$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/4354fcd10133b2667c332dee36f70ec3a84180de.roa File: 4354fcd10133b2667c332dee36f70ec3a84180de.roa (raw, json) Hash identifier: C1qsROzpEI4NSLQlCes7B5BKXwpq5ALU3CUrI6/IYKA= Subject key identifier: 48:A2:C6:50:8A:33:73:E5:68:0D:CA:AD:31:61:B0:B5:76:53:CF:F8 Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Certificate serial: 201A3D Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/4354fcd10133b2667c332dee36f70ec3a84180de.roa Signing time: Fri 24 Mar 2023 08:31:26 +0000 ROA not before: Thu 23 Mar 2023 08:31:26 +0000 ROA not after: Sat 22 Mar 2025 08:31:26 +0000 asID: 27947 IP address blocks: 186.3.0.0/18 maxlen: 24 186.3.0.0/24 maxlen: 24 186.3.128.0/17 maxlen: 24 186.3.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 13 May 2023 19:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103869 (0x201a3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Validity Not Before: Mar 23 08:31:26 2023 GMT Not After : Mar 22 08:31:26 2025 GMT Subject: CN=4354fcd10133b2667c332dee36f70ec3a84180de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:e9:9a:fb:22:29:28:65:dd:24:d1:3c:e7: 96:dd:4c:2a:9d:44:05:74:02:ee:82:46:fb:ff:23: 8f:29:b8:15:04:f4:a2:a3:69:be:9f:5e:8a:66:ed: 17:68:81:c8:40:b8:b8:da:64:56:00:e5:fb:3b:c5: 85:f4:25:18:aa:ad:44:f1:01:42:2a:54:e5:eb:2e: 66:2e:35:8c:00:e6:e4:89:7b:81:26:89:09:fb:47: 15:ab:6b:d4:55:9a:93:ca:3c:57:78:6b:b4:7b:e7: 74:f9:96:36:7c:0f:6e:c5:10:ae:df:7c:59:78:ab: 4b:5f:86:dc:21:54:7d:a4:69:24:8a:15:55:9f:e8: 0e:4e:80:66:c4:b5:f0:0b:f3:ca:52:b2:ee:de:73: 78:bb:80:61:5c:08:d6:63:9e:24:07:75:d0:96:a5: de:d8:06:36:92:a9:a3:59:0d:59:8d:8f:a7:dd:d3: 4e:58:bb:83:b9:94:bf:ab:5e:de:d2:e4:31:67:d1: a3:e9:96:ef:f7:47:f9:eb:cf:d1:40:6f:7a:c0:ba: ff:84:49:0a:c2:8c:bb:0c:54:b1:88:fb:e8:47:a5: c4:29:60:27:3c:43:17:3a:02:67:c4:20:18:df:7b: 0c:4c:99:28:47:fb:64:eb:f6:ef:61:50:b1:8b:c7: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:C6:50:8A:33:73:E5:68:0D:CA:AD:31:61:B0:B5:76:53:CF:F8 X509v3 Authority Key Identifier: keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/4354fcd10133b2667c332dee36f70ec3a84180de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 69:81:b0:d9:97:57:8c:9d:5a:ef:88:18:af:e2:0c:54:ad:3a: 73:ae:10:44:61:14:d6:4d:6e:80:9e:c1:8f:79:49:08:91:2d: 49:ba:21:ed:df:d1:c2:36:95:fc:9e:64:3b:4f:91:ab:84:cb: b1:2a:f2:c1:a1:0f:fc:08:1d:c7:25:45:b8:ba:57:f5:93:3c: 2c:b7:96:d2:a2:e4:5a:bd:e9:75:12:bd:e5:e0:5a:2e:31:96: ab:b5:68:c9:b9:be:60:86:b0:f7:bc:aa:bd:f3:82:72:e7:64: a3:aa:9b:d4:51:96:41:e6:a7:8b:22:c5:95:ce:e1:fb:95:62: 03:89:08:95:a1:47:97:72:dd:b3:e7:3c:8a:21:36:2b:e5:32: 42:12:65:49:c9:7f:7d:2c:f7:13:8f:9f:11:12:6e:3c:d7:23: 18:23:2b:da:d2:6f:98:f9:51:bc:97:a2:4f:b5:3f:8e:57:a6: 77:bf:41:8d:19:52:84:a5:70:98:8c:e1:a1:f2:9d:34:99:60: 97:cf:9b:65:72:a6:63:c3:2f:34:a3:7e:bb:37:02:9e:e2:2c: 40:b0:d7:0d:73:20:71:47:62:0a:a1:f2:16:f4:2e:70:ad:95: 78:82:7c:2a:89:eb:bf:29:d9:e4:d1:1a:2a:d2:4f:45:86:7b: 49:58:43:e8 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIDIBo9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjMwMzIz MDgzMTI2WhcNMjUwMzIyMDgzMTI2WjAzMTEwLwYDVQQDEyg0MzU0ZmNkMTAxMzNi MjY2N2MzMzJkZWUzNmY3MGVjM2E4NDE4MGRlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAr2HpmvsiKShl3STRPOeW3UwqnUQFdALugkb7/yOPKbgVBPSi o2m+n16KZu0XaIHIQLi42mRWAOX7O8WF9CUYqq1E8QFCKlTl6y5mLjWMAObkiXuB JokJ+0cVq2vUVZqTyjxXeGu0e+d0+ZY2fA9uxRCu33xZeKtLX4bcIVR9pGkkihVV n+gOToBmxLXwC/PKUrLu3nN4u4BhXAjWY54kB3XQlqXe2AY2kqmjWQ1ZjY+n3dNO WLuDuZS/q17e0uQxZ9Gj6Zbv90f568/RQG96wLr/hEkKwoy7DFSxiPvoR6XEKWAn PEMXOgJnxCAY33sMTJkoR/tk6/bvYVCxi8ejrwIDAQABo4ICWjCCAlYwHQYDVR0O BBYEFEiixlCKM3PlaA3KrTFhsLV2U8/4MB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5 YzE0NTY0LzQzNTRmY2QxMDEzM2IyNjY3YzMzMmRlZTM2ZjcwZWMzYTg0MTgwZGUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP MA0wCwQCAAEwBQMDALoDMA0GCSqGSIb3DQEBCwUAA4IBAQBpgbDZl1eMnVrviBiv 4gxUrTpzrhBEYRTWTW6AnsGPeUkIkS1JuiHt39HCNpX8nmQ7T5GrhMuxKvLBoQ/8 CB3HJUW4ulf1kzwst5bSouRavel1Er3l4FouMZartWjJub5ghrD3vKq984Jy52Sj qpvUUZZB5qeLIsWVzuH7lWIDiQiVoUeXct2z5zyKITYr5TJCEmVJyX99LPcTj58R Em481yMYIyva0m+Y+VG8l6JPtT+OV6Z3v0GNGVKEpXCYjOGh8p00mWCXz5tlcqZj wy80o367NwKe4ixAsNcNcyBxR2IKofIW9C5wrZV4gnwqieu/Kdnk0Roq0k9FhntJ WEPo -----END CERTIFICATE-----Generated at Thu May 11 00:57:03 2023 by rpki-client on console-ams.rpki-client.org