$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa File: 84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa (raw, json) Hash identifier: P4XGZaFO8wKGD64Vq5LopcUogcKokuwD/w49mTesGPc= Subject key identifier: C3:CF:F3:41:B6:2D:DA:30:9F:9B:69:1F:B1:15:1A:5C:91:EA:4B:3F Certificate issuer: /CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8 Certificate serial: 11EAA1 Authority key identifier: 85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa Signing time: Mon 01 Nov 2021 03:13:55 +0000 ROA not before: Mon 01 Nov 2021 03:00:00 +0000 ROA not after: Wed 01 Nov 2023 03:00:00 +0000 asID: 263817 IP address blocks: 138.185.28.0/24 maxlen: 24 138.185.31.0/24 maxlen: 24 2803:a40::/47 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174177 (0x11eaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8 Validity Not Before: Nov 1 03:00:00 2021 GMT Not After : Nov 1 03:00:00 2023 GMT Subject: CN=84ee442eba47a228cb8e1a597ed3782b56ff0b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:e9:b2:50:76:31:9f:93:0b:88:98:a4:c6: f0:1b:a8:0b:dc:f4:d3:e4:87:d5:64:f0:3f:ae:b0: eb:ec:6a:c7:e4:b6:b4:5b:26:3a:0c:4a:18:f8:e2: e7:e4:6f:c2:76:bc:e3:08:e0:09:43:1c:4b:d7:ef: 58:22:a6:06:b9:cd:8d:43:c8:8a:00:a3:57:83:71: 90:f8:01:73:cb:98:22:53:b2:c4:57:4e:16:7c:8e: 6c:aa:fc:b1:4f:a8:da:00:8d:7f:36:06:fc:b6:a0: 1b:d3:df:8f:d6:40:91:c3:28:01:44:81:95:d3:a2: e1:16:74:08:a3:57:c5:ec:a1:68:0e:56:08:08:2d: 3f:f6:94:b9:f3:bf:55:43:95:8b:ed:25:a6:44:59: c5:f9:4d:3b:52:80:c6:22:34:d4:39:bc:c5:9c:f6: e3:1d:9d:16:80:1b:92:8d:86:79:93:b4:5b:b1:2b: cf:60:cd:60:88:d0:81:2d:95:fc:83:24:86:16:88: c6:9d:9f:ea:ac:69:55:b6:01:da:ff:cf:fa:d7:29: cf:18:23:e7:7b:51:71:99:5f:3e:e5:20:57:e3:bd: 21:8a:ab:55:2c:7e:25:e3:41:72:6f:d6:46:3f:d7: 1f:83:40:d0:f6:96:35:64:cf:e3:0f:a4:36:c3:0f: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CF:F3:41:B6:2D:DA:30:9F:9B:69:1F:B1:15:1A:5C:91:EA:4B:3F X509v3 Authority Key Identifier: keyid:85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.28.0/24 138.185.31.0/24 IPv6: 2803:a40::/47 Signature Algorithm: sha256WithRSAEncryption 66:a7:36:18:65:12:7a:69:6a:74:09:9a:76:e9:43:a3:c5:a0: ba:2d:48:6b:3c:c5:2b:c4:75:02:35:96:85:3f:10:1e:8f:9b: be:81:c3:9b:f0:ab:5c:07:5d:f2:41:73:3c:aa:9a:98:b8:3e: e3:d6:e4:dc:aa:a5:01:3d:62:c5:1f:71:38:39:f9:2e:f5:13: b3:71:2a:20:1a:38:f2:93:76:e2:19:83:fe:6e:f9:8b:56:21: c5:94:21:6d:e2:5d:8f:4b:6a:19:2b:40:9b:3c:57:89:d0:d0: 3f:11:d4:eb:45:11:f0:a2:3c:04:79:04:43:0e:ac:2a:62:c3: 6c:a1:57:c6:ed:11:8f:f9:7f:95:95:a0:4a:98:b9:51:2b:76: 37:4f:49:04:2c:19:3a:9c:5e:ba:78:92:49:db:01:58:cc:0c: 56:0a:aa:7c:98:98:f5:2c:f3:a2:73:b1:dc:74:44:86:8f:bc: 3e:73:f2:29:64:6a:45:e9:dd:85:93:8c:85:ff:9b:eb:38:3d: f7:d4:ea:cc:36:91:1d:e6:ec:cf:00:05:35:0b:22:d7:ca:e0: fa:70:c4:13:53:15:98:c1:3f:3d:f9:c8:88:fc:4b:c1:c1:bf: 32:e9:0c:c6:66:b6:ca:6a:7b:59:3c:17:a3:eb:8b:11:69:98: 34:38:54:b7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDEeqhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy MGEwZDVlNDViYTk4YjM2MjNmZDJlNGMyZjQ0ZDE5MjA3NmI3ZjgwHhcNMjExMTAx MDMwMDAwWhcNMjMxMTAxMDMwMDAwWjAzMTEwLwYDVQQDEyg4NGVlNDQyZWJhNDdh MjI4Y2I4ZTFhNTk3ZWQzNzgyYjU2ZmYwYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAl3TpslB2MZ+TC4iYpMbwG6gL3PTT5IfVZPA/rrDr7GrH5La0 WyY6DEoY+OLn5G/CdrzjCOAJQxxL1+9YIqYGuc2NQ8iKAKNXg3GQ+AFzy5giU7LE V04WfI5sqvyxT6jaAI1/Ngb8tqAb09+P1kCRwygBRIGV06LhFnQIo1fF7KFoDlYI CC0/9pS5879VQ5WL7SWmRFnF+U07UoDGIjTUObzFnPbjHZ0WgBuSjYZ5k7RbsSvP YM1giNCBLZX8gySGFojGnZ/qrGlVtgHa/8/61ynPGCPne1FxmV8+5SBX470hiqtV LH4l40Fyb9ZGP9cfg0DQ9pY1ZM/jD6Q2ww8N6QIDAQABo4ICcjCCAm4wHQYDVR0O BBYEFMPP80G2Ldown5tpH7EVGlyR6ks/MB8GA1UdIwQYMBaAFIX1kZdy1/1B6u2A kTA85ZLGyudtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTIwYTBk NWU0NWJhOThiMzYyM2ZkMmU0YzJmNDRkMTkyMDc2YjdmOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYzljZGJkNjMtOGYwMS00NDhiLThjMWUtZjJlOTRl MWM5ZTdiLzg0ZWU0NDJlYmE0N2EyMjhjYjhlMWE1OTdlZDM3ODJiNTZmZjBiNTMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jOWNkYmQ2My04ZjAxLTQ0OGItOGMxZS1mMmU5 NGUxYzllN2IvNTIwYTBkNWU0NWJhOThiMzYyM2ZkMmU0YzJmNDRkMTkyMDc2Yjdm OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAIq5HAMEAIq5HzAPBAIAAjAJAwcBKAMKQAAAMA0GCSqGSIb3 DQEBCwUAA4IBAQBmpzYYZRJ6aWp0CZp26UOjxaC6LUhrPMUrxHUCNZaFPxAej5u+ gcOb8KtcB13yQXM8qpqYuD7j1uTcqqUBPWLFH3E4Ofku9ROzcSogGjjyk3biGYP+ bvmLViHFlCFt4l2PS2oZK0CbPFeJ0NA/EdTrRRHwojwEeQRDDqwqYsNsoVfG7RGP +X+VlaBKmLlRK3Y3T0kELBk6nF66eJJJ2wFYzAxWCqp8mJj1LPOic7HcdESGj7w+ c/IpZGpF6d2Fk4yF/5vrOD331OrMNpEd5uzPAAU1CyLXyuD6cMQTUxWYwT89+ciI /EvBwb8y6QzGZrbKantZPBej64sRaZg0OFS3 -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:14 2023 by rpki-client on console-ams.rpki-client.org