$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa File: c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa (raw, json) Hash identifier: yEogKhzNbtCmP3ZFG0VTKRR4b1o27nAXMHY3LHC5vc4= Subject key identifier: 04:9D:60:89:58:76:D5:11:EA:46:2A:DC:35:C3:DA:C5:A7:75:29:72 Certificate issuer: /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289 Certificate serial: 14FC88 Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa Signing time: Mon 28 Mar 2022 13:34:26 +0000 ROA not before: Mon 28 Mar 2022 03:00:00 +0000 ROA not after: Thu 28 Mar 2024 03:00:00 +0000 asID: 265554 IP address blocks: 2803:aba0:2300::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375368 (0x14fc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289 Validity Not Before: Mar 28 03:00:00 2022 GMT Not After : Mar 28 03:00:00 2024 GMT Subject: CN=c2220ed08f95a251af0a2351059b7af5a4ecd1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:c9:cc:51:a5:7f:c7:ed:70:58:ec:2c:2f: 3d:33:9d:8b:ac:31:0d:7f:41:9a:d3:2f:05:18:10: 78:96:71:83:ab:fe:31:cc:69:43:7a:f9:60:dc:ac: 3d:4b:37:6d:ec:1a:d8:2b:b2:6e:dd:96:67:e6:67: 29:77:d5:fd:95:99:18:70:21:73:37:bf:77:32:c3: cf:af:c2:da:12:cf:ab:77:09:68:c9:a4:94:9a:3c: fe:62:b0:21:cd:d9:78:c3:5e:04:63:6c:f0:41:93: 47:9e:02:13:96:d8:21:b2:72:30:bb:d9:d2:c3:99: 14:8a:d4:1d:46:e0:7f:c0:1f:73:95:ff:b2:53:9a: 3f:f4:1a:04:4d:8f:ff:cd:49:66:49:dd:00:ea:88: 82:b9:99:d4:ba:62:40:70:dd:01:3a:9f:70:3b:ae: 30:0e:e1:28:4a:17:a7:13:fe:4d:46:71:2e:c0:7c: 0a:a6:e9:62:e5:2a:23:c7:5d:c9:e8:ed:93:fc:58: e9:e4:86:f0:c9:bb:d6:f7:6e:80:0c:49:cd:38:a9: a9:af:88:9a:0b:fb:c5:4d:fc:3e:7c:95:7b:46:2d: 0a:fc:e8:12:a3:3f:c3:ab:07:8f:8d:7f:77:76:38: cf:0d:f4:71:b9:9f:68:1b:34:1a:a0:4d:e4:56:79: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9D:60:89:58:76:D5:11:EA:46:2A:DC:35:C3:DA:C5:A7:75:29:72 X509v3 Authority Key Identifier: keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/c2220ed08f95a251af0a2351059b7af5a4ecd1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:aba0:2300::/48 Signature Algorithm: sha256WithRSAEncryption 57:0d:f0:90:06:98:f8:f3:ba:62:f2:4a:95:02:ac:c0:a3:c4: de:ce:a3:ed:5c:22:68:7a:13:e6:10:20:96:de:28:a9:17:3d: 2a:20:bf:ca:8e:a5:15:05:e0:da:a3:f4:d5:50:9d:e8:a6:5d: 1d:3f:bc:9d:16:eb:b2:b0:69:5e:db:56:c2:cd:70:40:2e:14: e8:1a:88:d8:97:ca:f9:7b:64:2e:c6:99:7e:9a:63:b6:ea:5e: 38:65:c0:fd:a8:66:db:9d:ef:00:57:29:91:5c:1f:0e:b0:8b: d3:51:bf:9f:44:33:96:a2:62:44:79:db:1f:a4:fc:a7:f4:35: 34:a2:00:91:bb:ed:e3:3f:80:fd:f8:57:72:c5:a6:25:af:8d: 48:c7:4b:ab:35:e4:58:b0:5c:54:38:fa:b4:be:58:9c:f9:24: ad:f1:67:5a:24:66:22:58:34:37:d0:41:d9:ac:7c:90:1b:83: de:12:40:a9:e6:cc:69:f0:b9:be:28:42:6c:17:74:98:ca:c2: 2c:8c:c3:11:e7:ce:5c:54:e6:52:81:c2:a7:3f:69:73:04:cb: 18:97:23:f8:e7:f9:57:3e:29:d5:17:a0:4e:a1:a8:2c:d3:f5: 02:7b:4e:a0:7c:21:fe:a5:82:b6:cc:a5:29:2b:74:d3:f6:3a: d7:53:4a:08 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDFPyIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFk ZmRkZmUyZjY2Yjk5MWJkNmMwYTUyMDM2YzhiYWZlZDJmMWYyODkwHhcNMjIwMzI4 MDMwMDAwWhcNMjQwMzI4MDMwMDAwWjAzMTEwLwYDVQQDEyhjMjIyMGVkMDhmOTVh MjUxYWYwYTIzNTEwNTliN2FmNWE0ZWNkMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkCvJzFGlf8ftcFjsLC89M52LrDENf0Ga0y8FGBB4lnGDq/4x zGlDevlg3Kw9Szdt7BrYK7Ju3ZZn5mcpd9X9lZkYcCFzN793MsPPr8LaEs+rdwlo yaSUmjz+YrAhzdl4w14EY2zwQZNHngITltghsnIwu9nSw5kUitQdRuB/wB9zlf+y U5o/9BoETY//zUlmSd0A6oiCuZnUumJAcN0BOp9wO64wDuEoShenE/5NRnEuwHwK puli5Sojx13J6O2T/Fjp5IbwybvW926ADEnNOKmpr4iaC/vFTfw+fJV7Ri0K/OgS oz/DqwePjX93djjPDfRxuZ9oGzQaoE3kVnk1bwIDAQABo4ICXjCCAlowHQYDVR0O BBYEFASdYIlYdtUR6kYq3DXD2sWndSlyMB8GA1UdIwQYMBaAFC/w65BScgOTnese mjNEe0ThV91yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWRmZGRm ZTJmNjZiOTkxYmQ2YzBhNTIwMzZjOGJhZmVkMmYxZjI4OS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNmE4OTlmNjctYzY1Zi00ZDY0LWI5ZmUtMmRlNmE2 MGM3MzA3L2MyMjIwZWQwOGY5NWEyNTFhZjBhMjM1MTA1OWI3YWY1YTRlY2QxZjMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82YTg5OWY2Ny1jNjVmLTRkNjQtYjlmZS0yZGU2 YTYwYzczMDcvMWRmZGRmZTJmNjZiOTkxYmQ2YzBhNTIwMzZjOGJhZmVkMmYxZjI4 OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACgDq6AjADANBgkqhkiG9w0BAQsFAAOCAQEAVw3wkAaY+PO6 YvJKlQKswKPE3s6j7VwiaHoT5hAglt4oqRc9KiC/yo6lFQXg2qP01VCd6KZdHT+8 nRbrsrBpXttWws1wQC4U6BqI2JfK+XtkLsaZfppjtupeOGXA/ahm253vAFcpkVwf DrCL01G/n0QzlqJiRHnbH6T8p/Q1NKIAkbvt4z+A/fhXcsWmJa+NSMdLqzXkWLBc VDj6tL5YnPkkrfFnWiRmIlg0N9BB2ax8kBuD3hJAqebMafC5vihCbBd0mMrCLIzD EefOXFTmUoHCpz9pcwTLGJcj+Of5Vz4p1RegTqGoLNP1AntOoHwh/qWCtsylKSt0 0/Y611NKCA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:35 2023 by rpki-client on console-fra.rpki-client.org