$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa File: 7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa (raw, json) Hash identifier: PAI+RF9MFc6W2Y/GEkUaLc079DlLoK3wORcgjNBxX5s= Subject key identifier: 23:30:8D:5C:DF:0C:CD:E6:DC:38:BA:F5:39:A3:C4:E7:5E:5F:3B:95 Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Certificate serial: 0E01AE Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa Signing time: Wed 24 Mar 2021 14:41:09 +0000 ROA not before: Wed 24 Mar 2021 14:41:08 +0000 ROA not after: Tue 24 Mar 2026 14:41:08 +0000 asID: 27947 IP address blocks: 168.197.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917934 (0xe01ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Validity Not Before: Mar 24 14:41:08 2021 GMT Not After : Mar 24 14:41:08 2026 GMT Subject: CN=7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:51:2b:fd:74:4b:96:8e:94:eb:74:0c:5a: 90:5e:0f:23:27:34:91:ff:af:85:bd:f2:7e:0a:54: 7c:c5:cd:d9:2c:83:d6:17:ba:96:b6:74:9f:f6:30: b5:b6:52:69:35:66:87:91:75:18:92:94:57:dc:f0: 17:60:8f:c6:81:cc:ff:db:b3:84:2d:a5:9f:b2:b4: a1:04:85:8f:f4:8f:68:f5:e7:1a:1e:b9:e7:85:67: 13:57:75:76:90:76:82:c4:4c:f1:e5:0f:7e:06:0d: 4f:12:0f:2e:9a:2a:42:51:a8:a0:ea:62:6c:2b:92: 33:46:01:50:cd:4b:33:dc:9e:f8:dc:3a:dd:57:72: 08:ab:8c:99:d1:cd:c8:c6:ee:70:59:73:18:76:ad: e1:2e:cd:e1:54:eb:ee:6c:e4:ba:27:69:c0:14:5d: 74:f2:89:ce:6c:fa:c0:4c:ab:d6:e4:2c:af:a4:59: 7c:82:8e:aa:18:05:48:ce:4c:b2:f5:b0:e0:6f:2f: aa:5e:d2:10:6b:27:42:9f:75:1e:48:61:7f:03:d6: b4:e1:5c:d2:68:36:b7:4e:62:3f:b0:6f:d8:49:02: 0d:6e:fa:30:3c:87:ff:17:fe:ca:78:c7:45:8c:45: ea:76:c8:e9:c1:19:85:9a:c9:d8:73:7b:fc:b0:c6: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:30:8D:5C:DF:0C:CD:E6:DC:38:BA:F5:39:A3:C4:E7:5E:5F:3B:95 X509v3 Authority Key Identifier: keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.188.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:ae:ee:d6:cf:58:3e:53:b2:e4:32:f5:98:47:e8:88:ee:50: 4e:11:5d:e1:29:9b:f1:c6:ec:38:f7:2b:6c:d9:07:dd:47:45: 98:19:d0:0e:8b:85:cf:35:8a:b9:91:4c:1e:f3:2b:06:90:65: f6:56:4e:f1:41:aa:fd:ec:c6:f8:24:1e:d6:5f:6a:22:2b:fa: 78:ec:1a:88:1f:eb:49:84:0f:33:b6:b5:5c:48:50:f8:5d:6e: 6b:f9:cf:96:df:2a:42:d6:bf:b6:69:a2:6c:df:73:e8:89:e0: ea:e1:9d:86:d1:52:85:79:c3:81:e3:19:e5:1d:0d:29:c6:a3: 14:9a:83:57:48:37:fe:e6:70:6b:76:42:ae:2c:73:97:47:62: 41:0f:80:15:50:74:8f:18:9e:9a:4e:25:4a:66:f1:c3:ff:51: dd:97:f6:b8:84:e0:10:15:51:c1:59:cd:e4:c6:4e:83:97:43: a1:1a:15:89:d9:72:c9:7c:d7:97:75:7b:10:28:a2:cb:50:b7: 03:69:90:12:ee:b8:c8:d5:21:c0:ca:b3:bd:fd:e0:4c:f0:a9: de:11:d3:ce:04:79:a3:60:1f:b7:e5:c3:7b:23:2c:91:15:b1: 51:be:65:b8:23:49:82:ee:ab:ca:5d:53:a2:04:52:15:74:b1: 11:93:9a:4b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDgGuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0 MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg3YmUyZTBkNWVmZDJi MmE4OGIxYjIxMGZiNTRmOGY0MWNkN2VmMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAi4ZRK/10S5aOlOt0DFqQXg8jJzSR/6+FvfJ+ClR8xc3ZLIPW F7qWtnSf9jC1tlJpNWaHkXUYkpRX3PAXYI/Ggcz/27OELaWfsrShBIWP9I9o9eca HrnnhWcTV3V2kHaCxEzx5Q9+Bg1PEg8umipCUaig6mJsK5IzRgFQzUsz3J743Drd V3IIq4yZ0c3Ixu5wWXMYdq3hLs3hVOvubOS6J2nAFF108onObPrATKvW5CyvpFl8 go6qGAVIzkyy9bDgby+qXtIQaydCn3UeSGF/A9a04VzSaDa3TmI/sG/YSQINbvow PIf/F/7KeMdFjEXqdsjpwRmFmsnYc3v8sMb4LwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFCMwjVzfDM3m3Di69TmjxOdeXzuVMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5 YzE0NTY0LzdiZTJlMGQ1ZWZkMmIyYTg4YjFiMjEwZmI1NGY4ZjQxY2Q3ZWYxNDUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqjFvDANBgkqhkiG9w0BAQsFAAOCAQEAP67u1s9YPlOy5DL1 mEfoiO5QThFd4Smb8cbsOPcrbNkH3UdFmBnQDouFzzWKuZFMHvMrBpBl9lZO8UGq /ezG+CQe1l9qIiv6eOwaiB/rSYQPM7a1XEhQ+F1ua/nPlt8qQta/tmmibN9z6Ing 6uGdhtFShXnDgeMZ5R0NKcajFJqDV0g3/uZwa3ZCrixzl0diQQ+AFVB0jxiemk4l Smbxw/9R3Zf2uITgEBVRwVnN5MZOg5dDoRoVidlyyXzXl3V7ECiiy1C3A2mQEu64 yNUhwMqzvf3gTPCp3hHTzgR5o2Aft+XDeyMskRWxUb5luCNJgu6ryl1TogRSFXSx EZOaSw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:23 2023 by rpki-client on console-ams.rpki-client.org