$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/4c9a8fa9db65828bd14a3ccb1d981271ff6574b0.roa File: 4c9a8fa9db65828bd14a3ccb1d981271ff6574b0.roa (raw, json) Hash identifier: HEhKFQlsd3josFkkaExw2xnW/eJP6RVS8k7Rra2q7tk= Subject key identifier: 69:DB:EF:99:5C:EB:15:CD:BC:8D:3F:FD:C5:69:90:6C:32:FC:56:28 Certificate issuer: /CN=2affce9463fa8415cf700b389ea137e31e6bc44d Certificate serial: 20E25B Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/4c9a8fa9db65828bd14a3ccb1d981271ff6574b0.roa Signing time: Mon 26 Jun 2023 02:29:04 +0000 ROA not before: Sun 25 Jun 2023 02:29:04 +0000 ROA not after: Thu 26 Jun 2025 02:29:04 +0000 asID: 263801 IP address blocks: 138.122.188.0/22 maxlen: 25 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155099 (0x20e25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d Validity Not Before: Jun 25 02:29:04 2023 GMT Not After : Jun 26 02:29:04 2025 GMT Subject: CN=4c9a8fa9db65828bd14a3ccb1d981271ff6574b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:e4:ee:f6:54:af:7f:fb:ab:fd:10:8f:21: 3d:20:8e:bb:62:e0:d5:9b:71:96:78:11:bb:d7:8e: 6a:6b:f5:49:5c:ab:ce:29:82:23:32:ff:d8:14:0a: 63:0a:de:49:e7:c5:43:fd:6c:65:29:47:49:47:dd: 96:60:92:2f:82:6e:f1:25:8b:ac:3b:9b:e8:dc:1e: 83:33:9f:13:6b:13:a7:94:8c:17:f2:44:a8:a2:fa: c6:74:d2:f3:08:e7:92:91:e8:dd:ab:4b:08:de:1b: 5f:35:77:8d:19:b1:7d:98:38:c4:a4:28:35:ce:41: 70:d3:77:0d:52:be:41:6b:6a:38:6c:e9:e9:73:04: 98:10:35:91:4d:39:42:4b:56:40:5c:97:1f:a5:9d: 1c:5d:0e:bb:3f:8e:c6:d0:d5:bb:21:9a:60:1d:1e: d2:45:2a:dc:1e:21:7f:59:7d:9e:90:7f:08:68:bd: b9:2a:31:df:53:d1:c4:58:9d:20:39:96:87:23:16: c4:c2:b1:63:da:2f:01:99:8b:a8:f7:98:6c:ea:c7: bc:43:06:97:a0:72:b8:0d:9f:2c:96:91:2b:2a:23: 95:18:5f:f7:be:15:fd:fd:66:63:39:f3:0b:c0:bf: 2d:1a:1e:7f:2c:e1:88:30:c1:6f:90:7f:a6:3e:9f: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DB:EF:99:5C:EB:15:CD:BC:8D:3F:FD:C5:69:90:6C:32:FC:56:28 X509v3 Authority Key Identifier: keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/4c9a8fa9db65828bd14a3ccb1d981271ff6574b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:44:b0:65:96:ac:80:3d:b9:ec:2c:42:23:d6:a3:33:3a:14: 03:4f:3e:19:fd:b8:70:3a:46:ab:3f:f4:8f:43:74:4d:ef:bf: 67:7f:ba:f9:39:85:50:52:21:9f:f5:ba:29:f2:b5:39:d1:6b: 38:13:6a:a5:ab:5d:48:2e:3a:9a:29:10:a8:64:ec:db:0a:93: 0a:72:fc:6b:50:69:38:88:ed:bc:e0:8e:6c:5e:87:fd:6b:3f: 9f:70:e3:b0:b1:38:7e:67:bd:77:4a:32:f6:fc:0f:29:a9:b1: d1:0e:79:e2:ee:a9:29:56:b2:68:21:75:84:bb:55:01:7c:20: b6:bf:e5:3b:32:10:c3:e7:ba:e3:14:0f:c2:7f:76:39:a0:23: c3:d3:f2:b3:12:45:8c:f9:ff:99:c9:92:1b:d3:8e:3e:24:fc: 38:4d:bf:f4:69:8f:96:ba:a6:b8:66:b3:0e:ee:bf:c4:05:08: 08:03:fb:a8:a8:de:37:33:55:35:5f:16:c0:44:af:97:c4:d7: 60:73:48:08:71:73:d6:6b:81:13:13:89:da:de:e9:02:a0:ed: a0:dc:74:71:7a:16:28:a6:eb:51:1f:3c:2d:fa:1b:5a:1e:96: 0e:cb:ea:26:a6:3c:b2:26:41:6e:49:4e:a0:04:71:bd:4e:f3: b5:81:ad:81 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDIOJbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh ZmZjZTk0NjNmYTg0MTVjZjcwMGIzODllYTEzN2UzMWU2YmM0NGQwHhcNMjMwNjI1 MDIyOTA0WhcNMjUwNjI2MDIyOTA0WjAzMTEwLwYDVQQDEyg0YzlhOGZhOWRiNjU4 MjhiZDE0YTNjY2IxZDk4MTI3MWZmNjU3NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiP7k7vZUr3/7q/0QjyE9II67YuDVm3GWeBG7145qa/VJXKvO KYIjMv/YFApjCt5J58VD/WxlKUdJR92WYJIvgm7xJYusO5vo3B6DM58TaxOnlIwX 8kSoovrGdNLzCOeSkejdq0sI3htfNXeNGbF9mDjEpCg1zkFw03cNUr5Ba2o4bOnp cwSYEDWRTTlCS1ZAXJcfpZ0cXQ67P47G0NW7IZpgHR7SRSrcHiF/WX2ekH8IaL25 KjHfU9HEWJ0gOZaHIxbEwrFj2i8BmYuo95hs6se8QwaXoHK4DZ8slpErKiOVGF/3 vhX9/WZjOfMLwL8tGh5/LOGIMMFvkH+mPp9GBQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFGnb75lc6xXNvI0//cVpkGwy/FYoMB8GA1UdIwQYMBaAFFfFc8ohtyJgOB7N YtWFtVtJS9pTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFmZmNl OTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0ZC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjViMDVkNjgtYTNkYS00NWMwLTgxYTYtYjlkMzAw MzQ3NDhmLzRjOWE4ZmE5ZGI2NTgyOGJkMTRhM2NjYjFkOTgxMjcxZmY2NTc0YjAu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iNWIwNWQ2OC1hM2RhLTQ1YzAtODFhNi1iOWQz MDAzNDc0OGYvMmFmZmNlOTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0 ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAop6vDANBgkqhkiG9w0BAQsFAAOCAQEAH0SwZZasgD257CxC I9ajMzoUA08+Gf24cDpGqz/0j0N0Te+/Z3+6+TmFUFIhn/W6KfK1OdFrOBNqpatd SC46mikQqGTs2wqTCnL8a1BpOIjtvOCObF6H/Ws/n3DjsLE4fme9d0oy9vwPKamx 0Q554u6pKVayaCF1hLtVAXwgtr/lOzIQw+e64xQPwn92OaAjw9PysxJFjPn/mcmS G9OOPiT8OE2/9GmPlrqmuGazDu6/xAUICAP7qKjeNzNVNV8WwESvl8TXYHNICHFz 1muBExOJ2t7pAqDtoNx0cXoWKKbrUR88LfobWh6WDsvqJqY8siZBbklOoARxvU7z tYGtgQ== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:37 2024 by rpki-client on console.sobornost.net