$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa File: 09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa (raw, json) Hash identifier: bl8dibMfQz3gHuKt+rA/UlBLg3pQgBmTf3aRLRMierY= Subject key identifier: DA:8C:8B:14:69:F1:5B:BA:06:EE:9A:AF:FD:1D:E9:34:38:AA:B8:B8 Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f Certificate serial: 27D579 Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa Signing time: Wed 08 Nov 2023 15:00:48 +0000 ROA not before: Wed 08 Nov 2023 15:00:37 +0000 ROA not after: Wed 08 Nov 2028 15:00:37 +0000 asID: 52328 IP address blocks: 200.123.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610553 (0x27d579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f Validity Not Before: Nov 8 15:00:37 2023 GMT Not After : Nov 8 15:00:37 2028 GMT Subject: CN=09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:2b:2b:8f:dc:5c:4b:b8:fb:41:9f:5d:a5: 31:56:15:58:5f:3f:40:39:56:6f:00:24:1f:b1:ad: 58:68:47:dd:7b:f0:2a:b7:23:63:73:e0:6c:bd:02: c5:f4:20:d4:04:6c:55:ca:74:db:1a:ce:b9:fd:09: 5a:3e:29:c5:4e:46:a2:2d:d9:d8:69:af:8b:06:d5: 46:29:41:59:94:a2:31:72:5c:75:22:6a:65:a6:93: 04:9c:26:59:19:af:59:2c:7e:f9:1b:52:00:d2:30: 48:88:9e:24:35:6d:d9:b2:c6:2c:c2:8d:99:c2:89: d5:22:94:55:62:14:0c:9a:45:2a:cc:b8:2e:8e:f3: f9:64:be:26:00:19:a5:46:8a:90:8e:e6:a0:82:fc: a9:05:d3:1f:cb:80:b1:6a:f4:ef:5f:6e:e9:c4:75: 8b:20:6c:df:94:b6:c2:c0:5e:3a:7d:50:a4:9c:46: d8:8e:24:d7:ea:73:5f:50:a0:72:0a:fb:78:24:46: b5:4c:77:43:eb:d6:ca:7b:4b:24:40:2c:35:2f:14: e2:37:af:48:91:69:e2:1e:3b:3d:f9:90:53:c0:50: 1e:42:83:37:bc:45:db:fd:b7:36:42:c6:78:83:b3: f5:f2:50:75:74:1c:b4:be:5a:40:c2:74:15:ff:2e: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8C:8B:14:69:F1:5B:BA:06:EE:9A:AF:FD:1D:E9:34:38:AA:B8:B8 X509v3 Authority Key Identifier: keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.123.52.0/23 Signature Algorithm: sha256WithRSAEncryption 20:ee:c0:2d:29:ec:9b:96:84:ac:9a:ec:55:23:5f:e0:4c:1a: 75:8a:2f:18:90:a2:14:bb:d3:30:59:5a:5b:b9:fa:bc:2a:11: d7:e1:c1:9f:7f:11:33:d0:42:3c:2d:39:4f:3e:10:e9:d2:9b: 32:c0:93:5c:14:3d:1f:0f:ff:a4:59:91:18:64:cb:2b:83:3c: 0c:00:bd:09:72:ce:c6:31:09:23:db:95:f7:01:09:7e:fb:47: ac:13:ea:cb:1f:73:3d:d6:ad:c7:6b:d8:6b:f6:bc:b1:be:f7: fc:e1:f7:8d:5e:01:97:92:73:18:fb:7a:8a:23:0e:1b:52:86: 0f:a1:96:5f:f7:3a:12:aa:68:5b:16:cb:fb:01:78:cd:bf:df: 19:72:c7:20:ae:0b:9e:e2:64:6b:3d:96:11:e0:6b:b6:2b:5d: 41:3b:fd:d1:32:c4:9b:b5:b9:05:79:21:e9:79:3e:cf:07:b5: bd:a4:0f:2b:a3:66:d3:f3:5a:7c:11:71:7f:4e:ae:14:6d:00: 49:6a:1f:19:5b:5c:d2:ad:42:7e:44:48:17:1b:35:81:3f:65: 52:a0:c7:61:5f:86:1d:7c:a2:1a:3e:26:de:09:26:d2:f2:09: c4:d4:36:d4:68:96:7e:5a:31:27:40:89:c4:54:a9:97:5e:ae: dd:6c:8e:ef -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDJ9V5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4 MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEygwOWYxMjk2YWNlN2I2 MGViYTAxNTk3ZGZiMzNjM2M5ZmQ5ZmYwZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwbgrK4/cXEu4+0GfXaUxVhVYXz9AOVZvACQfsa1YaEfde/Aq tyNjc+BsvQLF9CDUBGxVynTbGs65/QlaPinFTkaiLdnYaa+LBtVGKUFZlKIxclx1 ImplppMEnCZZGa9ZLH75G1IA0jBIiJ4kNW3ZssYswo2ZwonVIpRVYhQMmkUqzLgu jvP5ZL4mABmlRoqQjuaggvypBdMfy4CxavTvX27pxHWLIGzflLbCwF46fVCknEbY jiTX6nNfUKByCvt4JEa1THdD69bKe0skQCw1LxTiN69IkWniHjs9+ZBTwFAeQoM3 vEXb/bc2QsZ4g7P18lB1dBy0vlpAwnQV/y56rwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFNqMixRp8Vu6Bu6ar/0d6TQ4qri4MB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl NjA1NzFlLzA5ZjEyOTZhY2U3YjYwZWJhMDE1OTdkZmIzM2MzYzlmZDlmZjBlMGQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAch7NDANBgkqhkiG9w0BAQsFAAOCAQEAIO7ALSnsm5aErJrs VSNf4EwadYovGJCiFLvTMFlaW7n6vCoR1+HBn38RM9BCPC05Tz4Q6dKbMsCTXBQ9 Hw//pFmRGGTLK4M8DAC9CXLOxjEJI9uV9wEJfvtHrBPqyx9zPdatx2vYa/a8sb73 /OH3jV4Bl5JzGPt6iiMOG1KGD6GWX/c6EqpoWxbL+wF4zb/fGXLHIK4LnuJkaz2W EeBrtitdQTv90TLEm7W5BXkh6Xk+zwe1vaQPK6Nm0/NafBFxf06uFG0ASWofGVtc 0q1CfkRIFxs1gT9lUqDHYV+GHXyiGj4m3gkm0vIJxNQ21GiWfloxJ0CJxFSpl16u 3WyO7w== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:14 2024 by rpki-client on console.sobornost.net