$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa File: 5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa (raw, json) Hash identifier: MzRm2roQhcR3f9ou5h04SxJ0MqsK6vpQ7gKZ31LF4vc= Subject key identifier: B1:DE:D2:3E:D5:7B:AA:F5:8D:86:B6:31:92:50:F1:31:79:21:74:49 Certificate issuer: /CN=386b033044549633844a1e355380fa99c6222818 Certificate serial: 093A3B Authority key identifier: 1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa Signing time: Wed 24 Mar 2021 14:31:45 +0000 ROA not before: Wed 24 Mar 2021 14:31:45 +0000 ROA not after: Tue 24 Mar 2026 14:31:45 +0000 asID: 52444 IP address blocks: 45.227.152.0/22 maxlen: 24 2803:be20::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.crl rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 04:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604731 (0x93a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=386b033044549633844a1e355380fa99c6222818 Validity Not Before: Mar 24 14:31:45 2021 GMT Not After : Mar 24 14:31:45 2026 GMT Subject: CN=5a7940a25017cdaeefb4d7e599f298da6beba3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:33:a5:f6:bb:1a:92:12:67:3e:f0:8d:7c: 0c:e4:69:3c:a2:f5:a4:06:d3:03:81:56:e2:58:7d: ac:12:fa:bd:d9:bf:c5:11:6b:47:6f:a5:7f:85:79: 2d:54:e0:b5:ca:e0:a0:ff:e4:a2:a5:f4:25:94:1f: 54:5f:cb:70:b4:1a:e5:ef:40:90:e5:57:11:40:22: 8e:27:96:0d:8e:32:30:e3:0c:40:78:41:24:a1:83: 0c:11:eb:3c:a1:c5:ca:23:35:4c:47:92:17:c9:27: 36:ed:07:2e:1c:5b:8f:eb:b0:a7:33:a2:42:d1:2c: 04:c1:88:2d:df:ea:16:2f:ad:83:d3:02:08:6b:52: 09:9b:ec:d0:ea:fc:f0:57:1c:7f:71:e1:f1:cb:04: 0d:97:bf:ee:e6:4c:bc:74:e1:38:5b:e9:9b:f9:c8: f1:7d:0f:cf:f6:ad:b9:94:3c:d7:f5:24:a1:88:ef: c8:a0:f4:fe:67:14:02:94:25:d1:1a:68:8c:97:61: 38:30:ee:24:2e:92:4c:53:7c:af:4a:bf:bb:8f:f0: bb:4d:96:43:c7:e0:33:a1:d9:fb:49:0e:21:79:06: 83:8d:be:e3:38:0e:77:f9:ed:99:1d:94:2e:a2:c4: 0e:70:da:37:0b:81:22:2f:9c:5c:2a:ff:d5:0d:58: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:D2:3E:D5:7B:AA:F5:8D:86:B6:31:92:50:F1:31:79:21:74:49 X509v3 Authority Key Identifier: keyid:1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.152.0/22 IPv6: 2803:be20::/32 Signature Algorithm: sha256WithRSAEncryption aa:e6:16:5f:11:10:8b:e1:2e:65:d9:06:f4:0d:9c:ee:e7:93: 18:1b:ab:b4:f1:90:be:c1:db:18:89:f8:8c:dc:60:9c:f8:27: b0:f4:18:35:31:41:39:53:a3:03:6d:1e:ca:05:a1:9b:85:df: 98:78:3b:5c:6c:e3:46:d3:20:97:e2:fc:31:38:1e:70:4b:c5: f6:1f:8c:f9:73:d9:dd:65:c3:3f:6b:c7:64:8f:43:5e:83:79: 4f:a8:c3:5a:4f:de:31:4f:86:eb:c0:46:a3:4a:e1:f1:73:cb: 5a:3f:52:21:5a:57:db:08:6b:c6:3c:5f:b3:18:84:6d:87:60: 48:f9:15:31:e1:8a:35:7a:27:d1:02:65:61:8e:b3:65:e0:f5: 2e:87:a5:87:9f:be:e8:c3:3e:68:b6:60:a5:00:bf:e7:a2:99: de:e8:e8:c2:28:b0:03:35:71:33:bf:bd:f4:a2:4e:35:63:f8: db:f7:48:62:a6:a8:c2:a2:62:af:09:0e:a2:da:9a:f5:5e:9a: 52:dd:99:7c:6a:a6:88:72:33:8d:b3:16:ae:c7:1a:1b:b5:3e: fc:49:75:66:0e:cd:d4:56:58:a2:ff:8f:3e:ea:60:77:30:d3: e5:92:d6:0a:17:7b:94:57:3a:68:0f:2e:4b:22:3d:04:c3:74: 25:3e:f6:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDCTo7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4 NmIwMzMwNDQ1NDk2MzM4NDRhMWUzNTUzODBmYTk5YzYyMjI4MTgwHhcNMjEwMzI0 MTQzMTQ1WhcNMjYwMzI0MTQzMTQ1WjAzMTEwLwYDVQQDEyg1YTc5NDBhMjUwMTdj ZGFlZWZiNGQ3ZTU5OWYyOThkYTZiZWJhM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAinIzpfa7GpISZz7wjXwM5Gk8ovWkBtMDgVbiWH2sEvq92b/F EWtHb6V/hXktVOC1yuCg/+SipfQllB9UX8twtBrl70CQ5VcRQCKOJ5YNjjIw4wxA eEEkoYMMEes8ocXKIzVMR5IXySc27QcuHFuP67CnM6JC0SwEwYgt3+oWL62D0wII a1IJm+zQ6vzwVxx/ceHxywQNl7/u5ky8dOE4W+mb+cjxfQ/P9q25lDzX9SShiO/I oPT+ZxQClCXRGmiMl2E4MO4kLpJMU3yvSr+7j/C7TZZDx+Azodn7SQ4heQaDjb7j OA53+e2ZHZQuosQOcNo3C4EiL5xcKv/VDVgWTQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFLHe0j7Ve6r1jYa2MZJQ8TF5IXRJMB8GA1UdIwQYMBaAFB89RtRrnoFgaO/X I4KwMsneeyscMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzg2YjAz MzA0NDU0OTYzMzg0NGExZTM1NTM4MGZhOTljNjIyMjgxOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZjhhNTA4NjEtMmRhMS00MWY3LTgyYTktYWM2OGNk MWMxYjRhLzVhNzk0MGEyNTAxN2NkYWVlZmI0ZDdlNTk5ZjI5OGRhNmJlYmEzZjku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mOGE1MDg2MS0yZGExLTQxZjctODJhOS1hYzY4 Y2QxYzFiNGEvMzg2YjAzMzA0NDU0OTYzMzg0NGExZTM1NTM4MGZhOTljNjIyMjgx OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi3jmDANBAIAAjAHAwUAKAO+IDANBgkqhkiG9w0BAQsFAAOC AQEAquYWXxEQi+EuZdkG9A2c7ueTGBurtPGQvsHbGIn4jNxgnPgnsPQYNTFBOVOj A20eygWhm4XfmHg7XGzjRtMgl+L8MTgecEvF9h+M+XPZ3WXDP2vHZI9DXoN5T6jD Wk/eMU+G68BGo0rh8XPLWj9SIVpX2whrxjxfsxiEbYdgSPkVMeGKNXon0QJlYY6z ZeD1Loelh5++6MM+aLZgpQC/56KZ3ujowiiwAzVxM7+99KJONWP42/dIYqaowqJi rwkOotqa9V6aUt2ZfGqmiHIzjbMWrscaG7U+/El1Zg7N1FZYov+PPupgdzDT5ZLW Chd7lFc6aA8uSyI9BMN0JT72dw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:05 2023 by rpki-client on console-fra.rpki-client.org