$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/b9adb3fef651153badb5dc5ad87d114093845e97.roa File: b9adb3fef651153badb5dc5ad87d114093845e97.roa (raw, json) Hash identifier: G7hixDkv7fJboiPtvMfkb9xCsuKfpW1QEi9ogu8OAsI= Subject key identifier: 18:7A:A0:D6:24:2B:11:75:C7:3F:E8:EB:7E:99:48:A2:43:47:74:3A Certificate issuer: /CN=5842a35efb02d60e07426e0d03b3de78f9d908db Certificate serial: 5CE8 Authority key identifier: ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/b9adb3fef651153badb5dc5ad87d114093845e97.roa Signing time: Wed 24 Mar 2021 14:29:51 +0000 ROA not before: Wed 24 Mar 2021 14:29:51 +0000 ROA not after: Tue 24 Mar 2026 14:29:51 +0000 asID: 265704 IP address blocks: 138.36.220.0/22 maxlen: 24 168.181.176.0/22 maxlen: 24 2803:cf80::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.crl rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 09:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23784 (0x5ce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5842a35efb02d60e07426e0d03b3de78f9d908db Validity Not Before: Mar 24 14:29:51 2021 GMT Not After : Mar 24 14:29:51 2026 GMT Subject: CN=b9adb3fef651153badb5dc5ad87d114093845e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:1c:cc:34:e1:97:ab:c3:68:13:a0:79:7d: 8e:a9:f7:7f:6b:b4:b1:a4:5f:f0:5b:57:ae:c1:b2: fa:17:6e:62:bb:ea:78:27:b7:be:f7:31:9f:cc:6c: 2a:d8:12:3f:c0:6d:63:2e:57:ab:50:ab:d9:4f:bc: f1:1e:ef:66:49:35:89:b1:a9:ff:86:7c:4a:96:0d: 3a:d5:d6:99:7d:53:bf:0b:e7:c7:ca:f3:e1:d7:62: 0a:7a:ec:cc:6c:0a:45:d2:17:fe:d1:e2:7f:ab:3c: 9a:9b:c9:cf:bc:50:f5:02:f3:ca:ed:69:4c:b2:3d: a5:c2:ae:36:e0:3e:e5:c1:91:5e:00:71:33:a1:38: db:99:a7:d3:d0:ed:20:c2:d5:1a:e3:47:f0:8d:c7: 58:2a:08:19:c2:c0:62:5c:67:08:c0:48:b6:8f:80: 2b:84:4e:e4:8c:69:d9:84:31:e9:25:22:32:86:c5: d3:49:0b:03:83:e1:cd:f8:42:d6:07:d5:59:a1:02: 64:a4:49:d7:f7:4d:cb:00:70:a3:bc:78:18:70:28: 94:c0:77:73:c9:be:8b:2f:61:72:df:cf:03:e2:21: 61:9a:3e:99:97:09:f7:bf:5a:b6:05:cc:3c:2a:50: 83:58:5a:1b:62:0f:f5:d9:18:95:38:f2:7d:39:cc: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7A:A0:D6:24:2B:11:75:C7:3F:E8:EB:7E:99:48:A2:43:47:74:3A X509v3 Authority Key Identifier: keyid:ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/b9adb3fef651153badb5dc5ad87d114093845e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.220.0/22 168.181.176.0/22 IPv6: 2803:cf80::/32 Signature Algorithm: sha256WithRSAEncryption 0d:ab:c5:c5:47:0c:4b:ea:55:7f:f9:5b:d7:33:5d:df:8a:12: bc:19:21:24:1c:ac:1e:12:21:a6:c6:51:a5:8c:64:47:b3:06: b9:04:2b:95:23:53:d2:91:87:fb:94:77:d2:05:b7:10:6a:a6: bd:2f:e3:e5:dc:5b:13:da:9c:e4:b3:e7:6d:d6:c8:4d:e8:a0: e5:2f:ec:8c:46:4a:5b:bd:3f:ce:ea:d1:2a:24:11:3e:d7:f3: b7:16:1e:8a:89:85:45:06:be:e1:08:56:83:5e:6c:b6:6a:d1: f3:98:26:95:bd:4b:42:e9:b5:cb:b2:2f:c8:ca:cf:64:67:2d: a9:39:f7:06:1d:69:2a:dd:65:3a:81:81:30:61:ae:1f:c4:f8: 10:86:2f:b9:8d:1f:04:db:bc:1c:d1:0b:ba:b9:6d:49:b6:32: 8e:74:70:53:18:e6:26:0c:cd:71:32:68:6f:69:4e:86:b9:72: aa:eb:85:f2:02:28:ea:6e:22:f4:53:54:7c:59:3a:d7:3e:21: 65:74:f6:ef:43:65:d3:f6:61:e5:b5:9e:ba:d4:9e:14:67:4b: e1:2b:4e:42:fa:e2:60:19:10:cc:c6:50:53:1a:e0:00:38:63: 1f:2a:55:f9:1c:fa:90:19:c7:82:83:d9:d9:78:33:ee:dc:3d: 14:e9:cf:f3 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICXOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg0 MmEzNWVmYjAyZDYwZTA3NDI2ZTBkMDNiM2RlNzhmOWQ5MDhkYjAeFw0yMTAzMjQx NDI5NTFaFw0yNjAzMjQxNDI5NTFaMDMxMTAvBgNVBAMTKGI5YWRiM2ZlZjY1MTE1 M2JhZGI1ZGM1YWQ4N2QxMTQwOTM4NDVlOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7KhzMNOGXq8NoE6B5fY6p939rtLGkX/BbV67BsvoXbmK76ngn t773MZ/MbCrYEj/AbWMuV6tQq9lPvPEe72ZJNYmxqf+GfEqWDTrV1pl9U78L58fK 8+HXYgp67MxsCkXSF/7R4n+rPJqbyc+8UPUC88rtaUyyPaXCrjbgPuXBkV4AcTOh ONuZp9PQ7SDC1RrjR/CNx1gqCBnCwGJcZwjASLaPgCuETuSMadmEMeklIjKGxdNJ CwOD4c34QtYH1VmhAmSkSdf3TcsAcKO8eBhwKJTAd3PJvosvYXLfzwPiIWGaPpmX Cfe/WrYFzDwqUINYWhtiD/XZGJU48n05zEc7AgMBAAGjggJwMIICbDAdBgNVHQ4E FgQUGHqg1iQrEXXHP+jrfplIokNHdDowHwYDVR0jBBgwFoAU7YvKikJFCNdAC3RB sUUKSRDYbjAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81ODQyYTM1 ZWZiMDJkNjBlMDc0MjZlMGQwM2IzZGU3OGY5ZDkwOGRiLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy9lOGY2MjZmZC1kYTlhLTQxMTktYjg2MC1jMTNkZTQ3 ZjhiZTEvYjlhZGIzZmVmNjUxMTUzYmFkYjVkYzVhZDg3ZDExNDA5Mzg0NWU5Ny5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljL2U4ZjYyNmZkLWRhOWEtNDExOS1iODYwLWMxM2Rl NDdmOGJlMS81ODQyYTM1ZWZiMDJkNjBlMDc0MjZlMGQwM2IzZGU3OGY5ZDkwOGRi LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw IzASBAIAATAMAwQCiiTcAwQCqLWwMA0EAgACMAcDBQAoA8+AMA0GCSqGSIb3DQEB CwUAA4IBAQANq8XFRwxL6lV/+VvXM13fihK8GSEkHKweEiGmxlGljGRHswa5BCuV I1PSkYf7lHfSBbcQaqa9L+Pl3FsT2pzks+dt1shN6KDlL+yMRkpbvT/O6tEqJBE+ 1/O3Fh6KiYVFBr7hCFaDXmy2atHzmCaVvUtC6bXLsi/Iys9kZy2pOfcGHWkq3WU6 gYEwYa4fxPgQhi+5jR8E27wc0Qu6uW1JtjKOdHBTGOYmDM1xMmhvaU6GuXKq64Xy AijqbiL0U1R8WTrXPiFldPbvQ2XT9mHltZ661J4UZ0vhK05C+uJgGRDMxlBTGuAA OGMfKlX5HPqQGceCg9nZeDPu3D0U6c/z -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:32 2024 by rpki-client on console.sobornost.net