$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/28f3562b5923804412fa85b170b42a23087e9774.roa File: 28f3562b5923804412fa85b170b42a23087e9774.roa (raw, json) Hash identifier: Abv7dCNYYM1sA6yL9o028o5q/C5nMBICK0fzFbvbLdQ= Subject key identifier: 48:D7:74:60:E6:AF:D0:D2:23:0A:3E:AB:2A:97:7D:30:2B:12:98:F3 Certificate issuer: /CN=6a6637de6bf2a233d64c6541e547859959ef0b1b Certificate serial: 070FB8 Authority key identifier: 8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/28f3562b5923804412fa85b170b42a23087e9774.roa Signing time: Wed 24 Mar 2021 14:31:30 +0000 ROA not before: Wed 24 Mar 2021 14:31:30 +0000 ROA not after: Tue 24 Mar 2026 14:31:30 +0000 asID: 11392 IP address blocks: 186.0.152.0/24 maxlen: 24 186.0.153.0/24 maxlen: 24 186.0.154.0/24 maxlen: 24 186.0.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/6a6637de6bf2a233d64c6541e547859959ef0b1b.crl rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/6a6637de6bf2a233d64c6541e547859959ef0b1b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462776 (0x70fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6637de6bf2a233d64c6541e547859959ef0b1b Validity Not Before: Mar 24 14:31:30 2021 GMT Not After : Mar 24 14:31:30 2026 GMT Subject: CN=28f3562b5923804412fa85b170b42a23087e9774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:f9:40:77:cc:da:4a:6d:8c:34:4d:10:c2: c2:a8:67:07:58:ac:42:ee:66:c3:30:c4:f6:0e:74: bc:cc:67:86:87:e1:15:74:64:0e:3e:90:ba:62:20: 11:97:27:7f:16:6e:5b:d9:cf:bc:2a:dd:b7:27:3a: 95:d2:44:bb:45:a1:cc:60:95:d2:43:b0:73:49:3e: 2f:d0:e7:e3:80:60:84:16:2f:3c:20:18:32:22:11: 2f:85:3c:96:cd:3e:dd:68:d5:53:4a:1e:94:30:28: 6d:3f:0c:f7:2a:56:6c:b4:d7:3d:c0:70:67:83:e4: 92:44:e1:e2:4f:f5:ba:e4:e2:fa:45:03:96:3a:c3: d0:d1:6a:b3:f8:76:22:b1:ce:2e:47:3b:c5:28:7e: 60:dd:fe:46:cd:15:d7:e8:1f:5c:41:2e:8c:2b:b2: c3:3e:38:bf:14:4e:da:9a:15:f3:36:ec:49:af:09: d4:85:8d:b5:73:49:7c:45:86:9a:d5:b3:f3:4a:e7: e2:ca:ac:d1:0b:72:92:91:2f:a9:e9:21:2d:22:75: 8b:73:6c:eb:82:e7:7c:96:3a:48:44:a5:a0:25:d2: 75:d7:e8:42:c4:00:11:d7:e7:58:9d:9c:9d:21:b7: b9:f5:22:5c:2f:db:ca:e9:09:b0:ee:5d:43:59:42: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:74:60:E6:AF:D0:D2:23:0A:3E:AB:2A:97:7D:30:2B:12:98:F3 X509v3 Authority Key Identifier: keyid:8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/28f3562b5923804412fa85b170b42a23087e9774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/6a6637de6bf2a233d64c6541e547859959ef0b1b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.0.152.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:83:c4:fe:57:ae:87:8b:32:25:2d:5d:e0:58:61:47:73:2e: 99:bb:37:d0:23:6f:6c:73:ab:d8:a8:70:0f:22:4b:43:64:5e: 04:fc:c9:dc:10:8c:80:60:9f:f0:e3:7c:17:89:ec:63:c1:2f: a1:46:b6:df:6c:74:c9:ae:03:3a:a7:d7:25:f1:21:94:d2:73: 6c:c9:4a:36:f9:bc:26:0d:3c:76:d4:35:24:9c:1c:b4:81:0a: d7:6c:49:9f:fc:db:d8:b6:fd:ff:8a:1d:af:d8:2d:18:f4:96: 6c:94:16:16:4f:43:6b:2e:74:99:26:a5:59:e1:e2:1f:48:c2: ea:bc:45:a5:19:0a:b3:12:4b:a6:a8:80:ac:38:41:43:99:06: 17:b9:c3:1f:08:dc:13:01:79:7a:79:bf:fd:ba:b0:03:82:95: 4b:33:3b:02:b3:88:84:63:72:83:d2:f9:54:17:44:e4:54:89: ba:d5:f4:ee:a7:97:a0:06:6e:a8:74:17:4d:08:11:1c:05:f8: d7:ed:26:ae:e2:05:85:04:d1:b3:09:56:65:68:bf:2b:a2:7b: f3:97:3c:29:b0:81:75:4a:dd:07:5c:e9:15:83:fb:05:7d:e6: fb:dd:1b:88:29:59:f8:32:04:3a:78:99:a0:31:a7:fc:c0:93: 57:61:6a:b5 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDBw+4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh NjYzN2RlNmJmMmEyMzNkNjRjNjU0MWU1NDc4NTk5NTllZjBiMWIwHhcNMjEwMzI0 MTQzMTMwWhcNMjYwMzI0MTQzMTMwWjAzMTEwLwYDVQQDEygyOGYzNTYyYjU5MjM4 MDQ0MTJmYTg1YjE3MGI0MmEyMzA4N2U5Nzc0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjOr5QHfM2kptjDRNEMLCqGcHWKxC7mbDMMT2DnS8zGeGh+EV dGQOPpC6YiARlyd/Fm5b2c+8Kt23JzqV0kS7RaHMYJXSQ7BzST4v0OfjgGCEFi88 IBgyIhEvhTyWzT7daNVTSh6UMChtPwz3KlZstNc9wHBng+SSROHiT/W65OL6RQOW OsPQ0Wqz+HYisc4uRzvFKH5g3f5GzRXX6B9cQS6MK7LDPji/FE7amhXzNuxJrwnU hY21c0l8RYaa1bPzSufiyqzRC3KSkS+p6SEtInWLc2zrgud8ljpIRKWgJdJ11+hC xAAR1+dYnZydIbe59SJcL9vK6Qmw7l1DWUI/hwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFEjXdGDmr9DSIwo+qyqXfTArEpjzMB8GA1UdIwQYMBaAFIzLqXjHFKEg2nXs /0Y6wII8YeWYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmE2NjM3 ZGU2YmYyYTIzM2Q2NGM2NTQxZTU0Nzg1OTk1OWVmMGIxYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTRmMTM3MDAtMGJhOS00YzJjLWFkZTYtNjRlZWVk NjA4Mjg5LzI4ZjM1NjJiNTkyMzgwNDQxMmZhODViMTcwYjQyYTIzMDg3ZTk3NzQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNGYxMzcwMC0wYmE5LTRjMmMtYWRlNi02NGVl ZWQ2MDgyODkvNmE2NjM3ZGU2YmYyYTIzM2Q2NGM2NTQxZTU0Nzg1OTk1OWVmMGIx Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAroAmDANBgkqhkiG9w0BAQsFAAOCAQEALoPE/leuh4syJS1d 4FhhR3Mumbs30CNvbHOr2KhwDyJLQ2ReBPzJ3BCMgGCf8ON8F4nsY8EvoUa232x0 ya4DOqfXJfEhlNJzbMlKNvm8Jg08dtQ1JJwctIEK12xJn/zb2Lb9/4odr9gtGPSW bJQWFk9Day50mSalWeHiH0jC6rxFpRkKsxJLpqiArDhBQ5kGF7nDHwjcEwF5enm/ /bqwA4KVSzM7ArOIhGNyg9L5VBdE5FSJutX07qeXoAZuqHQXTQgRHAX41+0mruIF hQTRswlWZWi/K6J785c8KbCBdUrdB1zpFYP7BX3m+90biClZ+DIEOniZoDGn/MCT V2FqtQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:20 2023 by rpki-client on console-ams.rpki-client.org