$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5688bd25fe7c5ef334b002f61837898544b6cc3b.roa File: 5688bd25fe7c5ef334b002f61837898544b6cc3b.roa (raw, json) Hash identifier: KZalj9AI0UbewetsQr/SeBCLjVoUXM6OdtXqYCFMqZI= Subject key identifier: 8F:0D:AC:2D:9A:B5:B1:98:A1:E4:A1:99:1B:66:77:13:0A:2C:CE:E5 Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Certificate serial: 0E0BB9 Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5688bd25fe7c5ef334b002f61837898544b6cc3b.roa Signing time: Wed 24 Mar 2021 14:41:09 +0000 ROA not before: Wed 24 Mar 2021 14:41:08 +0000 ROA not after: Tue 24 Mar 2026 14:41:08 +0000 asID: 28097 IP address blocks: 186.3.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920505 (0xe0bb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Validity Not Before: Mar 24 14:41:08 2021 GMT Not After : Mar 24 14:41:08 2026 GMT Subject: CN=5688bd25fe7c5ef334b002f61837898544b6cc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:0b:16:0b:a2:f7:53:ac:af:63:76:80:f0: 99:ee:c9:1b:0e:76:2d:e9:bb:bf:47:83:28:52:28: 99:fc:14:68:36:d5:35:66:b7:48:da:a8:6d:f4:23: f3:e3:8f:df:02:85:0d:b1:97:88:35:9c:30:6b:3d: 2b:bf:34:1d:df:cf:be:f4:e4:df:b6:de:cb:df:51: 29:ab:38:75:fc:e9:50:d8:f7:a1:62:ce:df:5b:fd: ec:5d:42:1d:93:dc:1a:e8:11:c1:95:4a:31:a7:aa: 8c:fe:ca:02:ff:47:4d:fa:eb:f2:81:46:4d:12:50: 5f:e5:be:e9:eb:f1:e0:f2:5f:7d:b7:e2:29:92:e9: 25:41:65:c6:fe:69:72:eb:b7:f9:ea:31:4f:ae:eb: 48:a4:22:e7:42:e9:53:d2:0c:8c:82:ac:13:38:fb: b9:12:6a:5b:0c:c6:76:75:c8:50:fa:fc:d9:1b:19: e6:a7:76:1b:d2:fd:a0:22:06:d3:1d:8e:67:75:9b: 19:22:bf:e2:a5:67:e5:27:7b:96:31:00:8e:49:50: ba:33:ad:c8:a5:34:67:15:36:9c:6e:d2:e8:a9:6a: 6f:87:ae:31:9e:ca:b3:38:dc:f2:54:4d:7c:a7:c6: 65:b9:c9:2e:6d:e5:eb:8c:7e:b9:05:d9:58:a8:6f: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:AC:2D:9A:B5:B1:98:A1:E4:A1:99:1B:66:77:13:0A:2C:CE:E5 X509v3 Authority Key Identifier: keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5688bd25fe7c5ef334b002f61837898544b6cc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.3.30.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:9b:34:64:87:26:81:f5:a0:cd:49:2f:e9:e8:8a:1f:f9:f7: 50:93:ef:03:ec:f8:10:84:92:b0:a8:3b:54:ed:50:ca:a4:f5: 9e:68:73:65:9e:a9:26:5c:8a:8e:fa:ce:08:19:a2:af:8f:b3: 47:c6:2e:35:98:82:3e:fb:b2:cb:6b:6f:ad:99:70:db:1f:4d: c4:48:ee:d1:ae:a6:b6:6f:4a:fd:82:e1:55:28:7f:14:e4:19: 4d:5f:3f:13:c4:4f:33:da:bc:a0:7f:60:d9:b6:54:1d:4a:28: d7:d2:82:a7:8e:6b:f1:f8:e9:b5:58:de:1b:da:dd:e9:b8:86: d8:fa:99:c5:a9:eb:d4:15:27:91:78:34:83:c1:30:a7:4a:7f: eb:d8:bc:70:33:e0:9d:6d:b6:6b:9a:8a:ca:a6:42:d8:40:67: 9c:75:b9:ab:a5:c5:3c:cc:61:ae:0b:13:9d:44:ac:d1:81:c5: da:67:43:6c:f2:96:4b:de:8f:f3:d1:6a:d9:f5:72:df:ef:2a: 39:c6:8b:2f:4e:2c:64:67:50:5f:26:bd:f0:f8:13:fd:51:64: a8:b1:fd:ee:46:49:98:c8:b9:85:eb:b7:ab:de:94:17:59:f9: 89:f6:8a:59:0f:ee:81:d5:cb:a6:db:97:0f:80:b4:02:d0:f9: 81:9b:f2:9d -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDgu5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0 MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg1Njg4YmQyNWZlN2M1 ZWYzMzRiMDAyZjYxODM3ODk4NTQ0YjZjYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAppoLFgui91Osr2N2gPCZ7skbDnYt6bu/R4MoUiiZ/BRoNtU1 ZrdI2qht9CPz44/fAoUNsZeINZwwaz0rvzQd38++9OTftt7L31Epqzh1/OlQ2Peh Ys7fW/3sXUIdk9wa6BHBlUoxp6qM/soC/0dN+uvygUZNElBf5b7p6/Hg8l99t+Ip kuklQWXG/mly67f56jFPrutIpCLnQulT0gyMgqwTOPu5EmpbDMZ2dchQ+vzZGxnm p3Yb0v2gIgbTHY5ndZsZIr/ipWflJ3uWMQCOSVC6M63IpTRnFTacbtLoqWpvh64x nsqzONzyVE18p8ZluckubeXrjH65BdlYqG/mYwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFI8NrC2atbGYoeShmRtmdxMKLM7lMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5 YzE0NTY0LzU2ODhiZDI1ZmU3YzVlZjMzNGIwMDJmNjE4Mzc4OTg1NDRiNmNjM2Iu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEALoDHjANBgkqhkiG9w0BAQsFAAOCAQEAH5s0ZIcmgfWgzUkv 6eiKH/n3UJPvA+z4EISSsKg7VO1QyqT1nmhzZZ6pJlyKjvrOCBmir4+zR8YuNZiC Pvuyy2tvrZlw2x9NxEju0a6mtm9K/YLhVSh/FOQZTV8/E8RPM9q8oH9g2bZUHUoo 19KCp45r8fjptVjeG9rd6biG2PqZxanr1BUnkXg0g8Ewp0p/69i8cDPgnW22a5qK yqZC2EBnnHW5q6XFPMxhrgsTnUSs0YHF2mdDbPKWS96P89Fq2fVy3+8qOcaLL04s ZGdQXya98PgT/VFkqLH97kZJmMi5heu3q96UF1n5ifaKWQ/ugdXLptuXD4C0AtD5 gZvynQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:23 2023 by rpki-client on console-ams.rpki-client.org