$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/0c93368efb4c282490ca06e7d17416d1b5389d0b.roa File: 0c93368efb4c282490ca06e7d17416d1b5389d0b.roa (raw, json) Hash identifier: 2P23oOpZF4I0KiXAtwc4FJPK++PHkdUGzfz6l1QdPLY= Subject key identifier: 53:F7:A8:E7:26:31:C9:BE:6F:0C:54:F4:FA:9E:10:3F:87:9B:B9:FA Certificate issuer: /CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b Certificate serial: 23D9B4 Authority key identifier: B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/0c93368efb4c282490ca06e7d17416d1b5389d0b.roa Signing time: Wed 06 Sep 2023 13:19:55 +0000 ROA not before: Tue 05 Sep 2023 13:19:55 +0000 ROA not after: Sat 06 Sep 2025 13:19:55 +0000 asID: 27839 IP address blocks: 201.150.160.0/21 maxlen: 24 201.150.172.0/22 maxlen: 24 201.150.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2349492 (0x23d9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b Validity Not Before: Sep 5 13:19:55 2023 GMT Not After : Sep 6 13:19:55 2025 GMT Subject: CN=0c93368efb4c282490ca06e7d17416d1b5389d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:73:bc:4f:f7:ab:f7:40:a8:6c:e9:a9:33: a1:5d:fe:45:bb:14:0d:69:d6:f4:54:7f:41:52:8f: 34:ee:ab:5f:db:9a:dd:60:53:c7:8c:b9:f3:c9:66: 89:71:5b:b7:36:35:56:90:fb:99:ed:35:eb:9f:b4: 21:0a:52:23:0e:81:a5:5f:c5:e7:62:49:74:c4:bb: fb:b8:a4:c7:5c:c0:42:11:b1:b9:36:72:a9:46:f7: c8:a5:de:8b:12:e9:0f:84:3d:01:0e:e3:b6:30:ca: 72:9e:8f:14:a8:a9:fd:3c:fa:f0:ee:cd:13:c6:bc: 5f:a6:15:08:31:0d:3d:3e:1e:b7:0b:6f:b7:c0:c1: c2:b0:f2:19:16:c5:91:c7:41:3b:1c:e6:ee:38:51: 70:06:d4:d4:b1:e7:19:06:5e:41:fb:46:67:4e:6e: 0a:03:dd:9e:8b:30:dd:55:6f:e6:31:7c:ed:15:2e: 76:3e:1d:26:55:17:95:40:b8:76:9b:b8:8f:0f:30: aa:07:6d:94:bf:4f:2c:dd:95:1f:07:24:29:dd:61: 32:7c:1b:9c:06:b4:0a:22:56:57:e9:53:d6:95:93: 00:80:fc:91:7b:ef:c9:db:bc:d2:98:d6:3c:fb:bd: 5a:a3:46:16:93:6e:9b:0d:ea:0d:17:14:01:cc:63: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F7:A8:E7:26:31:C9:BE:6F:0C:54:F4:FA:9E:10:3F:87:9B:B9:FA X509v3 Authority Key Identifier: keyid:B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/0c93368efb4c282490ca06e7d17416d1b5389d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.150.160.0/21 201.150.172.0-201.150.191.255 Signature Algorithm: sha256WithRSAEncryption 56:2c:6c:3e:50:60:9a:1b:16:5b:3f:0e:05:19:b4:13:52:3c: 63:ef:bd:d8:2a:aa:5f:9b:cf:e9:b3:2d:54:b9:2f:8b:c0:aa: 24:2e:4e:71:9e:52:2e:00:37:9b:cf:a3:66:91:d4:6b:b5:b8: 29:50:41:70:a2:2c:65:8f:51:d6:4b:f1:35:1d:80:33:85:2f: a7:62:2e:fd:a4:c9:e3:08:2d:2c:14:eb:82:c6:69:0c:b1:cd: ad:a1:c1:30:c3:c0:b5:b5:1c:46:79:d3:6b:87:f1:c7:a7:fd: b3:54:7b:17:1c:e5:80:51:a3:ce:3a:dc:20:4a:c9:a0:d6:b7: 3b:93:6c:e6:0c:5e:de:ac:3b:66:65:e7:77:58:bf:5f:d1:47: a3:28:64:a5:50:65:c1:58:7b:4d:f4:08:3b:7a:c5:e2:26:15: ed:fc:a3:74:fd:fb:b8:bb:5a:e6:e7:16:ee:19:9e:75:35:f4: d8:22:28:3a:01:8c:21:fb:76:6a:7e:19:eb:53:3e:00:03:b4: 62:21:44:1b:91:c9:6f:24:93:4f:e1:c4:29:94:4f:05:85:f7: 00:ec:7a:67:80:c9:db:cd:85:3a:db:ea:36:0e:2b:7a:63:f0: 63:d4:ed:a2:4d:42:30:f3:6f:cc:62:d7:8b:7a:af:96:5d:3e: 08:9f:46:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDI9m0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5 YTA2OTlmZTlmNDYwZTFmNGZjZDRkYmVlZTgyOTEwNzg1YjA2NWIwHhcNMjMwOTA1 MTMxOTU1WhcNMjUwOTA2MTMxOTU1WjAzMTEwLwYDVQQDEygwYzkzMzY4ZWZiNGMy ODI0OTBjYTA2ZTdkMTc0MTZkMWI1Mzg5ZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArL1zvE/3q/dAqGzpqTOhXf5FuxQNadb0VH9BUo807qtf25rd YFPHjLnzyWaJcVu3NjVWkPuZ7TXrn7QhClIjDoGlX8XnYkl0xLv7uKTHXMBCEbG5 NnKpRvfIpd6LEukPhD0BDuO2MMpyno8UqKn9PPrw7s0TxrxfphUIMQ09Ph63C2+3 wMHCsPIZFsWRx0E7HObuOFFwBtTUsecZBl5B+0ZnTm4KA92eizDdVW/mMXztFS52 Ph0mVReVQLh2m7iPDzCqB22Uv08s3ZUfByQp3WEyfBucBrQKIlZX6VPWlZMAgPyR e+/J27zSmNY8+71ao0YWk26bDeoNFxQBzGNVNQIDAQABo4ICaTCCAmUwHQYDVR0O BBYEFFP3qOcmMcm+bwxU9PqeED+Hm7n6MB8GA1UdIwQYMBaAFLkPqm1t3m6rtFO/ IhEB/5C7SZvxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODlhMDY5 OWZlOWY0NjBlMWY0ZmNkNGRiZWVlODI5MTA3ODViMDY1Yi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTRjNmRlZWMtMjY1Ny00Y2I0LWE1Y2EtNzc5MWFi MzQ2OGVhLzBjOTMzNjhlZmI0YzI4MjQ5MGNhMDZlN2QxNzQxNmQxYjUzODlkMGIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNGM2ZGVlYy0yNjU3LTRjYjQtYTVjYS03Nzkx YWIzNDY4ZWEvODlhMDY5OWZlOWY0NjBlMWY0ZmNkNGRiZWVlODI5MTA3ODViMDY1 Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFAMEA8mWoDAMAwQCyZasAwQGyZaAMA0GCSqGSIb3DQEBCwUAA4IB AQBWLGw+UGCaGxZbPw4FGbQTUjxj773YKqpfm8/psy1UuS+LwKokLk5xnlIuADeb z6NmkdRrtbgpUEFwoixlj1HWS/E1HYAzhS+nYi79pMnjCC0sFOuCxmkMsc2tocEw w8C1tRxGedNrh/HHp/2zVHsXHOWAUaPOOtwgSsmg1rc7k2zmDF7erDtmZed3WL9f 0UejKGSlUGXBWHtN9Ag7esXiJhXt/KN0/fu4u1rm5xbuGZ51NfTYIig6AYwh+3Zq fhnrUz4AA7RiIUQbkclvJJNP4cQplE8FhfcA7HpngMnbzYU62+o2Dit6Y/Bj1O2i TUIw82/MYteLeq+WXT4In0YD -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:38 2024 by rpki-client on console.sobornost.net