$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c336abdf09df7a23037938226582a6bf65d0ac8b.roa File: c336abdf09df7a23037938226582a6bf65d0ac8b.roa (raw, json) Hash identifier: DvQ4yFgzirGJe9d87lBNQiDCrIhcSkgTkM/fBVOda/A= Subject key identifier: 25:09:55:98:A6:B2:90:C7:D1:96:46:BA:3C:2C:09:AD:1E:20:DA:A7 Certificate issuer: /CN=c8a7a1242e172a41c94834befa2ea1e8179abf68 Certificate serial: 158FC9 Authority key identifier: 71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c336abdf09df7a23037938226582a6bf65d0ac8b.roa Signing time: Sat 19 Feb 2022 17:10:04 +0000 ROA not before: Wed 24 Mar 2021 03:00:00 +0000 ROA not after: Tue 24 Mar 2026 03:00:00 +0000 asID: 265787 IP address blocks: 2803:bfc0::/32 maxlen: 32 2803:bfc0::/48 maxlen: 48 2803:bfc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 08:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413065 (0x158fc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8a7a1242e172a41c94834befa2ea1e8179abf68 Validity Not Before: Mar 24 03:00:00 2021 GMT Not After : Mar 24 03:00:00 2026 GMT Subject: CN=c336abdf09df7a23037938226582a6bf65d0ac8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:c9:20:86:af:c6:50:c3:5c:5f:90:58:25: 9c:42:c5:af:ad:3d:42:9d:6d:36:3e:18:ec:99:ba: 28:69:d2:94:ab:81:1b:98:11:ac:a8:a2:52:03:dc: b5:d1:13:1b:33:4e:07:ae:3e:d1:ec:8e:45:5e:37: 12:c3:62:7f:5e:24:6a:dd:39:e4:62:0a:84:3c:29: 26:e6:b9:c6:37:62:90:5f:d0:29:4f:c5:4e:a2:48: 81:ec:37:56:f1:5a:22:98:e5:cf:fa:e3:5a:d0:a6: 34:63:b3:04:8c:d0:72:3f:e4:78:ba:81:4e:38:63: b1:81:7d:cb:e3:73:90:0d:74:b4:31:69:f1:8a:42: f8:77:8e:45:6e:e5:06:90:06:14:59:fb:b5:1f:b5: 83:7d:f0:e9:69:04:9c:85:4d:b3:a7:7e:2f:01:4c: 1a:5c:f7:80:84:66:4a:de:6f:3c:bf:9d:bb:46:ee: c0:75:89:5a:55:fb:a9:88:ce:b0:8e:a0:d7:aa:56: d7:e6:5b:fb:7b:7e:6b:03:ad:72:12:c4:75:d4:3f: 38:d8:a7:36:99:10:56:a0:90:03:ae:a7:79:1c:ab: df:fd:3f:11:90:2f:0e:99:b1:2c:e6:69:d2:f9:ab: 88:09:bc:92:42:09:a8:90:52:64:10:ea:c3:02:ed: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:55:98:A6:B2:90:C7:D1:96:46:BA:3C:2C:09:AD:1E:20:DA:A7 X509v3 Authority Key Identifier: keyid:71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c336abdf09df7a23037938226582a6bf65d0ac8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bfc0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:2d:25:14:85:0e:e4:a6:e2:59:5c:0a:4f:0b:71:e9:d5:c6: 3c:6f:5c:6b:bf:77:43:c8:32:7d:f1:e2:14:37:12:6c:28:85: 6e:97:4d:d6:c2:de:05:cf:54:f2:56:64:e2:a5:7a:85:85:06: e1:06:c2:ca:44:2f:58:e8:93:8b:2a:ed:f7:33:2e:ac:6b:61: a0:83:43:fd:40:10:a6:6d:f0:61:c8:4f:2e:2e:05:07:2a:bf: d2:3c:82:dd:52:50:56:1a:f8:e5:77:d3:a6:dc:94:8d:d0:73: 83:22:64:3f:46:ad:68:ac:95:f3:46:4a:d1:5b:78:c9:80:90: e8:68:82:68:d6:29:6d:88:58:74:57:84:86:1b:2d:39:f7:fe: 61:cd:d4:e8:20:1e:a9:c4:6c:d5:07:20:32:f2:2a:cf:55:7b: 27:5a:2a:ec:5e:b7:00:6e:28:64:cd:94:b3:cd:47:61:ed:e8: aa:38:83:e4:cc:87:c0:6a:5d:26:9c:a1:d6:b7:c4:96:83:51: 4c:74:e9:a9:f0:15:00:82:f7:53:d8:79:ad:e7:84:9e:c2:09: 2c:7f:3d:e0:83:54:50:c3:41:64:ab:5a:47:0a:cb:00:29:54: 41:e7:4f:78:b2:8e:a0:39:8e:32:54:e7:92:62:80:9f:b8:b7: ad:9e:69:5e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDFY/JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4 YTdhMTI0MmUxNzJhNDFjOTQ4MzRiZWZhMmVhMWU4MTc5YWJmNjgwHhcNMjEwMzI0 MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhjMzM2YWJkZjA5ZGY3 YTIzMDM3OTM4MjI2NTgyYTZiZjY1ZDBhYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAucDJIIavxlDDXF+QWCWcQsWvrT1CnW02PhjsmbooadKUq4Eb mBGsqKJSA9y10RMbM04Hrj7R7I5FXjcSw2J/XiRq3TnkYgqEPCkm5rnGN2KQX9Ap T8VOokiB7DdW8VoimOXP+uNa0KY0Y7MEjNByP+R4uoFOOGOxgX3L43OQDXS0MWnx ikL4d45FbuUGkAYUWfu1H7WDffDpaQSchU2zp34vAUwaXPeAhGZK3m88v527Ru7A dYlaVfupiM6wjqDXqlbX5lv7e35rA61yEsR11D842Kc2mRBWoJADrqd5HKvf/T8R kC8OmbEs5mnS+auICbySQgmokFJkEOrDAu35yQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFCUJVZimspDH0ZZGujwsCa0eINqnMB8GA1UdIwQYMBaAFHGr0YGZfInSOsBZ Z3rJXN0QEjl2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzhhN2Ex MjQyZTE3MmE0MWM5NDgzNGJlZmEyZWExZTgxNzlhYmY2OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMGNhMGQ3ZDgtZTRiZi00MGFiLTlhN2UtNjFmNWQy NTRmOWM5L2MzMzZhYmRmMDlkZjdhMjMwMzc5MzgyMjY1ODJhNmJmNjVkMGFjOGIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8wY2EwZDdkOC1lNGJmLTQwYWItOWE3ZS02MWY1 ZDI1NGY5YzkvYzhhN2ExMjQyZTE3MmE0MWM5NDgzNGJlZmEyZWExZTgxNzlhYmY2 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDv8AwDQYJKoZIhvcNAQELBQADggEBAG8tJRSFDuSm4llc Ck8LcenVxjxvXGu/d0PIMn3x4hQ3EmwohW6XTdbC3gXPVPJWZOKleoWFBuEGwspE L1jok4sq7fczLqxrYaCDQ/1AEKZt8GHITy4uBQcqv9I8gt1SUFYa+OV306bclI3Q c4MiZD9GrWislfNGStFbeMmAkOhogmjWKW2IWHRXhIYbLTn3/mHN1OggHqnEbNUH IDLyKs9VeydaKuxetwBuKGTNlLPNR2Ht6Ko4g+TMh8BqXSacoda3xJaDUUx06anw FQCC91PYea3nhJ7CCSx/PeCDVFDDQWSrWkcKywApVEHnT3iyjqA5jjJU55JigJ+4 t62eaV4= -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:40 2023 by rpki-client on console-fra.rpki-client.org