$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/8965251be8cc01ec1831e46c2f18a8d0f40a44f3.roa File: 8965251be8cc01ec1831e46c2f18a8d0f40a44f3.roa (raw, json) Hash identifier: SgMnkNTrAx+DY8BPrQ708RDF9Nj/U6S1StsMJrJ7Sek= Subject key identifier: 27:62:9D:8B:35:20:0E:4D:CD:99:67:39:22:F1:92:AD:05:C0:9C:E6 Certificate issuer: /CN=b5cb84b2403a4c6769f3a9c96971e8facdd5b24f Certificate serial: 24AC2C Authority key identifier: 29:DA:7A:6C:6B:65:DC:88:9B:C6:0A:2C:19:E4:30:A9:4A:D8:BD:9C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/8965251be8cc01ec1831e46c2f18a8d0f40a44f3.roa Signing time: Wed 03 Jan 2024 13:35:06 +0000 ROA not before: Wed 03 Jan 2024 13:35:06 +0000 ROA not after: Sat 03 Jan 2026 13:35:06 +0000 asID: 263687 IP address blocks: 131.161.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.crl rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 07:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403372 (0x24ac2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5cb84b2403a4c6769f3a9c96971e8facdd5b24f Validity Not Before: Jan 3 13:35:06 2024 GMT Not After : Jan 3 13:35:06 2026 GMT Subject: CN=8965251be8cc01ec1831e46c2f18a8d0f40a44f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:d9:b3:a5:be:e8:ce:4e:81:74:9e:96:a2: 1f:95:f6:d3:9c:8a:bf:c3:4d:13:db:f5:1a:ed:38: 9f:97:ee:e9:19:4e:5c:95:66:f0:0a:47:fc:8d:b2: f5:ba:bf:9d:62:37:9f:71:50:2b:cf:fa:b0:ca:e7: fb:e0:32:cf:3c:4e:0b:3a:6d:8d:2f:bd:e7:56:dc: 9e:b6:24:8e:eb:d8:c1:6d:79:f3:8e:97:7d:b3:a0: 7c:79:82:07:2c:3e:50:17:3f:ca:88:b6:93:53:82: 20:ee:c7:5f:17:58:e2:bd:da:bb:7f:e0:f8:a1:b9: a9:ad:e7:d3:56:df:e1:8b:ba:cc:d2:56:a1:51:52: d0:f9:46:8f:2f:78:84:7e:97:a8:8e:08:27:af:df: f4:4f:88:ce:6a:03:cf:28:b4:22:7d:b3:6a:4c:39: e7:ed:5e:1f:5d:d6:67:3d:b8:5d:e6:1f:cd:0f:7a: 14:ae:b3:91:3e:6a:37:9e:0d:b3:64:2c:37:ed:1c: 18:93:17:37:96:bf:d3:16:3c:46:a3:77:70:fd:0b: 36:d6:2a:d4:c0:e0:b7:8e:b0:0b:73:e5:d9:9b:f1: 0e:10:94:d6:69:0e:75:5f:40:c5:a5:a4:ad:4d:19: f8:03:2d:32:9e:a7:62:83:3f:02:6e:4f:da:e4:c4: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:9D:8B:35:20:0E:4D:CD:99:67:39:22:F1:92:AD:05:C0:9C:E6 X509v3 Authority Key Identifier: keyid:29:DA:7A:6C:6B:65:DC:88:9B:C6:0A:2C:19:E4:30:A9:4A:D8:BD:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/8965251be8cc01ec1831e46c2f18a8d0f40a44f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:16:82:a7:ae:11:b9:bd:be:06:7b:5b:74:ec:02:ab:51:73: 1f:f0:8e:be:92:67:13:84:82:05:43:1a:04:c7:24:f4:7b:37: 63:b3:7e:83:9e:5c:50:37:ba:80:b7:c2:64:f4:a1:6f:cf:d8: 7c:c9:af:b0:08:8f:00:75:2f:9a:23:2d:54:72:2e:45:d0:eb: 9a:dd:4c:db:67:81:45:c4:e6:38:6c:28:ee:b1:48:f2:bc:03: f8:e1:00:27:da:f3:e3:f8:36:44:62:ee:4d:66:88:1e:a4:4c: e6:72:fb:47:a1:4f:e4:49:88:ac:6c:ca:2a:12:1e:f2:2f:aa: a0:a5:72:60:ad:0f:de:94:1d:6f:46:89:9f:9f:ea:0e:75:91: 27:15:5f:79:57:f9:0b:46:67:85:49:b8:59:ef:c2:8c:34:f4: a4:d4:e5:d6:56:a6:f5:a7:25:7f:21:b4:83:5d:3d:f9:81:39: 6d:b0:13:d9:97:20:da:1e:cb:ea:0b:e8:65:a9:71:25:59:79: b1:ba:cc:12:24:e2:2b:62:51:be:d3:04:b3:ce:25:f5:e8:bb: 71:68:c6:42:a8:85:1f:ea:6d:74:bb:02:d7:d9:47:aa:12:b6: 63:e4:8d:d1:ca:20:fa:bc:70:6a:14:f1:bd:5d:a2:cf:df:15: cf:f7:da:2b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDJKwsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1 Y2I4NGIyNDAzYTRjNjc2OWYzYTljOTY5NzFlOGZhY2RkNWIyNGYwHhcNMjQwMTAz MTMzNTA2WhcNMjYwMTAzMTMzNTA2WjAzMTEwLwYDVQQDEyg4OTY1MjUxYmU4Y2Mw MWVjMTgzMWU0NmMyZjE4YThkMGY0MGE0NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAp+fZs6W+6M5OgXSelqIflfbTnIq/w00T2/Ua7Tifl+7pGU5c lWbwCkf8jbL1ur+dYjefcVArz/qwyuf74DLPPE4LOm2NL73nVtyetiSO69jBbXnz jpd9s6B8eYIHLD5QFz/KiLaTU4Ig7sdfF1jivdq7f+D4obmprefTVt/hi7rM0lah UVLQ+UaPL3iEfpeojggnr9/0T4jOagPPKLQifbNqTDnn7V4fXdZnPbhd5h/ND3oU rrORPmo3ng2zZCw37RwYkxc3lr/TFjxGo3dw/Qs21irUwOC3jrALc+XZm/EOEJTW aQ51X0DFpaStTRn4Ay0ynqdigz8Cbk/a5MTr/QIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFCdinYs1IA5NzZlnOSLxkq0FwJzmMB8GA1UdIwQYMBaAFCnaemxrZdyIm8YK LBnkMKlK2L2cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjVjYjg0 YjI0MDNhNGM2NzY5ZjNhOWM5Njk3MWU4ZmFjZGQ1YjI0Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzc5N2NmZGMtNGU3My00MmMzLTk4ZDMtNTRmM2Q5 ZGZjNTk4Lzg5NjUyNTFiZThjYzAxZWMxODMxZTQ2YzJmMThhOGQwZjQwYTQ0ZjMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zNzk3Y2ZkYy00ZTczLTQyYzMtOThkMy01NGYz ZDlkZmM1OTgvYjVjYjg0YjI0MDNhNGM2NzY5ZjNhOWM5Njk3MWU4ZmFjZGQ1YjI0 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAoOh7DANBgkqhkiG9w0BAQsFAAOCAQEAXBaCp64Rub2+Bntb dOwCq1FzH/COvpJnE4SCBUMaBMck9Hs3Y7N+g55cUDe6gLfCZPShb8/YfMmvsAiP AHUvmiMtVHIuRdDrmt1M22eBRcTmOGwo7rFI8rwD+OEAJ9rz4/g2RGLuTWaIHqRM 5nL7R6FP5EmIrGzKKhIe8i+qoKVyYK0P3pQdb0aJn5/qDnWRJxVfeVf5C0ZnhUm4 We/CjDT0pNTl1lam9aclfyG0g109+YE5bbAT2Zcg2h7L6gvoZalxJVl5sbrMEiTi K2JRvtMEs84l9ei7cWjGQqiFH+ptdLsC19lHqhK2Y+SN0cog+rxwahTxvV2iz98V z/faKw== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:24 2024 by rpki-client on console.sobornost.net