$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa File: a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa (raw, json) Hash identifier: hzKNDletW700t57MKanprKafvf5Q8LbUYGYn+5E8jhs= Subject key identifier: 2C:AA:7C:14:FD:78:6E:18:AC:A2:23:D7:2A:DC:7B:A0:08:93:81:D4 Certificate issuer: /CN=c3d85f03580e6350cae3b1665689b40bfef21165 Certificate serial: 0BB1A7 Authority key identifier: 1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa Signing time: Wed 24 Mar 2021 14:40:10 +0000 ROA not before: Wed 24 Mar 2021 14:40:10 +0000 ROA not after: Tue 24 Mar 2026 14:40:10 +0000 asID: 267778 IP address blocks: 2803:97a0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.crl rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766375 (0xbb1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3d85f03580e6350cae3b1665689b40bfef21165 Validity Not Before: Mar 24 14:40:10 2021 GMT Not After : Mar 24 14:40:10 2026 GMT Subject: CN=a1e419bf95e3706a3f60c647de1bd72aedfc83cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:06:a8:cf:3c:25:79:8e:85:ec:e6:09:64: 73:67:3e:0d:2b:24:bf:19:9e:c9:d9:45:ac:97:5c: ac:55:e5:36:37:92:db:af:aa:08:3d:b8:d7:b8:0b: ef:92:57:bf:60:e6:19:b7:ae:fd:7e:50:08:7c:3e: 24:fc:b6:dc:2d:50:d8:b3:50:54:26:79:f5:e9:9f: 98:c7:e4:36:b1:ae:cc:42:08:c0:95:bb:09:bc:27: 48:32:42:ea:3a:69:ab:06:a1:c9:25:87:be:70:93: 48:ec:ff:88:7a:34:22:a5:a8:30:64:cd:ca:f0:16: ca:b7:75:10:13:d9:ef:0d:14:f0:b0:a5:c3:be:67: d0:65:f2:ad:89:d1:18:67:29:b8:86:19:b9:e8:45: 82:d6:63:ef:4f:2a:a3:34:c7:d7:a2:e3:2d:1e:10: da:f3:57:b7:cb:8f:05:e2:6d:64:58:49:24:96:e5: 9e:c8:4c:3f:56:b4:aa:4d:b5:27:f7:63:9e:ef:8d: ae:e0:92:62:ae:39:d6:ff:7c:15:66:48:64:58:c4: cc:6f:2a:42:b2:63:82:ca:71:a4:2e:53:f3:2a:ca: 1e:09:9c:7e:10:52:fa:6d:85:46:a4:5a:eb:82:95: 3c:9b:a8:43:63:b7:b9:05:3b:04:6e:5b:df:98:17: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AA:7C:14:FD:78:6E:18:AC:A2:23:D7:2A:DC:7B:A0:08:93:81:D4 X509v3 Authority Key Identifier: keyid:1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:97a0::/32 Signature Algorithm: sha256WithRSAEncryption 50:39:e3:e2:98:b3:63:9f:2f:0d:46:69:1a:d7:4a:90:15:58: 2c:ca:14:c4:69:3a:7a:d8:64:15:53:91:01:d2:af:5b:56:ed: fb:6f:40:d1:34:28:da:d8:8a:6a:74:c6:ad:5e:e1:5f:b0:d6: 48:4c:ac:0d:aa:a6:62:27:1d:96:e6:b9:1f:86:67:5d:5e:da: 93:0e:93:7c:f8:99:cf:a1:e7:5c:f5:7b:79:70:f3:28:90:ac: f5:bf:86:5f:96:0d:1b:5c:0b:c1:92:54:2c:a0:e8:78:6a:4a: 66:ac:2f:08:fe:d5:20:ae:a1:cf:c5:8b:2e:b2:4e:18:bb:bf: 7a:e2:c6:d3:b1:af:8e:65:29:45:af:df:d0:59:38:1e:33:69: f2:e1:f8:e4:9c:61:2d:c6:4f:ad:f4:f1:59:80:99:e0:db:c3: a2:b7:54:44:da:32:82:90:a8:f0:79:e3:b8:e5:c8:45:98:b0: 26:a2:e9:6a:be:5b:81:5d:9f:98:fd:4a:3e:2a:b6:14:69:aa: 89:8d:5f:b3:77:ec:ee:5f:ad:50:83:a3:32:bc:ee:d9:92:08: 4b:f0:97:63:e0:db:52:db:c3:ed:56:6d:c3:01:9c:2e:4b:1f: 89:50:b4:0b:ab:b6:eb:76:f5:18:df:67:b1:5d:eb:33:d4:bd: 02:c7:1f:41 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDC7GnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz ZDg1ZjAzNTgwZTYzNTBjYWUzYjE2NjU2ODliNDBiZmVmMjExNjUwHhcNMjEwMzI0 MTQ0MDEwWhcNMjYwMzI0MTQ0MDEwWjAzMTEwLwYDVQQDEyhhMWU0MTliZjk1ZTM3 MDZhM2Y2MGM2NDdkZTFiZDcyYWVkZmM4M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsK0GqM88JXmOhezmCWRzZz4NKyS/GZ7J2UWsl1ysVeU2N5Lb r6oIPbjXuAvvkle/YOYZt679flAIfD4k/LbcLVDYs1BUJnn16Z+Yx+Q2sa7MQgjA lbsJvCdIMkLqOmmrBqHJJYe+cJNI7P+IejQipagwZM3K8BbKt3UQE9nvDRTwsKXD vmfQZfKtidEYZym4hhm56EWC1mPvTyqjNMfXouMtHhDa81e3y48F4m1kWEkkluWe yEw/VrSqTbUn92Oe742u4JJirjnW/3wVZkhkWMTMbypCsmOCynGkLlPzKsoeCZx+ EFL6bYVGpFrrgpU8m6hDY7e5BTsEblvfmBebuwIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFCyqfBT9eG4YrKIj1yrce6AIk4HUMB8GA1UdIwQYMBaAFBtUV/5DUWfOh/Zh 6yrvI4khGrNFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzNkODVm MDM1ODBlNjM1MGNhZTNiMTY2NTY4OWI0MGJmZWYyMTE2NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWRiZGZjNDktNWZmYy00NzkyLTg4ODMtZGE4YmY2 YTM3OGM1L2ExZTQxOWJmOTVlMzcwNmEzZjYwYzY0N2RlMWJkNzJhZWRmYzgzY2Iu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xZGJkZmM0OS01ZmZjLTQ3OTItODg4My1kYThi ZjZhMzc4YzUvYzNkODVmMDM1ODBlNjM1MGNhZTNiMTY2NTY4OWI0MGJmZWYyMTE2 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDl6AwDQYJKoZIhvcNAQELBQADggEBAFA54+KYs2OfLw1G aRrXSpAVWCzKFMRpOnrYZBVTkQHSr1tW7ftvQNE0KNrYimp0xq1e4V+w1khMrA2q pmInHZbmuR+GZ11e2pMOk3z4mc+h51z1e3lw8yiQrPW/hl+WDRtcC8GSVCyg6Hhq SmasLwj+1SCuoc/Fiy6yThi7v3rixtOxr45lKUWv39BZOB4zafLh+OScYS3GT630 8VmAmeDbw6K3VETaMoKQqPB547jlyEWYsCai6Wq+W4Fdn5j9Sj4qthRpqomNX7N3 7O5frVCDozK87tmSCEvwl2Pg21Lbw+1WbcMBnC5LH4lQtAurtut29RjfZ7Fd6zPU vQLHH0E= -----END CERTIFICATE-----Generated at Wed Mar 15 11:33:32 2023 by rpki-client on console-ams.rpki-client.org