$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa File: 9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa (raw, json) Hash identifier: p3Rcbu/sSDZRj/24FSPffbS6E6AByIL3qfcGFfiDtXs= Subject key identifier: 0E:40:47:F9:20:A7:60:49:C1:57:5F:0A:D6:46:A7:CA:84:40:78:F6 Certificate issuer: /CN=d802d1f4519aab3e5793a16a3c9971a640951720 Certificate serial: 24CB90 Authority key identifier: 07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa Signing time: Thu 19 Oct 2023 07:30:01 +0000 ROA not before: Wed 18 Oct 2023 07:30:01 +0000 ROA not after: Fri 17 Oct 2025 07:30:01 +0000 asID: 263693 IP address blocks: 138.121.160.0/22 maxlen: 24 179.60.232.0/22 maxlen: 24 2803:3880::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.crl rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411408 (0x24cb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d802d1f4519aab3e5793a16a3c9971a640951720 Validity Not Before: Oct 18 07:30:01 2023 GMT Not After : Oct 17 07:30:01 2025 GMT Subject: CN=9ca3fa3aaedfa7b033c70cd503cfff22e5117022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:26:02:4f:cf:5b:c8:8a:d2:ab:0b:6e:61:41: 2b:d8:66:7f:6a:84:01:dd:0e:3d:2f:2d:9f:4d:46: 09:78:cd:0b:22:db:c7:20:65:7d:9e:1a:4c:8e:6d: fb:d5:7f:8c:82:82:95:21:53:00:07:9a:d7:3f:71: 1a:02:33:68:34:e1:91:dd:89:a1:9d:28:8c:c7:31: 84:24:8b:4d:06:b3:49:73:06:ba:18:a1:91:5e:10: e0:d6:51:d5:a0:f3:16:cc:be:50:8e:37:d9:b6:2f: 5d:63:eb:57:4f:bd:72:1d:17:39:3e:b8:f0:81:5e: 33:77:32:ac:26:6a:c6:49:b9:0d:e2:a2:df:2e:63: 72:4c:56:03:60:d8:5d:da:41:12:6f:d0:7a:c3:21: e9:50:e1:aa:8b:58:e1:32:dc:fb:a6:2f:66:86:cf: ab:38:e3:a9:f6:93:dd:a3:89:8f:a1:d7:15:7e:7e: bb:c9:84:22:39:51:0b:8d:4f:fb:6a:0b:54:91:69: 33:d1:35:0d:0e:41:dd:25:a6:0b:47:4c:da:92:04: 2b:c6:3b:d9:bc:91:61:99:af:4c:30:7d:29:bd:39: e5:b5:4d:f8:7a:60:d5:b4:ce:2f:9d:2b:36:45:00: ff:f4:21:80:e3:74:35:0e:78:d0:df:c1:c0:21:b4: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:40:47:F9:20:A7:60:49:C1:57:5F:0A:D6:46:A7:CA:84:40:78:F6 X509v3 Authority Key Identifier: keyid:07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.160.0/22 179.60.232.0/22 IPv6: 2803:3880::/32 Signature Algorithm: sha256WithRSAEncryption 22:a2:b3:ab:f7:c8:b5:8d:67:a9:cb:0a:75:6e:6b:0e:4a:7c: 86:eb:03:35:ef:0a:4c:53:74:c7:de:a9:1f:cc:9b:f8:e1:f4: 4d:77:bf:49:f3:68:74:54:b6:31:8f:b2:28:cc:65:23:49:e4: b7:a6:e5:5e:cb:41:9d:2b:0b:e7:53:9b:88:6b:8f:dd:e5:7b: ae:0b:c6:db:46:16:4d:ec:61:a2:32:39:e4:9b:11:1a:4a:b5: b4:c1:d5:c1:c8:40:96:b2:51:ab:97:9e:6e:a0:b4:04:70:45: bd:2e:83:62:41:5e:97:34:5d:a9:e4:9d:70:4c:06:18:82:f4: 76:08:bc:a4:10:c5:de:b2:ff:4a:2e:be:19:cd:07:46:3f:62: c8:02:f5:81:eb:9e:8c:8f:67:f8:c4:93:09:72:5a:f4:ab:70: b4:b3:7f:8e:45:d0:13:0d:6c:68:a6:42:8a:d4:d2:e3:f7:64: 34:85:b2:b4:f4:a8:d2:08:93:ec:58:50:ae:56:3e:f8:f9:fe: 32:de:44:92:ac:c1:c5:ba:3c:dc:8a:c2:7c:5d:0f:86:4f:60: a6:76:a3:f7:3a:20:63:0a:1f:bb:bf:ed:21:e9:b6:dc:ab:3e: 51:5d:f3:fc:91:60:72:61:70:69:b4:84:f1:3a:1e:b1:a0:23: e8:2a:73:39 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDJMuQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4 MDJkMWY0NTE5YWFiM2U1NzkzYTE2YTNjOTk3MWE2NDA5NTE3MjAwHhcNMjMxMDE4 MDczMDAxWhcNMjUxMDE3MDczMDAxWjAzMTEwLwYDVQQDEyg5Y2EzZmEzYWFlZGZh N2IwMzNjNzBjZDUwM2NmZmYyMmU1MTE3MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgiYCT89byIrSqwtuYUEr2GZ/aoQB3Q49Ly2fTUYJeM0LItvH IGV9nhpMjm371X+MgoKVIVMAB5rXP3EaAjNoNOGR3YmhnSiMxzGEJItNBrNJcwa6 GKGRXhDg1lHVoPMWzL5QjjfZti9dY+tXT71yHRc5PrjwgV4zdzKsJmrGSbkN4qLf LmNyTFYDYNhd2kESb9B6wyHpUOGqi1jhMtz7pi9mhs+rOOOp9pPdo4mPodcVfn67 yYQiOVELjU/7agtUkWkz0TUNDkHdJaYLR0zakgQrxjvZvJFhma9MMH0pvTnltU34 emDVtM4vnSs2RQD/9CGA43Q1DnjQ38HAIbTZxwIDAQABo4ICcDCCAmwwHQYDVR0O BBYEFA5AR/kgp2BJwVdfCtZGp8qEQHj2MB8GA1UdIwQYMBaAFAfZitlQAegjEHG/ vWslHhSapN0mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDgwMmQx ZjQ1MTlhYWIzZTU3OTNhMTZhM2M5OTcxYTY0MDk1MTcyMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNDE4ZjU1ZjgtYWI1Ny00NGZiLWFiMDYtNjIzOTI4 ZmExMDQ1LzljYTNmYTNhYWVkZmE3YjAzM2M3MGNkNTAzY2ZmZjIyZTUxMTcwMjIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80MThmNTVmOC1hYjU3LTQ0ZmItYWIwNi02MjM5 MjhmYTEwNDUvZDgwMmQxZjQ1MTlhYWIzZTU3OTNhMTZhM2M5OTcxYTY0MDk1MTcy MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAop5oAMEArM86DANBAIAAjAHAwUAKAM4gDANBgkqhkiG9w0B AQsFAAOCAQEAIqKzq/fItY1nqcsKdW5rDkp8husDNe8KTFN0x96pH8yb+OH0TXe/ SfNodFS2MY+yKMxlI0nkt6blXstBnSsL51ObiGuP3eV7rgvG20YWTexhojI55JsR Gkq1tMHVwchAlrJRq5eebqC0BHBFvS6DYkFelzRdqeSdcEwGGIL0dgi8pBDF3rL/ Si6+Gc0HRj9iyAL1geuejI9n+MSTCXJa9KtwtLN/jkXQEw1saKZCitTS4/dkNIWy tPSo0giT7FhQrlY++Pn+Mt5EkqzBxbo83IrCfF0Phk9gpnaj9zogYwofu7/tIem2 3Ks+UV3z/JFgcmFwabSE8ToesaAj6CpzOQ== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:26 2024 by rpki-client on console.sobornost.net