$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa File: e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa (raw, json) Hash identifier: KPeuyvtXKr87zKZwpXOT0wAD+CgIV4cZdqS2shPJ+qI= Subject key identifier: 8B:AC:88:12:F1:7A:FD:A8:98:61:82:46:32:20:A3:AA:78:D0:9D:3F Certificate issuer: /CN=05fbbb173c217aa8030fc6d9379843579229ce31 Certificate serial: 1A1FDB Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa Signing time: Wed 10 Aug 2022 19:54:00 +0000 ROA not before: Tue 17 May 2022 03:00:00 +0000 ROA not after: Fri 17 May 2024 03:00:00 +0000 asID: 27986 IP address blocks: 152.231.110.0/24 maxlen: 24 152.231.111.0/24 maxlen: 24 2800:300::/32 maxlen: 128 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712091 (0x1a1fdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31 Validity Not Before: May 17 03:00:00 2022 GMT Not After : May 17 03:00:00 2024 GMT Subject: CN=e1abb9a3a3f62904f48ea13b3a812d7cd3f15064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:8b:92:0f:ee:12:54:10:b3:24:c5:79:e6: 1e:a3:ba:1f:ff:4c:da:e9:56:6d:6f:01:27:59:08: e9:c4:99:3f:b6:f1:2b:7b:b2:b8:9a:de:e8:f9:52: 74:ee:0d:a7:bc:24:32:ee:15:0e:dc:fc:49:b5:65: 34:fb:97:6b:17:01:60:a7:6f:12:bb:b8:57:41:ed: 5f:26:50:a1:6e:6d:51:db:be:cd:25:75:09:e2:93: 24:89:93:ab:53:aa:6c:f0:66:00:b2:df:e6:7e:b3: f9:09:65:7e:98:d1:2b:22:84:f5:5a:1e:cb:16:ac: 03:99:5a:38:ad:96:2b:0a:f3:ce:fc:bd:84:b6:38: ea:55:07:99:ef:41:50:a2:e5:cb:d9:cf:f7:26:11: 93:c9:a2:e4:cb:03:df:91:5d:a7:db:6a:bf:e7:30: b6:59:6c:1f:5d:13:85:7f:cb:d6:d7:66:5b:11:39: cd:0a:11:d7:60:bf:b2:73:9f:2a:50:7f:c6:6b:59: d5:8c:4e:1e:6e:f1:af:dc:f9:1a:c4:aa:ec:2f:53: 39:8e:f5:0a:ff:0a:4c:ab:23:23:04:6b:d7:0d:99: 37:48:35:6d:0a:d3:65:ca:e1:78:b2:22:17:b9:74: fe:8a:48:4f:6f:de:cf:fa:6a:f5:ce:86:32:f0:de: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AC:88:12:F1:7A:FD:A8:98:61:82:46:32:20:A3:AA:78:D0:9D:3F X509v3 Authority Key Identifier: keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.231.110.0/23 IPv6: 2800:300::/32 Signature Algorithm: sha256WithRSAEncryption 78:70:9d:56:f1:35:1e:54:28:3c:3f:0a:7c:d8:3e:58:dd:0b: 8a:ec:23:a6:d1:48:bb:ae:90:43:19:74:60:ea:a0:40:62:32: fa:1a:a6:4d:2c:36:83:7a:f7:e1:95:22:93:8f:b9:74:c6:fb: bc:8c:61:7b:b2:6f:20:00:57:fc:c5:24:54:08:16:c8:29:a1: 61:7e:8f:63:56:e3:25:37:fc:70:6d:86:3d:f6:d7:aa:b0:41: b7:6c:cf:93:c3:23:0d:68:c3:2d:e1:39:88:b5:ba:a7:ab:2a: af:17:fd:78:fa:4c:ef:80:b4:04:4c:17:94:f9:f3:25:d3:56: 90:5f:a2:38:69:d9:98:78:46:ba:dd:01:d1:5c:44:33:81:16: 12:b0:97:2f:e8:24:6e:88:7e:bb:e0:71:1a:47:7d:fb:03:a2: 97:50:57:12:c8:2a:54:61:de:54:bc:c5:0b:46:36:8e:61:33: d7:56:b2:31:80:0c:44:82:59:ce:72:70:d7:a2:92:7c:c8:13: 25:67:d5:32:a7:99:ad:b3:81:97:35:d8:29:f0:d1:0a:b7:40: bf:fd:f2:15:4c:84:4d:60:25:dc:b9:ac:e9:0a:6f:8d:6a:c8: 2f:74:5b:68:03:61:2c:4f:8d:71:b4:fd:fc:5c:c7:5b:87:71: e7:f6:85:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDGh/bMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1 ZmJiYjE3M2MyMTdhYTgwMzBmYzZkOTM3OTg0MzU3OTIyOWNlMzEwHhcNMjIwNTE3 MDMwMDAwWhcNMjQwNTE3MDMwMDAwWjAzMTEwLwYDVQQDEyhlMWFiYjlhM2EzZjYy OTA0ZjQ4ZWExM2IzYTgxMmQ3Y2QzZjE1MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAr42Lkg/uElQQsyTFeeYeo7of/0za6VZtbwEnWQjpxJk/tvEr e7K4mt7o+VJ07g2nvCQy7hUO3PxJtWU0+5drFwFgp28Su7hXQe1fJlChbm1R277N JXUJ4pMkiZOrU6ps8GYAst/mfrP5CWV+mNErIoT1Wh7LFqwDmVo4rZYrCvPO/L2E tjjqVQeZ70FQouXL2c/3JhGTyaLkywPfkV2n22q/5zC2WWwfXROFf8vW12ZbETnN ChHXYL+yc58qUH/Ga1nVjE4ebvGv3PkaxKrsL1M5jvUK/wpMqyMjBGvXDZk3SDVt CtNlyuF4siIXuXT+ikhPb97P+mr1zoYy8N7S8QIDAQABo4ICajCCAmYwHQYDVR0O BBYEFIusiBLxev2omGGCRjIgo6p40J0/MB8GA1UdIwQYMBaAFG3Yh857qEWbykhx HffAqeGP1nKBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVmYmJi MTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2UzMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNDRhZmQxNzAtMDc1ZS00M2RmLWI0YTEtYzM0Zjc2 YzE4Y2NlL2UxYWJiOWEzYTNmNjI5MDRmNDhlYTEzYjNhODEyZDdjZDNmMTUwNjQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80NGFmZDE3MC0wNzVlLTQzZGYtYjRhMS1jMzRm NzZjMThjY2UvMDVmYmJiMTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2Uz MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAZjnbjANBAIAAjAHAwUAKAADADANBgkqhkiG9w0BAQsFAAOC AQEAeHCdVvE1HlQoPD8KfNg+WN0LiuwjptFIu66QQxl0YOqgQGIy+hqmTSw2g3r3 4ZUik4+5dMb7vIxhe7JvIABX/MUkVAgWyCmhYX6PY1bjJTf8cG2GPfbXqrBBt2zP k8MjDWjDLeE5iLW6p6sqrxf9ePpM74C0BEwXlPnzJdNWkF+iOGnZmHhGut0B0VxE M4EWErCXL+gkboh+u+BxGkd9+wOil1BXEsgqVGHeVLzFC0Y2jmEz11ayMYAMRIJZ znJw16KSfMgTJWfVMqeZrbOBlzXYKfDRCrdAv/3yFUyETWAl3Lms6QpvjWrIL3Rb aANhLE+NcbT9/FzHW4dx5/aFpA== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:26 2024 by rpki-client on console.sobornost.net