$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/4e2fe62e962a47298e93951a28b3301c99841fd2.roa File: 4e2fe62e962a47298e93951a28b3301c99841fd2.roa (raw, json) Hash identifier: Nm9KOiLHAy58rccwkmjtmwYScNWbOvRCNWsqrQNUdZI= Subject key identifier: 92:94:3F:4D:77:76:A2:31:A9:5F:DC:D6:35:19:3C:1C:5A:55:59:3F Certificate issuer: /CN=b15724311c8f57527a6b499ef55d7b227a6142c3 Certificate serial: 0D3572 Authority key identifier: 99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/4e2fe62e962a47298e93951a28b3301c99841fd2.roa Signing time: Wed 24 Mar 2021 14:34:33 +0000 ROA not before: Wed 24 Mar 2021 14:34:33 +0000 ROA not after: Tue 24 Mar 2026 14:34:33 +0000 asID: 264827 IP address blocks: 170.247.204.0/22 maxlen: 24 2803:36c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865650 (0xd3572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15724311c8f57527a6b499ef55d7b227a6142c3 Validity Not Before: Mar 24 14:34:33 2021 GMT Not After : Mar 24 14:34:33 2026 GMT Subject: CN=4e2fe62e962a47298e93951a28b3301c99841fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:19:c6:2e:f7:cd:33:82:d8:24:74:c7:f0: 7e:86:90:bc:14:7f:e5:97:f9:b0:d5:b2:06:84:04: da:9f:c1:4a:11:ab:df:f3:9f:3a:81:75:60:8e:63: 60:f8:1b:3c:96:a5:1b:53:d3:cb:35:a4:c1:6f:b2: 53:1e:65:32:2a:ad:a2:05:22:f1:9e:3a:f2:d7:95: 7c:1a:0a:9c:2b:a1:b2:d1:a6:6d:63:aa:e3:60:7e: 38:b9:5a:aa:02:ed:f4:ce:84:b8:52:53:ef:71:a0: d0:b1:62:2f:aa:9d:17:86:13:3c:23:f6:60:8b:c9: 2d:c4:b9:13:88:3d:4b:76:e4:50:94:a7:13:b4:07: 63:c3:5f:8e:25:85:a9:d9:cb:e1:01:fd:a0:73:6a: e0:be:23:22:47:9b:db:cd:8f:ee:f6:20:ac:f3:bc: a7:e3:0c:f3:18:31:3d:f8:29:ae:00:6d:ef:97:2d: 0b:69:57:8f:f2:f4:2c:71:c6:5c:ca:0b:0a:a0:b4: 16:e6:b7:8c:6a:11:13:61:3a:34:4b:4a:eb:9b:2b: 63:ab:e7:ed:63:20:0c:c3:0b:15:b4:47:38:79:d8: 91:dc:5c:3e:3b:db:37:65:2c:bf:5f:63:46:73:35: 68:7c:46:dd:50:dd:63:da:19:73:fa:14:9b:3f:b8: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:94:3F:4D:77:76:A2:31:A9:5F:DC:D6:35:19:3C:1C:5A:55:59:3F X509v3 Authority Key Identifier: keyid:99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/4e2fe62e962a47298e93951a28b3301c99841fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.204.0/22 IPv6: 2803:36c0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:54:5e:47:73:af:27:a8:dc:cb:ba:24:89:0a:c8:8c:13:d8: 2e:b9:75:d9:a5:b4:03:30:9a:05:18:d7:98:d7:e1:60:99:4b: 3a:3b:e8:5f:90:14:5d:16:94:7f:c4:a3:37:9c:0a:21:73:5d: 8b:65:1c:80:28:f3:b6:bf:52:ea:94:4f:07:60:69:26:ad:69: 26:1d:c1:79:7c:62:31:dc:bf:3a:0d:5d:3a:bf:4a:f3:1c:06: 09:f6:56:05:70:f7:d8:98:bb:e0:23:67:62:a0:06:a6:46:63: 2c:da:22:d2:ed:a6:f8:d5:c5:63:2d:fc:da:97:6d:78:ea:8c: 51:91:cc:3e:fa:26:e0:74:62:4f:6a:17:8b:0f:81:af:23:c4: e2:ae:15:ff:9f:fd:b0:bc:fe:30:c8:c8:b3:0a:04:fd:61:e7: ce:03:ce:f2:b4:a2:9f:32:e6:c8:3d:27:b6:9a:0f:00:ba:9e: 10:bc:83:37:b0:d6:9d:17:cb:74:b6:f1:60:90:54:be:d8:15: 7f:de:c7:92:e4:08:36:dd:2e:c8:b2:2d:aa:ae:b1:74:2d:85: 48:bb:b5:fd:53:17:61:e8:63:6a:b2:40:ec:d5:62:5a:71:55: 43:47:81:76:f1:4a:f6:44:2b:a5:30:18:b8:e4:45:b5:2b:53: 6b:06:62:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDDTVyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx NTcyNDMxMWM4ZjU3NTI3YTZiNDk5ZWY1NWQ3YjIyN2E2MTQyYzMwHhcNMjEwMzI0 MTQzNDMzWhcNMjYwMzI0MTQzNDMzWjAzMTEwLwYDVQQDEyg0ZTJmZTYyZTk2MmE0 NzI5OGU5Mzk1MWEyOGIzMzAxYzk5ODQxZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAidUZxi73zTOC2CR0x/B+hpC8FH/ll/mw1bIGhATan8FKEavf 8586gXVgjmNg+Bs8lqUbU9PLNaTBb7JTHmUyKq2iBSLxnjry15V8GgqcK6Gy0aZt Y6rjYH44uVqqAu30zoS4UlPvcaDQsWIvqp0XhhM8I/Zgi8ktxLkTiD1LduRQlKcT tAdjw1+OJYWp2cvhAf2gc2rgviMiR5vbzY/u9iCs87yn4wzzGDE9+CmuAG3vly0L aVeP8vQsccZcygsKoLQW5reMahETYTo0S0rrmytjq+ftYyAMwwsVtEc4ediR3Fw+ O9s3ZSy/X2NGczVofEbdUN1j2hlz+hSbP7g6PQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFJKUP013dqIxqV/c1jUZPBxaVVk/MB8GA1UdIwQYMBaAFJniNalegn7pJWni eyA4sPgiuN+0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE1NzI0 MzExYzhmNTc1MjdhNmI0OTllZjU1ZDdiMjI3YTYxNDJjMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTRjZjAzNDktYzZkNC00ZGNmLWIzZjEtYzI4YTVk NDVjYTRkLzRlMmZlNjJlOTYyYTQ3Mjk4ZTkzOTUxYTI4YjMzMDFjOTk4NDFmZDIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNGNmMDM0OS1jNmQ0LTRkY2YtYjNmMS1jMjhh NWQ0NWNhNGQvYjE1NzI0MzExYzhmNTc1MjdhNmI0OTllZjU1ZDdiMjI3YTYxNDJj My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAqr3zDANBAIAAjAHAwUAKAM2wDANBgkqhkiG9w0BAQsFAAOC AQEAblReR3OvJ6jcy7okiQrIjBPYLrl12aW0AzCaBRjXmNfhYJlLOjvoX5AUXRaU f8SjN5wKIXNdi2UcgCjztr9S6pRPB2BpJq1pJh3BeXxiMdy/Og1dOr9K8xwGCfZW BXD32Ji74CNnYqAGpkZjLNoi0u2m+NXFYy382pdteOqMUZHMPvom4HRiT2oXiw+B ryPE4q4V/5/9sLz+MMjIswoE/WHnzgPO8rSinzLmyD0ntpoPALqeELyDN7DWnRfL dLbxYJBUvtgVf97HkuQINt0uyLItqq6xdC2FSLu1/VMXYehjarJA7NViWnFVQ0eB dvFK9kQrpTAYuORFtStTawZiXQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:02 2023 by rpki-client on console-fra.rpki-client.org