$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa File: 8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa (raw, json) Hash identifier: hnRPx8A+vLqM9KsPGkC2tw3gBYwRPaQUxT8s4+m3eUU= Subject key identifier: E2:A2:52:42:F8:75:F6:43:95:44:DB:A5:C5:B5:2B:52:8D:35:FB:5F Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Certificate serial: 0DF9C7 Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa Signing time: Wed 24 Mar 2021 14:41:09 +0000 ROA not before: Wed 24 Mar 2021 14:41:08 +0000 ROA not after: Tue 24 Mar 2026 14:41:08 +0000 asID: 264668 IP address blocks: 186.101.10.0/24 maxlen: 24 186.3.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915911 (0xdf9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Validity Not Before: Mar 24 14:41:08 2021 GMT Not After : Mar 24 14:41:08 2026 GMT Subject: CN=8f23f34820b0d2aa2f487a48f4821a077d2b6124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:e9:1f:2a:2f:a8:ac:2f:0d:ca:f7:eb:2a: 1b:9d:cc:17:23:ff:0c:23:8c:2d:14:b6:aa:9a:77: 20:77:3b:85:d2:41:24:d4:30:52:60:03:ea:38:80: 74:23:aa:f9:9c:76:a7:ed:68:39:95:c0:dc:f7:c7: 81:4d:89:49:ce:28:9a:6c:db:5c:bb:c3:89:05:b1: b5:a6:89:57:ee:25:a3:b2:f2:ac:e0:c6:cf:78:fc: b6:8e:b7:7f:c6:98:6d:9b:7a:81:31:e7:5d:76:76: 4e:3f:4a:6b:c7:ad:6e:34:98:84:c9:73:9d:9b:00: 24:03:47:9b:a2:49:40:9f:95:d1:05:38:a3:75:ad: 8c:db:4b:20:61:33:08:0f:05:c3:e8:a0:b4:5a:fa: e0:3b:55:ba:4b:f4:b4:be:f9:78:e8:da:50:99:e5: ed:95:f0:9d:7b:94:94:b0:89:da:2f:73:2a:7f:e5: d1:4b:dd:81:fa:34:25:3c:80:07:ee:b5:15:78:38: a7:04:3d:58:c7:b8:ac:6b:1b:08:f1:84:c6:96:f2: 9b:76:c4:51:0d:95:25:fe:78:fb:ef:73:d5:ae:e6: 8a:dc:86:db:1d:b7:7f:20:a8:96:4a:a5:a0:19:e7: a3:f0:7c:42:e8:ee:2e:2e:99:50:84:0d:16:06:e8: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A2:52:42:F8:75:F6:43:95:44:DB:A5:C5:B5:2B:52:8D:35:FB:5F X509v3 Authority Key Identifier: keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.3.6.0/24 186.101.10.0/24 Signature Algorithm: sha256WithRSAEncryption 44:88:32:cf:b2:eb:cd:44:54:ac:33:74:22:58:a9:ba:77:de: 4e:f1:8e:4e:81:a5:93:61:51:eb:fc:a4:d9:d9:55:d7:c5:2f: e4:28:6b:dc:2a:cc:c2:56:73:96:cb:32:8d:de:81:41:be:4f: fa:5f:f9:85:59:41:45:17:c1:6e:81:e3:12:b7:1d:54:06:f3: 33:18:b8:0c:b9:1c:2c:9b:76:ca:c9:60:67:e1:da:8a:27:7a: f9:36:3a:93:90:47:e9:89:86:56:f1:13:0b:6a:6d:31:57:af: 73:19:1b:52:a2:e2:19:49:ae:9b:f5:83:de:18:96:8d:76:b8: c6:66:b9:41:4e:b6:1a:97:91:7e:21:37:29:bf:15:e2:b6:76: a5:6d:6b:fa:c6:1a:66:fd:d7:cf:29:39:18:18:7c:bb:4c:f3: c3:f0:d2:7d:e7:3b:0e:b8:d4:86:94:32:6f:69:bf:11:ae:e5: 53:10:7a:91:53:80:bb:6d:f0:8c:73:60:03:6f:ff:ae:d9:f3: dc:ef:61:22:1a:8f:c3:27:7a:72:c9:1a:5b:e8:5b:54:43:ae: 07:8b:4e:2a:69:e5:87:3b:2c:fb:98:7c:1c:52:11:89:5d:97: 19:b9:53:ef:f5:29:ab:1e:68:3a:e1:42:a3:fa:ae:4a:de:dc: c1:86:65:19 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDDfnHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0 MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg4ZjIzZjM0ODIwYjBk MmFhMmY0ODdhNDhmNDgyMWEwNzdkMmI2MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmKLpHyovqKwvDcr36yobncwXI/8MI4wtFLaqmncgdzuF0kEk 1DBSYAPqOIB0I6r5nHan7Wg5lcDc98eBTYlJziiabNtcu8OJBbG1polX7iWjsvKs 4MbPePy2jrd/xphtm3qBMedddnZOP0prx61uNJiEyXOdmwAkA0eboklAn5XRBTij da2M20sgYTMIDwXD6KC0WvrgO1W6S/S0vvl46NpQmeXtlfCde5SUsInaL3Mqf+XR S92B+jQlPIAH7rUVeDinBD1Yx7isaxsI8YTGlvKbdsRRDZUl/nj773PVruaK3Ibb Hbd/IKiWSqWgGeej8HxC6O4uLplQhA0WBuiPawIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFOKiUkL4dfZDlUTbpcW1K1KNNftfMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5 YzE0NTY0LzhmMjNmMzQ4MjBiMGQyYWEyZjQ4N2E0OGY0ODIxYTA3N2QyYjYxMjQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEALoDBgMEALplCjANBgkqhkiG9w0BAQsFAAOCAQEARIgyz7Lr zURUrDN0IlipunfeTvGOToGlk2FR6/yk2dlV18Uv5Chr3CrMwlZzlssyjd6BQb5P +l/5hVlBRRfBboHjErcdVAbzMxi4DLkcLJt2yslgZ+Haiid6+TY6k5BH6YmGVvET C2ptMVevcxkbUqLiGUmum/WD3hiWjXa4xma5QU62GpeRfiE3Kb8V4rZ2pW1r+sYa Zv3Xzyk5GBh8u0zzw/DSfec7DrjUhpQyb2m/Ea7lUxB6kVOAu23wjHNgA2//rtnz 3O9hIhqPwyd6cskaW+hbVEOuB4tOKmnlhzss+5h8HFIRiV2XGblT7/Upqx5oOuFC o/quSt7cwYZlGQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:23 2023 by rpki-client on console-ams.rpki-client.org