$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/b6b60170f925101945694ba8f8ac314ebf678fc5.roa File: b6b60170f925101945694ba8f8ac314ebf678fc5.roa (raw, json) Hash identifier: Qhlv6u4VzDNFp4PLoYV1IRuYXNmdQFBFn3J+U6RAQDc= Subject key identifier: F5:B0:89:D6:E5:3B:A3:84:A7:5C:12:D7:6F:3D:FD:8B:8A:96:2D:0D Certificate issuer: /CN=185ca6bb80f033ceba341dcaab97097fc3891bcd Certificate serial: 0191 Authority key identifier: BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/b6b60170f925101945694ba8f8ac314ebf678fc5.roa Signing time: Tue 04 Oct 2022 03:05:04 +0000 ROA not before: Tue 04 Oct 2022 02:59:15 +0000 ROA not after: Fri 04 Oct 2024 03:59:15 +0000 asID: 28458 IP address blocks: 200.23.53.0/24 maxlen: 24 200.23.168.0/23 maxlen: 24 200.23.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.crl rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 06:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185ca6bb80f033ceba341dcaab97097fc3891bcd Validity Not Before: Oct 4 02:59:15 2022 GMT Not After : Oct 4 03:59:15 2024 GMT Subject: CN=b6b60170f925101945694ba8f8ac314ebf678fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:29:47:ad:91:b4:9e:e6:59:4a:a8:88:78: e0:47:9a:be:6a:4d:6d:79:10:83:00:2e:c6:7b:ec: c7:a4:2c:2e:80:fa:19:29:b1:27:c3:e1:c9:98:45: cd:4a:05:34:42:6a:9f:f6:02:15:ab:6b:57:ca:16: 52:0e:c8:0f:e3:49:c8:a0:3b:da:e2:1c:2f:27:16: d6:ae:4e:39:d0:06:9c:19:3f:6c:82:a8:f8:35:26: e0:7b:bb:5f:ca:a1:9b:2e:64:4d:6c:ac:93:c3:50: 16:97:e0:bf:0a:1a:a5:c3:85:dc:14:a2:0b:b7:d1: 1c:6b:e5:3a:37:b8:b1:ce:fb:15:60:18:7f:65:0d: ec:ab:2d:c8:19:f8:ea:53:e4:1e:ed:b6:3d:ce:b9: 1c:c2:2c:a3:b0:79:4a:df:c6:21:60:5d:bd:93:ef: e2:ca:ac:7e:17:d1:a2:98:d3:eb:93:9d:fc:2e:84: 6e:1c:57:82:d3:8d:97:de:34:65:e8:7e:51:41:84: 48:63:8c:e4:50:f6:d8:fe:a1:cf:fa:9a:a6:2b:7b: 80:7b:a1:dc:bf:2d:d2:65:24:17:fe:e0:bd:85:c2: 44:a0:62:03:f9:28:cf:ff:80:8e:71:a0:d9:17:cc: 4a:64:44:43:49:9a:5f:70:5f:6f:f6:4b:e5:26:cb: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B0:89:D6:E5:3B:A3:84:A7:5C:12:D7:6F:3D:FD:8B:8A:96:2D:0D X509v3 Authority Key Identifier: keyid:BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/b6b60170f925101945694ba8f8ac314ebf678fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.53.0/24 200.23.168.0-200.23.170.255 Signature Algorithm: sha256WithRSAEncryption 78:7d:5f:19:1f:40:6f:f5:b9:d4:39:56:91:4a:92:21:45:89: 4f:7a:96:4b:d2:51:48:c5:c2:74:2e:f5:f7:d7:fb:9c:c0:28: 29:d5:c3:c5:c8:51:56:f0:ef:3d:cf:0d:67:4e:a0:51:e5:57: 3e:60:a7:39:a6:d5:68:27:0d:67:cf:ad:b6:50:85:4d:0f:0a: cb:47:44:33:71:68:38:d6:12:17:9e:40:c6:11:63:56:6f:72: 5d:88:7e:12:c8:bf:ed:c1:82:83:d9:a5:a2:0d:c5:b1:ed:5b: 57:1d:59:fb:cd:ce:79:08:14:2a:31:8f:d0:2d:01:70:d5:7d: 37:29:92:3e:97:a3:3b:9d:28:02:73:37:ff:b6:17:30:5f:76: 08:f9:2f:b9:71:52:b3:3e:9b:41:58:4d:18:ec:d3:72:97:14: b9:38:e8:4b:ee:d2:9d:31:e5:28:fb:f2:3c:20:7d:d4:73:d0: ec:d6:5b:78:65:b5:13:06:c4:e9:1c:eb:c8:73:fc:ad:43:a0: fc:da:3c:ab:26:5b:ad:c8:56:4c:a4:ae:39:ba:f5:dc:8b:5c: fd:b4:b6:11:9e:9b:ad:20:34:e9:6e:e6:f5:dc:41:79:ea:57: 7c:90:14:0f:af:f0:ad:da:b7:82:97:8a:13:75:4e:43:6b:0f: 55:d5:59:f1 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTg1 Y2E2YmI4MGYwMzNjZWJhMzQxZGNhYWI5NzA5N2ZjMzg5MWJjZDAeFw0yMjEwMDQw MjU5MTVaFw0yNDEwMDQwMzU5MTVaMDMxMTAvBgNVBAMTKGI2YjYwMTcwZjkyNTEw MTk0NTY5NGJhOGY4YWMzMTRlYmY2NzhmYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgyClHrZG0nuZZSqiIeOBHmr5qTW15EIMALsZ77MekLC6A+hkp sSfD4cmYRc1KBTRCap/2AhWra1fKFlIOyA/jScigO9riHC8nFtauTjnQBpwZP2yC qPg1JuB7u1/KoZsuZE1srJPDUBaX4L8KGqXDhdwUogu30Rxr5To3uLHO+xVgGH9l DeyrLcgZ+OpT5B7ttj3OuRzCLKOweUrfxiFgXb2T7+LKrH4X0aKY0+uTnfwuhG4c V4LTjZfeNGXoflFBhEhjjORQ9tj+oc/6mqYre4B7ody/LdJlJBf+4L2FwkSgYgP5 KM//gI5xoNkXzEpkRENJml9wX2/2S+Umy1fLAgMBAAGjggJpMIICZTAdBgNVHQ4E FgQU9bCJ1uU7o4SnXBLXbz39i4qWLQ0wHwYDVR0jBBgwFoAUu3Kpc3KKv06Tt+CC 8zDLbhbTNhswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xODVjYTZi YjgwZjAzM2NlYmEzNDFkY2FhYjk3MDk3ZmMzODkxYmNkLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy9mNjE4ZjdkNS1lYWJiLTRlNmYtOWYxYS0yMzkwMWI1 ZjE5NDQvYjZiNjAxNzBmOTI1MTAxOTQ1Njk0YmE4ZjhhYzMxNGViZjY3OGZjNS5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljL2Y2MThmN2Q1LWVhYmItNGU2Zi05ZjFhLTIzOTAx YjVmMTk0NC8xODVjYTZiYjgwZjAzM2NlYmEzNDFkY2FhYjk3MDk3ZmMzODkxYmNk LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4w HDAaBAIAATAUAwQAyBc1MAwDBAPIF6gDBADIF6owDQYJKoZIhvcNAQELBQADggEB AHh9XxkfQG/1udQ5VpFKkiFFiU96lkvSUUjFwnQu9ffX+5zAKCnVw8XIUVbw7z3P DWdOoFHlVz5gpzmm1WgnDWfPrbZQhU0PCstHRDNxaDjWEheeQMYRY1Zvcl2IfhLI v+3BgoPZpaINxbHtW1cdWfvNznkIFCoxj9AtAXDVfTcpkj6XozudKAJzN/+2FzBf dgj5L7lxUrM+m0FYTRjs03KXFLk46Evu0p0x5Sj78jwgfdRz0OzWW3hltRMGxOkc 68hz/K1DoPzaPKsmW63IVkykrjm69dyLXP20thGem60gNOlu5vXcQXnqV3yQFA+v 8K3at4KXihN1TkNrD1XVWfE= -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:05 2023 by rpki-client on console-fra.rpki-client.org