$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/4cf8038c986df361af19ce5dea7841456622d7e3.roa File: 4cf8038c986df361af19ce5dea7841456622d7e3.roa (raw, json) Hash identifier: O0KYPRjtXzXh8SmIrKkdZtGgAD/l3piVLEMGubflIj4= Subject key identifier: C6:A4:CA:7C:73:68:9C:64:16:0B:B3:97:BF:04:76:1E:C4:DE:05:75 Certificate issuer: /CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0 Certificate serial: 02FE1C Authority key identifier: CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/4cf8038c986df361af19ce5dea7841456622d7e3.roa Signing time: Wed 24 Mar 2021 14:30:49 +0000 ROA not before: Wed 24 Mar 2021 14:30:49 +0000 ROA not after: Tue 24 Mar 2026 14:30:49 +0000 asID: 136907 IP address blocks: 45.191.112.0/22 maxlen: 22 2803:1ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.crl rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 13 May 2023 17:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196124 (0x2fe1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0 Validity Not Before: Mar 24 14:30:49 2021 GMT Not After : Mar 24 14:30:49 2026 GMT Subject: CN=4cf8038c986df361af19ce5dea7841456622d7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:e8:47:54:48:14:ce:6d:fa:56:df:99:f4: d9:06:63:0f:41:40:9b:d7:d5:74:40:8c:29:48:18: 77:d2:a7:b4:c4:4c:9a:6a:8a:93:a7:17:2f:01:ac: dc:2f:64:08:44:18:2a:08:e6:d4:97:00:0f:39:11: f9:86:48:92:94:7b:75:f2:4e:8b:47:d3:7c:a8:e9: 68:5e:57:e7:d6:0b:a1:e0:06:ae:e6:ba:ea:b0:b7: fa:04:40:de:10:3a:3a:e8:6c:9b:1a:bf:1f:ae:1e: bc:78:77:4d:f2:a0:6d:be:fd:03:84:db:7a:f0:b7: ce:63:cc:a2:d5:d6:fc:12:c2:5d:69:4f:7c:5e:52: a3:8b:9c:2b:90:3a:9c:78:fd:1b:d1:81:97:a9:e7: 60:67:d9:28:4c:7f:03:a8:3e:25:36:ca:cb:c0:1c: f9:4c:5a:80:ff:78:18:d3:d4:80:7c:6d:00:12:93: 6a:64:01:51:f2:3b:c3:e0:03:bb:47:c1:b4:50:54: b4:d6:cb:d3:b6:f0:21:35:3c:35:28:02:68:0b:54: 90:15:60:a3:c3:79:67:3c:9e:84:a4:a3:bd:fe:ee: 0f:45:95:06:04:f0:2e:6b:ab:2c:c4:37:51:70:8a: b7:88:95:58:c8:98:71:fc:3d:d7:e9:a4:1b:62:96: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:CA:7C:73:68:9C:64:16:0B:B3:97:BF:04:76:1E:C4:DE:05:75 X509v3 Authority Key Identifier: keyid:CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/4cf8038c986df361af19ce5dea7841456622d7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.112.0/22 IPv6: 2803:1ae0::/32 Signature Algorithm: sha256WithRSAEncryption 50:c6:a2:3e:f3:df:6c:17:12:ee:92:48:e5:7a:aa:c0:3c:fb: 4a:1d:f8:9b:4f:e9:87:02:2b:eb:9c:40:df:78:4d:ae:41:16: ee:92:29:63:97:2d:40:85:c8:3f:83:1b:80:b0:6d:3e:d0:da: cd:9e:44:54:27:eb:d1:a0:8e:02:8e:96:e9:77:a3:f1:b0:12: 98:f7:51:9b:75:b1:ac:b6:6e:31:37:37:18:a4:5f:0d:d2:b3: 92:d2:f3:fa:bc:2d:97:3a:7e:44:12:ba:e5:41:1e:81:cc:03: d1:b7:9f:f8:2a:50:ed:cd:3b:70:d2:65:95:ca:84:dc:df:72: 76:be:60:80:51:16:c0:73:34:8f:87:0a:bb:db:e3:b4:c0:9a: b6:2c:ed:a3:c4:16:cd:76:0c:1c:d2:cf:c8:76:16:aa:fc:cd: 24:cf:8c:b7:14:ec:9d:f6:6f:d2:ab:36:fb:4b:d8:f3:c3:62: a1:7f:1c:34:c3:5b:d6:fa:9b:9d:0f:5b:aa:f7:4c:83:d6:23: 01:c2:f0:21:45:ed:f4:36:79:33:70:a4:36:07:78:85:6f:e4: 2d:fc:ad:e0:83:e3:ba:c2:c9:51:f6:ec:a9:94:cd:c8:0d:51: 77:f5:4f:7e:dd:8b:95:53:c8:d5:d1:64:89:e0:c7:aa:37:c0: 9c:e1:bc:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDAv4cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi NDdiNmNkZTQ3ZWMxMzAyNjAyY2JkNTRjYTQzNmZmODAxZDcwYjAwHhcNMjEwMzI0 MTQzMDQ5WhcNMjYwMzI0MTQzMDQ5WjAzMTEwLwYDVQQDEyg0Y2Y4MDM4Yzk4NmRm MzYxYWYxOWNlNWRlYTc4NDE0NTY2MjJkN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAp9zoR1RIFM5t+lbfmfTZBmMPQUCb19V0QIwpSBh30qe0xEya aoqTpxcvAazcL2QIRBgqCObUlwAPORH5hkiSlHt18k6LR9N8qOloXlfn1guh4Aau 5rrqsLf6BEDeEDo66GybGr8frh68eHdN8qBtvv0DhNt68LfOY8yi1db8EsJdaU98 XlKji5wrkDqceP0b0YGXqedgZ9koTH8DqD4lNsrLwBz5TFqA/3gY09SAfG0AEpNq ZAFR8jvD4AO7R8G0UFS01svTtvAhNTw1KAJoC1SQFWCjw3lnPJ6EpKO9/u4PRZUG BPAua6ssxDdRcIq3iJVYyJhx/D3X6aQbYpZr5QIDAQABo4ICajCCAmYwHQYDVR0O BBYEFMakynxzaJxkFguzl78Edh7E3gV1MB8GA1UdIwQYMBaAFM9m5d+ZWTOOkci/ 2UnzVzhioTuiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI0N2I2 Y2RlNDdlYzEzMDI2MDJjYmQ1NGNhNDM2ZmY4MDFkNzBiMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZDFkM2RlM2EtZGRkZi00ZWRhLTg2NjAtMTI3ZmU0 Y2E5ZWU4LzRjZjgwMzhjOTg2ZGYzNjFhZjE5Y2U1ZGVhNzg0MTQ1NjYyMmQ3ZTMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kMWQzZGUzYS1kZGRmLTRlZGEtODY2MC0xMjdm ZTRjYTllZTgvNWI0N2I2Y2RlNDdlYzEzMDI2MDJjYmQ1NGNhNDM2ZmY4MDFkNzBi MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi2/cDANBAIAAjAHAwUAKAMa4DANBgkqhkiG9w0BAQsFAAOC AQEAUMaiPvPfbBcS7pJI5XqqwDz7Sh34m0/phwIr65xA33hNrkEW7pIpY5ctQIXI P4MbgLBtPtDazZ5EVCfr0aCOAo6W6Xej8bASmPdRm3WxrLZuMTc3GKRfDdKzktLz +rwtlzp+RBK65UEegcwD0bef+CpQ7c07cNJllcqE3N9ydr5ggFEWwHM0j4cKu9vj tMCatizto8QWzXYMHNLPyHYWqvzNJM+MtxTsnfZv0qs2+0vY88NioX8cNMNb1vqb nQ9bqvdMg9YjAcLwIUXt9DZ5M3CkNgd4hW/kLfyt4IPjusLJUfbsqZTNyA1Rd/VP ft2LlVPI1dFkieDHqjfAnOG8Ww== -----END CERTIFICATE-----Generated at Thu May 11 00:04:02 2023 by rpki-client on console-fra.rpki-client.org