$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa File: 7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa (raw, json) Hash identifier: 0DfN8KJ6EQvAFz9UhRFkSMo8Yl7kjokE3zppDj8xYgA= Subject key identifier: DD:30:D9:AF:47:54:7F:26:CF:16:F8:8C:EF:E7:9D:27:0E:DC:71:0A Certificate issuer: /CN=dc0080782942a0e1f47428183d06112e6a9aa3d8 Certificate serial: 0D2222 Authority key identifier: CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa Signing time: Wed 24 Mar 2021 14:47:02 +0000 ROA not before: Wed 24 Mar 2021 14:47:02 +0000 ROA not after: Tue 24 Mar 2026 14:47:02 +0000 asID: 16906 IP address blocks: 138.94.244.0/24 maxlen: 24 138.94.245.0/24 maxlen: 24 138.94.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860706 (0xd2222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0080782942a0e1f47428183d06112e6a9aa3d8 Validity Not Before: Mar 24 14:47:02 2021 GMT Not After : Mar 24 14:47:02 2026 GMT Subject: CN=7aa8b5bc685720673cee0652aa7bfab1575f72a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7d:56:3a:18:76:40:67:20:e6:66:05:bd:ce: 2b:9b:ff:f1:95:8c:cd:1b:45:b0:e8:62:7e:1b:a7: 55:c3:17:d5:e7:fd:0d:2e:48:12:46:c1:ce:48:2b: 4f:c6:6c:04:dd:4b:1b:8c:58:c4:7e:f8:8b:36:f9: d8:32:dd:33:05:a1:df:de:60:d9:ee:11:d1:ad:03: ce:e4:d9:2c:3d:ea:34:cf:5c:3e:c2:60:e1:cb:13: 8a:fe:9b:55:5d:18:4e:44:42:21:ec:ae:73:74:cf: e5:e1:67:05:f1:39:6e:dd:96:59:b7:31:f6:cc:f3: 36:3c:f3:8d:f1:fa:f8:6f:ac:33:fb:9f:a6:bd:35: 92:7d:ca:f1:d8:35:09:74:f5:50:18:8b:7d:6b:e6: 1a:b1:94:d6:a1:35:5f:58:14:15:72:dc:0e:61:2c: 5e:2b:d8:f4:9e:8d:af:47:1d:af:e2:37:61:73:15: d6:0b:41:08:51:84:6b:a9:31:fa:df:d0:30:bd:43: c5:dc:66:7c:5e:4c:21:54:b4:75:c3:c2:54:16:e3: 96:cb:03:3e:1e:d4:4b:07:24:af:cd:ef:46:cf:68: de:c6:0d:0a:8a:63:34:b5:c4:85:bd:83:7d:df:ee: 14:e5:6e:c0:81:c2:e5:d7:cf:87:bd:9f:55:af:96: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:30:D9:AF:47:54:7F:26:CF:16:F8:8C:EF:E7:9D:27:0E:DC:71:0A X509v3 Authority Key Identifier: keyid:CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/7aa8b5bc685720673cee0652aa7bfab1575f72a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.244.0-138.94.246.255 Signature Algorithm: sha256WithRSAEncryption 60:93:a3:e8:25:66:db:b1:47:9d:4e:7a:f7:7e:a9:b4:8c:42: 79:bf:f7:bd:f7:a9:ab:78:eb:b6:71:0b:20:69:03:49:3c:c4: 51:fa:9c:5b:3b:af:85:a9:66:96:5b:ad:15:2f:b5:bf:01:24: 73:06:f4:a6:38:1b:d0:e9:ef:ca:00:e3:db:b5:d2:83:d8:a7: 6c:3f:87:14:33:48:09:be:e0:9b:d4:d2:8d:1c:f1:8b:48:4d: 91:11:d9:53:90:ec:38:71:5e:1b:7e:47:3d:7d:af:fa:b3:c5: e4:44:0b:76:77:e3:29:36:4c:df:9f:0f:9c:b4:16:07:76:a6: 11:e1:99:0f:f2:79:24:0d:5c:78:9b:69:ff:69:83:b8:af:1a: 61:1e:79:b8:76:d1:f0:a1:84:fd:1f:48:21:c8:d4:e8:fe:a3: d6:34:6a:57:b0:68:72:86:d2:ae:33:d7:21:8f:17:84:c3:6b: 0f:11:5a:7b:c0:80:33:9a:0d:d5:74:f8:88:f6:0f:5f:74:1e: 62:b1:19:2a:de:cc:e1:85:74:1a:16:d8:59:64:8d:73:a0:5b: 66:97:d9:23:83:6a:45:f3:52:bb:7f:d0:e1:db:50:c0:68:44: dd:98:1f:f9:04:02:c9:e7:cc:22:f9:1d:04:87:ea:47:8c:71: c4:d7:bf:5f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIDDSIiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj MDA4MDc4Mjk0MmEwZTFmNDc0MjgxODNkMDYxMTJlNmE5YWEzZDgwHhcNMjEwMzI0 MTQ0NzAyWhcNMjYwMzI0MTQ0NzAyWjAzMTEwLwYDVQQDEyg3YWE4YjViYzY4NTcy MDY3M2NlZTA2NTJhYTdiZmFiMTU3NWY3MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiX1WOhh2QGcg5mYFvc4rm//xlYzNG0Ww6GJ+G6dVwxfV5/0N LkgSRsHOSCtPxmwE3UsbjFjEfviLNvnYMt0zBaHf3mDZ7hHRrQPO5NksPeo0z1w+ wmDhyxOK/ptVXRhOREIh7K5zdM/l4WcF8Tlu3ZZZtzH2zPM2PPON8fr4b6wz+5+m vTWSfcrx2DUJdPVQGIt9a+YasZTWoTVfWBQVctwOYSxeK9j0no2vRx2v4jdhcxXW C0EIUYRrqTH639AwvUPF3GZ8XkwhVLR1w8JUFuOWywM+HtRLBySvze9Gz2jexg0K imM0tcSFvYN93+4U5W7AgcLl18+HvZ9Vr5Z59wIDAQABo4ICYzCCAl8wHQYDVR0O BBYEFN0w2a9HVH8mzxb4jO/nnScO3HEKMB8GA1UdIwQYMBaAFM+9wQNtj/YmOac1 8ZAqM0smMq1OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGMwMDgw NzgyOTQyYTBlMWY0NzQyODE4M2QwNjExMmU2YTlhYTNkOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZGFlMWJjNDctNDIyYy00MDJmLWJmMGUtYzMwZjQ5 MmEyMmRjLzdhYThiNWJjNjg1NzIwNjczY2VlMDY1MmFhN2JmYWIxNTc1ZjcyYTUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kYWUxYmM0Ny00MjJjLTQwMmYtYmYwZS1jMzBm NDkyYTIyZGMvZGMwMDgwNzgyOTQyYTBlMWY0NzQyODE4M2QwNjExMmU2YTlhYTNk OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQCil70AwQAil72MA0GCSqGSIb3DQEBCwUAA4IBAQBgk6Po JWbbsUedTnr3fqm0jEJ5v/e996mreOu2cQsgaQNJPMRR+pxbO6+FqWaWW60VL7W/ ASRzBvSmOBvQ6e/KAOPbtdKD2KdsP4cUM0gJvuCb1NKNHPGLSE2REdlTkOw4cV4b fkc9fa/6s8XkRAt2d+MpNkzfnw+ctBYHdqYR4ZkP8nkkDVx4m2n/aYO4rxphHnm4 dtHwoYT9H0ghyNTo/qPWNGpXsGhyhtKuM9chjxeEw2sPEVp7wIAzmg3VdPiI9g9f dB5isRkq3szhhXQaFthZZI1zoFtml9kjg2pF81K7f9Dh21DAaETdmB/5BALJ58wi +R0Eh+pHjHHE179f -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:17 2023 by rpki-client on console-ams.rpki-client.org