$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/3687c4cbcdb2b81cba848c41800c2a591343dadb.roa File: 3687c4cbcdb2b81cba848c41800c2a591343dadb.roa (raw, json) Hash identifier: 97kPm0i7cRef5T24GCP2Gnk80E/P+fQwBwFcRXDLxyw= Subject key identifier: 9F:8A:2B:09:43:68:E6:9C:49:6A:60:8F:19:15:51:26:CF:01:68:0B Certificate issuer: /CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e Certificate serial: 0D8056 Authority key identifier: 8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/3687c4cbcdb2b81cba848c41800c2a591343dadb.roa Signing time: Wed 24 Mar 2021 14:38:24 +0000 ROA not before: Wed 24 Mar 2021 14:38:23 +0000 ROA not after: Tue 24 Mar 2026 14:38:23 +0000 asID: 266734 IP address blocks: 2803:4320::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884822 (0xd8056) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e Validity Not Before: Mar 24 14:38:23 2021 GMT Not After : Mar 24 14:38:23 2026 GMT Subject: CN=3687c4cbcdb2b81cba848c41800c2a591343dadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:1c:a6:10:6a:5d:7b:7f:18:b2:53:a3:90: fc:fe:dd:5a:f0:2e:cb:77:97:54:42:67:b3:25:62: c0:ab:4b:76:fa:74:54:84:32:eb:93:9e:18:6a:33: 3a:64:41:91:3d:67:ee:f0:01:60:7c:c7:ed:cb:47: e0:02:af:ba:95:26:51:2d:99:bb:ae:fa:3b:a8:2d: 1b:74:45:c4:51:a0:a6:08:e2:57:1c:c5:35:00:3d: cd:98:7e:22:75:04:e8:9a:74:66:91:05:8f:8b:d4: 56:d1:ec:8e:c1:f1:bc:3d:e9:af:d7:e3:df:2d:d3: d1:15:c5:c3:8d:a4:fc:84:7e:64:eb:e9:28:02:fb: c5:da:96:66:0b:82:f3:c1:05:19:67:4b:86:9f:2c: 57:e0:a6:f9:e2:41:74:78:00:43:f3:70:0c:bc:33: e1:02:74:d1:80:f0:3a:ae:03:4f:02:6a:8a:24:d7: 53:07:6d:37:2c:db:f6:f1:ce:cf:c1:a9:e5:37:d0: 89:51:9b:2e:47:ab:86:3d:92:14:27:91:da:fc:15: 23:aa:95:82:b2:cd:2f:36:e1:7f:d8:f1:ea:a5:f1: ac:62:5c:41:82:3d:50:36:07:12:8b:f2:c8:7a:9e: d3:8e:64:c6:f5:1f:c5:63:2d:9b:82:59:e8:19:cc: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:2B:09:43:68:E6:9C:49:6A:60:8F:19:15:51:26:CF:01:68:0B X509v3 Authority Key Identifier: keyid:8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/3687c4cbcdb2b81cba848c41800c2a591343dadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4320::/32 Signature Algorithm: sha256WithRSAEncryption 2a:db:b5:03:2e:b2:e7:a3:8d:be:95:00:18:de:d1:17:cb:e3: fc:4e:cf:02:bf:5f:6c:47:e0:64:5d:ef:46:f6:dd:64:46:53: 41:9f:ee:36:59:f1:f6:bb:13:e1:fb:55:05:40:17:f9:62:d8: c3:e9:9e:68:ac:1b:4f:75:82:88:74:a9:df:e0:4c:9f:90:e4: f9:11:c4:2c:c0:29:32:2c:8b:5d:4f:42:c1:a0:0d:6d:6b:36: eb:be:b5:55:3c:24:c8:1d:bd:6a:37:8f:5f:84:71:16:86:cd: 6a:73:1f:86:a7:32:3a:ec:f5:d8:ee:18:92:32:ca:cf:34:f6: 89:e9:c4:39:af:46:83:a8:13:14:e4:53:80:08:01:80:8b:d9: eb:a8:08:11:43:45:fc:48:fa:83:a3:09:89:c5:64:5a:e3:b5: 36:bd:d9:fc:71:cf:e9:e7:e8:17:e8:9d:7b:f9:48:5b:0a:04: 8c:b6:a0:13:0b:fd:b0:23:48:9e:dd:4f:c4:1f:11:73:1a:60: 44:48:94:eb:35:1b:c2:e1:9f:6f:25:f2:08:bc:44:75:af:2f: 34:58:28:68:81:80:c8:ca:29:cf:0d:fd:60:38:a4:5b:f7:06: 50:e0:29:53:c3:56:ad:0c:70:c8:19:db:f2:74:a0:3e:6c:83: 31:fb:93:2d -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDYBWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk NzI0MDUxNGE5ZjRiMmM5MDg2YjVlNjVlMGFjNDNhOTM5NGI5NmUwHhcNMjEwMzI0 MTQzODIzWhcNMjYwMzI0MTQzODIzWjAzMTEwLwYDVQQDEygzNjg3YzRjYmNkYjJi ODFjYmE4NDhjNDE4MDBjMmE1OTEzNDNkYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnwMcphBqXXt/GLJTo5D8/t1a8C7Ld5dUQmezJWLAq0t2+nRU hDLrk54YajM6ZEGRPWfu8AFgfMfty0fgAq+6lSZRLZm7rvo7qC0bdEXEUaCmCOJX HMU1AD3NmH4idQTomnRmkQWPi9RW0eyOwfG8Pemv1+PfLdPRFcXDjaT8hH5k6+ko AvvF2pZmC4LzwQUZZ0uGnyxX4Kb54kF0eABD83AMvDPhAnTRgPA6rgNPAmqKJNdT B203LNv28c7PwanlN9CJUZsuR6uGPZIUJ5Ha/BUjqpWCss0vNuF/2PHqpfGsYlxB gj1QNgcSi/LIep7TjmTG9R/FYy2bglnoGczWYwIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFJ+KKwlDaOacSWpgjxkVUSbPAWgLMB8GA1UdIwQYMBaAFIq8uBDKpMwyaIK9 eUhsTOfNLCm5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ3MjQw NTE0YTlmNGIyYzkwODZiNWU2NWUwYWM0M2E5Mzk0Yjk2ZS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzk5NGRmODUtZjA3YS00NDM4LTkyYTktMzNlNGI3 ZTY4OWQ3LzM2ODdjNGNiY2RiMmI4MWNiYTg0OGM0MTgwMGMyYTU5MTM0M2RhZGIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zOTk0ZGY4NS1mMDdhLTQ0MzgtOTJhOS0zM2U0 YjdlNjg5ZDcvNGQ3MjQwNTE0YTlmNGIyYzkwODZiNWU2NWUwYWM0M2E5Mzk0Yjk2 ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDQyAwDQYJKoZIhvcNAQELBQADggEBACrbtQMusuejjb6V ABje0RfL4/xOzwK/X2xH4GRd70b23WRGU0Gf7jZZ8fa7E+H7VQVAF/li2MPpnmis G091goh0qd/gTJ+Q5PkRxCzAKTIsi11PQsGgDW1rNuu+tVU8JMgdvWo3j1+EcRaG zWpzH4anMjrs9djuGJIyys809onpxDmvRoOoExTkU4AIAYCL2euoCBFDRfxI+oOj CYnFZFrjtTa92fxxz+nn6BfonXv5SFsKBIy2oBML/bAjSJ7dT8QfEXMaYERIlOs1 G8Lhn28l8gi8RHWvLzRYKGiBgMjKKc8N/WA4pFv3BlDgKVPDVq0McMgZ2/J0oD5s gzH7ky0= -----END CERTIFICATE-----Generated at Wed Mar 15 11:45:48 2023 by rpki-client on console-fra.rpki-client.org