$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/57db05487cf301e5d7dde078f697aed9854c329d.roa File: 57db05487cf301e5d7dde078f697aed9854c329d.roa (raw, json) Hash identifier: lQ1vVzYP4pa4ssRWguZKoONoeYt+TZbIJ/xeNS9zj4I= Subject key identifier: E6:14:20:AC:63:36:26:19:13:E0:DF:F3:46:10:A4:FB:DC:31:E2:91 Certificate issuer: /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765 Certificate serial: 0D6BC9 Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/57db05487cf301e5d7dde078f697aed9854c329d.roa Signing time: Wed 24 Mar 2021 14:29:04 +0000 ROA not before: Wed 24 Mar 2021 14:29:03 +0000 ROA not after: Tue 24 Mar 2026 14:29:03 +0000 asID: 28114 IP address blocks: 168.195.108.0/23 maxlen: 24 2803:2600:202::/48 maxlen: 64 2803:2600:203::/48 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879561 (0xd6bc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765 Validity Not Before: Mar 24 14:29:03 2021 GMT Not After : Mar 24 14:29:03 2026 GMT Subject: CN=57db05487cf301e5d7dde078f697aed9854c329d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:86:0c:47:f5:2d:5b:b9:89:9f:da:d3:92: d3:8c:8d:4c:a9:16:6a:0e:36:99:b2:c9:60:b1:f0: 44:e7:e8:ff:86:21:39:6a:e3:a3:dc:5e:9d:ee:6a: 6a:60:42:a8:fa:8d:a5:bd:93:03:83:49:7d:28:b6: 53:7d:fd:a2:33:78:24:aa:21:d4:c6:25:40:86:81: 38:ad:f5:7b:86:9d:9c:c5:32:b9:96:66:d6:d8:95: 92:42:01:6a:f4:ed:f7:f6:b0:34:ce:b7:35:2b:91: 8c:4a:46:f4:54:b8:60:57:b6:d1:cd:81:7f:ae:ec: fb:6a:0f:d5:1a:ba:47:33:58:87:2f:df:da:9b:cd: 19:55:92:ae:ab:55:b7:53:b3:58:fe:02:f8:a9:08: cd:97:fd:d2:01:a7:2d:b5:f6:d4:66:2a:78:dd:eb: 46:ab:39:64:5d:b9:73:56:33:0a:2c:f8:1e:86:0c: 3a:72:56:d9:33:e0:4d:97:8a:0d:cb:64:fa:b0:1b: 37:5a:f3:ff:4a:f9:d3:46:ca:ba:94:b3:e1:01:7a: 8e:a0:57:bd:6b:95:41:8a:95:2c:03:bf:d3:b6:a1: 53:05:cd:6b:60:a2:ca:4f:f1:3b:c8:cc:db:12:27: 90:34:ab:30:c1:de:28:23:be:b0:40:e4:b6:16:61: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:14:20:AC:63:36:26:19:13:E0:DF:F3:46:10:A4:FB:DC:31:E2:91 X509v3 Authority Key Identifier: keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/57db05487cf301e5d7dde078f697aed9854c329d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.108.0/23 IPv6: 2803:2600:202::/47 Signature Algorithm: sha256WithRSAEncryption 63:2d:dc:8d:23:09:5c:9b:06:93:03:81:8f:47:69:5b:75:af: 4f:d3:e8:24:71:8f:d4:3a:e2:d4:5b:12:a7:09:fc:31:a9:90: 65:cb:70:97:53:94:11:06:e9:c4:10:31:8f:07:9f:4c:28:d4: 5c:e4:24:3e:e9:73:73:a3:dc:ca:d0:41:40:af:d0:7f:6f:7f: 51:e4:55:fc:e5:25:2d:59:36:ce:5f:a4:07:23:17:5f:ce:62: f3:5e:3d:e4:99:d5:87:2c:fc:f7:0a:48:86:75:75:58:6d:bf: 28:df:79:ce:8d:58:73:96:e2:c0:56:c2:3e:97:44:ea:9e:4e: 6e:e1:03:a5:66:69:81:95:e3:d4:47:b1:8e:e9:96:3d:b9:04: ed:f8:e6:8a:ed:81:bf:fb:d7:40:c2:19:91:92:b5:c5:79:0a: 7d:bd:77:80:49:bd:fd:73:50:09:fe:f0:d5:0b:f7:03:a5:40: 8b:66:f2:fb:fd:11:36:a9:3e:c8:2d:20:7d:5b:c4:a8:b0:84: 73:c9:6a:c0:4c:c6:99:3e:6e:e0:66:76:d6:b1:71:75:ba:1b: d1:14:c4:0f:73:39:98:ab:d6:81:c2:d8:c1:ab:52:a2:89:0e: 66:78:00:04:14:62:90:f4:62:89:0c:c3:03:22:04:8c:38:3a: 2d:71:7a:30 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDDWvJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4 Y2IxODVkYzJiNjdmZWE0ZThmY2M5MzAzZGU3NmIyZTZiM2U3NjUwHhcNMjEwMzI0 MTQyOTAzWhcNMjYwMzI0MTQyOTAzWjAzMTEwLwYDVQQDEyg1N2RiMDU0ODdjZjMw MWU1ZDdkZGUwNzhmNjk3YWVkOTg1NGMzMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA25mGDEf1LVu5iZ/a05LTjI1MqRZqDjaZsslgsfBE5+j/hiE5 auOj3F6d7mpqYEKo+o2lvZMDg0l9KLZTff2iM3gkqiHUxiVAhoE4rfV7hp2cxTK5 lmbW2JWSQgFq9O339rA0zrc1K5GMSkb0VLhgV7bRzYF/ruz7ag/VGrpHM1iHL9/a m80ZVZKuq1W3U7NY/gL4qQjNl/3SAacttfbUZip43etGqzlkXblzVjMKLPgehgw6 clbZM+BNl4oNy2T6sBs3WvP/SvnTRsq6lLPhAXqOoFe9a5VBipUsA7/TtqFTBc1r YKLKT/E7yMzbEieQNKswwd4oI76wQOS2FmHgoQIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFOYUIKxjNiYZE+Df80YQpPvcMeKRMB8GA1UdIwQYMBaAFEA3K4qkZDF+pWHm xGPL9wTNlKBjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhjYjE4 NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvY2ZmNzZlYzAtN2Q0YS00OWMzLWI0YWUtM2U2YTkx YjcyM2NiLzU3ZGIwNTQ4N2NmMzAxZTVkN2RkZTA3OGY2OTdhZWQ5ODU0YzMyOWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jZmY3NmVjMC03ZDRhLTQ5YzMtYjRhZS0zZTZh OTFiNzIzY2IvZDhjYjE4NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAajDbDAPBAIAAjAJAwcBKAMmAAICMA0GCSqGSIb3DQEBCwUA A4IBAQBjLdyNIwlcmwaTA4GPR2lbda9P0+gkcY/UOuLUWxKnCfwxqZBly3CXU5QR BunEEDGPB59MKNRc5CQ+6XNzo9zK0EFAr9B/b39R5FX85SUtWTbOX6QHIxdfzmLz Xj3kmdWHLPz3CkiGdXVYbb8o33nOjVhzluLAVsI+l0Tqnk5u4QOlZmmBlePUR7GO 6ZY9uQTt+OaK7YG/+9dAwhmRkrXFeQp9vXeASb39c1AJ/vDVC/cDpUCLZvL7/RE2 qT7ILSB9W8SosIRzyWrATMaZPm7gZnbWsXF1uhvRFMQPczmYq9aBwtjBq1KiiQ5m eAAEFGKQ9GKJDMMDIgSMODotcXow -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:15 2023 by rpki-client on console-ams.rpki-client.org