$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa File: db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa (raw, json) Hash identifier: /fQLrBLtFeQOLQYMG3ru48q7aH8lcyPU7hrXk0xWsRo= Subject key identifier: 8D:48:D7:75:F7:CE:12:FD:06:09:7F:44:3B:D1:44:E0:FD:CD:B8:BE Certificate issuer: /CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785 Certificate serial: 035BDD Authority key identifier: 5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa Signing time: Sat 29 Oct 2022 22:37:25 +0000 ROA not before: Fri 28 Oct 2022 22:36:44 +0000 ROA not after: Tue 29 Oct 2024 22:36:44 +0000 asID: 272146 IP address blocks: 2803:d090:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.crl rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220125 (0x35bdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785 Validity Not Before: Oct 28 22:36:44 2022 GMT Not After : Oct 29 22:36:44 2024 GMT Subject: CN=db584dddc2551c5c0ef22f2567dc648e2e7a69fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:0f:ca:e1:1c:a6:36:c2:b9:95:0a:f4:3d: cd:d6:2e:3b:3c:72:e1:24:ea:cf:d5:95:8a:e2:4e: 20:ab:e7:59:e5:34:15:e6:94:87:4f:5c:3f:1d:1a: 76:bd:ce:e1:3d:bb:bf:34:f5:62:69:3a:87:5a:90: e0:51:62:20:0f:42:76:7d:05:b3:70:0e:39:8b:ef: b6:99:36:f8:1e:74:fb:85:62:d6:8b:04:3c:a6:c2: 07:9c:80:07:50:b5:ff:1b:70:a0:49:b1:f5:1a:58: e4:77:ae:7d:f3:f9:32:52:5a:1e:cc:b7:e5:f9:40: 89:48:46:65:9a:92:5c:7c:b3:a7:be:91:f0:07:57: bd:f1:90:88:aa:a6:00:10:2e:d0:27:db:72:95:5a: dd:59:7f:e5:83:96:fa:27:5d:1e:29:02:84:37:51: be:67:bf:7f:ef:34:7e:cf:c4:cd:69:94:4a:a5:8b: 25:b5:55:fd:85:12:54:d7:e5:62:06:8d:9f:38:22: 96:ea:d2:93:dc:83:38:c7:b0:99:18:67:b9:79:3b: f0:a3:4d:de:0f:92:79:6a:49:1d:45:84:c4:fd:cf: b0:dc:38:81:1a:47:18:5d:ed:15:b6:7b:ac:dd:3b: 7c:82:d7:a2:25:cc:de:fb:26:b1:d8:48:9a:fc:b3: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:48:D7:75:F7:CE:12:FD:06:09:7F:44:3B:D1:44:E0:FD:CD:B8:BE X509v3 Authority Key Identifier: keyid:5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d090:6000::/36 Signature Algorithm: sha256WithRSAEncryption 9a:63:2f:77:76:6e:03:07:c2:b2:7b:c4:ad:fc:1b:01:85:ae: e3:6b:c3:4d:b2:42:b8:2f:dc:88:31:29:47:8f:40:cd:7a:1d: f9:e1:6f:56:7b:ba:fb:af:05:f5:04:5a:5b:d8:47:c8:6a:eb: 6b:f6:bc:1f:75:3b:b2:be:b2:12:de:ff:3d:5d:da:a8:eb:28: e2:94:66:9f:1a:4c:2d:f1:18:93:66:68:83:c0:fe:37:51:6b: fc:60:00:b5:ae:4c:ae:4a:d6:10:78:bd:32:58:07:ac:ed:bb: a9:b0:ef:25:31:89:b1:e3:63:06:23:4b:b9:63:d9:6b:c1:27: 10:7e:37:54:dc:7c:e0:af:e3:14:42:22:87:87:5b:b9:d1:4d: c1:fd:8a:90:b7:f3:17:b9:f1:3a:d3:cc:73:b6:68:52:5d:29: 53:79:dd:de:06:3e:48:ee:c8:45:78:62:f2:6e:e0:a3:f4:2c: e1:6f:02:81:3b:ed:6c:9e:74:45:9d:27:d1:da:91:a4:b8:ad: 75:46:43:a3:c8:01:d0:53:a6:6a:db:26:dd:ba:44:58:9a:55: f2:7c:09:00:aa:de:c0:eb:d0:cf:0c:b2:f6:39:cb:28:58:4a: 36:e8:fb:cb:b7:8c:ed:74:b9:2b:ec:41:86:96:37:fb:e6:75: c0:60:cd:5b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIDA1vdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA4 YTMzZWE5NWZmNDU0YmYzY2EwZTQxZjc5ZjlhMjIyOTRkNzQ3ODUwHhcNMjIxMDI4 MjIzNjQ0WhcNMjQxMDI5MjIzNjQ0WjAzMTEwLwYDVQQDEyhkYjU4NGRkZGMyNTUx YzVjMGVmMjJmMjU2N2RjNjQ4ZTJlN2E2OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1aYPyuEcpjbCuZUK9D3N1i47PHLhJOrP1ZWK4k4gq+dZ5TQV 5pSHT1w/HRp2vc7hPbu/NPViaTqHWpDgUWIgD0J2fQWzcA45i++2mTb4HnT7hWLW iwQ8psIHnIAHULX/G3CgSbH1Gljkd6598/kyUloezLfl+UCJSEZlmpJcfLOnvpHw B1e98ZCIqqYAEC7QJ9tylVrdWX/lg5b6J10eKQKEN1G+Z79/7zR+z8TNaZRKpYsl tVX9hRJU1+ViBo2fOCKW6tKT3IM4x7CZGGe5eTvwo03eD5J5akkdRYTE/c+w3DiB GkcYXe0Vtnus3Tt8gteiJcze+yax2Eia/LOMqQIDAQABo4ICXTCCAlkwHQYDVR0O BBYEFI1I13X3zhL9Bgl/RDvRROD9zbi+MB8GA1UdIwQYMBaAFFs/pzt1MFaY4b/w 1nEDCyUiqTS8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDhhMzNl YTk1ZmY0NTRiZjNjYTBlNDFmNzlmOWEyMjI5NGQ3NDc4NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNmNlOTUyYTgtNGZjMi00NWE1LWI4YmYtMzliODM3 ZTFkZDljL2RiNTg0ZGRkYzI1NTFjNWMwZWYyMmYyNTY3ZGM2NDhlMmU3YTY5ZmMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82Y2U5NTJhOC00ZmMyLTQ1YTUtYjhiZi0zOWI4 MzdlMWRkOWMvMDhhMzNlYTk1ZmY0NTRiZjNjYTBlNDFmNzlmOWEyMjI5NGQ3NDc4 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGBCgD0JBgMA0GCSqGSIb3DQEBCwUAA4IBAQCaYy93dm4DB8Ky e8St/BsBha7ja8NNskK4L9yIMSlHj0DNeh354W9We7r7rwX1BFpb2EfIautr9rwf dTuyvrIS3v89Xdqo6yjilGafGkwt8RiTZmiDwP43UWv8YAC1rkyuStYQeL0yWAes 7bupsO8lMYmx42MGI0u5Y9lrwScQfjdU3Hzgr+MUQiKHh1u50U3B/YqQt/MXufE6 08xztmhSXSlTed3eBj5I7shFeGLybuCj9CzhbwKBO+1snnRFnSfR2pGkuK11RkOj yAHQU6Zq2ybdukRYmlXyfAkAqt7A69DPDLL2OcsoWEo26PvLt4ztdLkr7EGGljf7 5nXAYM1b -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:35 2023 by rpki-client on console-fra.rpki-client.org