$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa File: 323830303a3163303a3a2f33322d3332203d3e203237373730.roa (raw, json) Hash identifier: 4FSJXV5thJKx6H5OTH8Mp5tqHztsrWOngAC7cBidY1k= Subject key identifier: BB:6E:4D:F7:EF:BD:8A:42:96:69:65:80:92:59:F0:B1:C0:91:27:5C Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Certificate serial: 2A437AF93C46C868E02737F97135198B42ACB707 Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa Signing time: Tue 04 Feb 2025 18:47:18 +0000 ROA not before: Tue 04 Feb 2025 18:42:18 +0000 ROA not after: Tue 03 Feb 2026 18:47:18 +0000 asID: 27770 IP address blocks: 2800:1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Feb 2025 22:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:43:7a:f9:3c:46:c8:68:e0:27:37:f9:71:35:19:8b:42:ac:b7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97 Validity Not Before: Feb 4 18:42:18 2025 GMT Not After : Feb 3 18:47:18 2026 GMT Subject: CN=BB6E4DF7EFBD8A42966965809259F0B1C091275C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:a9:78:16:b4:18:86:fd:c9:cc:fa:ef:d3: 80:cf:cc:03:44:93:65:1b:70:aa:5c:f1:23:ba:ec: 52:b2:b9:50:29:ec:aa:be:15:7b:7d:ce:10:8f:2c: 90:20:12:48:c8:3a:75:a4:07:83:20:46:e2:d9:b1: 34:2e:0b:ff:2e:7e:49:1f:53:e1:18:76:be:72:de: 50:8c:81:9f:6d:9f:07:24:fa:b1:d3:e7:70:1e:ad: 0e:c3:d3:a8:fd:ef:5c:1b:6b:cf:40:97:27:ed:f0: b6:f0:e1:fe:1f:a7:ec:63:0f:01:3c:42:75:2b:9b: be:3b:5c:b1:fc:8d:39:d5:42:8d:a8:83:5d:78:e2: 63:50:8f:b0:72:fa:e8:8e:f9:3f:d0:0b:4a:c4:c1: 2f:90:51:b7:f4:a7:f2:43:ba:f5:d6:5d:f3:e9:d2: c8:f3:8c:9b:e2:3c:5e:c8:c7:22:47:54:4a:a6:8a: 7c:68:a5:1b:11:ef:46:6d:5f:e6:1e:33:e1:8e:c7: a1:c4:55:7d:a8:bc:89:fc:ab:fb:67:ee:35:2e:ba: 66:84:a8:c6:3f:0b:d7:8d:45:43:00:e6:46:2a:a1: 93:e4:c4:e0:5b:e1:35:ec:d0:0d:a7:aa:04:e4:7f: 97:31:db:3e:65:44:22:4f:52:10:60:48:4b:e3:84: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:4D:F7:EF:BD:8A:42:96:69:65:80:92:59:F0:B1:C0:91:27:5C X509v3 Authority Key Identifier: keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/323830303a3163303a3a2f33322d3332203d3e203237373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:1c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:26:d9:20:1a:93:24:82:8c:00:4c:0b:6e:81:4f:98:c4:1d: 47:0d:fd:40:a0:17:03:5a:63:dd:a6:0f:07:a2:bf:79:de:e9: fd:35:cc:c8:cc:9b:f9:57:11:58:02:f8:c4:7e:eb:f4:c5:78: ec:59:72:84:81:c9:e6:f2:65:b6:1a:df:e4:47:f8:0b:5c:31: 8a:ba:12:4e:84:c6:41:39:ed:d7:f7:9d:e7:1b:d1:c3:4a:65: 94:f6:a9:f1:e4:dc:7b:05:b5:40:7b:b6:c7:52:05:3c:76:f2: 26:b7:98:11:8f:a5:dc:32:6a:c8:91:18:77:2a:87:c4:8e:8c: 2f:c7:a2:d0:22:20:8f:66:54:e1:c7:81:18:7c:0c:98:18:d4: 13:3f:5c:a1:33:76:4f:e1:7e:31:81:bd:00:f2:7c:e2:aa:95: 32:0f:9a:08:e8:39:6d:f2:df:a9:3b:9a:68:64:cc:b4:9e:ec: 84:ca:c5:4c:ae:53:46:db:ef:e8:a5:e6:6c:2a:dd:85:0f:a3: 0a:76:1f:e8:59:1e:5a:e3:2a:79:4f:9e:92:99:95:eb:45:3d: bc:07:08:44:6e:78:4b:98:82:06:92:15:b0:2a:7f:1c:7f:63: e9:5b:f2:87:1a:bf:f5:48:30:2e:ed:57:b9:cc:f2:85:42:9f: 0d:96:73:be -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUKkN6+TxGyGjgJzf5cTUZi0KstwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz QTE3Q0Q5NzAeFw0yNTAyMDQxODQyMThaFw0yNjAyMDMxODQ3MThaMDMxMTAvBgNV BAMTKEJCNkU0REY3RUZCRDhBNDI5NjY5NjU4MDkyNTlGMEIxQzA5MTI3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjKl4FrQYhv3JzPrv04DPzANE k2UbcKpc8SO67FKyuVAp7Kq+FXt9zhCPLJAgEkjIOnWkB4MgRuLZsTQuC/8ufkkf U+EYdr5y3lCMgZ9tnwck+rHT53AerQ7D06j971wba89Alyft8Lbw4f4fp+xjDwE8 QnUrm747XLH8jTnVQo2og1144mNQj7By+uiO+T/QC0rEwS+QUbf0p/JDuvXWXfPp 0sjzjJviPF7IxyJHVEqminxopRsR70ZtX+YeM+GOx6HEVX2ovIn8q/tn7jUuumaE qMY/C9eNRUMA5kYqoZPkxOBb4TXs0A2nqgTkf5cx2z5lRCJPUhBgSEvjhP2DAgMB AAGjggLFMIICwTAdBgNVHQ4EFgQUu25N9++9ikKWaWWAklnwscCRJ1wwHwYDVR0j BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzMyMzgzMDMwM2EzMTYzMzAzYTNhMmYz MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzczNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAABwDANBgkq hkiG9w0BAQsFAAOCAQEASSbZIBqTJIKMAEwLboFPmMQdRw39QKAXA1pj3aYPB6K/ ed7p/TXMyMyb+VcRWAL4xH7r9MV47FlyhIHJ5vJlthrf5Ef4C1wxiroSToTGQTnt 1/ed5xvRw0pllPap8eTcewW1QHu2x1IFPHbyJreYEY+l3DJqyJEYdyqHxI6ML8ei 0CIgj2ZU4ceBGHwMmBjUEz9coTN2T+F+MYG9APJ84qqVMg+aCOg5bfLfqTuaaGTM tJ7shMrFTK5TRtvv6KXmbCrdhQ+jCnYf6FkeWuMqeU+ekpmV60U9vAcIRG54S5iC BpIVsCp/HH9j6Vvyhxq/9UgwLu1XuczyhUKfDZZzvg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:53 2025 by rpki-client