$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4affefc16664d983226ff3f1bc946b548b6fbe74.roa File: 4affefc16664d983226ff3f1bc946b548b6fbe74.roa (raw, json) Hash identifier: HZCrosrWQsSsGSaZ/dk6QZ8nV5CMItycMwcYZ2zQwbY= Subject key identifier: 57:BA:31:A0:E5:6F:8A:69:8F:92:DF:5A:7E:EC:48:D2:F6:E1:33:1F Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361 Certificate serial: 21387D Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4affefc16664d983226ff3f1bc946b548b6fbe74.roa Signing time: Fri 05 May 2023 20:54:59 +0000 ROA not before: Thu 04 May 2023 20:54:59 +0000 ROA not after: Mon 05 May 2025 20:54:59 +0000 asID: 26506 IP address blocks: 200.25.82.0/23 maxlen: 24 200.25.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177149 (0x21387d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361 Validity Not Before: May 4 20:54:59 2023 GMT Not After : May 5 20:54:59 2025 GMT Subject: CN=4affefc16664d983226ff3f1bc946b548b6fbe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:d5:ce:cc:f7:fe:4f:72:76:20:93:59:6f: ec:99:6e:cb:b3:d5:37:a7:ab:43:4e:ef:0c:95:22: 20:8b:bd:d5:fb:34:2a:69:dc:a2:e5:1b:90:23:10: 26:9f:53:ed:17:ed:54:00:24:89:46:8a:5d:9e:14: cb:62:61:be:2b:f3:d2:45:88:65:f3:ef:58:3c:1c: 0d:41:4a:63:74:29:d0:2d:8d:b5:03:f4:4b:1c:0d: b7:be:7d:3a:90:6b:b3:f7:5a:84:8d:ba:d6:d5:b1: 5f:01:56:5e:0c:db:fa:86:4d:5b:b7:8c:17:96:df: 49:34:ee:c0:28:54:74:fb:f7:ee:93:cd:ca:50:40: d6:db:f5:67:2f:69:ba:49:a9:e7:28:be:78:1c:0c: 04:c6:77:0c:e5:e2:a1:c7:cb:3e:f8:e1:5d:d1:24: a6:2d:d2:7e:6f:bf:15:ea:3d:ae:f8:c8:ee:b2:5d: 06:9d:57:e9:d8:7e:7f:a4:f0:00:88:55:d3:65:81: 63:66:89:a8:5e:df:84:11:76:20:d1:14:d1:c4:0d: 44:c8:d6:06:9e:ac:4f:85:7a:4f:3c:e8:33:db:06: d4:3a:69:b9:34:46:74:4c:c5:e9:3f:6b:20:f6:aa: 84:f3:f2:4e:5f:c1:85:d3:30:f5:70:00:64:1c:2a: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BA:31:A0:E5:6F:8A:69:8F:92:DF:5A:7E:EC:48:D2:F6:E1:33:1F X509v3 Authority Key Identifier: keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4affefc16664d983226ff3f1bc946b548b6fbe74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.25.82.0/23 200.25.86.0/23 Signature Algorithm: sha256WithRSAEncryption 70:52:09:dc:3c:ae:01:26:41:7a:05:ad:44:3f:46:d1:b6:c5: ec:7f:9a:53:6e:f4:6b:50:0a:e4:a7:14:dd:4b:34:5b:f5:22: e3:06:c2:4a:1b:9e:ec:fa:10:08:4a:d0:a1:88:32:4b:4a:65: 31:25:10:4b:82:be:b4:bb:2f:3d:91:ed:e1:68:82:59:c9:42: 50:00:c7:9f:a1:cf:af:a9:f8:78:2b:59:ff:ce:11:9a:82:25: cf:31:9f:69:a6:9d:07:5d:c5:59:ab:4a:f1:ad:71:8b:07:2a: 4e:f1:a3:b5:c3:b2:0d:5c:f6:a5:2b:fd:1d:04:3b:54:ce:b0: 1c:11:14:bd:ce:6c:46:d7:47:1f:56:90:d3:96:9b:20:5d:89: ed:f5:08:d0:c4:4f:ea:84:bb:52:44:77:e4:e8:f7:e0:0a:cb: c4:b6:c8:dc:3f:ca:dd:66:85:7e:92:0d:11:f0:71:fc:b0:3e: a4:68:50:70:90:88:e3:63:90:9c:1a:56:09:a1:84:39:c3:be: a0:00:60:81:9c:da:82:de:16:51:a1:2e:df:96:eb:a7:10:71: 72:98:f0:bd:62:41:29:af:08:a5:f1:ea:a4:e1:1c:ec:a1:e9: a2:4b:7a:3f:b5:46:ee:60:52:3d:46:ae:39:f6:a5:73:c2:92: 84:d4:13:1e -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIDITh9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5 N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjMwNTA0 MjA1NDU5WhcNMjUwNTA1MjA1NDU5WjAzMTEwLwYDVQQDEyg0YWZmZWZjMTY2NjRk OTgzMjI2ZmYzZjFiYzk0NmI1NDhiNmZiZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnafVzsz3/k9ydiCTWW/smW7Ls9U3p6tDTu8MlSIgi73V+zQq adyi5RuQIxAmn1PtF+1UACSJRopdnhTLYmG+K/PSRYhl8+9YPBwNQUpjdCnQLY21 A/RLHA23vn06kGuz91qEjbrW1bFfAVZeDNv6hk1bt4wXlt9JNO7AKFR0+/fuk83K UEDW2/VnL2m6SannKL54HAwExncM5eKhx8s++OFd0SSmLdJ+b78V6j2u+Mjusl0G nVfp2H5/pPAAiFXTZYFjZomoXt+EEXYg0RTRxA1EyNYGnqxPhXpPPOgz2wbUOmm5 NEZ0TMXpP2sg9qqE8/JOX8GF0zD1cABkHCop2wIDAQABo4ICYTCCAl0wHQYDVR0O BBYEFFe6MaDlb4ppj5LfWn7sSNL24TMfMB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5 YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz M2Y1NWRhLzRhZmZlZmMxNjY2NGQ5ODMyMjZmZjNmMWJjOTQ2YjU0OGI2ZmJlNzQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2 MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAcgZUgMEAcgZVjANBgkqhkiG9w0BAQsFAAOCAQEAcFIJ3Dyu ASZBegWtRD9G0bbF7H+aU270a1AK5KcU3Us0W/Ui4wbCShue7PoQCErQoYgyS0pl MSUQS4K+tLsvPZHt4WiCWclCUADHn6HPr6n4eCtZ/84RmoIlzzGfaaadB13FWatK 8a1xiwcqTvGjtcOyDVz2pSv9HQQ7VM6wHBEUvc5sRtdHH1aQ05abIF2J7fUI0MRP 6oS7UkR35Oj34ArLxLbI3D/K3WaFfpINEfBx/LA+pGhQcJCI42OQnBpWCaGEOcO+ oABggZzagt4WUaEu35brpxBxcpjwvWJBKa8IpfHqpOEc7KHpokt6P7VG7mBSPUau Ofalc8KShNQTHg== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:32 2024 by rpki-client on console.sobornost.net