$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/da12f04d4dc254243b374556c7efd3afa54982c0.roa File: da12f04d4dc254243b374556c7efd3afa54982c0.roa (raw, json) Hash identifier: dawca/TAqxDo2BTrcU9LIX7NNREMqFxZEYF9brUmRSQ= Subject key identifier: B0:91:AD:23:7A:A7:5B:53:CA:4D:67:CE:76:F7:F2:1F:A5:75:3D:1F Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7 Certificate serial: 0BD7D8 Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/da12f04d4dc254243b374556c7efd3afa54982c0.roa Signing time: Wed 24 Mar 2021 14:47:10 +0000 ROA not before: Wed 24 Mar 2021 14:47:10 +0000 ROA not after: Tue 24 Mar 2026 14:47:10 +0000 asID: 20473 IP address blocks: 190.112.202.0/24 maxlen: 24 200.35.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 13 May 2023 17:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776152 (0xbd7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7 Validity Not Before: Mar 24 14:47:10 2021 GMT Not After : Mar 24 14:47:10 2026 GMT Subject: CN=da12f04d4dc254243b374556c7efd3afa54982c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:1f:aa:62:f6:74:72:b9:02:4c:2f:7b:29: 96:24:a4:f8:30:59:a7:c1:97:19:29:ab:12:99:ae: 8d:b2:68:c8:1b:eb:27:0a:75:d6:d3:a9:1e:b9:bb: 15:85:49:e9:7b:dd:31:45:d0:e1:92:29:cc:3f:14: 78:8e:19:51:c6:c2:3c:3e:3a:c4:32:aa:68:49:1d: dc:22:6d:bf:87:ca:4a:70:a6:65:34:7f:87:c7:ad: b0:b5:1c:a5:2a:ca:fc:6d:91:34:c6:9e:5c:c8:e6: 90:1c:7a:61:b6:e9:9f:b3:69:46:f2:f5:b5:dd:41: 70:f0:c8:55:39:7e:49:73:20:68:09:02:8e:4b:0b: e9:1d:59:38:ea:a8:0c:a0:c3:6a:33:3d:4a:c7:83: c0:fd:d9:53:83:be:c5:75:b5:4c:09:cd:93:4a:cd: f5:fe:1d:07:8a:dd:9f:2a:cc:23:a9:59:ad:f3:a0: 90:fe:89:c3:f6:31:fd:3a:07:c5:a2:5d:b2:a9:c2: b5:33:59:d3:91:35:24:fe:ac:d8:93:42:97:ef:cd: 69:45:0b:aa:b5:e9:62:a9:76:e7:f1:31:a1:e7:86: a6:93:4a:fb:3f:42:c4:62:51:3b:97:b1:a2:c7:62: 6f:56:9b:c5:b4:b0:ed:7c:04:a7:02:95:e8:7a:7b: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:AD:23:7A:A7:5B:53:CA:4D:67:CE:76:F7:F2:1F:A5:75:3D:1F X509v3 Authority Key Identifier: keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/da12f04d4dc254243b374556c7efd3afa54982c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.112.202.0/24 200.35.153.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ac:bd:f6:2e:40:61:ef:8b:c3:6a:81:42:75:92:fd:06:8e: db:b8:3f:50:1d:cd:ba:5c:0d:d7:db:7c:89:b6:61:12:9a:bc: 53:19:6a:11:66:52:7b:80:5b:b7:7a:4c:62:97:90:b5:1b:ca: 1d:47:57:74:ac:e3:01:d0:77:35:fd:2f:7c:9f:4c:40:3e:82: 83:82:a5:b7:43:53:9e:8b:da:d5:7a:97:55:ad:cd:5f:e3:8a: c4:d8:c5:30:86:c8:50:47:5a:12:42:8e:8b:d6:8f:bf:15:65: 6a:53:ee:17:fb:ee:c6:10:d8:79:c0:1c:0e:c4:bc:bf:8a:10: 72:1b:dd:80:b6:76:ca:7e:6c:1f:f4:bc:9e:e9:31:c4:ee:71: 8f:d2:31:ec:7c:60:64:50:be:ec:fe:40:69:ac:d3:2f:48:7d: 82:93:34:70:e6:0e:0f:99:ee:91:be:20:a9:9f:fe:75:af:d1: f3:10:49:07:07:29:69:3f:a5:39:2c:f5:b2:85:c8:a5:ef:83: a2:0c:78:2c:8c:1b:1f:42:f7:e4:62:4b:02:f9:8f:e2:31:ac: 5c:7f:a0:c0:70:93:7a:26:17:b1:6e:e9:33:5c:68:9f:30:58: 92:bb:bb:fc:60:17:16:2d:1c:85:d0:d6:65:97:4e:95:6e:c7: 06:ad:d9:bb -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDC9fYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5 YTZjZmU4MmEyYzM4OWI1ZTNmY2U4MTUxM2QzYmEwZGRmM2E4ZTcwHhcNMjEwMzI0 MTQ0NzEwWhcNMjYwMzI0MTQ0NzEwWjAzMTEwLwYDVQQDEyhkYTEyZjA0ZDRkYzI1 NDI0M2IzNzQ1NTZjN2VmZDNhZmE1NDk4MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApLkfqmL2dHK5AkwveymWJKT4MFmnwZcZKasSma6NsmjIG+sn CnXW06keubsVhUnpe90xRdDhkinMPxR4jhlRxsI8PjrEMqpoSR3cIm2/h8pKcKZl NH+Hx62wtRylKsr8bZE0xp5cyOaQHHphtumfs2lG8vW13UFw8MhVOX5JcyBoCQKO SwvpHVk46qgMoMNqMz1Kx4PA/dlTg77FdbVMCc2TSs31/h0Hit2fKswjqVmt86CQ /onD9jH9OgfFol2yqcK1M1nTkTUk/qzYk0KX781pRQuqteliqXbn8TGh54amk0r7 P0LEYlE7l7Gix2JvVpvFtLDtfASnApXoensH5wIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFLCRrSN6p1tTyk1nznb38h+ldT0fMB8GA1UdIwQYMBaAFFqUMHnHoXRoE1gO GANZ3oDZpsO3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlhNmNm ZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThlNy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTQ0ZWYzNTktZDM3Ny00YjViLWI2OGMtMjZlZmJi ZDdlYmZjL2RhMTJmMDRkNGRjMjU0MjQzYjM3NDU1NmM3ZWZkM2FmYTU0OTgyYzAu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNDRlZjM1OS1kMzc3LTRiNWItYjY4Yy0yNmVm YmJkN2ViZmMvYTlhNmNmZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThl Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAL5wygMEAMgjmTANBgkqhkiG9w0BAQsFAAOCAQEAHqy99i5A Ye+Lw2qBQnWS/QaO27g/UB3NulwN19t8ibZhEpq8UxlqEWZSe4Bbt3pMYpeQtRvK HUdXdKzjAdB3Nf0vfJ9MQD6Cg4Klt0NTnova1XqXVa3NX+OKxNjFMIbIUEdaEkKO i9aPvxVlalPuF/vuxhDYecAcDsS8v4oQchvdgLZ2yn5sH/S8nukxxO5xj9Ix7Hxg ZFC+7P5AaazTL0h9gpM0cOYOD5nukb4gqZ/+da/R8xBJBwcpaT+lOSz1soXIpe+D ogx4LIwbH0L35GJLAvmP4jGsXH+gwHCTeiYXsW7pM1xonzBYkru7/GAXFi0chdDW ZZdOlW7HBq3Zuw== -----END CERTIFICATE-----Generated at Thu May 11 00:57:00 2023 by rpki-client on console-ams.rpki-client.org