$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa File: cec93a7e5f787c1777b0a7a4461711741e9e6812.roa (raw, json) Hash identifier: gYUnGrDQdlnE29iZw6hJ+d7ZSC/HDvVSag8t9GHcy44= Subject key identifier: BC:B4:79:95:28:46:3E:E6:ED:2E:AC:7D:F4:BA:40:CD:21:10:E8:98 Certificate issuer: /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852 Certificate serial: 22D561 Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa Signing time: Tue 11 Jul 2023 17:51:46 +0000 ROA not before: Mon 10 Jul 2023 17:51:46 +0000 ROA not after: Fri 11 Jul 2025 17:51:46 +0000 asID: 267781 IP address blocks: 200.229.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282849 (0x22d561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852 Validity Not Before: Jul 10 17:51:46 2023 GMT Not After : Jul 11 17:51:46 2025 GMT Subject: CN=cec93a7e5f787c1777b0a7a4461711741e9e6812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:7d:2f:5f:d1:e7:e6:6f:d6:d6:e1:09:2f: 67:a3:30:4d:4c:cc:31:ea:e5:1f:3a:91:d5:d5:88: 06:6b:c5:b3:ce:5f:5e:9e:62:1c:b3:64:2e:1c:92: 9c:68:d4:f5:61:6c:b9:2a:40:01:49:8a:98:01:87: 92:3d:c2:34:be:19:62:dd:ed:1d:62:c4:ad:c5:dd: af:e3:3d:c5:6e:e1:55:98:6e:fb:a5:2e:cc:81:f6: e7:30:d6:87:b6:1b:30:e4:b7:d1:5d:78:3c:21:8c: f9:55:cb:94:f4:f1:5f:a5:5b:66:de:7d:37:f6:51: 68:39:91:2f:71:1f:30:01:2b:86:d5:69:47:72:06: af:71:9c:85:db:e8:27:73:c6:49:0a:89:4d:30:a6: c9:e1:1b:9e:d3:61:df:e8:88:57:46:7c:e4:04:6b: ed:54:d6:21:86:9b:ff:86:b3:c7:f7:1d:93:b8:16: b1:1d:8b:9e:60:b6:2f:84:88:4c:65:3f:22:e3:0e: e0:0d:d6:73:11:80:da:39:7a:54:f5:a0:af:5d:49: 5d:0f:98:50:61:17:b3:05:8b:70:11:c5:fc:95:06: 47:86:71:79:43:5e:98:64:f4:d7:bd:a5:16:91:fd: 82:3b:ee:7f:4f:56:9c:c8:ae:d8:eb:5a:9a:e2:9a: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:79:95:28:46:3E:E6:ED:2E:AC:7D:F4:BA:40:CD:21:10:E8:98 X509v3 Authority Key Identifier: keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.216.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c4:be:f5:bc:16:5a:83:fc:77:be:3d:54:92:b4:06:d8:55: de:5d:48:1a:65:1b:b5:8a:dc:b6:8d:5c:e4:4c:1d:01:da:d1: 80:43:3a:f4:a6:52:c9:3c:7d:63:e3:3a:34:20:ee:21:4c:69: dd:7f:71:30:6f:5c:24:46:1a:d4:18:0e:a2:b8:6d:1c:30:ce: 81:db:07:58:c2:43:18:99:19:f4:9d:b0:7c:67:89:6f:c1:0b: 4e:3b:5c:4d:33:b3:bf:e8:37:08:2f:21:92:ef:d4:2d:ed:22: 4f:4a:a7:bf:65:4d:45:85:df:05:31:6d:38:e2:c7:d5:fb:a8: 77:e9:73:93:8d:ef:fc:1c:94:bb:c4:7c:4d:21:20:e1:3a:c3: 58:ef:60:1d:8e:90:17:8d:4f:b3:b3:8b:c7:e7:ef:37:3a:a7: 7b:39:c6:a1:4f:e1:85:af:17:a2:6c:24:07:bc:53:90:e7:26: 4c:e4:62:8d:cb:1c:d8:14:25:d2:1b:11:d3:24:5e:84:48:af: 2c:d4:a1:89:6f:d3:35:68:09:0a:13:a9:15:71:09:ac:cc:ff: 29:33:15:11:f4:99:97:d1:a7:f9:2f:9f:7a:da:25:99:63:4e: eb:40:bf:de:2f:01:9d:80:b7:31:09:ce:51:3f:8d:8b:83:a9: ad:4d:22:5f -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDItVhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5 YWNjYWNjMDI0MGY1YWQxNzVlYTRjN2FiMjU5OGUwNjJiYTM4NTIwHhcNMjMwNzEw MTc1MTQ2WhcNMjUwNzExMTc1MTQ2WjAzMTEwLwYDVQQDEyhjZWM5M2E3ZTVmNzg3 YzE3NzdiMGE3YTQ0NjE3MTE3NDFlOWU2ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApWt9L1/R5+Zv1tbhCS9nozBNTMwx6uUfOpHV1YgGa8Wzzl9e nmIcs2QuHJKcaNT1YWy5KkABSYqYAYeSPcI0vhli3e0dYsStxd2v4z3FbuFVmG77 pS7MgfbnMNaHthsw5LfRXXg8IYz5VcuU9PFfpVtm3n039lFoOZEvcR8wASuG1WlH cgavcZyF2+gnc8ZJColNMKbJ4Rue02Hf6IhXRnzkBGvtVNYhhpv/hrPH9x2TuBax HYueYLYvhIhMZT8i4w7gDdZzEYDaOXpU9aCvXUldD5hQYRezBYtwEcX8lQZHhnF5 Q16YZPTXvaUWkf2CO+5/T1acyK7Y61qa4ppNOQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFLy0eZUoRj7m7S6sffS6QM0hEOiYMB8GA1UdIwQYMBaAFIGNCgcr7AXkLm7T UxOmi6gQv/eoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzlhY2Nh Y2MwMjQwZjVhZDE3NWVhNGM3YWIyNTk4ZTA2MmJhMzg1Mi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMGJmODU0NGItYTA5MC00ZjQ3LWIwMzEtM2FhN2Fm YTVjZjE5L2NlYzkzYTdlNWY3ODdjMTc3N2IwYTdhNDQ2MTcxMTc0MWU5ZTY4MTIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wYmY4NTQ0Yi1hMDkwLTRmNDctYjAzMS0zYWE3 YWZhNWNmMTkvNzlhY2NhY2MwMjQwZjVhZDE3NWVhNGM3YWIyNTk4ZTA2MmJhMzg1 Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMjl2DANBgkqhkiG9w0BAQsFAAOCAQEAIcS+9bwWWoP8d749 VJK0BthV3l1IGmUbtYrcto1c5EwdAdrRgEM69KZSyTx9Y+M6NCDuIUxp3X9xMG9c JEYa1BgOorhtHDDOgdsHWMJDGJkZ9J2wfGeJb8ELTjtcTTOzv+g3CC8hku/ULe0i T0qnv2VNRYXfBTFtOOLH1fuod+lzk43v/ByUu8R8TSEg4TrDWO9gHY6QF41Ps7OL x+fvNzqneznGoU/hha8XomwkB7xTkOcmTORijcsc2BQl0hsR0yRehEivLNShiW/T NWgJChOpFXEJrMz/KTMVEfSZl9Gn+S+fetolmWNO60C/3i8BnYC3MQnOUT+Ni4Op rU0iXw== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:53 2024 by rpki-client on console.sobornost.net