$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8f406004aacdecfadce5159606f66d97c2eb6221.roa File: 8f406004aacdecfadce5159606f66d97c2eb6221.roa (raw, json) Hash identifier: qpkkZPzlj7zQxvWupRc4kJ0Hj+EdWrbUqk/BA+Vlhcs= Subject key identifier: 6A:37:4C:EB:65:65:02:F2:10:B9:7C:02:35:99:F2:7D:FD:59:DF:72 Certificate issuer: /CN=47b26b4cc424b80b0e574677390a5e2698d3886d Certificate serial: DB Authority key identifier: 2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8f406004aacdecfadce5159606f66d97c2eb6221.roa Signing time: Fri 11 Feb 2022 11:36:25 +0000 ROA not before: Fri 11 Feb 2022 03:00:00 +0000 ROA not after: Sun 11 Feb 2024 03:00:00 +0000 asID: 265685 IP address blocks: 45.5.20.0/22 maxlen: 24 2803:11c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b26b4cc424b80b0e574677390a5e2698d3886d Validity Not Before: Feb 11 03:00:00 2022 GMT Not After : Feb 11 03:00:00 2024 GMT Subject: CN=8f406004aacdecfadce5159606f66d97c2eb6221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:32:dd:78:75:f3:83:24:a4:30:96:64:e4: 67:38:86:74:60:bf:0b:c3:cd:bd:e9:24:b7:16:9b: 2a:10:04:05:37:da:20:72:12:f7:81:cc:d7:05:40: 9b:b8:32:92:34:5b:ce:fb:d9:80:67:fa:ee:e4:74: 96:98:ff:da:7c:ef:7f:35:3f:74:c4:2f:5a:4f:9a: 6f:d5:f3:e9:0f:05:f9:ea:bb:b8:50:80:be:3e:4f: 61:47:6a:e3:aa:59:3b:8b:98:2b:12:32:64:8b:32: da:80:63:4b:6c:d9:7b:9d:7b:4f:64:1b:2b:1a:05: 6b:53:c0:06:fe:91:b1:ca:ae:82:5f:d3:26:70:b8: e0:10:74:55:0e:85:22:1a:62:94:61:00:22:21:d2: c5:fc:ee:81:e0:e3:d8:74:2e:3b:56:b1:5d:e2:1f: ea:88:b3:3e:16:40:61:5c:52:00:4e:26:da:b5:28: 59:ac:55:1e:44:56:f5:dc:81:8f:7d:98:25:e7:aa: 2c:e6:e7:d8:89:d4:14:56:54:51:a0:a5:e7:4c:94: da:c7:f7:6e:90:73:01:eb:d2:be:f8:10:0f:5f:b9: 84:3d:cb:ce:0a:6d:ee:40:93:40:46:ca:b4:3d:fa: 25:20:b8:86:b9:f1:d9:99:ac:d0:9a:68:7b:ba:7d: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:37:4C:EB:65:65:02:F2:10:B9:7C:02:35:99:F2:7D:FD:59:DF:72 X509v3 Authority Key Identifier: keyid:2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8f406004aacdecfadce5159606f66d97c2eb6221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.20.0/22 IPv6: 2803:11c0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:31:16:12:e3:3b:0a:48:60:b6:c8:0a:3b:7b:eb:b8:61:d1: 06:00:c0:fd:54:22:29:04:84:bb:9a:d5:ba:dc:54:53:f8:49: 10:11:f4:20:23:6f:8c:b3:00:d2:5c:53:b8:d2:b3:67:87:2b: 21:49:d0:86:2a:cf:96:f7:4c:64:10:d4:07:92:ac:99:b2:d8: 74:89:3b:6a:95:b2:54:c4:da:be:90:3f:62:36:f3:ca:73:c1: 19:73:3f:dd:b4:5f:8c:55:b5:ff:3b:41:c5:e5:86:ef:50:9e: bb:40:0f:3b:d8:be:83:6d:e2:36:a6:00:9d:17:67:c3:5d:8b: 3c:62:a8:46:35:d6:33:4a:6f:1f:ba:91:f6:f3:dd:ad:a8:ff: ea:8e:06:65:ad:68:ef:f8:74:6e:79:ce:83:64:66:08:ff:5b: f9:3f:ca:e0:7c:ba:10:8e:64:01:c1:25:c4:46:ce:a7:9e:ca: 48:7a:a0:9a:87:e6:0a:a6:e6:a4:0b:09:1d:35:b6:1c:79:d4: ee:da:29:43:4f:98:71:00:60:50:36:c5:db:76:3d:17:9d:6d: 8f:f7:10:60:d8:8c:27:29:8a:85:60:fa:81:55:3e:90:6f:a5: 3b:4d:26:03:64:3a:cb:fd:78:15:15:d2:06:ec:f3:3d:77:29: 80:06:ed:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDdi MjZiNGNjNDI0YjgwYjBlNTc0Njc3MzkwYTVlMjY5OGQzODg2ZDAeFw0yMjAyMTEw MzAwMDBaFw0yNDAyMTEwMzAwMDBaMDMxMTAvBgNVBAMTKDhmNDA2MDA0YWFjZGVj ZmFkY2U1MTU5NjA2ZjY2ZDk3YzJlYjYyMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxFDLdeHXzgySkMJZk5Gc4hnRgvwvDzb3pJLcWmyoQBAU32iBy EveBzNcFQJu4MpI0W8772YBn+u7kdJaY/9p87381P3TEL1pPmm/V8+kPBfnqu7hQ gL4+T2FHauOqWTuLmCsSMmSLMtqAY0ts2Xude09kGysaBWtTwAb+kbHKroJf0yZw uOAQdFUOhSIaYpRhACIh0sX87oHg49h0LjtWsV3iH+qIsz4WQGFcUgBOJtq1KFms VR5EVvXcgY99mCXnqizm59iJ1BRWVFGgpedMlNrH926QcwHr0r74EA9fuYQ9y84K be5Ak0BGyrQ9+iUguIa58dmZrNCaaHu6fUBjAgMBAAGjggJqMIICZjAdBgNVHQ4E FgQUajdM62VlAvIQuXwCNZnyff1Z33IwHwYDVR0jBBgwFoAUKk/Ra1GHTejecvr+ v9W7iZiL3L4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80N2IyNmI0 Y2M0MjRiODBiMGU1NzQ2NzczOTBhNWUyNjk4ZDM4ODZkLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy9mZmVjZDk1NC04YTE1LTRjMzgtYWQxOC1hYWVmOGYx NzU4OTYvOGY0MDYwMDRhYWNkZWNmYWRjZTUxNTk2MDZmNjZkOTdjMmViNjIyMS5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljL2ZmZWNkOTU0LThhMTUtNGMzOC1hZDE4LWFhZWY4 ZjE3NTg5Ni80N2IyNmI0Y2M0MjRiODBiMGU1NzQ2NzczOTBhNWUyNjk4ZDM4ODZk LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w HTAMBAIAATAGAwQCLQUUMA0EAgACMAcDBQAoAxHAMA0GCSqGSIb3DQEBCwUAA4IB AQAbMRYS4zsKSGC2yAo7e+u4YdEGAMD9VCIpBIS7mtW63FRT+EkQEfQgI2+MswDS XFO40rNnhyshSdCGKs+W90xkENQHkqyZsth0iTtqlbJUxNq+kD9iNvPKc8EZcz/d tF+MVbX/O0HF5YbvUJ67QA872L6DbeI2pgCdF2fDXYs8YqhGNdYzSm8fupH2892t qP/qjgZlrWjv+HRuec6DZGYI/1v5P8rgfLoQjmQBwSXERs6nnspIeqCah+YKpuak CwkdNbYcedTu2ilDT5hxAGBQNsXbdj0XnW2P9xBg2IwnKYqFYPqBVT6Qb6U7TSYD ZDrL/XgVFdIG7PM9dymABu32 -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:27 2023 by rpki-client on console-ams.rpki-client.org