$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa File: 580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa (raw, json) Hash identifier: ulTfGUG0iyKFKd2c0bur0ukRI37thoFkE1Glh4AgK/o= Subject key identifier: F2:7F:59:68:B5:73:A0:19:CD:51:2B:44:0E:BB:04:3D:93:9F:87:74 Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361 Certificate serial: 23B388 Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa Signing time: Mon 14 Aug 2023 16:46:25 +0000 ROA not before: Sun 13 Aug 2023 16:46:25 +0000 ROA not after: Thu 14 Aug 2025 16:46:25 +0000 asID: 64124 IP address blocks: 200.25.80.0/24 maxlen: 24 2800:1e0:2430::/44 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339720 (0x23b388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361 Validity Not Before: Aug 13 16:46:25 2023 GMT Not After : Aug 14 16:46:25 2025 GMT Subject: CN=580f4f7276ce1be8d8b9a42b577f16d6318d9f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:c3:ab:b0:9f:9e:16:4b:18:61:ce:8a:4d: 33:c3:7e:d5:9f:ac:75:c8:cb:aa:7a:4b:30:9d:b6: d1:19:94:61:1c:52:83:ae:c9:f4:ef:56:05:1a:03: 97:1f:6d:57:65:ce:45:1f:f0:4e:af:f1:7a:3c:6f: 04:c6:ed:5e:5b:48:29:15:97:b8:d2:52:ec:b7:bb: 6b:ac:9a:6e:76:01:ad:6c:57:ef:e3:36:fc:93:5c: d4:c0:b1:f2:be:97:ec:b3:63:cc:e8:62:95:c8:d4: c8:4d:43:f8:0e:08:78:0e:03:9e:8f:d0:e9:ab:7b: d5:ca:87:bc:28:9e:b2:f8:0a:99:97:6f:2f:17:d1: db:f3:83:99:d6:b6:4c:93:f6:ab:a2:39:07:c0:7c: 52:42:43:ce:1a:e7:d2:99:4a:77:ce:66:98:49:66: 6d:6b:66:7c:18:da:02:e8:5c:46:dc:52:f6:0d:e3: 51:fd:2c:2a:30:d2:6f:6d:d6:ea:cf:98:84:99:18: a3:d4:03:50:a1:82:aa:6d:a0:02:60:23:5f:8e:7e: 8e:7b:bf:2d:36:78:07:7f:b5:5c:10:df:94:d1:f0: 18:2b:37:53:cc:89:0c:25:ee:7d:21:6b:94:0d:54: 76:46:23:dc:10:6a:67:02:59:e9:dd:13:aa:57:82: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7F:59:68:B5:73:A0:19:CD:51:2B:44:0E:BB:04:3D:93:9F:87:74 X509v3 Authority Key Identifier: keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.25.80.0/24 IPv6: 2800:1e0:2430::/44 Signature Algorithm: sha256WithRSAEncryption 31:95:9c:83:9a:30:3c:b7:3d:d1:50:5a:aa:0d:d6:36:22:96: 51:a2:c0:4f:fd:8f:c5:e7:71:b7:15:c7:fd:11:b4:eb:33:f3: 91:a2:09:9e:47:9b:c5:1d:09:2f:4d:98:7e:e2:68:fe:e8:18: df:a1:01:b9:23:9d:7a:92:ff:13:70:13:36:4b:9d:91:dc:35: b6:ee:f7:f5:e8:94:e6:09:ed:f0:9d:99:5d:74:5a:7d:8b:30: 9f:37:ff:fc:9c:42:2b:85:b8:f0:d4:57:3c:1a:de:7a:e8:5f: 07:68:21:4c:d9:a7:9b:d4:81:cf:59:d6:7a:f4:32:78:2c:77: f0:37:00:64:0e:10:08:ce:63:18:3f:4c:f7:ab:9e:31:86:58: e7:1a:56:ad:a0:e4:33:e6:40:6c:49:ad:96:ec:7f:50:84:95: 75:25:aa:37:ca:17:bc:8e:ea:2c:02:be:4e:a9:90:25:d1:b3: 8b:32:49:c1:55:c8:4b:82:5f:a0:3c:cb:6b:66:3c:79:20:d6: 0f:81:61:34:ac:0d:e0:24:7d:b9:ff:66:86:ce:e6:7f:24:de: 8e:76:96:3b:af:c3:45:72:ab:84:b4:24:07:1f:21:2f:03:81: ea:a5:e1:e4:11:38:f5:b7:64:99:92:3b:14:18:90:a6:54:f7: e5:82:a5:c2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDI7OIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5 N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjMwODEz MTY0NjI1WhcNMjUwODE0MTY0NjI1WjAzMTEwLwYDVQQDEyg1ODBmNGY3Mjc2Y2Ux YmU4ZDhiOWE0MmI1NzdmMTZkNjMxOGQ5ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAoa/Dq7CfnhZLGGHOik0zw37Vn6x1yMuqekswnbbRGZRhHFKD rsn071YFGgOXH21XZc5FH/BOr/F6PG8Exu1eW0gpFZe40lLst7trrJpudgGtbFfv 4zb8k1zUwLHyvpfss2PM6GKVyNTITUP4Dgh4DgOej9Dpq3vVyoe8KJ6y+AqZl28v F9Hb84OZ1rZMk/arojkHwHxSQkPOGufSmUp3zmaYSWZta2Z8GNoC6FxG3FL2DeNR /SwqMNJvbdbqz5iEmRij1ANQoYKqbaACYCNfjn6Oe78tNngHf7VcEN+U0fAYKzdT zIkMJe59IWuUDVR2RiPcEGpnAlnp3ROqV4LrDQIDAQABo4ICbDCCAmgwHQYDVR0O BBYEFPJ/WWi1c6AZzVErRA67BD2Tn4d0MB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5 YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz M2Y1NWRhLzU4MGY0ZjcyNzZjZTFiZThkOGI5YTQyYjU3N2YxNmQ2MzE4ZDlmM2Uu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2 MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAMgZUDAPBAIAAjAJAwcEKAAB4CQwMA0GCSqGSIb3DQEBCwUA A4IBAQAxlZyDmjA8tz3RUFqqDdY2IpZRosBP/Y/F53G3Fcf9EbTrM/ORogmeR5vF HQkvTZh+4mj+6BjfoQG5I516kv8TcBM2S52R3DW27vf16JTmCe3wnZlddFp9izCf N//8nEIrhbjw1Fc8Gt566F8HaCFM2aeb1IHPWdZ69DJ4LHfwNwBkDhAIzmMYP0z3 q54xhljnGlatoOQz5kBsSa2W7H9QhJV1Jao3yhe8juosAr5OqZAl0bOLMknBVchL gl+gPMtrZjx5INYPgWE0rA3gJH25/2aGzuZ/JN6OdpY7r8NFcquEtCQHHyEvA4Hq peHkETj1t2SZkjsUGJCmVPflgqXC -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:32 2024 by rpki-client on console.sobornost.net