificate serial: 079014 Authority key identifier: D0:42:24:8C:ED:68:D3:87:AF:FA:63:1B:AC:60:51:D5:FB:81:83:E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eac785678f99fbead8c368618cbd460db057aa3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa Signing time: Wed 24 Mar 2021 14:33:20 +0000 ROA not before: Wed 24 Mar 2021 14:33:20 +0000 ROA not after: Tue 24 Mar 2026 14:33:20 +0000 asID: 269944 IP address blocks: 190.89.40.0/24 maxlen: 24 2803:3ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0eac785678f99fbead8c368618cbd460db057aa3.crl rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0eac785678f99fbead8c368618cbd460db057aa3.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eac785678f99fbead8c368618cbd460db057aa3.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495636 (0x79014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eac785678f99fbead8c368618cbd460db057aa3 Validity Not Before: Mar 24 14:33:20 2021 GMT Not After : Mar 24 14:33:20 2026 GMT Subject: CN=0a69a6692c58b6e3a66294d4e22fe799fb5a0324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:f7:a3:b7:89:9e:c4:d0:2d:a3:64:21:6f: eb:13:c2:dd:f8:9b:65:96:46:46:53:f9:0d:01:96: 98:fd:e2:66:23:5a:5a:8c:c3:54:9f:52:7a:bc:de: 07:6e:23:cb:f1:b7:41:37:e0:4e:6c:c9:0d:24:b2: dd:4f:a6:58:91:ed:aa:87:84:66:51:8c:74:6e:5c: 76:4b:bc:6a:70:d5:f5:02:bc:50:ba:d5:46:b7:b9: e1:ae:d2:d0:7e:59:6c:08:68:17:7e:c6:89:1b:1c: 5d:f4:cb:0f:77:34:7b:cb:e7:b2:d0:23:d0:a4:71: 93:a7:c3:8d:36:90:6f:52:82:cb:f4:ae:15:b2:67: 7e:e9:6c:e8:15:48:2f:fd:4c:6a:c2:23:0f:e2:7b: 4f:1d:50:d4:f3:af:02:2c:18:a9:d0:33:ad:38:8f: 38:e8:68:a8:8d:0e:47:b7:e7:0f:79:c1:7a:3b:30: 71:b0:55:85:90:8b:ea:df:ad:f1:fd:0a:6b:52:85: 95:c4:6c:69:00:ce:7b:e6:08:9e:69:ae:3a:b4:3a: 28:b8:ee:be:e6:c1:43:c4:de:7c:9c:61:05:af:06: 48:b0:18:02:ee:39:20:e5:4f:3f:69:2f:5b:a6:6d: 2e:2d:c3:f2:d0:5a:ce:5c:63:0b:78:f4:67:aa:25: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:31:D9:DE:30:24:6B:96:5F:5C:98:F7:EC:01:3F:F5:1C:83:36 X509v3 Authority Key Identifier: keyid:D0:42:24:8C:ED:68:D3:87:AF:FA:63:1B:AC:60:51:D5:FB:81:83:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eac785678f99fbead8c368618cbd460db057aa3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0eac785678f99fbead8c368618cbd460db057aa3.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.40.0/24 IPv6: 2803:3ae0::/32 Signature Algorithm: sha256WithRSAEncryption 62:e0:73:e1:12:47:e1:e2:a7:da:09:57:a9:1a:3b:a5:47:28: 2d:a5:53:81:ad:2b:9b:ec:e2:cd:f1:ef:6f:ba:45:d7:14:ee: 21:69:7e:ae:e3:13:6b:e4:98:80:97:5d:61:57:88:36:3c:d3: 88:ff:c6:45:d6:85:b9:22:b9:4a:a0:b2:54:bd:e0:44:fd:bd: 9c:89:7e:4e:cc:63:e9:10:98:e5:ab:f1:d3:3a:c3:5e:1d:28: ad:53:c6:59:9b:19:ea:b4:bb:e4:ae:5e:ad:57:d4:83:21:fa: 84:67:42:46:71:0a:06:86:b1:6e:f7:aa:89:54:32:fb:27:d6: de:49:2d:a7:c3:08:8c:cb:fd:06:2d:cc:fd:8f:77:4f:2b:22: b8:46:67:f3:d8:96:75:65:85:53:ec:61:67:b2:13:bb:4a:17: 2d:3a:09:c3:bd:12:e2:77:b7:aa:10:38:17:42:65:9b:b8:f3: d6:04:0e:fd:b4:66:36:66:33:dd:19:c6:91:b7:82:ce:09:7b: 45:6b:0c:79:f3:4a:72:a3:35:a2:8a:3a:61:87:20:83:6b:fe: 21:98:8c:59:26:a7:9c:d1:e8:74:f9:63:fe:5a:8a:07:26:d5: fa:6e:89:3a:81:c6:b0:e4:4f:e8:38:fa:f9:3e:0a:b2:7c:b8: ac:ce:bb:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDB5AUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBl YWM3ODU2NzhmOTlmYmVhZDhjMzY4NjE4Y2JkNDYwZGIwNTdhYTMwHhcNMjEwMzI0 MTQzMzIwWhcNMjYwMzI0MTQzMzIwWjAzMTEwLwYDVQQDEygwYTY5YTY2OTJjNThi NmUzYTY2Mjk0ZDRlMjJmZTc5OWZiNWEwMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhUb3o7eJnsTQLaNkIW/rE8Ld+JtllkZGU/kNAZaY/eJmI1pa jMNUn1J6vN4HbiPL8bdBN+BObMkNJLLdT6ZYke2qh4RmUYx0blx2S7xqcNX1ArxQ utVGt7nhrtLQfllsCGgXfsaJGxxd9MsPdzR7y+ey0CPQpHGTp8ONNpBvUoLL9K4V smd+6WzoFUgv/UxqwiMP4ntPHVDU868CLBip0DOtOI846GiojQ5Ht+cPecF6OzBx sFWFkIvq363x/QprUoWVxGxpAM575gieaa46tDoouO6+5sFDxN58nGEFrwZIsBgC 7jkg5U8/aS9bpm0uLcPy0FrOXGMLePRnqiVodwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFDvlMdneMCRrll9cmPfsAT/1HIM2MB8GA1UdIwQYMBaAFNBCJIztaNOHr/pj G6xgUdX7gYPlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGVhYzc4 NTY3OGY5OWZiZWFkOGMzNjg2MThjYmQ0NjBkYjA1N2FhMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYzk5ZTg2ZWEtYjI5ZS00MmRiLWE1MGQtNWY3YTVh Y2JmYzA3LzBhNjlhNjY5MmM1OGI2ZTNhNjYyOTRkNGUyMmZlNzk5ZmI1YTAzMjQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jOTllODZlYS1iMjllLTQyZGItYTUwZC01Zjdh NWFjYmZjMDcvMGVhYzc4NTY3OGY5OWZiZWFkOGMzNjg2MThjYmQ0NjBkYjA1N2Fh My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAL5ZKDANBAIAAjAHAwUAKAM64DANBgkqhkiG9w0BAQsFAAOC AQEAYuBz4RJH4eKn2glXqRo7pUcoLaVTga0rm+zizfHvb7pF1xTuIWl+ruMTa+SY gJddYVeINjzTiP/GRdaFuSK5SqCyVL3gRP29nIl+Tsxj6RCY5avx0zrDXh0orVPG WZsZ6rS75K5erVfUgyH6hGdCRnEKBoaxbveqiVQy+yfW3kktp8MIjMv9Bi3M/Y93 TysiuEZn89iWdWWFU+xhZ7ITu0oXLToJw70S4ne3qhA4F0Jlm7jz1gQO/bRmNmYz 3RnGkbeCzgl7RWsMefNKcqM1ooo6YYcgg2v+IZiMWSannNHodPlj/lqKBybV+m6J OoHGsORP6Dj6+T4Ksny4rM67ZQ== -----END CERTIFICATE-----Generated at Fri Mar 29 07:06:40 2024 by rpki-client on console-ams.rpki-client.org