$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa File: 0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa (raw, json) Hash identifier: mcS+aihAT2KuWHt438Gx79fLLjq7tQbDFDEMo80pxMw= Subject key identifier: 20:C9:5B:2D:02:43:B4:75:BD:2C:1B:FF:38:66:00:BA:7F:CF:3D:61 Certificate issuer: /CN=30415e525ae2a6911d8229a69de6df7b5716b468 Certificate serial: 22B281 Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa Signing time: Wed 05 Jul 2023 01:48:55 +0000 ROA not before: Tue 04 Jul 2023 01:48:54 +0000 ROA not after: Sat 05 Jul 2025 01:48:54 +0000 asID: 52468 IP address blocks: 128.201.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273921 (0x22b281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468 Validity Not Before: Jul 4 01:48:54 2023 GMT Not After : Jul 5 01:48:54 2025 GMT Subject: CN=0083c35bc1b31d1d14f62a037383e4b1a88ca9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f1:46:76:53:3f:8e:c6:60:bd:07:7c:0d:0e: 3f:db:9b:b6:99:5f:1e:04:fe:66:35:ef:18:c1:b7: bf:02:02:11:b5:85:ee:c1:22:5b:e6:57:98:37:fe: 65:e1:51:38:c7:5f:c0:df:eb:55:45:0d:87:13:e6: 47:a4:ad:e0:28:61:a8:2a:d0:4a:81:08:f8:aa:ec: 4b:53:b6:1c:93:37:80:53:32:8e:8b:39:3e:15:1c: dc:26:b6:64:85:e5:37:3c:06:e7:b2:19:8a:17:93: ae:54:b1:08:f8:71:3c:0f:04:71:f9:20:bf:98:e4: 0f:89:94:60:9d:dd:50:8e:7c:37:27:c6:9d:5b:b7: 3c:55:19:3e:e6:9c:6a:9a:95:ad:06:d5:6a:ec:9f: 6e:a8:09:57:22:f7:99:34:f7:0e:d3:46:c9:d4:45: 91:cd:3e:24:42:8e:4d:1e:fb:23:20:47:f3:04:45: 2b:03:5e:cf:6a:5b:df:e3:7d:7b:56:bf:f4:11:c3: c8:30:55:5d:68:99:a1:fe:51:88:28:e8:e5:21:e3: 3e:42:3a:2f:30:5c:11:b3:20:5e:35:59:2c:31:f9: 9b:1a:20:23:f5:d4:df:d6:32:77:fe:44:55:90:d3: 3a:b4:d8:bf:25:5e:1f:dc:b2:85:4a:46:af:04:67: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C9:5B:2D:02:43:B4:75:BD:2C:1B:FF:38:66:00:BA:7F:CF:3D:61 X509v3 Authority Key Identifier: keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.163.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:98:27:26:af:36:32:b9:a5:91:91:67:ec:fb:32:c1:ca:79: c4:41:46:70:5f:27:bc:b6:53:a2:15:1c:2a:f7:02:74:c1:0f: 56:d0:3c:69:0e:77:5c:ba:05:d3:92:fc:0d:f4:79:23:b9:22: cd:15:8c:5a:2c:d4:d5:3e:3c:09:8a:f1:19:a7:e5:37:af:6c: b3:fc:47:32:bd:d8:fd:fe:3c:5d:aa:30:54:cd:4d:73:6f:9e: 9d:54:0d:1f:4c:a0:af:8e:c7:39:3b:df:1f:0f:9c:da:c0:2e: 39:aa:f7:92:46:cb:81:e4:49:1d:ed:44:cc:ce:43:c5:83:d4: 1b:f5:23:67:8d:ce:49:3b:11:a2:87:55:c6:58:8f:6a:df:fb: a5:2a:d3:5f:ea:63:b8:9e:22:88:b2:ba:ed:64:e5:ab:20:69: ae:a7:cc:dc:2d:2f:39:93:fe:cc:96:dd:f8:93:38:d4:3d:02: 14:e3:2f:f9:71:ec:13:b7:9e:b8:d3:2c:5d:82:f0:17:54:53: f3:8d:c9:89:ff:50:2f:30:5e:a5:5e:81:2c:7e:80:2b:45:e6: 97:4f:cb:b9:e7:67:65:d3:65:92:f4:59:d2:69:48:d1:07:e0: a4:d5:8e:5e:a1:95:64:c5:62:96:1a:f6:58:bd:e6:8c:0e:3c: 1c:67:ec:a3 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDIrKBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw NDE1ZTUyNWFlMmE2OTExZDgyMjlhNjlkZTZkZjdiNTcxNmI0NjgwHhcNMjMwNzA0 MDE0ODU0WhcNMjUwNzA1MDE0ODU0WjAzMTEwLwYDVQQDEygwMDgzYzM1YmMxYjMx ZDFkMTRmNjJhMDM3MzgzZTRiMWE4OGNhOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgfFGdlM/jsZgvQd8DQ4/25u2mV8eBP5mNe8Ywbe/AgIRtYXu wSJb5leYN/5l4VE4x1/A3+tVRQ2HE+ZHpK3gKGGoKtBKgQj4quxLU7YckzeAUzKO izk+FRzcJrZkheU3PAbnshmKF5OuVLEI+HE8DwRx+SC/mOQPiZRgnd1Qjnw3J8ad W7c8VRk+5pxqmpWtBtVq7J9uqAlXIveZNPcO00bJ1EWRzT4kQo5NHvsjIEfzBEUr A17Palvf4317Vr/0EcPIMFVdaJmh/lGIKOjlIeM+QjovMFwRsyBeNVksMfmbGiAj 9dTf1jJ3/kRVkNM6tNi/JV4f3LKFSkavBGe/aQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFCDJWy0CQ7R1vSwb/zhmALp/zz1hMB8GA1UdIwQYMBaAFK9gvUmjqME+4/is PN730/SHcbGqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA0MTVl NTI1YWUyYTY5MTFkODIyOWE2OWRlNmRmN2I1NzE2YjQ2OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNzM4M2ViZDYtZmQzZS00ZDYzLWE4MjItZThjZDlm YTJjMjllLzAwODNjMzViYzFiMzFkMWQxNGY2MmEwMzczODNlNGIxYTg4Y2E5YjIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83MzgzZWJkNi1mZDNlLTRkNjMtYTgyMi1lOGNk OWZhMmMyOWUvMzA0MTVlNTI1YWUyYTY5MTFkODIyOWE2OWRlNmRmN2I1NzE2YjQ2 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIDJozANBgkqhkiG9w0BAQsFAAOCAQEAOpgnJq82MrmlkZFn 7Psywcp5xEFGcF8nvLZTohUcKvcCdMEPVtA8aQ53XLoF05L8DfR5I7kizRWMWizU 1T48CYrxGaflN69ss/xHMr3Y/f48XaowVM1Nc2+enVQNH0ygr47HOTvfHw+c2sAu Oar3kkbLgeRJHe1EzM5DxYPUG/UjZ43OSTsRoodVxliPat/7pSrTX+pjuJ4iiLK6 7WTlqyBprqfM3C0vOZP+zJbd+JM41D0CFOMv+XHsE7eeuNMsXYLwF1RT843Jif9Q LzBepV6BLH6AK0Xml0/LuednZdNlkvRZ0mlI0QfgpNWOXqGVZMVilhr2WL3mjA48 HGfsow== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:44 2024 by rpki-client on console.sobornost.net