$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/84bc7cb88602e3d3c387e614c78d688e8d82b883.roa File: 84bc7cb88602e3d3c387e614c78d688e8d82b883.roa (raw, json) Hash identifier: 3mVEQFBPgLaBuSRxSVZtywZ95tzqgPFeC8eVqC8Fko4= Subject key identifier: 38:0A:7E:7C:F7:EE:80:0A:2B:BD:39:A7:90:AE:71:E5:55:34:8B:78 Certificate issuer: /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4 Certificate serial: 26641E Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/84bc7cb88602e3d3c387e614c78d688e8d82b883.roa Signing time: Fri 27 Oct 2023 16:37:43 +0000 ROA not before: Fri 27 Oct 2023 16:37:36 +0000 ROA not after: Fri 27 Oct 2028 16:37:36 +0000 asID: 22724 IP address blocks: 200.7.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 10:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2515998 (0x26641e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4 Validity Not Before: Oct 27 16:37:36 2023 GMT Not After : Oct 27 16:37:36 2028 GMT Subject: CN=84bc7cb88602e3d3c387e614c78d688e8d82b883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:82:d5:07:45:cc:e6:d6:2d:40:d8:fa:3c: 6a:ae:33:e7:89:0d:68:ae:02:bf:c3:12:75:25:e6: 0c:38:24:11:e3:8d:0c:3d:8b:39:9d:0f:aa:aa:61: 56:e1:c6:bf:ae:5d:f2:b2:27:48:96:fe:49:12:13: 15:24:e3:b4:ba:0a:53:36:c9:d9:58:0e:cb:91:34: 8f:96:72:7c:50:bf:8b:32:3e:d3:08:8e:c6:c6:1b: bd:c2:fa:e1:4f:c5:b3:ec:df:33:8f:7d:cd:05:5d: 58:9c:1a:d1:ec:92:2d:b2:30:02:60:c1:03:79:72: 85:94:5c:dd:f7:44:43:43:da:20:eb:23:29:6b:46: 4f:b5:26:53:44:7e:f3:bc:6f:fd:bf:38:ac:55:fa: 01:c7:f3:3a:ef:6c:c5:6d:50:6e:3f:a6:99:7a:de: 7f:8c:dd:8f:b9:c2:71:74:3f:5d:79:b2:6f:b7:bd: e0:34:00:ac:d9:56:af:a3:bc:78:4d:07:dc:49:70: af:a8:1d:91:0c:0b:f3:45:59:35:e4:2e:7b:55:09: 1c:c7:c3:60:eb:b2:05:39:ae:78:99:79:5e:b2:74: 2d:08:3b:5c:8b:a7:2b:81:3e:c9:b2:4a:36:b7:c0: 59:7f:95:e6:13:8a:44:dd:f3:86:2d:da:15:cd:6d: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0A:7E:7C:F7:EE:80:0A:2B:BD:39:A7:90:AE:71:E5:55:34:8B:78 X509v3 Authority Key Identifier: keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/84bc7cb88602e3d3c387e614c78d688e8d82b883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.7.211.0/24 Signature Algorithm: sha256WithRSAEncryption 06:19:ac:a8:50:2c:de:db:00:da:e4:b6:b4:36:e3:65:cc:4c: db:0b:f7:0a:5a:2d:de:3c:5b:e0:67:f4:25:49:48:05:f1:d6: a0:a9:1f:80:27:91:c6:c9:24:74:86:37:d8:d5:d4:fa:2d:d6: 96:ce:83:7b:8d:b7:81:44:eb:3e:92:e7:b5:10:87:65:f0:d8: 11:d9:3e:35:df:ae:bb:60:15:12:32:8b:df:49:b5:83:c3:81: 4e:f3:3c:b0:c2:c6:76:f2:86:65:ac:13:7e:a8:c6:40:02:31: e8:b8:5a:20:21:f6:54:11:2c:c8:1c:a3:e2:e9:30:db:ab:77: 8d:33:d6:06:50:71:b5:e6:e3:8d:3d:f6:bb:90:35:d3:0f:e6: 4e:2c:56:da:46:cb:b3:58:20:85:54:e2:05:43:c4:1f:16:8d: f1:59:b2:ed:af:f1:15:60:53:55:3f:3a:6a:19:0a:b4:9a:fc: a2:af:81:0e:e3:d9:6f:f6:0d:4d:f0:5b:54:cb:86:eb:d7:7a: f3:2b:15:92:e4:d3:fa:84:68:5c:e9:fb:cd:b0:a1:61:2e:a9: 9d:bc:7b:c3:eb:42:ec:d0:04:18:75:cd:84:f4:d1:b5:43:45: b2:16:e2:65:85:67:51:8e:f6:c9:0b:e3:5e:ac:6c:f8:85:3e: 16:33:3b:b6 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDJmQeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz YzE1MjQxYzZhZjhmYzlhZTYyNTYzOWJkYmZhMmJlZjY5MTliZTQwHhcNMjMxMDI3 MTYzNzM2WhcNMjgxMDI3MTYzNzM2WjAzMTEwLwYDVQQDEyg4NGJjN2NiODg2MDJl M2QzYzM4N2U2MTRjNzhkNjg4ZThkODJiODgzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqrqC1QdFzObWLUDY+jxqrjPniQ1orgK/wxJ1JeYMOCQR440M PYs5nQ+qqmFW4ca/rl3ysidIlv5JEhMVJOO0ugpTNsnZWA7LkTSPlnJ8UL+LMj7T CI7Gxhu9wvrhT8Wz7N8zj33NBV1YnBrR7JItsjACYMEDeXKFlFzd90RDQ9og6yMp a0ZPtSZTRH7zvG/9vzisVfoBx/M672zFbVBuP6aZet5/jN2PucJxdD9debJvt73g NACs2Vavo7x4TQfcSXCvqB2RDAvzRVk15C57VQkcx8Ng67IFOa54mXlesnQtCDtc i6crgT7Jsko2t8BZf5XmE4pE3fOGLdoVzW2JJwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFDgKfnz37oAKK705p5CuceVVNIt4MB8GA1UdIwQYMBaAFDz9LAROcn3+W7pK whmA4PR6+SKvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDNjMTUy NDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJlNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5 Y2NmNTY2Lzg0YmM3Y2I4ODYwMmUzZDNjMzg3ZTYxNGM3OGQ2ODhlOGQ4MmI4ODMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh ZTljY2Y1NjYvZDNjMTUyNDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJl NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMgH0zANBgkqhkiG9w0BAQsFAAOCAQEABhmsqFAs3tsA2uS2 tDbjZcxM2wv3Clot3jxb4Gf0JUlIBfHWoKkfgCeRxskkdIY32NXU+i3Wls6De423 gUTrPpLntRCHZfDYEdk+Nd+uu2AVEjKL30m1g8OBTvM8sMLGdvKGZawTfqjGQAIx 6LhaICH2VBEsyByj4ukw26t3jTPWBlBxtebjjT32u5A10w/mTixW2kbLs1gghVTi BUPEHxaN8Vmy7a/xFWBTVT86ahkKtJr8oq+BDuPZb/YNTfBbVMuG69d68ysVkuTT +oRoXOn7zbChYS6pnbx7w+tC7NAEGHXNhPTRtUNFshbiZYVnUY72yQvjXqxs+IU+ FjM7tg== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:37 2024 by rpki-client on console.sobornost.net