$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa File: 7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa (raw, json) Hash identifier: 9N2MI8NRXUC6dbjgTC+G6GpiSDBS97srwbUwA1n/0dg= Subject key identifier: 6F:7C:0D:27:58:CC:7D:A6:09:78:5D:E3:B2:B3:32:7C:31:6F:4B:AC Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2 Certificate serial: 21A411 Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa Signing time: Thu 06 Apr 2023 12:02:07 +0000 ROA not before: Wed 05 Apr 2023 12:02:06 +0000 ROA not after: Sun 06 Apr 2025 12:02:06 +0000 asID: 394353 IP address blocks: 170.247.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204689 (0x21a411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2 Validity Not Before: Apr 5 12:02:06 2023 GMT Not After : Apr 6 12:02:06 2025 GMT Subject: CN=7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:ad:27:9c:6b:a3:d2:b7:84:eb:6c:32:60: 45:4c:bb:f5:30:83:5a:9a:79:54:85:a4:b3:34:55: 36:5e:ac:7a:33:a3:d2:8f:06:52:ea:8c:55:b6:b3: 4a:0c:8f:73:54:33:c2:d8:24:6c:a6:cd:a3:1e:ba: 1e:b6:c3:17:fe:2e:d8:07:6b:4e:dc:84:d2:55:02: 6b:ce:90:79:01:32:9a:ce:af:73:3a:5f:dd:b8:6a: 98:fe:06:1f:20:c4:ee:d9:2b:4b:f7:57:04:7c:f9: 56:a9:f5:04:26:10:d6:ee:55:1a:f9:58:05:80:47: 93:d9:8a:fd:2e:66:43:5b:22:56:bd:51:0a:d2:24: 20:08:d2:5c:02:c3:5f:3c:79:53:50:13:fd:8b:e3: 38:7c:a1:8c:c7:c9:1d:00:13:1f:00:f9:90:c9:b5: b9:60:7e:29:4d:a6:d7:0a:8c:85:13:40:47:dd:7e: 9d:32:f4:8c:70:80:ba:89:17:27:e6:5d:08:df:4c: 49:19:67:59:90:b9:08:fe:4a:e4:6e:e8:6c:72:4a: f5:e8:1b:64:79:28:c7:9c:5f:43:ff:c2:ce:14:39: 91:e1:3a:41:2b:64:f2:3f:e7:16:88:fd:b8:0f:f1: 58:81:7d:af:99:e8:5e:a9:5c:1e:05:4e:4f:fd:95: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7C:0D:27:58:CC:7D:A6:09:78:5D:E3:B2:B3:32:7C:31:6F:4B:AC X509v3 Authority Key Identifier: keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.170.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:e6:ab:2e:5e:44:ed:4f:73:c0:62:c3:5a:14:29:83:74:c8: 23:eb:ec:4c:3a:9c:c2:02:da:1d:1b:10:a8:93:25:83:60:1e: 93:8f:27:dc:7c:ca:a7:77:92:c9:49:48:5f:49:e6:33:9e:41: 44:ba:9f:c8:d5:62:d5:3b:dc:3e:da:d2:ab:48:13:3c:96:93: ca:f9:3f:22:c4:f4:6e:30:2e:2b:a4:d7:90:57:f8:9c:80:f7: 11:74:0e:ce:94:dd:8a:49:29:5e:0e:d3:5e:a8:1b:80:64:79: 12:f6:d1:16:52:c1:5d:a5:58:d8:3e:18:ef:20:8d:d7:a6:9e: 91:e6:d2:99:14:ed:f5:49:a9:fc:1e:9d:d1:66:2a:39:87:27: 99:70:84:1d:28:22:00:37:ac:21:1d:09:c3:23:18:bc:6d:14: 75:ff:ea:1c:ec:2e:6e:0e:b8:29:a7:5a:ae:db:74:4a:d6:45: fe:d5:b1:ec:21:b9:a9:42:81:a0:ed:64:1b:41:24:70:97:eb: 55:e0:ef:dd:4b:08:07:1e:e3:e1:0e:b1:06:6d:88:50:09:bd: ed:f4:87:88:9e:bc:ed:e2:68:59:63:1b:df:25:04:50:ee:67: 44:34:92:df:0b:bb:11:9c:7e:1d:ae:58:5c:33:70:91:b9:c4: a1:92:5b:c8 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDIaQRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNDA1 MTIwMjA2WhcNMjUwNDA2MTIwMjA2WjAzMTEwLwYDVQQDEyg3ZWM4ZTNkZTczZjYz MDEyNzhiNTdmYjE1Y2NlYmJlNGJjMWM4Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjlatJ5xro9K3hOtsMmBFTLv1MINamnlUhaSzNFU2Xqx6M6PS jwZS6oxVtrNKDI9zVDPC2CRsps2jHroetsMX/i7YB2tO3ITSVQJrzpB5ATKazq9z Ol/duGqY/gYfIMTu2StL91cEfPlWqfUEJhDW7lUa+VgFgEeT2Yr9LmZDWyJWvVEK 0iQgCNJcAsNfPHlTUBP9i+M4fKGMx8kdABMfAPmQybW5YH4pTabXCoyFE0BH3X6d MvSMcIC6iRcn5l0I30xJGWdZkLkI/krkbuhsckr16BtkeSjHnF9D/8LOFDmR4TpB K2TyP+cWiP24D/FYgX2vmeheqVweBU5P/ZW9MwIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFG98DSdYzH2mCXhd47KzMnwxb0usMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2 MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3 Y2VkMjA5LzdlYzhlM2RlNzNmNjMwMTI3OGI1N2ZiMTVjY2ViYmU0YmMxYzhjYjEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAar3qjANBgkqhkiG9w0BAQsFAAOCAQEAO+arLl5E7U9zwGLD WhQpg3TII+vsTDqcwgLaHRsQqJMlg2Aek48n3HzKp3eSyUlIX0nmM55BRLqfyNVi 1TvcPtrSq0gTPJaTyvk/IsT0bjAuK6TXkFf4nID3EXQOzpTdikkpXg7TXqgbgGR5 EvbRFlLBXaVY2D4Y7yCN16aekebSmRTt9Ump/B6d0WYqOYcnmXCEHSgiADesIR0J wyMYvG0Udf/qHOwubg64Kadartt0StZF/tWx7CG5qUKBoO1kG0EkcJfrVeDv3UsI Bx7j4Q6xBm2IUAm97fSHiJ687eJoWWMb3yUEUO5nRDSS3wu7EZx+Ha5YXDNwkbnE oZJbyA== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:18 2024 by rpki-client on console.sobornost.net