$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa File: 16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa (raw, json) Hash identifier: NgG4G6ltO3gnPY55iRvSHqc3+FXTCe9E9ZgTxxAiaVE= Subject key identifier: CB:C8:1F:9C:BE:44:98:86:91:E2:E2:7C:E2:F7:12:43:4B:48:25:02 Certificate issuer: /CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800 Certificate serial: 011FB8 Authority key identifier: 61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa Signing time: Thu 15 Apr 2021 22:14:05 +0000 ROA not before: Thu 15 Apr 2021 03:00:00 +0000 ROA not after: Sat 15 Apr 2023 03:00:00 +0000 asID: 270076 IP address blocks: 138.186.76.0/23 maxlen: 23 138.186.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73656 (0x11fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800 Validity Not Before: Apr 15 03:00:00 2021 GMT Not After : Apr 15 03:00:00 2023 GMT Subject: CN=16d9cc0fdf34305831e2d55d1b024578a8a6673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:1c:00:e3:8a:8c:6a:e5:7d:cd:52:f3:5b: 91:c5:39:96:7c:16:2a:85:ea:09:c0:3f:1e:0d:58: ba:19:d6:65:aa:44:8f:4a:b8:b2:5d:1a:8d:cd:bf: 5f:0b:4e:56:bc:e5:48:16:d6:8f:98:bb:a0:db:16: 8e:f2:6d:7f:a1:4b:87:96:88:43:ae:55:bb:47:88: 22:56:1c:0a:bb:25:63:df:f6:07:84:ae:c2:6c:cd: ce:8e:b3:2a:83:3f:9c:a0:98:52:c5:a8:c4:a3:2f: 38:fa:c1:fc:a5:27:30:a1:16:60:02:34:df:02:c2: 68:85:08:70:ce:e2:4d:a7:e9:7b:67:9f:51:df:67: 26:1a:64:c6:80:25:30:04:39:5f:16:40:5c:07:c2: 07:c7:3a:ca:15:78:3e:0a:dd:9d:7c:0b:cb:c7:c1: 9d:4a:de:5c:f9:aa:52:b8:b4:01:99:ba:77:6e:70: 5b:5f:35:1d:ca:ad:61:78:9a:32:3a:86:06:b1:de: eb:4b:d0:1d:d0:de:ee:b8:18:87:db:e9:59:80:39: 77:98:3d:25:b8:f6:95:52:b1:09:51:4f:39:ef:90: 98:1e:c0:b0:22:f4:ed:a7:21:fa:7b:27:01:2d:56: 3f:2c:a9:c5:6f:7e:c4:c8:24:83:2d:e7:34:ac:e0: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:1F:9C:BE:44:98:86:91:E2:E2:7C:E2:F7:12:43:4B:48:25:02 X509v3 Authority Key Identifier: keyid:61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.76.0/22 Signature Algorithm: sha256WithRSAEncryption 54:dd:cd:d9:a0:f0:2e:bd:66:8e:e8:1c:ea:73:7d:e2:86:41: 02:f8:4f:87:77:f8:c9:44:8e:ea:d6:21:53:36:d4:a6:a0:b6: b3:be:35:34:35:cf:9b:db:62:d5:7b:1c:0f:6b:79:22:03:37: f3:59:4f:0b:58:7c:df:06:82:3f:34:87:29:90:ee:00:d8:e3: b8:64:d4:37:7c:6d:34:d3:ab:12:79:1e:ee:31:15:9e:e1:7c: 0d:af:2c:3b:83:83:00:b2:39:6d:ce:e1:02:e8:5a:e2:37:59: 8d:32:0b:17:08:05:9b:1b:f7:84:59:7c:b5:24:1d:ab:34:9d: 19:81:ff:4b:53:a4:6e:a6:1c:a8:71:5f:84:51:44:0c:f2:34: ed:16:b9:47:69:dd:0f:3e:64:f9:a4:e9:a1:f7:6a:d8:fc:98: 68:5a:e8:28:39:dd:22:c3:a5:55:57:1d:89:d1:67:6e:69:0e: c5:ef:fb:86:ad:66:0a:73:eb:80:3b:28:8a:e6:33:24:c2:0f: 09:b3:11:b9:70:37:62:06:43:55:1b:24:c6:65:56:ef:34:06: 06:65:b2:5a:59:d8:1f:bc:ca:2f:02:93:5a:f5:41:ab:d4:da: ba:cb:74:a2:21:4e:02:e0:82:e4:14:84:b1:12:de:ce:ea:52: 38:4c:21:42 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAR+4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm MTI2ZDMwZmE2YTg3NjI3Y2FmZTBlOGEwY2E1MGZhM2IxMmU4MDAwHhcNMjEwNDE1 MDMwMDAwWhcNMjMwNDE1MDMwMDAwWjAzMTEwLwYDVQQDEygxNmQ5Y2MwZmRmMzQz MDU4MzFlMmQ1NWQxYjAyNDU3OGE4YTY2NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjuMcAOOKjGrlfc1S81uRxTmWfBYqheoJwD8eDVi6GdZlqkSP SriyXRqNzb9fC05WvOVIFtaPmLug2xaO8m1/oUuHlohDrlW7R4giVhwKuyVj3/YH hK7CbM3OjrMqgz+coJhSxajEoy84+sH8pScwoRZgAjTfAsJohQhwzuJNp+l7Z59R 32cmGmTGgCUwBDlfFkBcB8IHxzrKFXg+Ct2dfAvLx8GdSt5c+apSuLQBmbp3bnBb XzUdyq1heJoyOoYGsd7rS9Ad0N7uuBiH2+lZgDl3mD0luPaVUrEJUU8575CYHsCw IvTtpyH6eycBLVY/LKnFb37EyCSDLec0rODK8wIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFMvIH5y+RJiGkeLifOL3EkNLSCUCMB8GA1UdIwQYMBaAFGE7Dtrf2Teg69I6 45YI8B3ZmroBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWYxMjZk MzBmYTZhODc2MjdjYWZlMGU4YTBjYTUwZmEzYjEyZTgwMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWRhNmVhM2YtYjk1Yi00M2UxLTliM2MtMTdmM2Y5 ZmI2YTVjLzE2ZDljYzBmZGYzNDMwNTgzMWUyZDU1ZDFiMDI0NTc4YThhNjY3M2Uu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZGE2ZWEzZi1iOTViLTQzZTEtOWIzYy0xN2Yz ZjlmYjZhNWMvNWYxMjZkMzBmYTZhODc2MjdjYWZlMGU4YTBjYTUwZmEzYjEyZTgw MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAoq6TDANBgkqhkiG9w0BAQsFAAOCAQEAVN3N2aDwLr1mjugc 6nN94oZBAvhPh3f4yUSO6tYhUzbUpqC2s741NDXPm9ti1XscD2t5IgM381lPC1h8 3waCPzSHKZDuANjjuGTUN3xtNNOrEnke7jEVnuF8Da8sO4ODALI5bc7hAuha4jdZ jTILFwgFmxv3hFl8tSQdqzSdGYH/S1OkbqYcqHFfhFFEDPI07Ra5R2ndDz5k+aTp ofdq2PyYaFroKDndIsOlVVcdidFnbmkOxe/7hq1mCnPrgDsoiuYzJMIPCbMRuXA3 YgZDVRskxmVW7zQGBmWyWlnYH7zKLwKTWvVBq9Taust0oiFOAuCC5BSEsRLezupS OEwhQg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:04 2023 by rpki-client on console-fra.rpki-client.org