$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9b6bcf740a89282313f71e58e3de384d5b856e9a.roa File: 9b6bcf740a89282313f71e58e3de384d5b856e9a.roa (raw, json) Hash identifier: gl3uLdiTS61eyCCJ7qA98jNBPejv/AB+tJBCT0TH7hI= Subject key identifier: DE:77:FD:6B:6C:3B:1F:51:2F:35:BE:D6:9B:24:1D:EF:7F:0F:9B:4B Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Certificate serial: 0DFE98 Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9b6bcf740a89282313f71e58e3de384d5b856e9a.roa Signing time: Wed 24 Mar 2021 14:41:09 +0000 ROA not before: Wed 24 Mar 2021 14:41:08 +0000 ROA not after: Tue 24 Mar 2026 14:41:08 +0000 asID: 19169 IP address blocks: 168.197.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917144 (0xdfe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12 Validity Not Before: Mar 24 14:41:08 2021 GMT Not After : Mar 24 14:41:08 2026 GMT Subject: CN=9b6bcf740a89282313f71e58e3de384d5b856e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:b7:95:a1:89:6c:4a:58:d9:ac:e6:0b:54: 4a:13:eb:19:d6:58:f2:a4:f8:5a:cb:cd:bc:4d:5d: 91:db:5f:e6:30:4f:2c:43:92:cc:fe:2e:8b:ca:aa: f1:19:c9:58:19:8d:94:e3:61:7a:27:35:8c:62:79: 5b:45:dd:ce:c6:0f:2e:24:07:82:75:af:6a:5f:a2: ce:91:5c:38:8d:da:f4:68:0e:ea:0d:c0:76:94:22: 1d:bf:6a:a7:e7:35:d1:be:fb:67:11:9f:fb:7c:3c: 51:2e:89:94:fa:ab:c6:88:35:ef:34:ba:e6:fa:8d: ad:a2:0d:00:16:3f:56:ce:c0:72:5a:98:4d:5b:a8: bf:4b:54:00:b3:62:6c:5e:0a:c7:0d:39:0d:c0:6e: 0f:a1:90:fd:7e:e6:a0:7e:1d:51:d4:74:bf:b1:8e: e7:7c:86:a9:24:f7:d7:4c:d6:6a:05:04:6d:ef:a2: 68:03:7e:42:02:f7:2d:aa:1a:0f:f1:f3:24:06:5f: 9d:b2:60:a8:d3:15:c5:31:fc:12:a5:db:3c:c9:27: aa:d0:ca:aa:5d:40:4f:1c:68:df:3b:9c:cc:a6:47: fa:7c:80:dd:bb:e1:ba:0f:f7:99:4b:df:65:20:f2: f6:a4:52:d2:ee:de:86:a6:1b:aa:e4:52:3d:df:99: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:77:FD:6B:6C:3B:1F:51:2F:35:BE:D6:9B:24:1D:EF:7F:0F:9B:4B X509v3 Authority Key Identifier: keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9b6bcf740a89282313f71e58e3de384d5b856e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.188.0/22 Signature Algorithm: sha256WithRSAEncryption 02:4c:1d:d9:10:8e:34:4b:1c:44:5b:a9:53:bb:c2:22:85:2f: 61:02:60:25:00:62:33:cd:3b:7d:0c:e6:a6:31:a1:1d:4f:dc: 1d:1b:fb:89:e4:17:9f:f7:3d:28:c2:03:51:66:dc:cd:2a:bb: c3:8e:e0:49:35:f0:31:6c:8c:34:83:fd:ef:87:25:c5:94:fb: 23:5d:74:48:a2:fe:e5:27:04:36:49:10:be:01:49:e2:dd:fa: 03:0d:68:be:a5:4c:03:3a:ef:d1:6f:8c:91:70:4d:84:24:30: 63:48:6f:04:e5:45:71:77:b2:43:92:a0:78:a2:36:19:29:99: bb:75:bc:f8:81:af:6e:19:07:c4:8e:46:2a:1e:2a:18:c5:8f: 3f:4c:e4:31:bb:be:a8:af:61:c8:30:9f:4f:9b:1b:31:d2:ce: 5c:dd:e9:57:9e:4b:47:88:4f:96:d2:d6:2c:b7:cb:dd:7a:f6: 52:ad:72:41:46:0b:55:14:c6:77:e5:ad:8b:b6:39:14:66:d9: ea:52:c5:f4:f9:97:4b:22:58:23:6c:bc:1a:8f:5d:e2:fe:a1: fb:48:db:52:e4:2b:ce:90:65:8f:86:99:ae:8d:4e:03:11:0c: ef:c3:ab:77:4f:97:e5:16:ca:a6:3a:96:56:f2:6a:53:d2:f8: 30:d1:a2:4e -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDf6YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0 MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg5YjZiY2Y3NDBhODky ODIzMTNmNzFlNThlM2RlMzg0ZDViODU2ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAl5+3laGJbEpY2azmC1RKE+sZ1ljypPhay828TV2R21/mME8s Q5LM/i6LyqrxGclYGY2U42F6JzWMYnlbRd3Oxg8uJAeCda9qX6LOkVw4jdr0aA7q DcB2lCIdv2qn5zXRvvtnEZ/7fDxRLomU+qvGiDXvNLrm+o2tog0AFj9WzsByWphN W6i/S1QAs2JsXgrHDTkNwG4PoZD9fuagfh1R1HS/sY7nfIapJPfXTNZqBQRt76Jo A35CAvctqhoP8fMkBl+dsmCo0xXFMfwSpds8ySeq0MqqXUBPHGjfO5zMpkf6fIDd u+G6D/eZS99lIPL2pFLS7t6Gphuq5FI935nl5QIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFN53/WtsOx9RLzW+1pskHe9/D5tLMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5 YzE0NTY0LzliNmJjZjc0MGE4OTI4MjMxM2Y3MWU1OGUzZGUzODRkNWI4NTZlOWEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqjFvDANBgkqhkiG9w0BAQsFAAOCAQEAAkwd2RCONEscRFup U7vCIoUvYQJgJQBiM807fQzmpjGhHU/cHRv7ieQXn/c9KMIDUWbczSq7w47gSTXw MWyMNIP974clxZT7I110SKL+5ScENkkQvgFJ4t36Aw1ovqVMAzrv0W+MkXBNhCQw Y0hvBOVFcXeyQ5KgeKI2GSmZu3W8+IGvbhkHxI5GKh4qGMWPP0zkMbu+qK9hyDCf T5sbMdLOXN3pV55LR4hPltLWLLfL3Xr2Uq1yQUYLVRTGd+Wti7Y5FGbZ6lLF9PmX SyJYI2y8Go9d4v6h+0jbUuQrzpBlj4aZro1OAxEM78Ord0+X5RbKpjqWVvJqU9L4 MNGiTg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:23 2023 by rpki-client on console-ams.rpki-client.org