$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/fa7ec8f21be819b58c81721df176257dfc238d7c.roa File: fa7ec8f21be819b58c81721df176257dfc238d7c.roa (raw, json) Hash identifier: /Y7yvNaiTdtQI7aS6hcReIgetRpyIs0dBcKKBZJiZuU= Subject key identifier: 24:EC:BF:0A:73:BC:75:E5:64:87:48:E8:65:F4:55:F8:B6:B0:F1:3A Certificate issuer: /CN=b0951c16b2e21e742562516097161ba7ad928df5 Certificate serial: 016B3F Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/fa7ec8f21be819b58c81721df176257dfc238d7c.roa Signing time: Wed 06 Dec 2023 18:04:41 +0000 ROA not before: Wed 06 Dec 2023 18:04:41 +0000 ROA not after: Sat 06 Dec 2025 18:04:41 +0000 asID: 28002 IP address blocks: 2801:165::/44 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Dec 2023 21:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92991 (0x16b3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5 Validity Not Before: Dec 6 18:04:41 2023 GMT Not After : Dec 6 18:04:41 2025 GMT Subject: CN=fa7ec8f21be819b58c81721df176257dfc238d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:09:99:17:0f:a0:6d:bf:ef:a2:54:58:f5:94: bb:9e:91:82:bd:7e:0a:25:90:0b:21:22:cf:90:f4: 7c:5c:06:85:af:cf:b3:05:fb:27:a8:b2:35:c9:7a: 91:a7:2c:bc:e8:36:b2:0d:b6:c1:07:29:35:b0:33: 46:57:88:a3:d6:d5:21:b1:78:9b:fb:e3:f6:52:4a: 74:ac:3f:e2:63:1b:dd:8b:1a:a2:94:94:fa:d3:ee: bc:67:7e:f8:8d:04:8d:93:00:22:9d:16:6f:e8:7d: 94:0b:d7:1c:3e:d8:a4:57:63:64:45:71:26:8e:93: fc:70:5c:d8:bb:f4:50:11:17:48:5a:64:0d:85:54: 97:90:df:41:fb:18:e3:44:e1:a2:25:ee:e0:6b:24: 0b:06:cb:2b:ed:04:0c:29:04:79:0f:de:32:3a:24: b3:b9:9b:b3:55:67:fd:c7:dd:16:d7:4b:40:16:f4: ac:e5:bc:9d:8e:31:c7:e0:eb:13:7a:79:5f:8f:67: e6:8d:a5:50:4d:10:93:08:71:6b:e3:db:43:c9:ae: 44:1a:61:0d:44:93:00:50:ca:94:4d:42:7d:86:5e: 59:a2:f5:f1:29:a4:0d:b5:57:e4:78:fa:0d:a2:05: 0c:63:62:77:fa:76:e7:1c:47:00:6e:f1:1b:d9:4e: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EC:BF:0A:73:BC:75:E5:64:87:48:E8:65:F4:55:F8:B6:B0:F1:3A X509v3 Authority Key Identifier: keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/fa7ec8f21be819b58c81721df176257dfc238d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:165::/44 Signature Algorithm: sha256WithRSAEncryption 11:0f:b6:f5:5f:e5:71:11:ab:0f:fa:d9:85:0b:92:13:0b:6a: d9:69:a6:69:05:e5:8e:fa:5a:61:3b:19:90:35:2d:ca:74:62: 43:8a:b8:c6:b9:3f:51:22:ca:85:8f:78:38:2f:df:de:17:0d: a5:19:06:60:d3:ed:99:09:e8:64:ce:ce:93:d3:ae:19:52:0f: 55:ac:cd:12:31:f3:f9:1d:8a:8a:15:da:f7:34:7e:7a:fd:26: 4b:c1:c5:71:18:74:ad:ab:bc:64:77:0b:4a:07:3b:20:f9:c9: 7c:86:d1:a0:1c:64:65:1c:c9:6b:18:a6:41:de:47:fd:f2:87: ce:04:6f:d5:e1:a7:a8:f8:f9:45:50:1c:85:3b:e8:53:84:2a: 1a:dc:49:fb:52:6d:2d:24:69:09:44:76:eb:2b:15:67:90:5b: 91:1d:50:0d:ff:91:d9:2d:58:47:c2:4d:48:6a:a0:fb:85:f9: 49:34:42:3b:41:a4:c3:d0:2e:a2:f3:2c:b1:0a:d7:e3:5f:e0: 43:32:5b:23:58:4b:36:cb:a2:82:3a:36:74:84:70:f1:de:c7: 50:82:12:6d:a2:cd:f3:dd:62:fb:37:bd:32:9e:e9:92:5c:b5: 83:4e:c9:d3:42:05:3d:75:3b:3a:dc:2a:16:30:40:2d:ed:1c: 0f:95:c3:50 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAWs/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw OTUxYzE2YjJlMjFlNzQyNTYyNTE2MDk3MTYxYmE3YWQ5MjhkZjUwHhcNMjMxMjA2 MTgwNDQxWhcNMjUxMjA2MTgwNDQxWjAzMTEwLwYDVQQDEyhmYTdlYzhmMjFiZTgx OWI1OGM4MTcyMWRmMTc2MjU3ZGZjMjM4ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAigmZFw+gbb/volRY9ZS7npGCvX4KJZALISLPkPR8XAaFr8+z BfsnqLI1yXqRpyy86DayDbbBByk1sDNGV4ij1tUhsXib++P2Ukp0rD/iYxvdixqi lJT60+68Z374jQSNkwAinRZv6H2UC9ccPtikV2NkRXEmjpP8cFzYu/RQERdIWmQN hVSXkN9B+xjjROGiJe7gayQLBssr7QQMKQR5D94yOiSzuZuzVWf9x90W10tAFvSs 5bydjjHH4OsTenlfj2fmjaVQTRCTCHFr49tDya5EGmENRJMAUMqUTUJ9hl5ZovXx KaQNtVfkePoNogUMY2J3+nbnHEcAbvEb2U7LVwIDAQABo4ICXjCCAlowHQYDVR0O BBYEFCTsvwpzvHXlZIdI6GX0Vfi2sPE6MB8GA1UdIwQYMBaAFKXoTnm7+70Q6xjI lefdPGNJtFm0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjA5NTFj MTZiMmUyMWU3NDI1NjI1MTYwOTcxNjFiYTdhZDkyOGRmNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMGM3OGE2OGItMjY4Mi00MzA4LWI3NmUtMGE1YzM1 NmQwMDI1L2ZhN2VjOGYyMWJlODE5YjU4YzgxNzIxZGYxNzYyNTdkZmMyMzhkN2Mu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wYzc4YTY4Yi0yNjgyLTQzMDgtYjc2ZS0wYTVj MzU2ZDAwMjUvYjA5NTFjMTZiMmUyMWU3NDI1NjI1MTYwOTcxNjFiYTdhZDkyOGRm NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHBCgBAWUAADANBgkqhkiG9w0BAQsFAAOCAQEAEQ+29V/lcRGr D/rZhQuSEwtq2WmmaQXljvpaYTsZkDUtynRiQ4q4xrk/USLKhY94OC/f3hcNpRkG YNPtmQnoZM7Ok9OuGVIPVazNEjHz+R2KihXa9zR+ev0mS8HFcRh0rau8ZHcLSgc7 IPnJfIbRoBxkZRzJaximQd5H/fKHzgRv1eGnqPj5RVAchTvoU4QqGtxJ+1JtLSRp CUR26ysVZ5BbkR1QDf+R2S1YR8JNSGqg+4X5STRCO0Gkw9AuovMssQrX41/gQzJb I1hLNsuigjo2dIRw8d7HUIISbaLN891i+ze9Mp7pkly1g07J00IFPXU7OtwqFjBA Le0cD5XDUA== -----END CERTIFICATE-----Generated at Wed Dec 6 20:14:32 2023 by rpki-client on console-ams.rpki-client.org