$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/7b95a4575ef612800b22e9fba935e03bcc13fed1.roa File: 7b95a4575ef612800b22e9fba935e03bcc13fed1.roa (raw, json) Hash identifier: qXs8t16uHNMnb9epLyJhOWfpFBUdrOGhIFWUdub1nMs= Subject key identifier: 42:7F:50:83:2B:73:39:DA:EC:AF:1D:EC:5F:47:D7:2C:20:0A:54:87 Certificate issuer: /CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064 Certificate serial: 1C1B3A Authority key identifier: C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/7b95a4575ef612800b22e9fba935e03bcc13fed1.roa Signing time: Wed 13 Sep 2023 18:50:10 +0000 ROA not before: Tue 12 Sep 2023 18:50:10 +0000 ROA not after: Sat 13 Sep 2025 18:50:10 +0000 asID: 267798 IP address blocks: 45.173.16.0/22 maxlen: 24 2803:3fa0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841978 (0x1c1b3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064 Validity Not Before: Sep 12 18:50:10 2023 GMT Not After : Sep 13 18:50:10 2025 GMT Subject: CN=7b95a4575ef612800b22e9fba935e03bcc13fed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:e9:32:1f:49:79:9b:2e:95:68:d0:9a:52: 5c:be:de:06:12:a4:0b:c3:fb:56:2d:28:f5:fd:19: a4:70:56:07:5b:d6:1e:f4:a6:2d:96:9f:d8:79:9c: 4f:c6:66:af:6c:da:02:28:af:0f:3c:b3:37:65:43: 52:c4:c6:f9:cc:3f:07:da:92:9e:ac:3a:d6:20:33: f8:03:9c:06:23:2a:cf:32:29:f1:45:ce:02:d2:8a: 97:ba:99:74:e8:6e:88:f8:df:9b:ee:dd:a3:e4:7e: 0d:31:84:76:b9:52:08:24:56:6c:7e:5d:d9:b8:92: 01:c6:b5:78:db:ad:d7:22:fd:db:f1:a3:04:67:7c: a9:96:30:7e:9e:11:bc:9e:43:ec:be:80:a8:67:ef: cf:a5:af:c2:47:83:e0:04:92:ee:7b:f3:81:f1:fe: d9:a4:d2:07:79:9f:b8:7b:cf:ec:64:66:e5:59:26: 61:20:7d:d8:ea:38:37:3c:7d:cd:f7:4c:be:85:39: f6:00:a7:fb:e5:40:b4:4c:b5:fe:1a:a7:a2:ac:21: 19:fa:5f:60:04:e9:d4:68:5e:fa:01:a5:61:b9:a9: c3:45:42:10:f1:1d:4d:07:15:57:8b:55:bb:2f:4d: 8e:2e:35:ff:61:6d:ba:6a:0e:ca:66:bc:ae:37:34: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:50:83:2B:73:39:DA:EC:AF:1D:EC:5F:47:D7:2C:20:0A:54:87 X509v3 Authority Key Identifier: keyid:C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/7b95a4575ef612800b22e9fba935e03bcc13fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.16.0/22 IPv6: 2803:3fa0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:45:64:0f:9c:ec:c0:82:24:71:79:1a:4f:85:f3:f7:9a:a7: b0:34:39:aa:0a:9e:ba:87:a0:7e:c8:88:cd:eb:a8:bd:61:72: 75:69:e7:46:6a:52:28:52:fd:5c:47:fd:93:d1:3f:4d:4d:8c: 00:12:94:31:41:17:39:24:03:b4:b0:bd:cf:3a:e3:5b:fb:ca: eb:44:e9:b9:67:89:5c:46:fe:d9:b3:40:0d:30:d2:78:f3:a8: d7:f3:67:a8:92:c5:66:ff:51:15:8f:17:3c:22:6f:e9:7e:bd: 6a:a2:ac:b4:8e:87:64:d1:a0:13:2e:85:c6:96:ce:b4:13:46: 61:24:47:5e:6d:7b:f9:ca:4d:b9:30:af:f4:8e:85:b7:2f:3a: 5d:89:09:c2:1c:32:df:06:5f:03:4c:f4:02:51:ff:33:d8:ed: c5:34:2b:e4:84:c8:f0:7f:64:9b:0b:42:10:0c:7e:02:1b:fd: b9:87:50:03:a2:f5:34:db:8d:0a:f6:87:38:a7:70:3d:e4:f7: 42:8d:8c:c6:e9:b2:44:a3:a2:da:1e:65:29:7e:f5:6d:67:00: e0:cd:1f:1e:c5:2a:ea:f7:6d:6f:ea:20:58:eb:16:12:89:e4: 71:66:84:68:94:3d:55:27:4b:e4:26:7c:39:bc:1c:ce:ae:f0: 55:29:a3:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDHBs6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU4 MGJiNmFkNWE3ZTQxZGI0MmM1YTZmNWI4OGVmZThhZWY2MGMwNjQwHhcNMjMwOTEy MTg1MDEwWhcNMjUwOTEzMTg1MDEwWjAzMTEwLwYDVQQDEyg3Yjk1YTQ1NzVlZjYx MjgwMGIyMmU5ZmJhOTM1ZTAzYmNjMTNmZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAparpMh9JeZsulWjQmlJcvt4GEqQLw/tWLSj1/RmkcFYHW9Ye 9KYtlp/YeZxPxmavbNoCKK8PPLM3ZUNSxMb5zD8H2pKerDrWIDP4A5wGIyrPMinx Rc4C0oqXupl06G6I+N+b7t2j5H4NMYR2uVIIJFZsfl3ZuJIBxrV4263XIv3b8aME Z3ypljB+nhG8nkPsvoCoZ+/Ppa/CR4PgBJLue/OB8f7ZpNIHeZ+4e8/sZGblWSZh IH3Y6jg3PH3N90y+hTn2AKf75UC0TLX+GqeirCEZ+l9gBOnUaF76AaVhuanDRUIQ 8R1NBxVXi1W7L02OLjX/YW26ag7KZryuNzQg8wIDAQABo4ICajCCAmYwHQYDVR0O BBYEFEJ/UIMrczna7K8d7F9H1ywgClSHMB8GA1UdIwQYMBaAFMYJ84gkTcu35gb2 9C1osshPVm10MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTgwYmI2 YWQ1YTdlNDFkYjQyYzVhNmY1Yjg4ZWZlOGFlZjYwYzA2NC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNmYzYzdjOWEtYzJjYi00NjUwLWE5NTMtZjdiODEy NThmOTQyLzdiOTVhNDU3NWVmNjEyODAwYjIyZTlmYmE5MzVlMDNiY2MxM2ZlZDEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82ZjNjN2M5YS1jMmNiLTQ2NTAtYTk1My1mN2I4 MTI1OGY5NDIvNTgwYmI2YWQ1YTdlNDFkYjQyYzVhNmY1Yjg4ZWZlOGFlZjYwYzA2 NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAi2tEDANBAIAAjAHAwUAKAM/oDANBgkqhkiG9w0BAQsFAAOC AQEAP0VkD5zswIIkcXkaT4Xz95qnsDQ5qgqeuoegfsiIzeuovWFydWnnRmpSKFL9 XEf9k9E/TU2MABKUMUEXOSQDtLC9zzrjW/vK60TpuWeJXEb+2bNADTDSePOo1/Nn qJLFZv9RFY8XPCJv6X69aqKstI6HZNGgEy6FxpbOtBNGYSRHXm17+cpNuTCv9I6F ty86XYkJwhwy3wZfA0z0AlH/M9jtxTQr5ITI8H9kmwtCEAx+Ahv9uYdQA6L1NNuN CvaHOKdwPeT3Qo2MxumyRKOi2h5lKX71bWcA4M0fHsUq6vdtb+ogWOsWEonkcWaE aJQ9VSdL5CZ8Obwczq7wVSmjzQ== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:43 2024 by rpki-client on console.sobornost.net