$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa File: 5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa (raw, json) Hash identifier: yXxKU8TXfcPosaheA3CI17A4IRmaubYzjKpJ2ZKapl0= Subject key identifier: EF:82:C9:48:7D:87:4D:87:FD:9A:E6:22:75:C3:5B:10:C1:6A:38:C7 Certificate issuer: /CN=a79f7c916be3a1ea7251327afacd5a877554edc2 Certificate serial: 15B30C Authority key identifier: 72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa Signing time: Tue 22 Feb 2022 19:27:23 +0000 ROA not before: Tue 22 Feb 2022 03:00:00 +0000 ROA not after: Thu 22 Feb 2024 03:00:00 +0000 asID: 52327 IP address blocks: 131.72.240.0/23 maxlen: 24 131.72.241.0/24 maxlen: 24 131.72.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422092 (0x15b30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79f7c916be3a1ea7251327afacd5a877554edc2 Validity Not Before: Feb 22 03:00:00 2022 GMT Not After : Feb 22 03:00:00 2024 GMT Subject: CN=5026fcd39ec9c1fcefdabb46d8c31af39475c33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:4c:bd:90:e6:be:43:db:f5:c3:60:5e:7a: 88:1f:96:9b:2c:5e:f8:16:4c:aa:20:d7:59:11:11: 80:f5:c8:fa:85:d8:43:2a:6c:d3:2b:f5:41:01:52: a2:27:15:0a:0a:94:14:fc:a4:1f:dc:c0:be:eb:37: 11:8a:7b:f5:b9:24:fe:99:11:00:f6:8d:63:0e:73: 18:66:90:71:49:a5:29:42:de:2f:ab:ea:71:b4:5c: fe:fa:83:4c:4c:bf:b2:95:90:7d:a2:f9:11:de:ec: c1:ef:af:33:cd:6d:e5:62:ef:fc:bc:78:60:3f:46: 16:3d:9e:0f:8d:9f:ea:06:cb:41:f6:00:c9:37:37: fc:7d:13:46:a1:4c:b9:19:a0:cb:f6:99:6e:bc:99: 9c:d4:05:b1:c7:2a:86:ba:b2:28:8f:83:d6:3d:3d: 8a:de:50:c6:3d:c6:85:b4:f6:8e:d3:fa:00:08:a3: 69:83:f1:a9:f9:b9:14:ac:e4:9e:d7:fd:19:ab:9a: 72:fc:28:ce:63:fb:8f:91:e4:ce:db:88:28:89:87: 02:a3:87:d1:44:99:40:e7:0e:b0:df:17:8e:26:bf: e1:db:c9:3d:c7:cd:2a:3d:00:60:e0:17:b9:12:97: 82:10:5b:c1:8d:d1:a5:b7:ab:bd:a6:a5:86:37:40: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:82:C9:48:7D:87:4D:87:FD:9A:E6:22:75:C3:5B:10:C1:6A:38:C7 X509v3 Authority Key Identifier: keyid:72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.240.0-131.72.242.255 Signature Algorithm: sha256WithRSAEncryption 3a:14:28:e5:ea:bb:fb:a4:29:33:31:77:28:5a:bd:a7:39:0e: e1:1d:ff:05:10:ea:fa:60:f7:5b:ae:17:dc:0d:3f:ef:a5:b1: 84:1b:9f:ee:98:a0:93:95:52:4e:7a:3a:ba:54:1e:cb:dd:0f: 30:09:08:67:4f:05:b7:72:02:8e:1a:f5:38:8d:40:9f:e2:4c: cb:65:76:61:b6:92:16:c4:67:1e:dc:be:2e:a9:fd:b6:53:47: 4c:4e:61:cb:71:fc:90:95:c1:2a:b5:5a:ff:c5:0b:d6:6c:5f: 06:1b:22:95:15:46:e7:36:d8:ca:b4:2f:0e:09:da:52:fa:1b: aa:26:38:85:c1:13:5a:77:c1:8e:2a:d4:2d:90:9c:f8:06:53: 29:3c:4b:87:b2:6c:44:c8:06:1f:9f:c4:e0:d0:d0:05:2a:d0: dc:88:17:ee:f1:c6:05:3d:2d:4d:b1:92:df:0d:dc:28:6f:ee: a7:61:7a:86:22:f3:fc:88:de:1f:c2:2d:13:df:d6:3b:44:18: 38:13:63:88:01:5f:ac:a9:f5:21:fd:92:90:58:d2:05:1f:3b: f9:e4:64:fb:05:af:a6:36:4b:bb:a4:cf:e6:4a:77:d4:f5:b3: 36:c2:51:e9:95:ba:00:40:54:a6:27:91:d8:f0:28:ea:36:63: 5d:28:ef:09 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIDFbMMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3 OWY3YzkxNmJlM2ExZWE3MjUxMzI3YWZhY2Q1YTg3NzU1NGVkYzIwHhcNMjIwMjIy MDMwMDAwWhcNMjQwMjIyMDMwMDAwWjAzMTEwLwYDVQQDEyg1MDI2ZmNkMzllYzlj MWZjZWZkYWJiNDZkOGMzMWFmMzk0NzVjMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjcxMvZDmvkPb9cNgXnqIH5abLF74FkyqINdZERGA9cj6hdhD KmzTK/VBAVKiJxUKCpQU/KQf3MC+6zcRinv1uST+mREA9o1jDnMYZpBxSaUpQt4v q+pxtFz++oNMTL+ylZB9ovkR3uzB768zzW3lYu/8vHhgP0YWPZ4PjZ/qBstB9gDJ Nzf8fRNGoUy5GaDL9pluvJmc1AWxxyqGurIoj4PWPT2K3lDGPcaFtPaO0/oACKNp g/Gp+bkUrOSe1/0Zq5py/CjOY/uPkeTO24goiYcCo4fRRJlA5w6w3xeOJr/h28k9 x80qPQBg4Be5EpeCEFvBjdGlt6u9pqWGN0BFiQIDAQABo4ICYzCCAl8wHQYDVR0O BBYEFO+CyUh9h02H/ZrmInXDWxDBajjHMB8GA1UdIwQYMBaAFHL+pQ4G3rRJrnre beA6Kco9qt8bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc5Zjdj OTE2YmUzYTFlYTcyNTEzMjdhZmFjZDVhODc3NTU0ZWRjMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvY2U3MGU2YjgtOTAxMy00YmQ2LTljOGYtZGZiYmZh M2JjMTEyLzUwMjZmY2QzOWVjOWMxZmNlZmRhYmI0NmQ4YzMxYWYzOTQ3NWMzM2Uu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jZTcwZTZiOC05MDEzLTRiZDYtOWM4Zi1kZmJi ZmEzYmMxMTIvYTc5ZjdjOTE2YmUzYTFlYTcyNTEzMjdhZmFjZDVhODc3NTU0ZWRj Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQEg0jwAwQAg0jyMA0GCSqGSIb3DQEBCwUAA4IBAQA6FCjl 6rv7pCkzMXcoWr2nOQ7hHf8FEOr6YPdbrhfcDT/vpbGEG5/umKCTlVJOejq6VB7L 3Q8wCQhnTwW3cgKOGvU4jUCf4kzLZXZhtpIWxGce3L4uqf22U0dMTmHLcfyQlcEq tVr/xQvWbF8GGyKVFUbnNtjKtC8OCdpS+huqJjiFwRNad8GOKtQtkJz4BlMpPEuH smxEyAYfn8Tg0NAFKtDciBfu8cYFPS1NsZLfDdwob+6nYXqGIvP8iN4fwi0T39Y7 RBg4E2OIAV+sqfUh/ZKQWNIFHzv55GT7Ba+mNku7pM/mSnfU9bM2wlHplboAQFSm J5HY8CjqNmNdKO8J -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:18 2024 by rpki-client on console.sobornost.net