$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa File: 20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa (raw, json) Hash identifier: gUfmGL4ULtYWKHEsKjA80Ta1CHBhURHD70hlLSUHc+E= Subject key identifier: AA:11:AF:6D:BF:BF:51:2E:75:33:B0:0C:75:9E:4E:85:5A:47:86:2D Certificate issuer: /CN=d4919a8b2dab56309b76746e8d395e1b61b10da9 Certificate serial: 0D854D Authority key identifier: BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa Signing time: Wed 24 Mar 2021 14:30:01 +0000 ROA not before: Wed 24 Mar 2021 14:30:00 +0000 ROA not after: Tue 24 Mar 2026 14:30:00 +0000 asID: 265774 IP address blocks: 164.163.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.crl rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 08:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886093 (0xd854d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4919a8b2dab56309b76746e8d395e1b61b10da9 Validity Not Before: Mar 24 14:30:00 2021 GMT Not After : Mar 24 14:30:00 2026 GMT Subject: CN=20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:f8:10:f9:ba:20:2f:8f:21:d9:62:c6:ae: b0:b8:0b:47:d4:87:71:d0:68:1c:3a:f4:69:09:1a: bc:bc:d1:1a:f9:8f:50:1d:39:57:e1:e5:3c:3a:a7: 17:51:e3:9b:c8:0e:c2:95:86:89:5e:a1:c8:4d:63: 64:91:3c:0a:65:1b:e7:e4:a6:52:19:5f:dc:3a:d6: 84:3f:47:6d:c2:5c:f4:43:7f:6e:c5:ac:4f:09:41: 0d:f4:a3:78:0b:bf:23:1d:7c:05:4e:30:da:91:e1: 15:d7:10:64:d6:d3:5f:9f:7a:ae:71:ab:b3:88:0c: f6:e9:73:1d:8a:4d:de:9d:67:3a:c7:0f:1c:f4:de: 14:1b:25:cc:5c:27:95:fc:53:5b:2d:3a:32:32:56: 2b:b4:fe:ec:a9:37:34:85:b0:7a:5e:1b:51:03:3e: de:cc:19:1c:05:5f:90:8a:df:bd:b8:ae:7e:48:fe: 27:93:b7:ec:9e:4d:09:84:14:8c:4b:51:4a:16:87: 4a:3e:31:e5:af:79:08:06:71:a1:5f:98:d5:5c:22: be:86:2a:41:69:97:02:a8:8e:04:96:3b:ef:a5:94: 91:5a:bd:11:7d:bd:dc:2d:a3:2c:0e:2d:9a:f2:7b: 67:3f:41:4a:42:eb:1d:91:05:6a:8f:2b:51:f1:27: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:AF:6D:BF:BF:51:2E:75:33:B0:0C:75:9E:4E:85:5A:47:86:2D X509v3 Authority Key Identifier: keyid:BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.216.0/22 Signature Algorithm: sha256WithRSAEncryption 28:cd:f0:94:73:c6:44:3b:b6:68:28:68:60:c3:ea:fe:1a:1f: 0d:06:13:7b:b8:97:a3:16:1f:14:e7:f8:68:50:33:87:ad:0d: 4d:df:c8:a0:f4:ee:53:9c:f2:d3:23:cf:ae:a0:a6:d4:a5:ee: 5f:49:87:55:2d:c9:f7:94:16:97:d8:f4:e0:8b:99:64:aa:1a: 2a:12:21:a0:f0:78:71:3f:1c:6f:9c:7d:b9:b0:14:e9:ba:c6: 0e:5d:57:8f:4a:60:0d:31:d8:a3:e6:72:46:fa:ba:5b:59:04: ed:72:c7:c5:0b:ec:bd:8a:d0:88:1d:60:ab:2d:0f:a7:fb:e8: e4:94:f3:f7:6c:88:00:f9:55:2f:f9:e0:a9:29:a6:88:e1:19: 50:de:95:1f:32:23:78:1f:dd:c1:66:44:d6:a0:99:06:c4:e2: 1f:23:05:9b:eb:40:fc:49:6f:1a:54:90:ee:17:6e:0a:e2:01: 77:94:f5:4b:1e:23:87:f8:22:26:b8:ba:37:6a:1e:26:41:19: 51:64:8f:fb:f6:9a:4f:30:09:06:db:c9:4c:63:70:c8:91:6f: 8e:ee:56:ac:c9:01:8e:ff:7b:40:cd:98:29:a8:17:e6:2c:63: 66:3a:d1:c6:32:c6:d7:c3:08:89:28:d5:8b:2c:da:81:37:60: ed:48:a2:56 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDDYVNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0 OTE5YThiMmRhYjU2MzA5Yjc2NzQ2ZThkMzk1ZTFiNjFiMTBkYTkwHhcNMjEwMzI0 MTQzMDAwWhcNMjYwMzI0MTQzMDAwWjAzMTEwLwYDVQQDEygyMGFjNmVhY2Y0YTdj MTUxZTllNTJmMzhmMjEwZmNmY2RmNDllYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAicD4EPm6IC+PIdlixq6wuAtH1Idx0GgcOvRpCRq8vNEa+Y9Q HTlX4eU8OqcXUeObyA7ClYaJXqHITWNkkTwKZRvn5KZSGV/cOtaEP0dtwlz0Q39u xaxPCUEN9KN4C78jHXwFTjDakeEV1xBk1tNfn3qucauziAz26XMdik3enWc6xw8c 9N4UGyXMXCeV/FNbLToyMlYrtP7sqTc0hbB6XhtRAz7ezBkcBV+Qit+9uK5+SP4n k7fsnk0JhBSMS1FKFodKPjHlr3kIBnGhX5jVXCK+hipBaZcCqI4EljvvpZSRWr0R fb3cLaMsDi2a8ntnP0FKQusdkQVqjytR8SdmVwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFKoRr22/v1EudTOwDHWeToVaR4YtMB8GA1UdIwQYMBaAFL6QDy4W0UB6ACkU AyWXqc0QMCr+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDQ5MTlh OGIyZGFiNTYzMDliNzY3NDZlOGQzOTVlMWI2MWIxMGRhOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZjhlZWE5NzEtNTExMy00YzdjLTllMjQtZjNhZThh YTMzZWM4LzIwYWM2ZWFjZjRhN2MxNTFlOWU1MmYzOGYyMTBmY2ZjZGY0OWVjMzku cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mOGVlYTk3MS01MTEzLTRjN2MtOWUyNC1mM2Fl OGFhMzNlYzgvZDQ5MTlhOGIyZGFiNTYzMDliNzY3NDZlOGQzOTVlMWI2MWIxMGRh OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqSj2DANBgkqhkiG9w0BAQsFAAOCAQEAKM3wlHPGRDu2aCho YMPq/hofDQYTe7iXoxYfFOf4aFAzh60NTd/IoPTuU5zy0yPPrqCm1KXuX0mHVS3J 95QWl9j04IuZZKoaKhIhoPB4cT8cb5x9ubAU6brGDl1Xj0pgDTHYo+ZyRvq6W1kE 7XLHxQvsvYrQiB1gqy0Pp/vo5JTz92yIAPlVL/ngqSmmiOEZUN6VHzIjeB/dwWZE 1qCZBsTiHyMFm+tA/ElvGlSQ7hduCuIBd5T1Sx4jh/giJri6N2oeJkEZUWSP+/aa TzAJBtvJTGNwyJFvju5WrMkBjv97QM2YKagX5ixjZjrRxjLG18MIiSjViyzagTdg 7UiiVg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:47:06 2023 by rpki-client on console-fra.rpki-client.org