$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa File: f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa (raw, json) Hash identifier: w7HhokUdjbNmRZScRBomR/CztSbiYAdY2J6PRejSEvo= Subject key identifier: 58:72:E1:88:3F:68:1F:71:AC:C8:30:AF:BB:62:89:8C:67:50:49:D6 Certificate issuer: /CN=0127eff5fb89d4f04f362b89beb72d612147af7f Certificate serial: 21929E Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa Signing time: Mon 24 Jul 2023 14:44:38 +0000 ROA not before: Sun 23 Jul 2023 14:44:36 +0000 ROA not after: Thu 24 Jul 2025 14:44:36 +0000 asID: 266846 IP address blocks: 45.238.176.0/23 maxlen: 24 138.0.122.0/23 maxlen: 24 2803:bca0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200222 (0x21929e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f Validity Not Before: Jul 23 14:44:36 2023 GMT Not After : Jul 24 14:44:36 2025 GMT Subject: CN=f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:2d:59:83:83:13:aa:d5:5e:e8:cd:3e:07: 5d:43:f1:2d:3d:36:6a:b2:f1:e9:21:55:40:f9:8f: 32:61:3d:83:f2:ae:9a:ec:c9:33:73:c9:82:55:7b: fa:2b:20:56:b7:0d:38:16:e9:af:1c:6b:fb:73:07: d4:f0:79:f8:84:d7:82:fb:fb:fc:97:9f:6d:78:25: 1d:09:10:13:69:84:83:84:53:11:84:e7:da:23:16: 74:8c:d7:e5:6b:d5:3a:a8:ca:40:37:9a:1e:e6:66: 33:93:55:eb:63:18:bb:b6:fb:fb:4d:00:c9:d8:60: d6:03:85:01:49:40:97:d1:e0:fc:90:bb:ed:1a:31: 70:da:5e:de:1e:6d:55:4b:cc:06:07:43:4d:e5:74: 13:79:8c:59:ee:22:a8:b2:3d:fc:88:57:24:28:29: 37:ec:57:7d:d6:3f:3d:04:39:27:f9:c0:75:14:17: 7d:67:8f:e9:1c:73:57:1c:96:30:12:da:be:f8:93: 87:76:8f:fe:b1:cf:af:2d:7e:f4:5c:af:68:da:90: 56:19:70:f2:1b:87:38:7d:f4:9f:bc:a5:6f:12:a5: de:50:9f:d5:3d:0e:2b:b3:ec:b8:e4:e4:f5:65:00: c0:e3:51:2e:3c:bb:50:85:96:6b:a8:68:6f:c9:9f: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:72:E1:88:3F:68:1F:71:AC:C8:30:AF:BB:62:89:8C:67:50:49:D6 X509v3 Authority Key Identifier: keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.176.0/23 138.0.122.0/23 IPv6: 2803:bca0::/32 Signature Algorithm: sha256WithRSAEncryption 23:cf:93:f2:45:29:dc:31:1e:f6:c7:dd:30:ee:e5:7d:96:d2: 44:e9:93:e2:60:6b:6f:57:72:5d:78:57:92:3a:df:9f:8b:55: e2:5a:8c:c5:5e:3f:41:ce:b9:40:9d:3b:6d:f4:e0:dc:3e:7b: 7d:dc:a1:98:45:17:23:3a:aa:8c:53:bd:93:02:23:72:86:fd: 82:ad:99:1b:8e:72:c9:73:f9:c7:74:29:e0:89:1d:4d:4d:9d: 71:8d:81:15:83:83:f5:33:6e:df:c7:99:99:54:60:81:c6:0b: d8:6e:ef:8f:93:b8:d2:32:8b:8e:c8:bd:17:84:79:9d:50:c8: 3a:b1:5e:92:b8:22:de:ed:13:e8:7d:31:6c:46:11:b3:1f:6f: 52:71:95:80:f7:7c:80:3e:e8:ed:10:20:86:22:79:98:bd:00: fe:be:bc:cf:28:7b:6e:04:f3:47:da:0d:b5:52:44:f9:95:76: d4:cd:50:4c:ef:30:a8:a4:6d:13:30:5c:d6:fa:7b:23:b5:c1: c4:20:4b:10:df:37:d1:e6:c4:9a:37:a8:93:c2:11:d9:46:27: db:c7:b8:b6:a7:4a:86:85:40:41:fe:55:60:28:fe:3f:79:ce: 1c:01:20:70:f6:27:2d:fe:c3:b6:0a:38:86:d5:d8:98:d6:ae: 12:36:ae:e5 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDIZKeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx MjdlZmY1ZmI4OWQ0ZjA0ZjM2MmI4OWJlYjcyZDYxMjE0N2FmN2YwHhcNMjMwNzIz MTQ0NDM2WhcNMjUwNzI0MTQ0NDM2WjAzMTEwLwYDVQQDEyhmMWFkYTJmYmY3MWMw YTFjOWJmNWE0ZDJiOWFiN2RiYjA4ZjBiMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAv58tWYODE6rVXujNPgddQ/EtPTZqsvHpIVVA+Y8yYT2D8q6a 7Mkzc8mCVXv6KyBWtw04FumvHGv7cwfU8Hn4hNeC+/v8l59teCUdCRATaYSDhFMR hOfaIxZ0jNfla9U6qMpAN5oe5mYzk1XrYxi7tvv7TQDJ2GDWA4UBSUCX0eD8kLvt GjFw2l7eHm1VS8wGB0NN5XQTeYxZ7iKosj38iFckKCk37Fd91j89BDkn+cB1FBd9 Z4/pHHNXHJYwEtq++JOHdo/+sc+vLX70XK9o2pBWGXDyG4c4ffSfvKVvEqXeUJ/V PQ4rs+y45OT1ZQDA41EuPLtQhZZrqGhvyZ9xhQIDAQABo4ICcDCCAmwwHQYDVR0O BBYEFFhy4Yg/aB9xrMgwr7tiiYxnUEnWMB8GA1UdIwQYMBaAFPY9QYUeFNUrFKiK 0YhGJhc+hOMrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDEyN2Vm ZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3Zi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz ZDY0MjlhL2YxYWRhMmZiZjcxYzBhMWM5YmY1YTRkMmI5YWI3ZGJiMDhmMGIxNGUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz ZDNkNjQyOWEvMDEyN2VmZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3 Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAS3usAMEAYoAejANBAIAAjAHAwUAKAO8oDANBgkqhkiG9w0B AQsFAAOCAQEAI8+T8kUp3DEe9sfdMO7lfZbSROmT4mBrb1dyXXhXkjrfn4tV4lqM xV4/Qc65QJ07bfTg3D57fdyhmEUXIzqqjFO9kwIjcob9gq2ZG45yyXP5x3Qp4Ikd TU2dcY2BFYOD9TNu38eZmVRggcYL2G7vj5O40jKLjsi9F4R5nVDIOrFekrgi3u0T 6H0xbEYRsx9vUnGVgPd8gD7o7RAghiJ5mL0A/r68zyh7bgTzR9oNtVJE+ZV21M1Q TO8wqKRtEzBc1vp7I7XBxCBLEN830ebEmjeok8IR2UYn28e4tqdKhoVAQf5VYCj+ P3nOHAEgcPYnLf7Dtgo4htXYmNauEjau5Q== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:24 2024 by rpki-client on console.sobornost.net