$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa File: 9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa (raw, json) Hash identifier: 6SjKIHxjbKBh7dpgMWzyzv76V6Rvg/gNQDChc0TMG7g= Subject key identifier: E3:00:4A:FD:4D:68:8F:86:CD:18:A3:B0:85:F7:F3:43:FA:D2:4E:C3 Certificate issuer: /CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0 Certificate serial: 054F Authority key identifier: 74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa Signing time: Wed 02 Feb 2022 15:05:25 +0000 ROA not before: Wed 02 Feb 2022 03:00:00 +0000 ROA not after: Fri 02 Feb 2024 03:00:00 +0000 asID: 1239 IP address blocks: 2800:3e0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.crl rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 13 May 2023 19:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0 Validity Not Before: Feb 2 03:00:00 2022 GMT Not After : Feb 2 03:00:00 2024 GMT Subject: CN=9b6153d02e6c999622bd1e558c2a9db01f8fc6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:1a:0b:f8:29:01:76:17:50:03:c4:8b:ef: 64:d9:4f:5d:31:73:26:ec:68:e4:e3:f7:1a:de:7f: d6:02:14:1a:c9:2b:69:c9:78:92:d7:e0:c3:2e:30: 4a:00:bc:a2:07:ee:88:55:af:51:05:25:a0:1e:3b: 6f:c9:29:4d:2f:fe:f8:14:b6:8e:eb:0f:ee:e3:7b: c9:aa:1e:5e:35:ac:26:fd:8c:04:ce:51:00:cd:81: 53:3c:84:ea:ae:1b:21:7f:cd:7d:85:62:db:86:7b: d0:cb:19:9c:78:46:a5:8d:78:3a:53:44:13:8e:7e: 18:82:e4:3b:d7:22:a8:02:32:d1:9b:cd:be:8c:7e: 67:d3:67:35:19:b1:45:15:b0:6e:38:3e:b9:3f:06: 48:36:ff:bd:71:b0:37:48:4d:ed:c9:d3:ab:a5:51: 03:b4:c0:dd:fe:33:c3:12:a2:a1:8c:2d:c1:86:ee: f1:73:b1:56:5e:8c:c4:a5:a2:86:11:ee:ba:e8:7d: 3f:0a:76:21:bf:fa:4b:94:93:8f:e6:d1:fe:9a:f4: 2e:6d:5e:95:e1:58:30:06:cd:8d:3b:ff:c7:60:42: d2:a5:ec:ae:81:d7:36:0b:7e:5a:a2:79:35:4e:34: 1b:6f:4c:be:f4:cd:c0:05:07:fd:fa:b5:f2:6d:4b: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:00:4A:FD:4D:68:8F:86:CD:18:A3:B0:85:F7:F3:43:FA:D2:4E:C3 X509v3 Authority Key Identifier: keyid:74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/9b6153d02e6c999622bd1e558c2a9db01f8fc6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:3e0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:91:16:9e:06:a4:41:f1:21:b2:da:a9:a0:23:f8:15:e5:f0: 95:3e:c9:4b:49:f3:a4:20:14:67:04:f6:9e:ef:16:b4:6e:cd: 4f:7f:1c:09:39:30:9a:90:49:e7:c9:87:d4:8b:b4:19:e7:2d: ac:e5:ee:94:e5:d2:f9:f8:35:7c:76:d6:17:40:30:58:1f:bb: 5a:cb:c0:94:a7:c2:bf:5e:5d:d5:23:d0:5a:33:bb:fd:18:c3: d9:3d:5b:ca:1f:2c:07:ff:45:ba:3c:6b:05:ff:bf:96:52:d6: c1:cb:cd:81:16:26:34:e5:3e:dc:4d:dc:37:f0:1a:84:15:5e: d7:1c:18:05:54:c1:67:a9:2d:6e:a4:28:48:95:c5:49:9a:f8: 73:ff:01:48:32:04:d2:62:86:77:46:eb:c7:67:93:bb:16:b2: b0:41:9c:97:53:81:cc:f3:4f:fb:f8:b4:e1:40:ff:be:a5:86: 60:89:b6:7c:50:a2:71:33:50:ce:2c:c8:6a:b4:12:7e:21:40: 4b:9a:f6:65:74:9f:11:a9:2f:53:c7:11:ba:02:90:6e:87:08: 35:a0:e3:d9:d9:a5:40:14:8b:77:3c:c6:3e:0d:9a:35:29:9e: 67:ce:90:89:39:05:5e:8d:7c:d3:aa:26:a8:01:22:d6:fc:40: 77:84:9f:04 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMWY4 YjFkZGM2YjIwMGFjYTUyZTRmMjhkYjFlY2EzOGRkNDQzYTJhMDAeFw0yMjAyMDIw MzAwMDBaFw0yNDAyMDIwMzAwMDBaMDMxMTAvBgNVBAMTKDliNjE1M2QwMmU2Yzk5 OTYyMmJkMWU1NThjMmE5ZGIwMWY4ZmM2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCHgxoL+CkBdhdQA8SL72TZT10xcybsaOTj9xref9YCFBrJK2nJ eJLX4MMuMEoAvKIH7ohVr1EFJaAeO2/JKU0v/vgUto7rD+7je8mqHl41rCb9jATO UQDNgVM8hOquGyF/zX2FYtuGe9DLGZx4RqWNeDpTRBOOfhiC5DvXIqgCMtGbzb6M fmfTZzUZsUUVsG44Prk/Bkg2/71xsDdITe3J06ulUQO0wN3+M8MSoqGMLcGG7vFz sVZejMSlooYR7rrofT8KdiG/+kuUk4/m0f6a9C5tXpXhWDAGzY07/8dgQtKl7K6B 1zYLflqieTVONBtvTL70zcAFB/36tfJtSz4FAgMBAAGjggJcMIICWDAdBgNVHQ4E FgQU4wBK/U1oj4bNGKOwhffzQ/rSTsMwHwYDVR0jBBgwFoAUdMA7CqDICS8hA8Xw vYIkjDQi6AIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xZjhiMWRk YzZiMjAwYWNhNTJlNGYyOGRiMWVjYTM4ZGQ0NDNhMmEwLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy8zYjg4NjE4MS0yMmY1LTQwNjgtYjA2ZS0xZmJlNjA2 YzUyMjQvOWI2MTUzZDAyZTZjOTk5NjIyYmQxZTU1OGMyYTlkYjAxZjhmYzZiYS5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljLzNiODg2MTgxLTIyZjUtNDA2OC1iMDZlLTFmYmU2 MDZjNTIyNC8xZjhiMWRkYzZiMjAwYWNhNTJlNGYyOGRiMWVjYTM4ZGQ0NDNhMmEw LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAKAAD4DANBgkqhkiG9w0BAQsFAAOCAQEAapEWngakQfEhstqp oCP4FeXwlT7JS0nzpCAUZwT2nu8WtG7NT38cCTkwmpBJ58mH1Iu0GectrOXulOXS +fg1fHbWF0AwWB+7WsvAlKfCv15d1SPQWjO7/RjD2T1byh8sB/9FujxrBf+/llLW wcvNgRYmNOU+3E3cN/AahBVe1xwYBVTBZ6ktbqQoSJXFSZr4c/8BSDIE0mKGd0br x2eTuxaysEGcl1OBzPNP+/i04UD/vqWGYIm2fFCicTNQzizIarQSfiFAS5r2ZXSf EakvU8cRugKQbocINaDj2dmlQBSLdzzGPg2aNSmeZ86QiTkFXo1806omqAEi1vxA d4SfBA== -----END CERTIFICATE-----Generated at Thu May 11 00:02:20 2023 by rpki-client on console-fra.rpki-client.org