$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa File: 2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa (raw, json) Hash identifier: UCK4v+zJv3+2kBudEG6NRBGO9HvFyTjSkEmIiqvIXMI= Subject key identifier: FD:76:12:49:F6:F6:4A:7C:43:02:1E:FC:07:3B:BC:7E:31:DD:B9:78 Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2 Certificate serial: 20C7DA Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa Signing time: Wed 10 May 2023 08:30:02 +0000 ROA not before: Tue 09 May 2023 08:30:02 +0000 ROA not after: Thu 08 May 2025 08:30:02 +0000 asID: 264724 IP address blocks: 200.27.72.0/24 maxlen: 24 200.27.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 07:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148314 (0x20c7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2 Validity Not Before: May 9 08:30:02 2023 GMT Not After : May 8 08:30:02 2025 GMT Subject: CN=2d08609b7dcaf85b5577def68f6ddae317d95a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:d1:bf:07:cf:f8:cc:c2:1f:95:6c:fb:16: 96:45:51:a9:2b:f4:25:39:eb:63:fb:59:23:c0:83: 31:78:4c:07:37:c6:f9:a6:42:90:9d:4a:7e:7c:f3: f5:11:9c:89:37:8e:18:fb:ad:9b:ff:94:8b:d3:a2: 55:fc:f5:cb:98:eb:58:65:b0:37:40:69:1d:2c:d4: 23:cf:32:01:ac:26:82:22:4d:a3:90:61:f7:84:36: c2:ba:ea:64:c2:b8:19:07:aa:54:c6:1a:d0:73:f7: b8:49:26:20:c2:06:e0:49:52:55:3d:f4:ff:37:02: 9d:e2:c5:99:74:16:43:e1:95:6c:53:6d:4c:77:1b: 84:01:1e:41:c4:aa:6b:94:6a:50:24:ff:24:12:a8: 2a:23:b8:c6:44:51:83:f1:08:9e:ec:50:38:d2:6b: ca:4b:7b:e9:81:9d:e4:a8:b2:e3:5f:b2:ae:f1:24: c4:35:e0:12:d6:c8:93:3f:a8:a7:9e:03:c1:30:a4: 34:51:16:84:fd:a1:db:88:86:88:99:a6:07:5e:63: 7d:1f:b7:cd:a3:e8:dc:cd:73:ac:a2:80:8d:2e:81: cc:1c:ba:73:3e:69:fe:26:a2:7c:89:a3:21:06:5f: 54:fb:35:4b:f8:71:bb:8c:b6:72:9d:7a:ee:f3:ab: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:76:12:49:F6:F6:4A:7C:43:02:1E:FC:07:3B:BC:7E:31:DD:B9:78 X509v3 Authority Key Identifier: keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/2d08609b7dcaf85b5577def68f6ddae317d95a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.27.72.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:a3:2c:ee:7e:20:b0:21:9c:69:3f:0c:74:3d:34:f1:68:38: a4:ee:af:17:9d:2b:d6:46:d4:17:ed:22:13:52:bc:94:a0:dc: 15:46:19:41:63:11:20:1d:95:04:ce:db:35:24:b9:38:3b:e3: e0:0c:1e:85:b4:6c:9c:8c:30:ac:d2:6d:22:98:05:e5:2f:58: 39:c2:ae:40:20:a8:28:b3:a4:00:60:54:1f:2e:1e:8c:49:94: 4b:10:e4:71:e7:1c:32:70:23:22:c5:b9:96:bb:fd:2b:91:e3: 5a:86:e6:dd:b8:f0:d9:e5:07:ea:6d:af:ed:46:8c:aa:f5:27: 09:3e:14:7c:05:55:1e:35:cd:b3:79:31:34:2c:d8:a5:b0:20: a0:1c:36:da:1d:d4:93:c5:42:f9:e1:e1:ff:ac:75:a6:27:b1: 03:a2:22:93:82:f1:a6:4e:92:66:32:8e:57:1c:d4:7f:c9:31: 8c:02:d0:7b:f6:4c:0e:8d:43:5b:ca:c1:4f:19:0e:cf:5d:5b: c1:a8:7a:3a:3e:c2:2d:97:51:b0:ff:5e:b8:96:f8:79:ad:3a: 15:7c:80:ee:09:7f:2f:0d:2d:50:d1:cf:d6:0f:84:4d:d4:9c: c2:49:7a:d2:a5:45:3d:5f:38:70:35:cd:d3:98:e9:9e:4a:2f: 5b:5c:11:c3 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDIMfaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh YTM0Y2U5M2FjYmZlNzBjNGRlNjQ1MzhkY2EwODk0YjY3MGYwZDIwHhcNMjMwNTA5 MDgzMDAyWhcNMjUwNTA4MDgzMDAyWjAzMTEwLwYDVQQDEygyZDA4NjA5YjdkY2Fm ODViNTU3N2RlZjY4ZjZkZGFlMzE3ZDk1YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAthPRvwfP+MzCH5Vs+xaWRVGpK/QlOetj+1kjwIMxeEwHN8b5 pkKQnUp+fPP1EZyJN44Y+62b/5SL06JV/PXLmOtYZbA3QGkdLNQjzzIBrCaCIk2j kGH3hDbCuupkwrgZB6pUxhrQc/e4SSYgwgbgSVJVPfT/NwKd4sWZdBZD4ZVsU21M dxuEAR5BxKprlGpQJP8kEqgqI7jGRFGD8Qie7FA40mvKS3vpgZ3kqLLjX7Ku8STE NeAS1siTP6inngPBMKQ0URaE/aHbiIaImaYHXmN9H7fNo+jczXOsooCNLoHMHLpz Pmn+JqJ8iaMhBl9U+zVL+HG7jLZynXru86u8lQIDAQABo4ICWzCCAlcwHQYDVR0O BBYEFP12Ekn29kp8QwIe/Ac7vH4x3bl4MB8GA1UdIwQYMBaAFF+F026iJxQ1QEkZ je07lBYn/dU1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FhMzRj ZTkzYWNiZmU3MGM0ZGU2NDUzOGRjYTA4OTRiNjcwZjBkMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTRlNDM3NDMtY2ViYi00ZjI5LTk1NmUtMzYwZDhk MjIwZjU0LzJkMDg2MDliN2RjYWY4NWI1NTc3ZGVmNjhmNmRkYWUzMTdkOTVhMWYu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lNGU0Mzc0My1jZWJiLTRmMjktOTU2ZS0zNjBk OGQyMjBmNTQvN2FhMzRjZTkzYWNiZmU3MGM0ZGU2NDUzOGRjYTA4OTRiNjcwZjBk Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcgbSDANBgkqhkiG9w0BAQsFAAOCAQEAfaMs7n4gsCGcaT8M dD008Wg4pO6vF50r1kbUF+0iE1K8lKDcFUYZQWMRIB2VBM7bNSS5ODvj4AwehbRs nIwwrNJtIpgF5S9YOcKuQCCoKLOkAGBUHy4ejEmUSxDkceccMnAjIsW5lrv9K5Hj Wobm3bjw2eUH6m2v7UaMqvUnCT4UfAVVHjXNs3kxNCzYpbAgoBw22h3Uk8VC+eHh /6x1piexA6Iik4Lxpk6SZjKOVxzUf8kxjALQe/ZMDo1DW8rBTxkOz11bwah6Oj7C LZdRsP9euJb4ea06FXyA7gl/Lw0tUNHP1g+ETdScwkl60qVFPV84cDXN05jpnkov W1wRww== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:31 2024 by rpki-client on console.sobornost.net