$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35ae220d672b01c9c61f7afe1dc429402e560a1d.roa File: 35ae220d672b01c9c61f7afe1dc429402e560a1d.roa (raw, json) Hash identifier: kvYVEW8rmYGOIakHgV6kvZ0Ku6DxOHodOvwsOkuZKY8= Subject key identifier: A8:72:95:46:EB:72:BE:3E:B5:8E:09:4B:EA:34:F3:5E:6D:84:1C:C4 Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684 Certificate serial: 1888BB Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35ae220d672b01c9c61f7afe1dc429402e560a1d.roa Signing time: Wed 09 Feb 2022 20:20:32 +0000 ROA not before: Tue 11 Jan 2022 03:00:00 +0000 ROA not after: Thu 11 Jan 2024 03:00:00 +0000 asID: 14080 IP address blocks: 181.48.0.0/13 maxlen: 24 190.85.240.0/20 maxlen: 20 200.26.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Jan 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607867 (0x1888bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684 Validity Not Before: Jan 11 03:00:00 2022 GMT Not After : Jan 11 03:00:00 2024 GMT Subject: CN=35ae220d672b01c9c61f7afe1dc429402e560a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:8e:a0:22:88:40:df:13:fe:03:b1:3d:dd: 1c:4c:c9:b1:31:b1:52:59:4a:0d:73:f8:f5:08:1a: b0:4c:69:d5:d4:f6:3c:98:51:96:0a:cf:ff:18:41: 0a:d9:a8:55:cb:84:60:36:02:c0:36:54:0b:8f:ca: 66:eb:6e:88:25:45:e0:84:48:47:76:36:e6:76:44: f4:be:ff:18:5f:10:2f:b1:f1:e2:af:0b:be:35:b2: 03:74:3c:47:17:d1:07:81:39:10:0b:8a:83:5b:ed: 47:bd:12:34:b4:33:5e:7a:bd:e9:11:f2:cc:47:5f: 8f:e5:00:21:46:66:1e:fa:2c:ae:76:bd:a5:af:15: b6:f9:0c:a6:b7:d6:8a:da:f3:eb:bc:4c:0a:a7:28: f5:36:b7:d0:c7:cf:02:bd:58:b8:3d:16:b9:d4:79: 5a:06:4f:82:32:12:bd:d7:a3:90:94:36:78:de:0c: 07:77:67:65:8c:75:23:85:87:e4:80:90:b1:fa:32: 01:51:2a:e4:77:73:91:b3:08:6e:0c:ce:0a:85:b1: 47:9c:4c:6c:72:4e:41:07:2a:c3:9f:1d:06:d3:9c: 5b:3d:1f:07:06:66:6d:bc:87:b6:95:5e:5a:78:f4: c3:2e:5d:7e:91:4a:4d:1c:cf:99:c6:be:26:cf:e3: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:95:46:EB:72:BE:3E:B5:8E:09:4B:EA:34:F3:5E:6D:84:1C:C4 X509v3 Authority Key Identifier: keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35ae220d672b01c9c61f7afe1dc429402e560a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.48.0.0/13 190.85.240.0/20 200.26.128.0/19 Signature Algorithm: sha256WithRSAEncryption 7f:50:75:0e:db:e4:2f:56:34:9b:ad:b5:e4:93:01:d6:96:46: b2:14:2c:7a:77:99:82:56:eb:52:ce:e5:80:0d:60:fa:44:49: 89:d4:dd:3c:6e:5d:0f:23:0f:06:02:96:d9:45:05:93:5a:28: 2b:16:90:60:77:15:f1:98:94:c3:2d:83:57:ab:24:6e:c3:5c: dc:18:86:cf:e5:2b:ab:cd:6a:b9:63:75:d7:3b:3e:e3:0a:ab: 03:5c:79:63:e4:02:10:6b:01:39:b3:d7:6f:16:48:73:06:ed: ec:5d:01:1f:a6:9d:8f:21:f8:1e:d5:3c:c6:f0:c0:62:9a:0d: 63:76:80:14:96:a9:24:55:7a:54:53:ab:ef:03:f4:3f:5d:c5: 36:52:b3:6a:aa:b2:63:eb:c6:0a:cc:76:cd:66:f7:4a:00:2b: f9:e2:a8:d8:25:47:7c:50:b8:6c:17:c3:f8:c2:4f:64:33:21: 79:ec:83:67:46:24:6b:ad:ad:97:d5:fc:cf:54:2e:f7:29:d1: 67:ee:85:c0:95:2c:51:0b:1b:0d:19:71:ef:27:b1:79:d7:70: 0e:e9:a2:d8:f9:52:5e:37:f7:c3:75:93:cc:05:87:bc:0d:f5: e4:65:eb:b5:83:56:60:a9:0d:ef:7d:79:6d:23:f5:2d:d9:7a: cf:a6:06:f3 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIDGIi7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjIwMTEx MDMwMDAwWhcNMjQwMTExMDMwMDAwWjAzMTEwLwYDVQQDEygzNWFlMjIwZDY3MmIw MWM5YzYxZjdhZmUxZGM0Mjk0MDJlNTYwYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3OyOoCKIQN8T/gOxPd0cTMmxMbFSWUoNc/j1CBqwTGnV1PY8 mFGWCs//GEEK2ahVy4RgNgLANlQLj8pm626IJUXghEhHdjbmdkT0vv8YXxAvsfHi rwu+NbIDdDxHF9EHgTkQC4qDW+1HvRI0tDNeer3pEfLMR1+P5QAhRmYe+iyudr2l rxW2+Qymt9aK2vPrvEwKpyj1NrfQx88CvVi4PRa51HlaBk+CMhK916OQlDZ43gwH d2dljHUjhYfkgJCx+jIBUSrkd3ORswhuDM4KhbFHnExsck5BByrDnx0G05xbPR8H BmZtvIe2lV5aePTDLl1+kUpNHM+Zxr4mz+P/uQIDAQABo4ICZjCCAmIwHQYDVR0O BBYEFKhylUbrcr4+tY4JS+o0815thBzEMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1 P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk NTdhNDZhLzM1YWUyMjBkNjcyYjAxYzljNjFmN2FmZTFkYzQyOTQwMmU1NjBhMWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2 NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4 NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQb MBkwFwQCAAEwEQMDA7UwAwQEvlXwAwQFyBqAMA0GCSqGSIb3DQEBCwUAA4IBAQB/ UHUO2+QvVjSbrbXkkwHWlkayFCx6d5mCVutSzuWADWD6REmJ1N08bl0PIw8GApbZ RQWTWigrFpBgdxXxmJTDLYNXqyRuw1zcGIbP5SurzWq5Y3XXOz7jCqsDXHlj5AIQ awE5s9dvFkhzBu3sXQEfpp2PIfge1TzG8MBimg1jdoAUlqkkVXpUU6vvA/Q/XcU2 UrNqqrJj68YKzHbNZvdKACv54qjYJUd8ULhsF8P4wk9kMyF57INnRiRrra2X1fzP VC73KdFn7oXAlSxRCxsNGXHvJ7F513AO6aLY+VJeN/fDdZPMBYe8DfXkZeu1g1Zg qQ3vfXltI/Ut2XrPpgbz -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net