$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa File: c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa (raw, json) Hash identifier: SpTvBg+ca/gctbzk3wNyqjOrkLKTyWdshhfJFWfH5iw= Subject key identifier: 76:E5:24:17:B7:A0:F5:47:F2:63:24:98:E5:C5:91:77:AB:6A:50:8B Certificate issuer: /CN=aa134f8d8f5b4c61a240144257c6a28362862251 Certificate serial: 0D8F38 Authority key identifier: 6B:74:19:97:DF:25:D3:EF:E6:CB:6F:D3:D6:58:F8:36:3A:EE:C4:68 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa Signing time: Wed 24 Mar 2021 14:37:17 +0000 ROA not before: Wed 24 Mar 2021 14:37:17 +0000 ROA not after: Tue 24 Mar 2026 14:37:17 +0000 asID: 263785 IP address blocks: 2803:b440::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/aa134f8d8f5b4c61a240144257c6a28362862251.crl rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/aa134f8d8f5b4c61a240144257c6a28362862251.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888632 (0xd8f38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa134f8d8f5b4c61a240144257c6a28362862251 Validity Not Before: Mar 24 14:37:17 2021 GMT Not After : Mar 24 14:37:17 2026 GMT Subject: CN=c808234c9b388a3ada5cd84d5c7bafa51a4990ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:8f:90:ca:5f:3e:4a:1a:f2:a3:67:78:62: cf:3f:cf:e2:b4:e9:6f:c5:f8:52:4c:59:5e:da:13: a7:47:cd:b4:9a:43:8a:b3:1b:7a:8f:db:08:92:c7: 85:3f:c3:5e:3e:5e:79:d0:a4:ae:5f:a7:70:8a:db: 89:3e:b2:b7:e7:e9:52:fd:4a:de:44:4c:8d:fc:78: 2d:30:a4:d3:95:b5:c1:98:85:c2:dc:b4:e0:76:b0: a5:6b:11:06:91:d2:d2:5f:10:b7:9f:b0:bc:c3:2b: 09:67:2f:96:c9:8e:77:55:4d:ae:c6:52:b3:a1:e6: bc:44:29:34:74:10:77:68:47:01:b7:4e:0b:92:45: cb:e0:3e:89:10:55:50:7d:c3:2c:3a:9b:6b:2d:b3: e4:43:ed:59:76:10:61:c2:db:37:d5:29:52:43:7a: b5:58:bf:f7:0c:6f:e4:9c:12:cc:6a:d2:ff:68:b9: ff:12:7f:6f:b0:25:48:9a:bf:6a:82:a4:f5:e1:e2: 30:9a:fe:32:57:a5:91:41:90:ee:29:6a:e9:6b:ae: aa:1b:a3:b4:a0:cd:c9:30:30:63:8b:2f:8f:67:d9: aa:7d:bc:e8:69:1c:39:d1:30:0e:66:cc:0b:93:38: 95:c9:58:90:24:98:55:3e:ba:eb:2c:9e:d8:ed:a8: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E5:24:17:B7:A0:F5:47:F2:63:24:98:E5:C5:91:77:AB:6A:50:8B X509v3 Authority Key Identifier: keyid:6B:74:19:97:DF:25:D3:EF:E6:CB:6F:D3:D6:58:F8:36:3A:EE:C4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/aa134f8d8f5b4c61a240144257c6a28362862251.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b440::/32 Signature Algorithm: sha256WithRSAEncryption 40:2b:b5:e0:d3:ab:4d:d8:b3:a2:b5:a5:ae:15:0e:e8:47:c1: 34:d6:25:3b:d4:0c:f1:3a:88:1a:50:79:cd:a7:41:cd:c3:48: 36:5b:8e:78:0f:47:bf:56:48:87:01:27:77:74:93:97:cc:38: b5:04:fd:77:1f:a3:a4:d8:60:f3:81:1e:75:f4:56:20:22:ee: 0e:c9:da:83:6b:eb:77:a2:bb:3b:b8:be:2f:a3:21:46:09:b8: c0:5e:02:be:7a:c8:91:1e:81:a8:96:27:0c:41:f2:1c:5d:14: fc:24:91:29:a2:4d:32:3a:9e:96:a8:b1:de:66:a0:3e:c0:9b: d5:09:d7:c2:74:f2:1c:e8:95:a5:6c:7a:e2:51:a0:ed:62:78: e4:01:eb:eb:cd:56:b0:10:ff:83:17:64:ac:74:c3:38:aa:a0: 23:d7:e6:f0:00:49:bc:39:ac:8a:4e:ca:6c:41:4c:4a:20:37: 63:5f:88:4f:d2:fe:ef:67:9f:04:d7:d0:7b:42:bb:42:82:23: 67:d4:34:42:4d:8e:73:0a:1c:8f:24:0a:8c:c5:58:94:3e:59: 43:ef:b1:14:61:c2:d1:43:21:b1:8f:7c:20:de:6c:8a:fb:f4: ed:83:8c:bc:32:46:05:cf:cd:5e:36:6d:98:3c:64:6d:db:1a: f1:14:31:90 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDY84MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh MTM0ZjhkOGY1YjRjNjFhMjQwMTQ0MjU3YzZhMjgzNjI4NjIyNTEwHhcNMjEwMzI0 MTQzNzE3WhcNMjYwMzI0MTQzNzE3WjAzMTEwLwYDVQQDEyhjODA4MjM0YzliMzg4 YTNhZGE1Y2Q4NGQ1YzdiYWZhNTFhNDk5MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApvCPkMpfPkoa8qNneGLPP8/itOlvxfhSTFle2hOnR820mkOK sxt6j9sIkseFP8NePl550KSuX6dwituJPrK35+lS/UreREyN/HgtMKTTlbXBmIXC 3LTgdrClaxEGkdLSXxC3n7C8wysJZy+WyY53VU2uxlKzoea8RCk0dBB3aEcBt04L kkXL4D6JEFVQfcMsOptrLbPkQ+1ZdhBhwts31SlSQ3q1WL/3DG/knBLMatL/aLn/ En9vsCVImr9qgqT14eIwmv4yV6WRQZDuKWrpa66qG6O0oM3JMDBjiy+PZ9mqfbzo aRw50TAOZswLkziVyViQJJhVPrrrLJ7Y7aimfQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFHblJBe3oPVH8mMkmOXFkXeralCLMB8GA1UdIwQYMBaAFGt0GZffJdPv5stv 09ZY+DY67sRoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWExMzRm OGQ4ZjViNGM2MWEyNDAxNDQyNTdjNmEyODM2Mjg2MjI1MS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNGUxYTI4OTgtNWZmNC00NTZjLTg4OTgtNjFkNjFl OGUwZmU1L2M4MDgyMzRjOWIzODhhM2FkYTVjZDg0ZDVjN2JhZmE1MWE0OTkwZWUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80ZTFhMjg5OC01ZmY0LTQ1NmMtODg5OC02MWQ2 MWU4ZTBmZTUvYWExMzRmOGQ4ZjViNGM2MWEyNDAxNDQyNTdjNmEyODM2Mjg2MjI1 MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDtEAwDQYJKoZIhvcNAQELBQADggEBAEArteDTq03Ys6K1 pa4VDuhHwTTWJTvUDPE6iBpQec2nQc3DSDZbjngPR79WSIcBJ3d0k5fMOLUE/Xcf o6TYYPOBHnX0ViAi7g7J2oNr63eiuzu4vi+jIUYJuMBeAr56yJEegaiWJwxB8hxd FPwkkSmiTTI6npaosd5moD7Am9UJ18J08hzolaVseuJRoO1ieOQB6+vNVrAQ/4MX ZKx0wziqoCPX5vAASbw5rIpOymxBTEogN2NfiE/S/u9nnwTX0HtCu0KCI2fUNEJN jnMKHI8kCozFWJQ+WUPvsRRhwtFDIbGPfCDebIr79O2DjLwyRgXPzV42bZg8ZG3b GvEUMZA= -----END CERTIFICATE-----Generated at Fri Mar 29 11:05:04 2024 by rpki-client on console-ams.rpki-client.org