$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8f65fe162462327d9f6e467b9a0df7a365e9694b.roa File: 8f65fe162462327d9f6e467b9a0df7a365e9694b.roa (raw, json) Hash identifier: Ka9vM4jTCy0ua6XMxHdoMl5iRYYx6RN7eH/IyeVuX/M= Subject key identifier: 3B:69:04:04:00:99:34:8C:F1:8B:6D:82:3C:5B:73:3C:84:A4:7D:4F Certificate issuer: /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592 Certificate serial: 1B3E29 Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8f65fe162462327d9f6e467b9a0df7a365e9694b.roa Signing time: Thu 27 Oct 2022 12:40:26 +0000 ROA not before: Mon 24 Oct 2022 12:12:36 +0000 ROA not after: Sun 27 Oct 2024 12:12:36 +0000 asID: 8048 IP address blocks: 200.90.64.0/18 maxlen: 24 200.84.160.0/19 maxlen: 24 200.90.32.0/19 maxlen: 24 200.90.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785385 (0x1b3e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592 Validity Not Before: Oct 24 12:12:36 2022 GMT Not After : Oct 27 12:12:36 2024 GMT Subject: CN=8f65fe162462327d9f6e467b9a0df7a365e9694b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:69:71:6d:e5:81:f1:94:7a:16:4b:5b:27:b3: a3:3a:82:8e:2f:5c:07:6a:b9:b9:58:70:00:b3:5b: 66:61:47:21:37:5c:15:31:13:31:1b:21:ff:36:96: 7b:dc:47:f5:e7:e4:76:c9:86:9b:3b:3c:28:b9:38: 05:1c:54:c6:c7:06:31:6b:f2:70:36:66:b3:91:38: 4d:c1:f2:71:6a:a9:29:be:97:12:b8:6b:d0:16:10: de:83:1c:78:75:f7:20:96:fa:ac:b6:64:40:60:41: 0c:fb:30:34:78:47:d1:a1:9b:e8:24:05:62:6a:1a: f5:0a:70:ed:c7:93:f7:4a:51:72:a6:fb:93:1c:b1: da:62:9f:da:eb:16:d2:6e:e4:fa:55:78:d1:e0:87: 77:5e:20:58:a6:bf:0d:ba:8b:9d:85:39:50:f1:87: c4:42:fe:01:c6:22:6d:a3:ba:44:d8:51:b0:91:cb: 73:9a:93:eb:d3:1f:ba:a0:58:c5:a7:c2:b9:d5:cc: 32:ae:33:89:55:c6:5d:51:fc:8d:35:d1:8a:0c:5f: 7d:59:f2:b7:18:7f:77:61:51:d5:87:f2:fe:0e:14: 1e:38:aa:ff:8a:17:db:a2:f9:c6:bb:28:b0:4a:50: b1:54:3f:19:79:21:a9:af:95:47:33:38:76:c1:7d: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:69:04:04:00:99:34:8C:F1:8B:6D:82:3C:5B:73:3C:84:A4:7D:4F X509v3 Authority Key Identifier: keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8f65fe162462327d9f6e467b9a0df7a365e9694b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.84.160.0/19 200.90.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5f:4d:01:1a:d8:6c:20:1d:50:53:35:c2:85:79:58:ae:83:96: 14:a2:41:eb:6c:fc:c0:36:ee:9d:e6:a7:40:d9:6e:47:ea:63: 2b:db:ab:48:7d:0b:29:90:2a:00:58:7e:f7:4b:8d:49:85:8e: 42:4b:2b:d2:83:73:b8:af:21:cd:5f:c7:4d:eb:21:b8:4e:ab: 86:aa:b3:dd:69:8b:25:e8:e0:00:6f:f0:28:29:31:8c:f2:58: 74:55:bb:d8:e4:de:40:6f:2f:f2:82:67:39:2e:1f:f7:7f:c9: 9d:b9:5e:60:db:12:e6:d6:4c:44:a1:c8:78:e5:ee:d0:e8:26: 7c:81:f8:2c:57:83:8e:cb:81:08:57:5b:d1:eb:60:28:12:b3: 49:b7:7e:db:4a:b2:3a:7c:0d:f8:83:43:22:0c:41:21:b8:98: 35:c2:7d:40:97:c8:8d:37:64:e4:16:23:c5:93:ce:db:9b:73: 0a:5b:0b:9c:c6:39:85:84:39:8c:26:4c:c5:ca:94:d5:44:b9: f0:b5:87:be:45:e1:b8:9c:97:42:39:4b:4e:3f:c0:8c:04:a6: 3c:e8:78:4b:b1:1a:19:82:73:37:08:a6:b5:35:57:23:0b:43: 86:51:37:e5:04:68:a7:8a:7f:09:c4:05:e4:b8:83:48:4b:e9: b2:d0:6a:47 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDGz4pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4 MDRhMzg5YzNiMDg4MDIxOWVjZjVmN2EzYzYyZDk2YTI3NGI1OTIwHhcNMjIxMDI0 MTIxMjM2WhcNMjQxMDI3MTIxMjM2WjAzMTEwLwYDVQQDEyg4ZjY1ZmUxNjI0NjIz MjdkOWY2ZTQ2N2I5YTBkZjdhMzY1ZTk2OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlGlxbeWB8ZR6FktbJ7OjOoKOL1wHarm5WHAAs1tmYUchN1wV MRMxGyH/NpZ73Ef15+R2yYabOzwouTgFHFTGxwYxa/JwNmazkThNwfJxaqkpvpcS uGvQFhDegxx4dfcglvqstmRAYEEM+zA0eEfRoZvoJAViahr1CnDtx5P3SlFypvuT HLHaYp/a6xbSbuT6VXjR4Id3XiBYpr8NuoudhTlQ8YfEQv4BxiJto7pE2FGwkctz mpPr0x+6oFjFp8K51cwyrjOJVcZdUfyNNdGKDF99WfK3GH93YVHVh/L+DhQeOKr/ ihfbovnGuyiwSlCxVD8ZeSGpr5VHMzh2wX3t0QIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFDtpBAQAmTSM8YttgjxbczyEpH1PMB8GA1UdIwQYMBaAFEyxHMsc0/EzWYxq fIsqOZ7SneXmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTgwNGEz ODljM2IwODgwMjE5ZWNmNWY3YTNjNjJkOTZhMjc0YjU5Mi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMThmOWVmMzktNzE5OS00YmY3LWIyYjEtNmIzMGEw MWI4NGRjLzhmNjVmZTE2MjQ2MjMyN2Q5ZjZlNDY3YjlhMGRmN2EzNjVlOTY5NGIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xOGY5ZWYzOS03MTk5LTRiZjctYjJiMS02YjMw YTAxYjg0ZGMvZTgwNGEzODljM2IwODgwMjE5ZWNmNWY3YTNjNjJkOTZhMjc0YjU5 Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEBchUoAMEB8haADANBgkqhkiG9w0BAQsFAAOCAQEAX00BGths IB1QUzXChXlYroOWFKJB62z8wDbuneanQNluR+pjK9urSH0LKZAqAFh+90uNSYWO Qksr0oNzuK8hzV/HTeshuE6rhqqz3WmLJejgAG/wKCkxjPJYdFW72OTeQG8v8oJn OS4f93/JnbleYNsS5tZMRKHIeOXu0OgmfIH4LFeDjsuBCFdb0etgKBKzSbd+20qy OnwN+INDIgxBIbiYNcJ9QJfIjTdk5BYjxZPO25tzClsLnMY5hYQ5jCZMxcqU1US5 8LWHvkXhuJyXQjlLTj/AjASmPOh4S7EaGYJzNwimtTVXIwtDhlE35QRop4p/CcQF 5LiDSEvpstBqRw== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:33 2024 by rpki-client on console.sobornost.net