$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/a0c4e661f4530ec4e426a72bccf3da3575d40923.roa File: a0c4e661f4530ec4e426a72bccf3da3575d40923.roa (raw, json) Hash identifier: PsTlLdjSFhil4+B4q5Ld3F8JHdlrphGziqWscI18tNo= Subject key identifier: D9:CA:12:FD:C5:43:A1:08:DB:40:1C:B0:25:A5:89:73:F9:39:5A:8E Certificate issuer: /CN=b15724311c8f57527a6b499ef55d7b227a6142c3 Certificate serial: 0D31F1 Authority key identifier: 99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/a0c4e661f4530ec4e426a72bccf3da3575d40923.roa Signing time: Wed 24 Mar 2021 14:34:33 +0000 ROA not before: Wed 24 Mar 2021 14:34:33 +0000 ROA not after: Tue 24 Mar 2026 14:34:33 +0000 asID: 264827 IP address blocks: 170.247.204.0/22 maxlen: 24 2803:36c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864753 (0xd31f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15724311c8f57527a6b499ef55d7b227a6142c3 Validity Not Before: Mar 24 14:34:33 2021 GMT Not After : Mar 24 14:34:33 2026 GMT Subject: CN=a0c4e661f4530ec4e426a72bccf3da3575d40923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:52:c2:83:29:f0:6d:99:6f:b0:c2:23:8e:e6: 29:94:3c:a7:aa:28:1a:20:e1:c7:fc:09:dc:27:ad: 91:15:79:84:0f:19:3d:9f:ab:68:ef:02:dc:c1:ba: 34:d5:ce:77:22:9f:e4:c5:46:31:d0:21:69:1e:a2: 95:a6:aa:8a:1d:c9:fb:b8:57:8f:2a:da:c9:76:40: e1:0f:79:99:47:30:03:8e:00:9b:e9:0e:ff:f6:c8: f1:ab:87:d2:d6:b7:44:66:af:37:9e:6a:e2:9c:9b: 24:77:c7:7e:e7:e0:de:5c:65:8e:00:b7:cb:91:73: 42:cb:8f:aa:49:f5:c5:ed:df:4b:35:ef:1d:2c:71: 40:9c:55:c2:ac:de:50:9b:9c:92:60:9e:05:d5:9f: cd:a6:cb:e0:c2:e4:20:77:60:49:ee:b2:63:9c:06: 75:5d:4c:13:ee:32:27:31:39:86:a8:26:e6:31:98: 61:86:d7:8f:1c:0b:ef:04:b5:5b:49:7e:62:37:cd: 1e:69:b9:7b:c4:dd:07:d6:92:52:7d:f6:22:93:00: a2:db:c7:2a:dd:25:f1:f7:75:32:35:b7:36:09:a4: e4:50:c9:d9:eb:d1:84:2c:9d:0d:78:bb:62:52:52: 65:20:2e:28:d7:3b:34:70:5f:0a:00:30:09:e4:e9: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:12:FD:C5:43:A1:08:DB:40:1C:B0:25:A5:89:73:F9:39:5A:8E X509v3 Authority Key Identifier: keyid:99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/a0c4e661f4530ec4e426a72bccf3da3575d40923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.204.0/22 IPv6: 2803:36c0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:ff:5c:71:fd:de:98:1f:9e:27:21:55:63:9a:f8:85:76:b0: 1f:6e:d6:c4:58:88:e2:e6:4b:07:1f:de:79:6d:d5:c4:aa:f5: fa:b3:8d:07:e0:7b:ac:43:26:85:f7:79:5e:3a:05:e8:af:ed: d7:3d:73:c3:c6:d4:4f:f0:7f:36:f4:7b:6f:94:e9:7c:82:db: cd:05:33:e5:98:4a:4d:7c:c3:8a:74:13:59:07:7b:ae:32:21: 16:79:ed:50:ae:7f:6f:c4:b8:e3:7f:a9:e7:29:7c:77:3b:a7: 51:24:f3:10:9e:4c:11:31:64:22:92:16:86:36:f2:a5:63:02: 30:65:ff:77:a5:6c:e8:06:d6:1d:e0:de:3c:2c:75:74:54:48: 60:e4:b5:0c:ed:8b:07:1b:e2:bb:10:2c:e3:c4:fd:c4:bf:8c: ca:e3:60:7c:54:84:6d:ef:ff:d4:fb:bb:6c:fa:4e:82:fa:04: 66:da:59:e0:a7:50:00:f2:ef:8f:3b:dd:fd:bf:17:b7:e8:13: 65:24:cc:b8:78:27:06:3b:1d:b7:9d:f3:4a:82:29:06:77:dc: 21:a9:81:88:48:1d:7f:c3:dc:8b:e2:54:33:aa:a4:0a:9e:bd: bd:de:91:7d:c2:35:17:f4:66:0e:ee:1d:6b:26:9e:97:d6:12: b5:e7:5e:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDDTHxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx NTcyNDMxMWM4ZjU3NTI3YTZiNDk5ZWY1NWQ3YjIyN2E2MTQyYzMwHhcNMjEwMzI0 MTQzNDMzWhcNMjYwMzI0MTQzNDMzWjAzMTEwLwYDVQQDEyhhMGM0ZTY2MWY0NTMw ZWM0ZTQyNmE3MmJjY2YzZGEzNTc1ZDQwOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkVLCgynwbZlvsMIjjuYplDynqigaIOHH/AncJ62RFXmEDxk9 n6to7wLcwbo01c53Ip/kxUYx0CFpHqKVpqqKHcn7uFePKtrJdkDhD3mZRzADjgCb 6Q7/9sjxq4fS1rdEZq83nmrinJskd8d+5+DeXGWOALfLkXNCy4+qSfXF7d9LNe8d LHFAnFXCrN5Qm5ySYJ4F1Z/NpsvgwuQgd2BJ7rJjnAZ1XUwT7jInMTmGqCbmMZhh htePHAvvBLVbSX5iN80eabl7xN0H1pJSffYikwCi28cq3SXx93UyNbc2CaTkUMnZ 69GELJ0NeLtiUlJlIC4o1zs0cF8KADAJ5OmsqwIDAQABo4ICajCCAmYwHQYDVR0O BBYEFNnKEv3FQ6EI20AcsCWliXP5OVqOMB8GA1UdIwQYMBaAFJniNalegn7pJWni eyA4sPgiuN+0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE1NzI0 MzExYzhmNTc1MjdhNmI0OTllZjU1ZDdiMjI3YTYxNDJjMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTRjZjAzNDktYzZkNC00ZGNmLWIzZjEtYzI4YTVk NDVjYTRkL2EwYzRlNjYxZjQ1MzBlYzRlNDI2YTcyYmNjZjNkYTM1NzVkNDA5MjMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNGNmMDM0OS1jNmQ0LTRkY2YtYjNmMS1jMjhh NWQ0NWNhNGQvYjE1NzI0MzExYzhmNTc1MjdhNmI0OTllZjU1ZDdiMjI3YTYxNDJj My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAqr3zDANBAIAAjAHAwUAKAM2wDANBgkqhkiG9w0BAQsFAAOC AQEAXv9ccf3emB+eJyFVY5r4hXawH27WxFiI4uZLBx/eeW3VxKr1+rONB+B7rEMm hfd5XjoF6K/t1z1zw8bUT/B/NvR7b5TpfILbzQUz5ZhKTXzDinQTWQd7rjIhFnnt UK5/b8S443+p5yl8dzunUSTzEJ5METFkIpIWhjbypWMCMGX/d6Vs6AbWHeDePCx1 dFRIYOS1DO2LBxviuxAs48T9xL+MyuNgfFSEbe//1Pu7bPpOgvoEZtpZ4KdQAPLv jzvd/b8Xt+gTZSTMuHgnBjsdt53zSoIpBnfcIamBiEgdf8Pci+JUM6qkCp69vd6R fcI1F/RmDu4dayael9YStedeLg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:02 2023 by rpki-client on console-fra.rpki-client.org