$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa File: 66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa (raw, json) Hash identifier: Mdgm2Uav2WRq1xj0YggyDZSxxeUTiIvCNoHNFoIgLWY= Subject key identifier: DA:E0:91:F2:32:A1:C5:25:5C:4C:6F:3A:B8:7C:F7:F4:21:3C:DB:27 Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361 Certificate serial: 213C0C Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa Signing time: Fri 05 May 2023 20:55:00 +0000 ROA not before: Thu 04 May 2023 20:54:59 +0000 ROA not after: Mon 05 May 2025 20:54:59 +0000 asID: 7195 IP address blocks: 148.222.224.0/20 maxlen: 24 200.25.0.0/17 maxlen: 24 2800:1e0::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178060 (0x213c0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361 Validity Not Before: May 4 20:54:59 2023 GMT Not After : May 5 20:54:59 2025 GMT Subject: CN=66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:af:88:67:35:26:16:86:8a:07:0a:d4:6e: fc:fb:b5:ef:01:23:b8:40:1f:63:93:a5:0d:68:d1: d2:34:01:ca:e4:79:96:c3:dd:c8:64:ae:9e:80:dc: 12:da:3e:51:61:24:1e:48:e5:ea:65:42:5e:3e:ae: 3a:f1:fb:f6:ac:66:e9:a4:9d:28:bb:a8:b6:9a:17: 72:75:c1:83:f7:76:27:6c:84:64:1c:14:9d:b5:9b: 21:1b:78:b6:71:3e:18:21:e7:99:7a:dd:5c:1d:b6: c5:00:04:3b:2e:e3:93:0b:01:83:d5:f0:fd:77:41: 7a:34:ca:34:b1:e4:18:35:17:c5:f7:c1:42:ac:89: 2a:54:f3:ab:dd:95:c7:19:34:80:df:d8:c8:8c:c7: 0b:d0:82:ee:e4:8e:28:c3:32:31:ce:aa:50:b8:b7: d1:ff:43:94:b1:0b:e2:cd:0b:2a:3e:31:1a:fe:99: 42:d6:7f:ac:92:69:dc:5a:e8:61:f6:e1:36:a9:b1: d7:d7:82:48:b6:c3:ed:0b:34:6a:b8:3c:fc:33:0d: 84:92:2e:d6:06:fd:3e:58:37:6f:ba:9c:f3:03:41: 3f:1c:c5:1c:11:18:77:5e:4a:1e:e3:97:62:36:8d: d9:5a:60:b6:b2:40:76:44:b2:75:e1:f8:bd:58:60: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E0:91:F2:32:A1:C5:25:5C:4C:6F:3A:B8:7C:F7:F4:21:3C:DB:27 X509v3 Authority Key Identifier: keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.222.224.0/20 200.25.0.0/17 IPv6: 2800:1e0::/32 Signature Algorithm: sha256WithRSAEncryption 23:5a:20:5d:b4:4b:9b:a3:27:2b:84:10:e1:56:46:bf:ed:1d: df:19:7c:30:4f:0f:12:7c:fd:5b:61:85:2a:9f:bb:06:e8:ee: 1c:f6:c4:85:de:23:80:72:92:89:21:3a:d4:e9:70:67:78:43: 54:ef:a2:17:e7:65:74:ae:dc:a5:26:4f:16:10:d1:1e:c2:0f: f6:29:cb:6a:d5:f2:65:e4:2a:7a:f9:71:6c:27:e2:e3:56:7c: df:86:51:3c:0f:1f:32:d8:8e:d7:35:d6:53:13:e9:e4:a1:e6: f6:64:b7:c8:f8:5e:a2:9f:e6:4c:5c:19:85:61:eb:d7:b9:9a: b2:1a:06:54:7e:49:2e:22:cf:70:8c:93:a1:ed:1c:f4:f2:cb: 8c:97:6a:5e:46:a3:fd:42:42:7e:2c:89:11:00:4e:ea:4b:b7: e6:e0:a8:1b:8a:15:ad:85:b5:7b:df:0d:a7:b2:e8:5b:29:ec: 56:4d:61:3f:1f:b9:e8:6b:0a:9f:7f:75:d9:e4:27:d4:a0:2f: c6:68:21:a7:10:d8:6b:4a:8d:62:37:df:62:78:cb:0c:c5:3c: ea:40:05:50:52:3f:cc:10:7e:77:de:fe:35:a8:b5:16:4c:ce: 21:d9:33:d5:4a:77:4a:f2:65:d6:88:29:b5:62:3b:dc:3a:96: e5:9d:eb:74 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDITwMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5 N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjMwNTA0 MjA1NDU5WhcNMjUwNTA1MjA1NDU5WjAzMTEwLwYDVQQDEyg2NmUxYzE2YTRiNjky NTRmNDFiZTBmYjg5YWIzZThmOWQwZDIwZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzkiviGc1JhaGigcK1G78+7XvASO4QB9jk6UNaNHSNAHK5HmW w93IZK6egNwS2j5RYSQeSOXqZUJePq468fv2rGbppJ0ou6i2mhdydcGD93YnbIRk HBSdtZshG3i2cT4YIeeZet1cHbbFAAQ7LuOTCwGD1fD9d0F6NMo0seQYNRfF98FC rIkqVPOr3ZXHGTSA39jIjMcL0ILu5I4owzIxzqpQuLfR/0OUsQvizQsqPjEa/plC 1n+skmncWuhh9uE2qbHX14JItsPtCzRquDz8Mw2Eki7WBv0+WDdvupzzA0E/HMUc ERh3Xkoe45diNo3ZWmC2skB2RLJ14fi9WGAfFQIDAQABo4ICcDCCAmwwHQYDVR0O BBYEFNrgkfIyocUlXExvOrh89/QhPNsnMB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5 YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz M2Y1NWRhLzY2ZTFjMTZhNGI2OTI1NGY0MWJlMGZiODlhYjNlOGY5ZDBkMjBlYjMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2 MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEBJTe4AMEB8gZADANBAIAAjAHAwUAKAAB4DANBgkqhkiG9w0B AQsFAAOCAQEAI1ogXbRLm6MnK4QQ4VZGv+0d3xl8ME8PEnz9W2GFKp+7BujuHPbE hd4jgHKSiSE61OlwZ3hDVO+iF+dldK7cpSZPFhDRHsIP9inLatXyZeQqevlxbCfi 41Z834ZRPA8fMtiO1zXWUxPp5KHm9mS3yPheop/mTFwZhWHr17mashoGVH5JLiLP cIyToe0c9PLLjJdqXkaj/UJCfiyJEQBO6ku35uCoG4oVrYW1e98Np7LoWynsVk1h Px+56GsKn3912eQn1KAvxmghpxDYa0qNYjffYnjLDMU86kAFUFI/zBB+d97+Nai1 FkzOIdkz1Up3SvJl1ogptWI73DqW5Z3rdA== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:32 2024 by rpki-client on console.sobornost.net