$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/efe1470f6763c1cab101bd6103221d5526b72013.roa File: efe1470f6763c1cab101bd6103221d5526b72013.roa (raw, json) Hash identifier: gYIFIiSdPezAoG9yCrt1TdROvN1O0sfMbHUgfOvd7Oc= Subject key identifier: C3:E1:A6:57:D9:0A:CC:92:E0:58:0F:8F:FF:C4:46:E1:45:CC:AB:3B Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2 Certificate serial: 1A07D4 Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/efe1470f6763c1cab101bd6103221d5526b72013.roa Signing time: Tue 08 Nov 2022 20:20:35 +0000 ROA not before: Tue 23 Mar 2021 14:31:57 +0000 ROA not after: Tue 24 Mar 2026 14:31:57 +0000 asID: 28068 IP address blocks: 170.210.168.0/21 maxlen: 24 2800:110:3400::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705940 (0x1a07d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2 Validity Not Before: Mar 23 14:31:57 2021 GMT Not After : Mar 24 14:31:57 2026 GMT Subject: CN=efe1470f6763c1cab101bd6103221d5526b72013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:91:a7:67:8c:a9:95:cc:50:00:26:09:8b: 31:f4:2e:82:dd:9a:a7:2d:57:1d:27:59:ce:40:1f: 82:20:5a:06:53:f2:08:68:0a:95:ef:ee:16:46:8b: 91:7e:61:fd:11:f3:01:d8:1e:3a:55:54:6a:94:35: 36:ba:50:42:85:dd:b4:02:56:fa:51:6f:89:56:6e: fe:de:65:d9:a3:f4:e9:ac:3f:a5:21:c8:09:96:2b: 37:a1:af:27:60:ad:ec:70:2e:be:36:8c:f4:fd:ee: 6f:10:9e:f4:56:b0:7e:59:bd:f4:75:2a:75:b5:66: df:af:6d:f7:3b:30:03:8d:57:0f:61:3c:a7:a3:8c: 96:1f:47:18:c0:b3:67:3b:7c:e2:5b:eb:b7:77:98: b8:14:91:57:f4:dd:e6:d7:2f:ba:9f:67:9b:27:67: 50:46:72:b3:9f:2d:ec:cf:3d:96:a3:7d:0c:02:6f: 0a:0a:11:d1:ce:c5:32:de:17:05:6b:f0:36:e8:9d: 01:82:7a:8f:98:60:a0:cf:83:69:30:cc:d0:55:ac: 59:34:da:78:da:7c:79:04:0f:47:2c:0b:a2:7b:51: 02:ca:0b:3b:2e:94:56:4d:ac:49:c6:d4:4d:fc:4a: 27:e5:be:66:2f:04:40:e5:84:3b:e6:85:33:bc:7e: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E1:A6:57:D9:0A:CC:92:E0:58:0F:8F:FF:C4:46:E1:45:CC:AB:3B X509v3 Authority Key Identifier: keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/efe1470f6763c1cab101bd6103221d5526b72013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.210.168.0/21 IPv6: 2800:110:3400::/48 Signature Algorithm: sha256WithRSAEncryption 5c:86:8a:1c:5f:b4:72:82:2c:80:ff:49:99:a8:6a:04:7e:ec: 10:07:f1:1a:ad:63:e2:aa:e0:48:ad:23:43:8d:f1:4b:15:ee: 4b:6c:16:b4:6c:0b:cd:3a:3a:e3:b4:96:1a:60:dc:48:e7:70: b2:f3:2b:a4:a3:a3:3d:8c:cb:30:17:7c:6d:bb:ab:2a:2e:03: bf:fd:7f:70:83:d4:9e:3f:28:08:3a:16:8c:0a:38:d1:cc:d8: 65:36:5f:25:68:e1:b4:6a:5e:a2:19:e7:80:20:f7:e6:24:ab: af:bd:4e:b2:ad:2b:db:dc:95:a1:d0:a0:71:b9:ff:e5:9e:ed: ab:1d:76:a5:45:c0:9f:f3:6b:21:7c:f7:76:b7:4a:ea:92:26: 8f:02:cd:23:cf:b2:e5:f8:10:12:ef:ca:d3:2e:85:d8:a4:ae: 08:8d:e9:a2:47:24:09:c7:be:56:f0:ba:b6:4c:40:5d:26:7d: e6:b2:6d:2b:eb:e5:f9:34:bc:1e:42:ce:0d:88:2e:a9:f9:dc: 52:f9:af:f2:c7:87:62:35:9b:00:fc:5c:40:16:06:be:db:0a: 04:27:ff:e7:a7:06:c9:d7:4c:a1:62:be:c8:bd:cf:26:32:30: 7a:88:86:98:d4:66:74:4a:2f:fe:6f:ce:f6:b5:65:df:f2:96: 92:78:ee:72 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDGgfUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjEwMzIz MTQzMTU3WhcNMjYwMzI0MTQzMTU3WjAzMTEwLwYDVQQDEyhlZmUxNDcwZjY3NjNj MWNhYjEwMWJkNjEwMzIyMWQ1NTI2YjcyMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuQKRp2eMqZXMUAAmCYsx9C6C3ZqnLVcdJ1nOQB+CIFoGU/II aAqV7+4WRouRfmH9EfMB2B46VVRqlDU2ulBChd20Alb6UW+JVm7+3mXZo/TprD+l IcgJlis3oa8nYK3scC6+Noz0/e5vEJ70VrB+Wb30dSp1tWbfr233OzADjVcPYTyn o4yWH0cYwLNnO3ziW+u3d5i4FJFX9N3m1y+6n2ebJ2dQRnKzny3szz2Wo30MAm8K ChHRzsUy3hcFa/A26J0BgnqPmGCgz4NpMMzQVaxZNNp42nx5BA9HLAuie1ECygs7 LpRWTaxJxtRN/Eon5b5mLwRA5YQ75oUzvH4YawIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFMPhplfZCsyS4FgPj//ERuFFzKs7MB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6 2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk N2JmNWJlL2VmZTE0NzBmNjc2M2MxY2FiMTAxYmQ2MTAzMjIxZDU1MjZiNzIwMTMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1 ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEA6rSqDAPBAIAAjAJAwcAKAABEDQAMA0GCSqGSIb3DQEBCwUA A4IBAQBchoocX7RygiyA/0mZqGoEfuwQB/EarWPiquBIrSNDjfFLFe5LbBa0bAvN OjrjtJYaYNxI53Cy8yuko6M9jMswF3xtu6sqLgO//X9wg9SePygIOhaMCjjRzNhl Nl8laOG0al6iGeeAIPfmJKuvvU6yrSvb3JWh0KBxuf/lnu2rHXalRcCf82shfPd2 t0rqkiaPAs0jz7Ll+BAS78rTLoXYpK4IjemiRyQJx75W8Lq2TEBdJn3msm0r6+X5 NLweQs4NiC6p+dxS+a/yx4diNZsA/FxAFga+2woEJ//npwbJ10yhYr7Ivc8mMjB6 iIaY1GZ0Si/+b872tWXf8paSeO5y -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:26 2023 by rpki-client on console-ams.rpki-client.org