$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa File: 4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa (raw, json) Hash identifier: a0kHN/4wWKCuZ5THq4SWLT/I8SAfEDW54E595kuJgxU= Subject key identifier: B6:89:1A:5F:9D:5E:C3:17:2B:1A:57:22:C1:FC:A1:31:BA:1D:23:9F Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2 Certificate serial: 1A171F Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa Signing time: Tue 08 Nov 2022 20:23:42 +0000 ROA not before: Tue 23 Mar 2021 14:31:57 +0000 ROA not after: Tue 24 Mar 2026 14:31:57 +0000 asID: 52442 IP address blocks: 170.210.96.0/21 maxlen: 24 2800:110:1018::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709855 (0x1a171f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2 Validity Not Before: Mar 23 14:31:57 2021 GMT Not After : Mar 24 14:31:57 2026 GMT Subject: CN=4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:aa:8b:04:c4:fe:9c:bf:f3:4d:b9:71:97: 0e:85:a0:ea:a4:02:37:5b:39:cc:4e:90:be:85:0a: c3:b3:46:eb:78:a8:d6:bb:e2:69:2b:6f:5d:78:40: d2:97:6b:57:d8:7f:17:e2:78:30:98:9b:a3:d1:bd: 24:2c:b5:c6:04:43:a1:e1:84:21:2c:7d:c0:9f:5e: 10:1c:2c:53:ff:55:8c:0f:e9:c8:20:72:6b:9b:41: f8:ed:2a:14:06:9d:7f:e0:17:b4:5d:13:f3:79:60: a7:80:e6:36:56:2e:b8:27:1a:2f:57:ed:87:2b:e1: da:e4:2c:85:d1:c6:65:13:f0:55:ec:2e:0e:d8:fc: 14:49:0e:68:6e:91:60:41:2f:07:b8:61:a0:dd:03: c2:c4:c0:ae:c5:da:b3:4a:02:a2:39:da:52:60:97: 92:e9:19:9a:7d:9d:0a:01:a7:88:ff:3f:b0:af:4a: 22:4f:db:f9:62:44:8c:13:4a:09:c6:2d:1d:5b:14: d3:18:02:0f:1d:61:2c:11:c7:54:37:6f:77:81:7a: 66:2d:c8:c0:fe:a4:55:b9:82:9a:42:ef:b0:e6:34: 1a:12:42:d9:1e:f2:d9:71:63:ac:a5:b4:13:46:2a: 2f:89:45:39:cd:5f:82:31:79:3a:88:d6:44:98:94: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:89:1A:5F:9D:5E:C3:17:2B:1A:57:22:C1:FC:A1:31:BA:1D:23:9F X509v3 Authority Key Identifier: keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.210.96.0/21 IPv6: 2800:110:1018::/48 Signature Algorithm: sha256WithRSAEncryption 3f:a0:b9:9f:a1:83:af:1a:03:a4:df:8c:7f:f5:e2:73:04:d6: 88:18:d8:5d:13:ca:f9:39:50:b2:dd:48:62:ea:32:50:36:95: a4:61:3f:86:70:84:6f:c3:ab:2c:04:1f:b3:6f:cc:3e:b8:65: dd:fa:49:3b:d3:5f:c4:34:cd:9e:25:b0:7e:6b:00:87:46:ad: 2a:6d:cd:d2:54:99:8c:d0:63:83:b0:55:b1:3b:6e:9e:9f:9d: e9:81:c6:a0:73:cc:3f:04:cc:b3:58:b1:97:31:0d:87:09:46: 3f:cc:ab:de:5d:16:80:90:62:80:72:c8:3d:24:21:07:3d:0f: 7d:45:74:4e:da:5e:2e:b4:cd:40:37:59:01:7d:11:7f:74:21: 26:ec:d1:eb:23:24:01:e0:a6:94:60:52:da:73:35:60:b9:f5: 98:d5:9a:b5:88:a9:90:5a:f2:6d:7b:da:ea:90:6a:18:51:3b: 14:4d:f0:9e:fa:e8:27:6a:5a:d7:b6:87:ef:97:46:14:7a:d9: 2d:3c:93:a6:c3:76:b1:c3:ef:d1:84:3c:3e:08:ca:e9:ee:1d: f0:6d:33:46:68:18:e0:e1:79:c7:ba:92:e0:7d:78:a2:41:87: c6:bf:40:c7:e3:34:93:bc:8a:07:c1:06:4d:a2:9a:39:82:61: c7:f1:3f:93 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDGhcfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjEwMzIz MTQzMTU3WhcNMjYwMzI0MTQzMTU3WjAzMTEwLwYDVQQDEyg0YmYzNTNlMzExMmU1 YmQ1NTY0ZGY1ZDVjZDhhNmE0YmFjYzdmYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA4cyqiwTE/py/8025cZcOhaDqpAI3WznMTpC+hQrDs0breKjW u+JpK29deEDSl2tX2H8X4ngwmJuj0b0kLLXGBEOh4YQhLH3An14QHCxT/1WMD+nI IHJrm0H47SoUBp1/4Be0XRPzeWCngOY2Vi64JxovV+2HK+Ha5CyF0cZlE/BV7C4O 2PwUSQ5obpFgQS8HuGGg3QPCxMCuxdqzSgKiOdpSYJeS6RmafZ0KAaeI/z+wr0oi T9v5YkSME0oJxi0dWxTTGAIPHWEsEcdUN293gXpmLcjA/qRVuYKaQu+w5jQaEkLZ HvLZcWOspbQTRioviUU5zV+CMXk6iNZEmJQMkwIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFLaJGl+dXsMXKxpXIsH8oTG6HSOfMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6 2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk N2JmNWJlLzRiZjM1M2UzMTEyZTViZDU1NjRkZjVkNWNkOGE2YTRiYWNjN2ZiYmYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1 ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEA6rSYDAPBAIAAjAJAwcAKAABEBAYMA0GCSqGSIb3DQEBCwUA A4IBAQA/oLmfoYOvGgOk34x/9eJzBNaIGNhdE8r5OVCy3Uhi6jJQNpWkYT+GcIRv w6ssBB+zb8w+uGXd+kk701/ENM2eJbB+awCHRq0qbc3SVJmM0GODsFWxO26en53p gcagc8w/BMyzWLGXMQ2HCUY/zKveXRaAkGKAcsg9JCEHPQ99RXRO2l4utM1AN1kB fRF/dCEm7NHrIyQB4KaUYFLaczVgufWY1Zq1iKmQWvJte9rqkGoYUTsUTfCe+ugn alrXtofvl0YUetktPJOmw3axw+/RhDw+CMrp7h3wbTNGaBjg4XnHupLgfXiiQYfG v0DH4zSTvIoHwQZNopo5gmHH8T+T -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:05 2023 by rpki-client on console-fra.rpki-client.org