$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa File: a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa (raw, json) Hash identifier: FOJW6vFOU1Za4rBPDpXiGCPq1M+q4il7qm/l7kTc6Dw= Subject key identifier: 05:03:67:68:40:61:97:31:37:67:B2:91:81:1A:A6:84:33:9F:45:B3 Certificate issuer: /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf Certificate serial: 1DB28A Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa Signing time: Mon 24 Apr 2023 15:03:14 +0000 ROA not before: Sun 23 Apr 2023 15:03:14 +0000 ROA not after: Thu 24 Apr 2025 15:03:14 +0000 asID: 269893 IP address blocks: 45.190.86.0/24 maxlen: 24 45.191.74.0/23 maxlen: 24 2803:94e0::/32 maxlen: 38 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 10:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946250 (0x1db28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf Validity Not Before: Apr 23 15:03:14 2023 GMT Not After : Apr 24 15:03:14 2025 GMT Subject: CN=a952e7f6e1e358e5c7a089c700cd07e8062c8e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e3:25:47:91:a5:99:ae:90:46:cb:be:ec:a0: f5:a9:e2:30:3d:56:de:93:5b:8b:40:b8:71:17:4c: bd:7b:bb:79:b9:25:34:2d:55:e9:b1:1c:99:7d:29: 87:1e:8f:da:5a:78:4e:5c:e7:8a:ca:43:e2:66:4a: 82:b6:23:b5:d7:53:05:cc:ec:eb:15:ee:55:98:a1: 0a:3d:c9:85:b5:fa:a2:f7:f9:fc:66:10:8d:0c:ff: 5c:9a:82:3a:68:80:f0:d5:19:3b:1a:4b:23:2b:bd: db:0b:70:f1:e4:3e:92:b4:ef:a7:3e:91:c8:1a:de: bf:4c:67:49:c9:f7:47:a0:1d:61:38:37:f7:c0:9e: b4:3e:58:b5:17:53:2c:a5:89:0d:15:8d:63:b2:7e: f4:a4:b7:dc:10:8c:ea:59:4a:b7:4e:34:fb:08:1f: 12:75:d0:43:62:98:d4:47:19:f0:bc:d5:e8:98:5f: dc:62:28:42:27:ce:e4:ee:2a:38:10:6f:b6:1f:85: df:78:00:54:c2:b4:66:81:e7:0b:f5:22:d4:59:17: 85:0a:bc:56:95:23:3a:8d:b2:de:4a:8a:21:7d:2e: f0:3f:b2:13:90:96:b8:d0:3f:66:c0:6d:9f:3a:24: 3c:bc:c1:cb:c0:48:06:5c:04:e7:51:14:f3:e8:02: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:67:68:40:61:97:31:37:67:B2:91:81:1A:A6:84:33:9F:45:B3 X509v3 Authority Key Identifier: keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.86.0/24 45.191.74.0/23 IPv6: 2803:94e0::/32 Signature Algorithm: sha256WithRSAEncryption 20:93:94:34:7c:85:7f:f8:a6:0c:08:18:a9:66:5f:b4:9f:15: 3f:46:0b:06:ad:65:56:21:ec:54:26:46:fd:b9:89:47:8c:0d: 60:93:85:e3:70:3f:96:f9:3d:78:c2:65:c8:76:f2:47:02:03: 2f:f4:b2:36:78:78:b8:4b:99:b0:97:4d:16:0c:1b:73:5e:98: b5:27:d3:26:0e:6f:24:6e:57:d7:ef:9c:89:1a:ba:f2:a6:92: d7:44:75:b7:41:f2:3d:56:24:8b:44:a1:cc:bf:38:b1:76:62: 36:5d:b4:95:93:89:f9:2a:48:11:fe:04:40:4c:3c:9e:b3:9b: a0:14:58:12:20:8a:db:3e:cf:32:79:e7:94:c5:0d:4a:aa:9a: 35:5d:5e:35:25:ca:2e:67:cf:4d:f5:14:1a:16:95:4f:26:d5: f7:7d:7d:58:c3:72:e1:c9:3f:2e:18:d2:7a:8e:f3:bf:d9:3b: ed:4b:5d:18:39:13:ff:5d:92:3c:36:82:66:3a:51:ed:43:bf: 41:63:08:1a:92:db:3d:f8:89:7d:32:b9:79:fc:01:a8:bd:53: 41:ab:04:9e:54:9c:66:c6:69:e3:e9:66:2c:35:22:11:2f:ab: 61:bb:da:7b:71:b4:26:79:3f:44:71:88:92:37:f3:2b:0b:9c: a8:b2:92:9c -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDHbKKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgw YmRiODcwYzRmN2QyZjkxNTQ0MDFiYmRjNzViNmEyMTBlZTNlY2YwHhcNMjMwNDIz MTUwMzE0WhcNMjUwNDI0MTUwMzE0WjAzMTEwLwYDVQQDEyhhOTUyZTdmNmUxZTM1 OGU1YzdhMDg5YzcwMGNkMDdlODA2MmM4ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjOMlR5Glma6QRsu+7KD1qeIwPVbek1uLQLhxF0y9e7t5uSU0 LVXpsRyZfSmHHo/aWnhOXOeKykPiZkqCtiO111MFzOzrFe5VmKEKPcmFtfqi9/n8 ZhCNDP9cmoI6aIDw1Rk7GksjK73bC3Dx5D6StO+nPpHIGt6/TGdJyfdHoB1hODf3 wJ60Pli1F1MspYkNFY1jsn70pLfcEIzqWUq3TjT7CB8SddBDYpjURxnwvNXomF/c YihCJ87k7io4EG+2H4XfeABUwrRmgecL9SLUWReFCrxWlSM6jbLeSoohfS7wP7IT kJa40D9mwG2fOiQ8vMHLwEgGXATnURTz6AIz2wIDAQABo4ICcDCCAmwwHQYDVR0O BBYEFAUDZ2hAYZcxN2eykYEapoQzn0WzMB8GA1UdIwQYMBaAFPglrcNh9pRVJdlr W17rb6zTZz0rMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODBiZGI4 NzBjNGY3ZDJmOTE1NDQwMWJiZGM3NWI2YTIxMGVlM2VjZi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvM2YzY2M5YmYtMzI4ZS00Zjc4LTljMjUtNzc3Njkx NDhhMzRmL2E5NTJlN2Y2ZTFlMzU4ZTVjN2EwODljNzAwY2QwN2U4MDYyYzhlMjEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zZjNjYzliZi0zMjhlLTRmNzgtOWMyNS03Nzc2 OTE0OGEzNGYvODBiZGI4NzBjNGY3ZDJmOTE1NDQwMWJiZGM3NWI2YTIxMGVlM2Vj Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAC2+VgMEAS2/SjANBAIAAjAHAwUAKAOU4DANBgkqhkiG9w0B AQsFAAOCAQEAIJOUNHyFf/imDAgYqWZftJ8VP0YLBq1lViHsVCZG/bmJR4wNYJOF 43A/lvk9eMJlyHbyRwIDL/SyNnh4uEuZsJdNFgwbc16YtSfTJg5vJG5X1++ciRq6 8qaS10R1t0HyPVYki0ShzL84sXZiNl20lZOJ+SpIEf4EQEw8nrOboBRYEiCK2z7P MnnnlMUNSqqaNV1eNSXKLmfPTfUUGhaVTybV9319WMNy4ck/LhjSeo7zv9k77Utd GDkT/12SPDaCZjpR7UO/QWMIGpLbPfiJfTK5efwBqL1TQasEnlScZsZp4+lmLDUi ES+rYbvae3G0Jnk/RHGIkjfzKwucqLKSnA== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:25 2024 by rpki-client on console.sobornost.net