$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2c4095e7fb2382264ffb6bb510a58525fecb4095.roa File: 2c4095e7fb2382264ffb6bb510a58525fecb4095.roa (raw, json) Hash identifier: xeP3FgRImUXngXHhVByDSn06/h5WDn/f9i7+MWx/CKk= Subject key identifier: A8:2F:4C:F2:28:F2:A8:07:22:D3:FC:9E:21:61:93:F5:A4:71:9C:A6 Certificate issuer: /CN=d62baf1d43712ef5f3860b21d04e8534536fa164 Certificate serial: 2345DB Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2c4095e7fb2382264ffb6bb510a58525fecb4095.roa Signing time: Mon 14 Aug 2023 20:07:28 +0000 ROA not before: Sun 13 Aug 2023 20:07:28 +0000 ROA not after: Thu 14 Aug 2025 20:07:28 +0000 asID: 6535 IP address blocks: 179.4.0.0/16 maxlen: 18 186.20.0.0/15 maxlen: 16 179.2.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311643 (0x2345db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164 Validity Not Before: Aug 13 20:07:28 2023 GMT Not After : Aug 14 20:07:28 2025 GMT Subject: CN=2c4095e7fb2382264ffb6bb510a58525fecb4095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:78:4c:56:2e:b1:ce:d2:dc:f2:2f:27:6c: 7e:7f:cd:36:63:5c:2a:30:ee:5a:90:30:51:1e:82: 12:ee:ed:1c:9a:d4:20:86:d5:07:45:c8:43:ae:c8: 2b:29:ea:97:39:69:7c:78:9d:55:cf:ea:c3:9e:d3: 49:4e:68:15:13:ce:1d:12:43:86:09:b5:ec:1a:31: 64:fa:3e:6f:74:78:ca:d7:6e:1e:e2:a1:ed:03:d2: da:5b:eb:33:8d:56:93:6f:2c:6d:ca:4c:48:c9:b7: 65:a5:93:a9:27:37:88:59:b1:51:29:d4:71:c6:42: b7:23:c3:55:cf:6d:77:1a:cd:9f:c0:7d:96:20:0f: 2f:d5:cf:9c:51:e4:20:d9:c7:1b:53:8d:49:51:03: 1d:fb:a1:47:3f:af:12:70:70:f8:b5:cb:e2:9c:6a: 0a:52:04:31:4e:3a:d3:4d:e5:51:a6:4d:12:56:ee: 0c:49:50:bc:bc:43:d9:ac:26:6d:09:fb:0e:03:fa: 27:42:58:af:9b:24:e4:17:fa:03:e0:23:6a:c9:fa: a1:22:4e:76:19:c5:fc:cb:36:f2:dc:f2:27:6e:b7: c1:8e:86:57:b9:df:81:e3:52:e0:a0:3a:dd:68:01: c7:f4:44:f6:04:71:2a:e1:da:93:1c:e1:9c:7a:38: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2F:4C:F2:28:F2:A8:07:22:D3:FC:9E:21:61:93:F5:A4:71:9C:A6 X509v3 Authority Key Identifier: keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2c4095e7fb2382264ffb6bb510a58525fecb4095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.2.0.0/16 179.4.0.0/16 186.20.0.0/15 Signature Algorithm: sha256WithRSAEncryption 94:d3:3c:b7:18:f0:fa:97:23:60:fe:88:52:d5:5a:7d:5d:4e: 5b:71:1f:27:51:79:16:83:30:2d:ff:da:f7:c9:f0:95:63:6f: b1:a7:5f:b0:5b:79:cb:42:9c:98:bf:47:a9:78:cf:ab:18:6e: dd:67:b2:84:74:64:19:dc:58:10:01:6f:44:29:39:61:89:3d: 49:62:7b:78:69:6d:e7:af:78:8b:24:28:1a:e4:5f:53:2b:76: 9e:2b:30:44:50:09:24:c2:a0:0f:f3:8a:87:e3:c9:24:12:a9: d7:54:37:88:78:f2:7a:d5:93:5c:04:56:7a:74:6a:28:40:6a: 1f:c5:fa:78:a8:d2:57:d2:10:24:40:10:0c:d4:35:9b:75:83: ed:81:58:e8:6e:74:2f:b2:31:e5:b6:a8:c9:51:6a:65:ac:45: cf:b1:65:3c:15:a4:ac:be:de:d7:cc:90:31:54:05:d6:6f:97: 3b:7f:f9:a4:21:ac:e2:37:4e:12:2a:cc:8a:cb:55:ec:c0:33: 6d:82:98:5a:50:65:8a:50:05:d6:f5:a1:12:4a:74:e3:2d:d5: 63:24:fe:ce:f8:f8:df:56:71:a6:93:2e:be:80:20:d9:72:6b: 2f:3f:e3:eb:08:7c:28:45:86:55:af:37:b0:84:0a:a4:a3:30: df:93:af:8f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDI0XbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2 MmJhZjFkNDM3MTJlZjVmMzg2MGIyMWQwNGU4NTM0NTM2ZmExNjQwHhcNMjMwODEz MjAwNzI4WhcNMjUwODE0MjAwNzI4WjAzMTEwLwYDVQQDEygyYzQwOTVlN2ZiMjM4 MjI2NGZmYjZiYjUxMGE1ODUyNWZlY2I0MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAoYl4TFYusc7S3PIvJ2x+f802Y1wqMO5akDBRHoIS7u0cmtQg htUHRchDrsgrKeqXOWl8eJ1Vz+rDntNJTmgVE84dEkOGCbXsGjFk+j5vdHjK124e 4qHtA9LaW+szjVaTbyxtykxIybdlpZOpJzeIWbFRKdRxxkK3I8NVz213Gs2fwH2W IA8v1c+cUeQg2ccbU41JUQMd+6FHP68ScHD4tcvinGoKUgQxTjrTTeVRpk0SVu4M SVC8vEPZrCZtCfsOA/onQlivmyTkF/oD4CNqyfqhIk52GcX8yzby3PInbrfBjoZX ud+B41LgoDrdaAHH9ET2BHEq4dqTHOGcejiPyQIDAQABo4ICZDCCAmAwHQYDVR0O BBYEFKgvTPIo8qgHItP8niFhk/WkcZymMB8GA1UdIwQYMBaAFIfjVjLD26sNS5jd XBIONKlIODBJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDYyYmFm MWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2NC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZmQyZDI4MGItNmJhYy00Y2NlLWIwZTEtYzk1YjRj ZGQwNTBjLzJjNDA5NWU3ZmIyMzgyMjY0ZmZiNmJiNTEwYTU4NTI1ZmVjYjQwOTUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mZDJkMjgwYi02YmFjLTRjY2UtYjBlMS1jOTVi NGNkZDA1MGMvZDYyYmFmMWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2 NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAoBggrBgEFBQcBBwEB/wQZ MBcwFQQCAAEwDwMDALMCAwMAswQDAwG6FDANBgkqhkiG9w0BAQsFAAOCAQEAlNM8 txjw+pcjYP6IUtVafV1OW3EfJ1F5FoMwLf/a98nwlWNvsadfsFt5y0KcmL9HqXjP qxhu3WeyhHRkGdxYEAFvRCk5YYk9SWJ7eGlt5694iyQoGuRfUyt2niswRFAJJMKg D/OKh+PJJBKp11Q3iHjyetWTXARWenRqKEBqH8X6eKjSV9IQJEAQDNQ1m3WD7YFY 6G50L7Ix5baoyVFqZaxFz7FlPBWkrL7e18yQMVQF1m+XO3/5pCGs4jdOEirMistV 7MAzbYKYWlBlilAF1vWhEkp04y3VYyT+zvj431ZxppMuvoAg2XJrLz/j6wh8KEWG Va83sIQKpKMw35Ovjw== -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:24 2024 by rpki-client on console.sobornost.net