$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/63457e45fee82a623508280d888e0347ff74f9dc.roa File: 63457e45fee82a623508280d888e0347ff74f9dc.roa (raw, json) Hash identifier: +CZgq2RBTL/i32amCJrAmH/vVZ/mSgjSKALkXWh9Pic= Subject key identifier: 7D:A4:4C:18:6A:D7:A1:38:3F:5A:36:28:C5:36:E9:67:8A:53:00:0A Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Certificate serial: 0DF579 Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/63457e45fee82a623508280d888e0347ff74f9dc.roa Signing time: Wed 24 Mar 2021 14:41:09 +0000 ROA not before: Wed 24 Mar 2021 14:41:08 +0000 ROA not after: Tue 24 Mar 2026 14:41:08 +0000 asID: 264788 IP address blocks: 168.197.188.0/22 maxlen: 24 2800:2a0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914809 (0xdf579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Validity Not Before: Mar 24 14:41:08 2021 GMT Not After : Mar 24 14:41:08 2026 GMT Subject: CN=63457e45fee82a623508280d888e0347ff74f9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:b0:b9:5a:df:bf:3e:22:aa:1d:8e:c9:a4: 7c:38:f2:2a:9a:73:a2:7a:89:7c:09:06:1e:3e:44: 31:6e:c6:da:2f:b0:41:4d:15:4d:dd:c1:c8:79:eb: 39:08:9c:2e:b0:3e:2e:18:45:05:f5:18:7e:62:e7: f7:a1:3a:ab:5d:9c:71:98:75:ff:81:21:5c:73:6d: 72:0f:23:2c:ff:54:aa:f2:0d:4a:f7:26:c5:ea:f3: 56:c0:94:13:4d:6c:56:62:38:76:2f:0b:99:a0:19: 2c:ef:2e:86:e6:ca:3e:17:4a:0f:cb:63:28:1a:1d: b0:64:34:d1:48:a2:32:ad:aa:eb:22:d6:c3:16:99: bb:90:a9:4d:29:de:cc:c4:76:11:7d:30:4b:ba:20: 76:1f:7e:4d:d4:90:ad:97:3f:c1:1d:d2:fc:7c:d6: 3b:71:5f:8b:6a:f0:aa:38:98:d7:1f:00:28:6f:f9: b3:ab:e1:58:da:6d:ba:2b:5d:89:0e:a9:26:3c:32: 97:2e:d4:33:be:8e:73:eb:8b:c9:6a:ff:b5:bb:1b: d9:4b:3b:44:75:91:a1:c8:30:6a:04:09:23:3a:7b: d6:76:93:2b:dc:70:8d:4d:d4:fd:57:b9:34:00:12: 82:86:04:18:95:c4:d1:8b:20:b0:e5:bc:9d:5e:17: 07:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:4C:18:6A:D7:A1:38:3F:5A:36:28:C5:36:E9:67:8A:53:00:0A X509v3 Authority Key Identifier: keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/63457e45fee82a623508280d888e0347ff74f9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.188.0/22 IPv6: 2800:2a0::/32 Signature Algorithm: sha256WithRSAEncryption 92:da:d0:d2:5a:43:e0:5b:c9:cc:21:3b:d0:d0:2b:80:0c:0d: 39:da:7d:bb:49:14:7d:b2:17:e6:9b:6d:5c:05:80:33:19:80: 0d:56:34:a7:de:52:fe:65:1f:45:2c:98:5d:a6:2c:7d:80:63: 18:bd:18:a4:a8:41:4b:34:0d:53:61:d7:b6:f8:62:91:ce:13: 85:7e:ff:3e:fe:16:59:3b:a9:e0:9e:8f:66:7a:cb:12:69:96: 30:39:c2:21:de:08:df:9d:04:c9:78:e9:59:78:ea:96:9a:df: c1:6b:1f:56:79:18:4c:c4:48:85:bd:c9:43:c8:2b:d9:53:8a: c5:38:28:b3:ab:d7:7d:b8:d3:22:a5:ad:7d:3e:57:60:fb:f9: 1f:59:80:cb:45:ba:5d:6c:03:c7:09:55:59:4a:62:0d:49:53: 6d:a1:d8:6a:8b:82:91:68:c2:20:1d:59:32:ac:e1:37:0a:d9: b3:0f:99:45:00:5a:ae:d7:19:24:29:c8:bc:05:91:24:bf:01: 44:c6:70:b6:36:78:28:5d:6e:dd:8a:97:ea:0b:61:fe:c8:7a: e7:76:70:c2:d5:1a:4d:36:79:82:30:69:92:85:98:ae:9d:14: cb:fa:4b:1a:b0:23:b4:22:d6:6b:41:59:b2:cd:0c:2a:af:61: fc:c1:89:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDDfV5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0 MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg2MzQ1N2U0NWZlZTgy YTYyMzUwODI4MGQ4ODhlMDM0N2ZmNzRmOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkGawuVrfvz4iqh2OyaR8OPIqmnOieol8CQYePkQxbsbaL7BB TRVN3cHIees5CJwusD4uGEUF9Rh+Yuf3oTqrXZxxmHX/gSFcc21yDyMs/1Sq8g1K 9ybF6vNWwJQTTWxWYjh2LwuZoBks7y6G5so+F0oPy2MoGh2wZDTRSKIyrarrItbD Fpm7kKlNKd7MxHYRfTBLuiB2H35N1JCtlz/BHdL8fNY7cV+LavCqOJjXHwAob/mz q+FY2m26K12JDqkmPDKXLtQzvo5z64vJav+1uxvZSztEdZGhyDBqBAkjOnvWdpMr 3HCNTdT9V7k0ABKChgQYlcTRiyCw5bydXhcHtQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFH2kTBhq16E4P1o2KMU26WeKUwAKMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5 YzE0NTY0LzYzNDU3ZTQ1ZmVlODJhNjIzNTA4MjgwZDg4OGUwMzQ3ZmY3NGY5ZGMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAqjFvDANBAIAAjAHAwUAKAACoDANBgkqhkiG9w0BAQsFAAOC AQEAktrQ0lpD4FvJzCE70NArgAwNOdp9u0kUfbIX5pttXAWAMxmADVY0p95S/mUf RSyYXaYsfYBjGL0YpKhBSzQNU2HXtvhikc4ThX7/Pv4WWTup4J6PZnrLEmmWMDnC Id4I350EyXjpWXjqlprfwWsfVnkYTMRIhb3JQ8gr2VOKxTgos6vXfbjTIqWtfT5X YPv5H1mAy0W6XWwDxwlVWUpiDUlTbaHYaouCkWjCIB1ZMqzhNwrZsw+ZRQBartcZ JCnIvAWRJL8BRMZwtjZ4KF1u3YqX6gth/sh653ZwwtUaTTZ5gjBpkoWYrp0Uy/pL GrAjtCLWa0FZss0MKq9h/MGJkw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:04 2023 by rpki-client on console-fra.rpki-client.org