$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa File: 0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa (raw, json) Hash identifier: EUW08NOXmkRdKxYZIR/BWSNLdUHzG/TZmp9sGi82hfY= Subject key identifier: A2:26:69:91:91:7C:9E:52:25:DA:8E:68:D0:4D:A8:FC:82:DA:1F:2A Certificate issuer: /CN=9d25be9947afcb39fce110f05b5d8afd69a92382 Certificate serial: 1580F4 Authority key identifier: A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa Signing time: Fri 11 Feb 2022 15:36:29 +0000 ROA not before: Fri 11 Feb 2022 03:00:00 +0000 ROA not after: Sun 11 Feb 2024 03:00:00 +0000 asID: 265838 IP address blocks: 45.224.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 08:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409268 (0x1580f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d25be9947afcb39fce110f05b5d8afd69a92382 Validity Not Before: Feb 11 03:00:00 2022 GMT Not After : Feb 11 03:00:00 2024 GMT Subject: CN=0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:7d:b9:ca:72:bc:0d:6e:47:60:ff:c1:ae: e5:f1:32:76:3c:61:9f:5b:15:4c:2a:dd:c8:f0:51: b2:f2:7c:3c:1d:b7:40:54:52:40:ce:e9:50:ef:1b: bc:43:3a:9e:75:e4:63:5c:4a:0f:d6:00:fa:60:17: ee:ff:21:19:41:24:de:28:3b:bf:bb:75:54:7a:00: cc:88:35:19:c7:1d:58:51:aa:af:a4:76:16:51:0e: e0:17:d7:c8:e8:f9:41:5d:ac:70:c0:d6:66:66:8f: 7a:56:5e:e6:9a:d8:cc:2b:cf:99:f8:0b:0b:7f:0b: e4:f4:d9:93:5a:fa:a4:63:85:2f:0e:47:d6:79:e4: c9:5a:99:cf:33:bd:90:90:99:f5:0e:07:2a:37:a0: 61:76:62:22:fe:3f:d3:bc:f3:fe:f5:95:79:88:9c: 11:39:82:67:6b:fe:f2:79:70:39:8e:61:b9:ff:71: f7:6b:51:aa:b4:1d:9b:4a:b8:b5:6f:26:71:1d:e3: 24:29:10:74:04:6d:0b:f4:3a:01:89:08:2c:a4:aa: 4c:11:e0:87:0f:92:03:25:41:e4:c2:bb:5e:37:54: dd:c6:c6:d1:c8:f9:ef:3b:f9:6e:1b:ed:b6:b6:65: 3e:2c:59:06:25:32:42:f5:22:f0:cb:7f:2e:91:99: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:26:69:91:91:7C:9E:52:25:DA:8E:68:D0:4D:A8:FC:82:DA:1F:2A X509v3 Authority Key Identifier: keyid:A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.117.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a1:d0:9e:e2:63:bd:a9:e3:51:0d:36:e8:71:2a:3e:f2:c4: 59:f2:f3:fd:59:69:a8:97:6f:49:b7:14:d8:5c:56:09:28:08: f2:84:fe:af:51:82:d6:44:fd:b7:59:9c:90:f5:01:60:8f:d3: 9f:72:6a:8d:4b:af:0b:23:72:43:5c:a0:3a:bd:ed:cf:91:be: 11:bb:2f:5b:e8:f0:f6:a7:83:11:4f:42:4d:59:99:84:c1:f1: c9:31:b2:7b:6b:95:56:cc:b9:05:d6:8a:0b:82:25:87:32:a3: 72:c5:53:9f:13:61:40:da:81:17:e8:cf:8f:c5:1c:ad:c6:7b: 4d:f8:f1:80:20:2b:e6:30:bc:88:c9:51:e3:82:62:ea:6b:34: 09:94:44:0a:2f:b7:e3:d8:33:59:12:b7:9b:3b:ea:4d:2b:1c: 4e:b7:05:18:a5:af:8a:01:d6:1c:d6:b4:5b:ac:c2:68:94:d5: 36:05:aa:44:38:2f:a2:8e:f7:26:3d:7c:7d:60:a4:59:cf:c0: b2:e6:09:81:82:2e:fa:78:80:8f:a9:35:40:e4:68:be:3f:6f: 28:06:4c:82:54:71:a1:12:69:8a:2d:83:77:c7:bc:45:ab:c6: 80:e4:36:7c:2b:b4:1b:98:c1:7e:73:71:98:df:b2:7c:c6:01: a9:bb:ad:de -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDFYD0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk MjViZTk5NDdhZmNiMzlmY2UxMTBmMDViNWQ4YWZkNjlhOTIzODIwHhcNMjIwMjEx MDMwMDAwWhcNMjQwMjExMDMwMDAwWjAzMTEwLwYDVQQDEygwZmY0OWNiZTcwNjJj MmQ2ZjkwYjZkYWRlZDYwY2EzYzlhMGVjMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAi2l9ucpyvA1uR2D/wa7l8TJ2PGGfWxVMKt3I8FGy8nw8HbdA VFJAzulQ7xu8QzqedeRjXEoP1gD6YBfu/yEZQSTeKDu/u3VUegDMiDUZxx1YUaqv pHYWUQ7gF9fI6PlBXaxwwNZmZo96Vl7mmtjMK8+Z+AsLfwvk9NmTWvqkY4UvDkfW eeTJWpnPM72QkJn1DgcqN6BhdmIi/j/TvPP+9ZV5iJwROYJna/7yeXA5jmG5/3H3 a1GqtB2bSri1byZxHeMkKRB0BG0L9DoBiQgspKpMEeCHD5IDJUHkwrteN1TdxsbR yPnvO/luG+22tmU+LFkGJTJC9SLwy38ukZneSQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFKImaZGRfJ5SJdqOaNBNqPyC2h8qMB8GA1UdIwQYMBaAFKKMY6QjeDde8l9n jdQ+cgl2qh/6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQyNWJl OTk0N2FmY2IzOWZjZTExMGYwNWI1ZDhhZmQ2OWE5MjM4Mi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWMwY2VhYzItMDViNi00ZDAzLThlZmEtYmJkOGQ1 OTEwZDhlLzBmZjQ5Y2JlNzA2MmMyZDZmOTBiNmRhZGVkNjBjYTNjOWEwZWMwNDEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lYzBjZWFjMi0wNWI2LTRkMDMtOGVmYS1iYmQ4 ZDU5MTBkOGUvOWQyNWJlOTk0N2FmY2IzOWZjZTExMGYwNWI1ZDhhZmQ2OWE5MjM4 Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC3gdTANBgkqhkiG9w0BAQsFAAOCAQEAM6HQnuJjvanjUQ02 6HEqPvLEWfLz/VlpqJdvSbcU2FxWCSgI8oT+r1GC1kT9t1mckPUBYI/Tn3JqjUuv CyNyQ1ygOr3tz5G+EbsvW+jw9qeDEU9CTVmZhMHxyTGye2uVVsy5BdaKC4IlhzKj csVTnxNhQNqBF+jPj8UcrcZ7TfjxgCAr5jC8iMlR44Ji6ms0CZRECi+349gzWRK3 mzvqTSscTrcFGKWvigHWHNa0W6zCaJTVNgWqRDgvoo73Jj18fWCkWc/AsuYJgYIu +niAj6k1QORovj9vKAZMglRxoRJpii2Dd8e8RavGgOQ2fCu0G5jBfnNxmN+yfMYB qbut3g== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:03 2023 by rpki-client on console-fra.rpki-client.org