$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa File: f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa (raw, json) Hash identifier: wQ/1XN1WD+PtyI9JjWMJBhgQYAT6CyLI45+e5YCKUXk= Subject key identifier: 6F:A4:4F:04:7C:7A:16:FA:CB:5E:88:D6:91:4E:3C:C4:74:E0:A2:B6 Certificate issuer: /CN=b15724311c8f57527a6b499ef55d7b227a6142c3 Certificate serial: 136B39 Authority key identifier: 99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa Signing time: Tue 30 Nov 2021 02:08:07 +0000 ROA not before: Mon 29 Nov 2021 03:00:00 +0000 ROA not after: Wed 29 Nov 2023 03:00:00 +0000 asID: 264827 IP address blocks: 170.247.204.0/23 maxlen: 23 170.247.204.0/24 maxlen: 24 170.247.205.0/24 maxlen: 24 170.247.206.0/24 maxlen: 24 170.247.206.0/23 maxlen: 23 170.247.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272633 (0x136b39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15724311c8f57527a6b499ef55d7b227a6142c3 Validity Not Before: Nov 29 03:00:00 2021 GMT Not After : Nov 29 03:00:00 2023 GMT Subject: CN=f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:2c:f4:d1:1c:d8:18:7d:d8:6f:96:06:b1: 54:9d:2b:13:a9:0b:c5:11:e8:23:c3:18:62:13:1c: 97:c7:a9:fc:75:ad:68:27:70:72:af:b7:bb:ae:ca: 32:71:2e:7b:cc:c9:a7:43:b7:f5:8b:07:44:9d:c0: eb:96:31:59:54:7a:e3:2a:6e:45:43:3a:f1:6e:d0: 33:48:98:cd:3d:5c:4b:f7:e2:14:90:bd:06:01:ec: 44:01:96:16:fa:1c:01:0d:ff:b8:6a:30:0d:ea:4d: e2:eb:2c:f7:ca:50:4b:63:df:fa:98:ae:0d:fc:6c: b5:c9:b0:ee:f1:5f:b5:c8:93:e0:27:db:d8:0f:f7: 29:53:8e:6a:6d:ed:fb:d5:c5:48:e5:00:7f:6b:f4: ee:a3:eb:c5:18:7d:62:37:d1:5a:c7:32:60:1a:f8: 83:75:b4:a8:38:a1:68:2c:12:af:86:80:83:6c:70: 84:43:85:c4:de:b3:c3:81:f3:6e:28:81:0b:ba:00: 28:ec:54:2b:2c:28:5d:36:e6:79:be:3e:f6:44:97: 02:cc:66:87:74:0d:af:fc:69:83:e5:9e:d2:df:49: 2b:fd:19:7b:07:08:0f:a4:9f:9f:ae:8a:ba:76:a8: b5:32:f4:e0:db:05:2a:2f:95:24:8f:c5:cb:89:ac: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A4:4F:04:7C:7A:16:FA:CB:5E:88:D6:91:4E:3C:C4:74:E0:A2:B6 X509v3 Authority Key Identifier: keyid:99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.204.0/22 Signature Algorithm: sha256WithRSAEncryption 31:7a:91:12:6f:72:41:b8:c0:ad:62:b5:b4:c4:c2:6c:87:ed: ea:8d:d5:49:08:b4:36:5a:17:fb:44:f6:77:4e:d5:72:6f:1d: ea:0f:7c:46:4f:c2:93:0e:5b:7e:db:96:cb:37:24:13:53:ec: b3:7c:58:ee:48:64:18:7c:cd:68:35:7e:da:94:46:81:7a:fb: 21:22:1c:37:5b:09:76:4f:93:29:e0:57:e0:e6:71:0e:6f:fc: a7:a2:58:af:fe:0a:96:56:2b:87:ef:c8:fc:64:cd:38:25:f7: a2:89:03:2e:86:7a:94:c2:86:0d:79:ad:ae:11:77:8d:2f:37: de:c2:09:42:b1:22:c2:6e:4f:6f:ca:00:5b:0b:76:51:98:20: e2:db:a5:ef:95:1e:42:0f:0b:39:73:a0:d4:dd:ee:29:c7:8a: f9:51:cc:6c:e7:1a:a6:87:be:25:79:a7:4e:2d:d9:55:0f:36: 7e:81:49:60:64:84:d0:d5:9b:de:eb:f4:9a:5b:47:a5:3c:a7: fa:68:fe:52:9e:33:be:7e:16:00:88:0f:39:5e:61:80:63:5b: 60:f6:97:48:ad:c6:2f:81:a6:fd:50:f8:49:2f:47:66:23:02: c4:be:ee:87:fe:7b:28:90:da:09:79:40:6f:f7:36:c7:d7:7a: 9a:e3:71:84 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDE2s5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx NTcyNDMxMWM4ZjU3NTI3YTZiNDk5ZWY1NWQ3YjIyN2E2MTQyYzMwHhcNMjExMTI5 MDMwMDAwWhcNMjMxMTI5MDMwMDAwWjAzMTEwLwYDVQQDEyhmMmIzYTBiOGM5YjRm YzM2ZjA3Y2Y0ZDgwODZjODcyODY0N2U5MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApCcs9NEc2Bh92G+WBrFUnSsTqQvFEegjwxhiExyXx6n8da1o J3Byr7e7rsoycS57zMmnQ7f1iwdEncDrljFZVHrjKm5FQzrxbtAzSJjNPVxL9+IU kL0GAexEAZYW+hwBDf+4ajAN6k3i6yz3ylBLY9/6mK4N/Gy1ybDu8V+1yJPgJ9vY D/cpU45qbe371cVI5QB/a/Tuo+vFGH1iN9FaxzJgGviDdbSoOKFoLBKvhoCDbHCE Q4XE3rPDgfNuKIELugAo7FQrLChdNuZ5vj72RJcCzGaHdA2v/GmD5Z7S30kr/Rl7 BwgPpJ+froq6dqi1MvTg2wUqL5Ukj8XLiaxcMwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFG+kTwR8ehb6y16I1pFOPMR04KK2MB8GA1UdIwQYMBaAFJniNalegn7pJWni eyA4sPgiuN+0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE1NzI0 MzExYzhmNTc1MjdhNmI0OTllZjU1ZDdiMjI3YTYxNDJjMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTRjZjAzNDktYzZkNC00ZGNmLWIzZjEtYzI4YTVk NDVjYTRkL2YyYjNhMGI4YzliNGZjMzZmMDdjZjRkODA4NmM4NzI4NjQ3ZTkzMzku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNGNmMDM0OS1jNmQ0LTRkY2YtYjNmMS1jMjhh NWQ0NWNhNGQvYjE1NzI0MzExYzhmNTc1MjdhNmI0OTllZjU1ZDdiMjI3YTYxNDJj My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqr3zDANBgkqhkiG9w0BAQsFAAOCAQEAMXqREm9yQbjArWK1 tMTCbIft6o3VSQi0NloX+0T2d07Vcm8d6g98Rk/Ckw5bftuWyzckE1Pss3xY7khk GHzNaDV+2pRGgXr7ISIcN1sJdk+TKeBX4OZxDm/8p6JYr/4KllYrh+/I/GTNOCX3 ookDLoZ6lMKGDXmtrhF3jS833sIJQrEiwm5Pb8oAWwt2UZgg4tul75UeQg8LOXOg 1N3uKceK+VHMbOcapoe+JXmnTi3ZVQ82foFJYGSE0NWb3uv0mltHpTyn+mj+Up4z vn4WAIgPOV5hgGNbYPaXSK3GL4Gm/VD4SS9HZiMCxL7uh/57KJDaCXlAb/c2x9d6 muNxhA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:20 2023 by rpki-client on console-ams.rpki-client.org