$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa File: 923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa (raw, json) Hash identifier: Cm/DczuV+UQikmtLCuHcUtulLQyFJnI3MHyhC1vs3O0= Subject key identifier: 59:5D:F2:0A:B9:BB:48:99:3E:73:07:31:87:9A:03:BE:44:FE:61:7D Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14 Certificate serial: 21ED12 Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa Signing time: Sat 24 Jun 2023 01:42:01 +0000 ROA not before: Fri 23 Jun 2023 01:42:01 +0000 ROA not after: Tue 24 Jun 2025 01:42:01 +0000 asID: 23243 IP address blocks: 190.14.7.0/24 maxlen: 24 190.14.8.0/24 maxlen: 24 190.14.9.0/24 maxlen: 24 190.14.10.0/24 maxlen: 24 190.14.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223378 (0x21ed12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14 Validity Not Before: Jun 23 01:42:01 2023 GMT Not After : Jun 24 01:42:01 2025 GMT Subject: CN=923ab03a9b270d4fe2a42f54fc6929ab0b0956e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:aa:18:86:f3:90:72:d3:9e:1f:a5:cc:4f: 70:d7:79:cc:6c:22:5e:ef:73:42:97:92:26:0d:10: 40:31:1a:20:67:e4:47:82:77:ee:6b:12:9b:38:43: 9a:15:a2:d1:f7:b4:71:88:d9:f9:b7:95:1a:96:34: 6a:99:1b:82:12:40:b9:74:2c:4e:e5:92:10:5f:95: 8d:4b:92:3a:10:56:a7:b1:39:a7:7f:e4:61:32:1a: a1:b3:d1:1e:9a:c5:2d:7d:af:14:00:81:57:87:4e: 60:2b:7c:02:9a:d5:73:ba:41:6d:31:e8:b4:d1:f4: 97:dd:8a:5c:af:18:17:07:f8:27:e7:1d:52:8a:8b: 2b:2d:82:8b:ee:e1:24:45:6e:ef:fe:e6:d3:a1:04: e2:4b:2a:0a:41:63:a8:29:3d:df:72:2c:38:cd:ea: 16:2c:b1:c5:e2:82:a5:3f:ba:fb:48:4f:b3:eb:1e: 4a:b7:5f:92:12:d7:f6:b1:7e:10:b9:22:c8:65:23: fc:66:8a:ac:8b:d5:4c:31:fb:40:19:67:9d:83:01: cc:f7:e9:61:3b:75:06:d9:5b:5f:8b:e3:0c:bf:03: ec:ab:25:6a:a0:b7:07:64:d5:97:e7:81:36:d9:4f: c5:20:61:bd:5c:ed:14:be:1f:d8:cd:46:24:b4:30: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5D:F2:0A:B9:BB:48:99:3E:73:07:31:87:9A:03:BE:44:FE:61:7D X509v3 Authority Key Identifier: keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.14.7.0-190.14.11.255 Signature Algorithm: sha256WithRSAEncryption 34:85:fa:2d:da:95:f0:84:bf:f9:e3:61:d8:ed:e9:0b:ad:d6: f0:44:b2:61:c5:bc:67:fc:65:6f:4c:0b:de:d7:c3:74:b3:1e: e4:ee:e7:cc:c7:1e:16:64:94:02:3c:a7:a9:2a:b7:5d:e7:25: cd:f8:09:63:f6:78:12:f8:d4:b3:18:0c:a0:5b:b0:96:3c:f0: 00:dd:de:18:d8:53:27:d5:3a:69:44:59:5a:00:99:be:a3:5b: 88:12:97:31:2c:76:47:40:11:4d:a7:aa:98:53:25:96:81:2e: 93:88:9a:0a:9b:9e:68:d4:fd:c1:17:e6:c0:14:f1:73:f5:9b: 39:e3:de:04:17:b8:7c:b5:70:c9:9d:1a:98:8f:98:b1:60:e8: 47:77:da:fb:49:8d:eb:30:49:1a:d8:1b:86:e8:31:b0:7c:fc: 9f:01:68:02:28:b0:88:a8:5a:ce:4c:16:7d:86:e3:ce:72:55: 44:6d:60:83:db:3d:71:cf:77:54:7c:c8:fd:c6:48:45:d0:99: 2e:2f:94:10:bb:d1:dc:8f:28:e8:0d:c3:1c:69:ef:ce:46:25: 37:31:ac:c4:d9:70:48:ef:64:aa:43:a8:6f:b6:b7:92:64:67: 22:3f:ac:81:80:49:2d:85:a7:bd:23:d9:87:a3:14:fd:75:9f: 74:51:95:5a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIDIe0SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0 OTM1MDc1ZWM0MzVkYmRhMDk0MDZkZjlmYTMyNGZmODAyZjFkMTQwHhcNMjMwNjIz MDE0MjAxWhcNMjUwNjI0MDE0MjAxWjAzMTEwLwYDVQQDEyg5MjNhYjAzYTliMjcw ZDRmZTJhNDJmNTRmYzY5MjlhYjBiMDk1NmUyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtC2qGIbzkHLTnh+lzE9w13nMbCJe73NCl5ImDRBAMRogZ+RH gnfuaxKbOEOaFaLR97RxiNn5t5UaljRqmRuCEkC5dCxO5ZIQX5WNS5I6EFansTmn f+RhMhqhs9EemsUtfa8UAIFXh05gK3wCmtVzukFtMei00fSX3YpcrxgXB/gn5x1S iosrLYKL7uEkRW7v/ubToQTiSyoKQWOoKT3fciw4zeoWLLHF4oKlP7r7SE+z6x5K t1+SEtf2sX4QuSLIZSP8Zoqsi9VMMftAGWedgwHM9+lhO3UG2Vtfi+MMvwPsqyVq oLcHZNWX54E22U/FIGG9XO0Uvh/YzUYktDCt/QIDAQABo4ICYzCCAl8wHQYDVR0O BBYEFFld8gq5u0iZPnMHMYeaA75E/mF9MB8GA1UdIwQYMBaAFHaDFvCIXb+9If/1 Le0rh77RU9ftMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQ5MzUw NzVlYzQzNWRiZGEwOTQwNmRmOWZhMzI0ZmY4MDJmMWQxNC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmVmOTFlZTEtNDIyNC00YzFjLWFlZTYtNWNlMTM4 NjQxYzQ4LzkyM2FiMDNhOWIyNzBkNGZlMmE0MmY1NGZjNjkyOWFiMGIwOTU2ZTIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iZWY5MWVlMS00MjI0LTRjMWMtYWVlNi01Y2Ux Mzg2NDFjNDgvYzQ5MzUwNzVlYzQzNWRiZGEwOTQwNmRmOWZhMzI0ZmY4MDJmMWQx NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQAvg4HAwQCvg4IMA0GCSqGSIb3DQEBCwUAA4IBAQA0hfot 2pXwhL/542HY7ekLrdbwRLJhxbxn/GVvTAve18N0sx7k7ufMxx4WZJQCPKepKrdd 5yXN+Alj9ngS+NSzGAygW7CWPPAA3d4Y2FMn1TppRFlaAJm+o1uIEpcxLHZHQBFN p6qYUyWWgS6TiJoKm55o1P3BF+bAFPFz9Zs5494EF7h8tXDJnRqYj5ixYOhHd9r7 SY3rMEka2BuG6DGwfPyfAWgCKLCIqFrOTBZ9huPOclVEbWCD2z1xz3dUfMj9xkhF 0JkuL5QQu9HcjyjoDcMcae/ORiU3MazE2XBI72SqQ6hvtreSZGciP6yBgEkthae9 I9mHoxT9dZ90UZVa -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:33 2024 by rpki-client on console.sobornost.net