$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/0900d619445abf47383900f8db0df17692a5a073.roa File: 0900d619445abf47383900f8db0df17692a5a073.roa (raw, json) Hash identifier: 9U7eHjKN/2LAEEonZlOHThiA61zF+RS9p5Rv3ZspuU0= Subject key identifier: 2A:F0:5C:0F:61:3C:B0:80:96:21:5E:DC:E2:36:3A:B2:66:E4:E6:D2 Certificate issuer: /CN=dd24c345578697f2d4824ba7a63f561d5b626def Certificate serial: 01CFC0 Authority key identifier: AE:5E:1E:2D:89:FC:D9:6B:25:FE:80:69:6C:B6:6C:01:2C:E8:66:FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd24c345578697f2d4824ba7a63f561d5b626def.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/0900d619445abf47383900f8db0df17692a5a073.roa Signing time: Wed 24 Mar 2021 14:34:04 +0000 ROA not before: Wed 24 Mar 2021 14:34:04 +0000 ROA not after: Tue 24 Mar 2026 14:34:04 +0000 asID: 271846 IP address blocks: 45.232.208.0/22 maxlen: 24 2803:410::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/dd24c345578697f2d4824ba7a63f561d5b626def.crl rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/dd24c345578697f2d4824ba7a63f561d5b626def.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd24c345578697f2d4824ba7a63f561d5b626def.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118720 (0x1cfc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd24c345578697f2d4824ba7a63f561d5b626def Validity Not Before: Mar 24 14:34:04 2021 GMT Not After : Mar 24 14:34:04 2026 GMT Subject: CN=0900d619445abf47383900f8db0df17692a5a073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:f7:b0:47:d4:b7:8e:6f:64:79:6a:72:1e: cd:92:ca:df:14:cf:90:fa:d2:1f:fc:c2:cb:d3:e7: 8d:09:5c:c1:f6:49:86:2c:df:ef:46:3d:2d:c3:74: 5c:94:e7:63:aa:de:78:01:86:36:44:e5:57:30:31: 5b:ff:91:3b:cb:ce:24:1a:3c:e0:fd:be:37:49:65: 93:0b:78:4f:df:8c:83:fe:79:79:0f:55:9e:79:f0: a4:97:43:e1:d8:67:48:14:93:27:df:cc:b9:cd:70: 7b:1d:72:79:b8:ae:2c:0d:e3:cf:9c:50:bf:62:52: 12:ff:ef:af:43:f5:6f:ca:92:86:74:68:c5:7e:1e: ea:71:59:44:69:5a:a0:4a:0f:3a:a5:d6:1f:94:fa: 63:a1:53:99:96:eb:65:6d:9d:18:ac:5a:dd:c6:6e: 44:10:7c:1e:4f:48:16:5b:12:dd:10:85:1c:fc:bd: 12:21:0e:54:85:74:d1:08:a7:31:8e:7a:d7:10:ca: 61:c0:bc:33:67:3e:89:a5:33:10:32:0b:3f:95:ba: bf:e2:4f:52:0f:1a:ec:a2:67:11:af:17:b2:bf:76: 57:17:95:8e:f5:59:f9:72:08:ef:c9:79:fa:6c:d5: 5d:e5:42:6a:1a:e7:18:db:9f:28:62:53:6e:55:37: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F0:5C:0F:61:3C:B0:80:96:21:5E:DC:E2:36:3A:B2:66:E4:E6:D2 X509v3 Authority Key Identifier: keyid:AE:5E:1E:2D:89:FC:D9:6B:25:FE:80:69:6C:B6:6C:01:2C:E8:66:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd24c345578697f2d4824ba7a63f561d5b626def.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/0900d619445abf47383900f8db0df17692a5a073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/dd24c345578697f2d4824ba7a63f561d5b626def.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.208.0/22 IPv6: 2803:410::/32 Signature Algorithm: sha256WithRSAEncryption 4d:41:5d:58:da:76:d2:bb:f0:b0:72:1f:20:59:ae:4f:e7:d8: c0:53:df:35:91:86:77:0f:c0:a5:de:07:75:77:e2:dc:e8:07: 0f:cd:8e:2a:20:ff:9d:94:94:67:ff:b1:43:02:88:40:0d:ce: cb:d1:b0:0a:49:8d:f2:12:d9:d0:27:c5:ba:1a:58:bb:8c:7b: 4e:a6:15:ac:5c:81:bf:af:2d:95:d4:0d:91:64:a4:c6:fb:fc: 09:e0:92:19:97:93:03:8d:cc:b2:ab:27:b2:dd:99:68:73:97: 05:75:de:d9:86:4e:ff:47:7c:3b:e7:97:4f:87:23:a3:f4:f5: 08:cf:35:84:aa:3c:93:f3:9a:5d:68:1b:33:0e:44:81:2a:2b: eb:75:e7:07:cf:2e:4e:37:e4:99:90:36:76:20:9b:b0:91:57: 90:35:2f:54:0f:7b:1b:26:98:33:ea:32:a6:96:bc:90:3f:d2: 00:f7:f7:eb:a0:8f:ed:a6:21:81:a8:42:9e:1c:d3:49:05:64: 49:34:73:9f:17:70:a1:73:ec:29:86:ba:83:06:be:71:b5:aa: c5:71:bf:22:21:45:f7:f7:7d:1c:0b:92:6c:2d:00:20:63:cb: 94:5f:44:0b:7d:bd:25:cd:69:52:f5:0b:28:ab:c4:ec:1b:4e: 86:52:89:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDAc/AMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk MjRjMzQ1NTc4Njk3ZjJkNDgyNGJhN2E2M2Y1NjFkNWI2MjZkZWYwHhcNMjEwMzI0 MTQzNDA0WhcNMjYwMzI0MTQzNDA0WjAzMTEwLwYDVQQDEygwOTAwZDYxOTQ0NWFi ZjQ3MzgzOTAwZjhkYjBkZjE3NjkyYTVhMDczMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAoTX3sEfUt45vZHlqch7NksrfFM+Q+tIf/MLL0+eNCVzB9kmG LN/vRj0tw3RclOdjqt54AYY2ROVXMDFb/5E7y84kGjzg/b43SWWTC3hP34yD/nl5 D1WeefCkl0Ph2GdIFJMn38y5zXB7HXJ5uK4sDePPnFC/YlIS/++vQ/VvypKGdGjF fh7qcVlEaVqgSg86pdYflPpjoVOZlutlbZ0YrFrdxm5EEHweT0gWWxLdEIUc/L0S IQ5UhXTRCKcxjnrXEMphwLwzZz6JpTMQMgs/lbq/4k9SDxrsomcRrxeyv3ZXF5WO 9Vn5cgjvyXn6bNVd5UJqGucY258oYlNuVTfUSQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFCrwXA9hPLCAliFe3OI2OrJm5ObSMB8GA1UdIwQYMBaAFK5eHi2J/NlrJf6A aWy2bAEs6Gb8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQyNGMz NDU1Nzg2OTdmMmQ0ODI0YmE3YTYzZjU2MWQ1YjYyNmRlZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZjdkYWU3ZGItMjU4Yy00Njk5LWI3MjktNjFkNzNk NTQ2ZTgxLzA5MDBkNjE5NDQ1YWJmNDczODM5MDBmOGRiMGRmMTc2OTJhNWEwNzMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mN2RhZTdkYi0yNThjLTQ2OTktYjcyOS02MWQ3 M2Q1NDZlODEvZGQyNGMzNDU1Nzg2OTdmMmQ0ODI0YmE3YTYzZjU2MWQ1YjYyNmRl Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi3o0DANBAIAAjAHAwUAKAMEEDANBgkqhkiG9w0BAQsFAAOC AQEATUFdWNp20rvwsHIfIFmuT+fYwFPfNZGGdw/Apd4HdXfi3OgHD82OKiD/nZSU Z/+xQwKIQA3Oy9GwCkmN8hLZ0CfFuhpYu4x7TqYVrFyBv68tldQNkWSkxvv8CeCS GZeTA43Msqsnst2ZaHOXBXXe2YZO/0d8O+eXT4cjo/T1CM81hKo8k/OaXWgbMw5E gSor63XnB88uTjfkmZA2diCbsJFXkDUvVA97GyaYM+oyppa8kD/SAPf366CP7aYh gahCnhzTSQVkSTRznxdwoXPsKYa6gwa+cbWqxXG/IiFF9/d9HAuSbC0AIGPLlF9E C329Jc1pUvULKKvE7BtOhlKJUQ== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:05 2023 by rpki-client on console-fra.rpki-client.org