$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa File: b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa (raw, json) Hash identifier: dky0nS8loiWxOmDhCPwHhyKHBNZotNdMW6hKrQynO3M= Subject key identifier: FF:88:0D:4F:13:0C:B9:C8:D0:A4:D5:89:4A:95:69:FE:B8:74:05:16 Certificate issuer: /CN=dc0080782942a0e1f47428183d06112e6a9aa3d8 Certificate serial: 0D215C Authority key identifier: CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa Signing time: Wed 24 Mar 2021 14:47:02 +0000 ROA not before: Wed 24 Mar 2021 14:47:02 +0000 ROA not after: Tue 24 Mar 2026 14:47:02 +0000 asID: 16906 IP address blocks: 138.94.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860508 (0xd215c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0080782942a0e1f47428183d06112e6a9aa3d8 Validity Not Before: Mar 24 14:47:02 2021 GMT Not After : Mar 24 14:47:02 2026 GMT Subject: CN=b8f24c0a1617b3aa62edb503717f9a33f0ad0aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:84:8b:4e:50:ee:fd:4c:3d:b7:f6:4c:d2:ed: 1f:dc:78:e4:14:b4:16:97:c0:3e:69:c7:84:ed:dc: 4d:50:f2:8b:00:c1:d9:ce:79:f3:44:9b:a5:78:0f: 0d:db:78:c7:88:f8:07:cf:b8:ef:19:ab:0e:e1:7c: 16:a0:09:66:68:f4:69:92:d3:a8:de:bc:f0:8b:69: 5c:3e:5e:84:61:ea:39:98:be:00:c6:03:a1:c8:95: 5b:28:e0:e2:94:0d:97:be:80:cd:4b:1d:7e:0c:8d: da:e9:96:f0:3d:7b:62:c3:65:47:55:d4:11:8a:15: 25:49:67:cd:b2:44:4e:05:bb:39:a1:83:29:46:a9: 1e:73:88:3e:5e:a8:4b:10:4e:8d:aa:e0:eb:a0:92: be:b1:11:c9:94:a1:19:ec:ef:62:4d:af:7b:79:58: 0a:b7:6d:ae:c7:f1:02:f3:9e:33:af:d4:12:81:49: ee:74:00:d0:5e:04:94:2c:51:f1:b5:29:8f:30:fc: 99:c9:e5:35:50:60:2c:bf:ab:99:40:36:c4:31:25: fa:42:41:83:d2:82:6d:ba:6d:d6:bb:08:b6:6d:4b: 91:b6:4c:1f:a7:b9:08:ac:73:97:93:64:74:93:4a: ef:f5:7e:26:40:da:f8:12:e4:06:95:70:92:a3:0a: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:0D:4F:13:0C:B9:C8:D0:A4:D5:89:4A:95:69:FE:B8:74:05:16 X509v3 Authority Key Identifier: keyid:CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.244.0/22 Signature Algorithm: sha256WithRSAEncryption 76:d2:8c:b5:0e:38:22:af:32:b2:0f:c7:e4:19:67:48:77:e0: 83:13:a1:e0:f0:71:72:18:83:8b:bf:b3:86:5d:a9:8d:e5:cd: 56:1d:19:40:17:57:e4:f6:5d:a1:1c:a2:7f:75:24:8d:ec:bf: 2f:5e:3e:c3:45:82:eb:04:77:60:bf:03:50:61:07:22:e2:ba: 49:a2:10:e2:5e:18:90:29:5a:55:83:ad:7d:35:e7:83:a0:70: f2:c3:a4:73:ed:bc:88:9c:41:b9:16:53:23:90:6e:af:20:e1: cc:12:10:2f:ab:87:21:9c:e8:23:ae:d0:18:04:ec:56:56:17: f6:9c:a0:e3:b7:dd:99:75:bd:66:b0:b0:9e:9f:d8:fe:35:21: 60:1d:91:8e:82:0e:56:69:ee:f7:76:ed:fc:79:ea:a9:39:77: a5:cc:40:90:9f:d2:6f:3c:22:91:e1:3e:13:f3:18:73:13:0a: 11:4e:33:f2:22:aa:a3:83:11:33:6c:56:b0:9f:f9:4b:07:b8: 73:c4:79:4f:5d:97:b8:8c:4f:85:0b:88:6e:7c:af:86:15:70: ab:96:e9:54:43:28:17:71:6b:ac:ce:1f:61:bb:da:75:65:69: 52:29:54:22:b6:26:ed:a1:c3:7b:c2:30:3e:7e:16:57:54:9e: a0:06:7e:d7 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDSFcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj MDA4MDc4Mjk0MmEwZTFmNDc0MjgxODNkMDYxMTJlNmE5YWEzZDgwHhcNMjEwMzI0 MTQ0NzAyWhcNMjYwMzI0MTQ0NzAyWjAzMTEwLwYDVQQDEyhiOGYyNGMwYTE2MTdi M2FhNjJlZGI1MDM3MTdmOWEzM2YwYWQwYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA2YSLTlDu/Uw9t/ZM0u0f3HjkFLQWl8A+aceE7dxNUPKLAMHZ znnzRJuleA8N23jHiPgHz7jvGasO4XwWoAlmaPRpktOo3rzwi2lcPl6EYeo5mL4A xgOhyJVbKODilA2XvoDNSx1+DI3a6ZbwPXtiw2VHVdQRihUlSWfNskROBbs5oYMp Rqkec4g+XqhLEE6NquDroJK+sRHJlKEZ7O9iTa97eVgKt22ux/EC854zr9QSgUnu dADQXgSULFHxtSmPMPyZyeU1UGAsv6uZQDbEMSX6QkGD0oJtum3Wuwi2bUuRtkwf p7kIrHOXk2R0k0rv9X4mQNr4EuQGlXCSowrVgwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFP+IDU8TDLnI0KTViUqVaf64dAUWMB8GA1UdIwQYMBaAFM+9wQNtj/YmOac1 8ZAqM0smMq1OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGMwMDgw NzgyOTQyYTBlMWY0NzQyODE4M2QwNjExMmU2YTlhYTNkOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZGFlMWJjNDctNDIyYy00MDJmLWJmMGUtYzMwZjQ5 MmEyMmRjL2I4ZjI0YzBhMTYxN2IzYWE2MmVkYjUwMzcxN2Y5YTMzZjBhZDBhYmEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kYWUxYmM0Ny00MjJjLTQwMmYtYmYwZS1jMzBm NDkyYTIyZGMvZGMwMDgwNzgyOTQyYTBlMWY0NzQyODE4M2QwNjExMmU2YTlhYTNk OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAope9DANBgkqhkiG9w0BAQsFAAOCAQEAdtKMtQ44Iq8ysg/H 5BlnSHfggxOh4PBxchiDi7+zhl2pjeXNVh0ZQBdX5PZdoRyif3Ukjey/L14+w0WC 6wR3YL8DUGEHIuK6SaIQ4l4YkClaVYOtfTXng6Bw8sOkc+28iJxBuRZTI5BuryDh zBIQL6uHIZzoI67QGATsVlYX9pyg47fdmXW9ZrCwnp/Y/jUhYB2RjoIOVmnu93bt /HnqqTl3pcxAkJ/SbzwikeE+E/MYcxMKEU4z8iKqo4MRM2xWsJ/5Swe4c8R5T12X uIxPhQuIbnyvhhVwq5bpVEMoF3FrrM4fYbvadWVpUilUIrYm7aHDe8IwPn4WV1Se oAZ+1w== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:17 2023 by rpki-client on console-ams.rpki-client.org