$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa File: 67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa (raw, json) Hash identifier: a1Hk9QoLCtUfUekUyj3UUW+emwY8ouGa8GYRz0cgJhE= Subject key identifier: 4C:0A:6C:D9:E4:6F:96:C6:51:C4:E2:C0:A3:B7:16:C3:06:B3:D1:CB Certificate issuer: /CN=e44b350d3b38d42846292aa361e5c48e7d3371c5 Certificate serial: 07DBAD Authority key identifier: 4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa Signing time: Wed 24 Mar 2021 14:45:07 +0000 ROA not before: Wed 24 Mar 2021 14:45:06 +0000 ROA not after: Tue 24 Mar 2026 14:45:06 +0000 asID: 42388 IP address blocks: 2803:ad80::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.crl rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 11:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514989 (0x7dbad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e44b350d3b38d42846292aa361e5c48e7d3371c5 Validity Not Before: Mar 24 14:45:06 2021 GMT Not After : Mar 24 14:45:06 2026 GMT Subject: CN=67fdf246a28c72f01d0a325318ddc3a6911c2f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:09:16:c8:3a:8f:b1:dc:db:11:54:46:db: 83:95:fa:41:e5:83:3f:b0:0a:6a:1a:d5:f1:60:8f: b2:c6:81:8f:91:44:09:64:0f:15:cc:98:9d:98:10: 7f:78:40:47:4e:79:9e:6c:4a:15:fd:73:ec:f5:13: 1a:9c:57:27:1b:8d:ca:a1:89:81:dd:58:75:03:ae: 52:ff:d3:08:51:b5:cc:89:44:a8:aa:00:71:5b:1d: e0:d6:fd:68:db:d1:16:d7:26:34:6a:f4:88:bf:36: de:dd:bc:17:bb:3a:b6:b9:86:e5:5e:40:49:41:60: b1:91:2c:2f:e4:d5:a8:84:8f:14:22:ea:3e:9f:80: fa:90:3a:f2:68:2a:c7:8c:f7:0c:bc:c0:06:a4:7a: f1:2a:bb:93:f6:89:8b:20:17:6d:36:80:f7:dd:27: c6:23:a6:0a:46:75:19:83:33:e9:93:42:2f:af:40: 8c:db:dc:88:fe:65:9e:cb:12:08:57:ea:39:6a:98: 58:1d:f7:08:8d:e4:6b:41:c0:73:aa:d1:17:51:0b: ea:50:97:de:2b:fc:74:84:9e:36:f8:9c:df:38:98: ac:17:d9:9a:bd:a4:3a:aa:c1:c3:38:77:47:5d:35: 23:af:50:35:c7:d6:fc:50:79:1e:e4:24:89:3e:7d: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0A:6C:D9:E4:6F:96:C6:51:C4:E2:C0:A3:B7:16:C3:06:B3:D1:CB X509v3 Authority Key Identifier: keyid:4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ad80::/32 Signature Algorithm: sha256WithRSAEncryption 17:6e:ea:a4:cb:5f:6d:53:be:17:b3:c4:cc:5c:18:4f:df:69: 0a:c5:3a:0c:f3:ae:a9:fd:7c:b4:19:70:9f:0d:cd:52:ad:84: 79:25:a1:ed:4e:f2:c4:c2:f1:77:43:1a:f1:d1:1e:bc:a9:cc: f5:96:6b:da:be:63:8c:68:a5:e0:73:66:7c:1e:24:7e:3b:be: 8c:f8:c4:30:13:3d:a9:ae:a9:57:59:4e:04:52:39:b1:b2:e1: 3a:bb:be:33:68:ed:10:8e:da:61:8e:de:7a:25:b0:98:8c:5a: 5e:3d:4c:87:c7:54:a9:30:34:44:0f:3b:b6:93:8b:6c:e2:73: 18:fc:77:c2:45:52:1c:b9:e1:bc:f2:97:cf:ef:4f:d1:eb:d9: 62:4c:e3:15:94:aa:2f:c0:1d:ff:da:ee:69:2c:01:b0:cd:77: fe:0b:ed:68:59:7a:8a:95:05:a1:4b:b1:32:09:c6:0c:8c:8f: fe:fb:21:58:a4:a3:51:1e:f3:33:46:4c:e7:88:75:b9:43:13: 5c:e7:cd:bb:2f:e8:40:80:4c:f1:8f:e1:94:22:d3:b4:c9:64: 32:cb:da:4c:6f:63:04:30:43:20:2b:9e:23:3b:c8:b8:c1:84: 43:ba:6a:34:28:53:6c:e6:8b:2f:84:86:cb:e9:3c:c3:25:1d: 0e:53:ca:d5 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDB9utMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0 NGIzNTBkM2IzOGQ0Mjg0NjI5MmFhMzYxZTVjNDhlN2QzMzcxYzUwHhcNMjEwMzI0 MTQ0NTA2WhcNMjYwMzI0MTQ0NTA2WjAzMTEwLwYDVQQDEyg2N2ZkZjI0NmEyOGM3 MmYwMWQwYTMyNTMxOGRkYzNhNjkxMWMyZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA2WMJFsg6j7Hc2xFURtuDlfpB5YM/sApqGtXxYI+yxoGPkUQJ ZA8VzJidmBB/eEBHTnmebEoV/XPs9RManFcnG43KoYmB3Vh1A65S/9MIUbXMiUSo qgBxWx3g1v1o29EW1yY0avSIvzbe3bwXuzq2uYblXkBJQWCxkSwv5NWohI8UIuo+ n4D6kDryaCrHjPcMvMAGpHrxKruT9omLIBdtNoD33SfGI6YKRnUZgzPpk0Ivr0CM 29yI/mWeyxIIV+o5aphYHfcIjeRrQcBzqtEXUQvqUJfeK/x0hJ42+JzfOJisF9ma vaQ6qsHDOHdHXTUjr1A1x9b8UHke5CSJPn3rWQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFEwKbNnkb5bGUcTiwKO3FsMGs9HLMB8GA1UdIwQYMBaAFExy9GW8apYLOlKm 0YnQh+OhY1PpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTQ0YjM1 MGQzYjM4ZDQyODQ2MjkyYWEzNjFlNWM0OGU3ZDMzNzFjNS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMTNhNThkMzMtZDAwZi00NWJkLWIwOGUtODRlYjQ4 ZGJhYWFjLzY3ZmRmMjQ2YTI4YzcyZjAxZDBhMzI1MzE4ZGRjM2E2OTExYzJmMGEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xM2E1OGQzMy1kMDBmLTQ1YmQtYjA4ZS04NGVi NDhkYmFhYWMvZTQ0YjM1MGQzYjM4ZDQyODQ2MjkyYWEzNjFlNWM0OGU3ZDMzNzFj NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDrYAwDQYJKoZIhvcNAQELBQADggEBABdu6qTLX21Tvhez xMxcGE/faQrFOgzzrqn9fLQZcJ8NzVKthHkloe1O8sTC8XdDGvHRHrypzPWWa9q+ Y4xopeBzZnweJH47voz4xDATPamuqVdZTgRSObGy4Tq7vjNo7RCO2mGO3nolsJiM Wl49TIfHVKkwNEQPO7aTi2zicxj8d8JFUhy54bzyl8/vT9Hr2WJM4xWUqi/AHf/a 7mksAbDNd/4L7WhZeoqVBaFLsTIJxgyMj/77IViko1Ee8zNGTOeIdblDE1znzbsv 6ECATPGP4ZQi07TJZDLL2kxvYwQwQyArniM7yLjBhEO6ajQoU2zmiy+EhsvpPMMl HQ5TytU= -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:41 2023 by rpki-client on console-fra.rpki-client.org