$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa File: 430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa (raw, json) Hash identifier: CnEHhy0T+QfNW9TCakGxMf3lrjV3DX4cbNF7IGX75w4= Subject key identifier: 50:DC:FE:C7:09:2A:8D:5B:70:CE:C4:A9:FB:D2:F3:51:C6:E3:C2:65 Certificate issuer: /CN=af74f3aa42340a4c03a724bcfe9d604390d00998 Certificate serial: 0DAFEF Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa Signing time: Wed 24 Mar 2021 14:38:46 +0000 ROA not before: Wed 24 Mar 2021 14:38:45 +0000 ROA not after: Tue 24 Mar 2026 14:38:45 +0000 asID: 264668 IP address blocks: 2803:cc20::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897007 (0xdafef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998 Validity Not Before: Mar 24 14:38:45 2021 GMT Not After : Mar 24 14:38:45 2026 GMT Subject: CN=430c6b7c06239369b4b8b3ffda0a467b2bbef03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:19:0f:8b:55:37:a3:f8:ca:ef:ef:90:37: 23:11:c8:b0:ea:2d:5c:3e:d9:cd:61:c8:44:60:01: 5a:77:51:55:97:4f:88:91:dc:0e:57:41:aa:9a:fa: 0f:e7:7f:f4:b8:20:4c:5c:0d:29:a0:e6:ab:10:4d: fc:ad:0e:a6:b7:53:b4:17:cd:19:fe:db:ec:b7:45: a5:b4:78:c5:38:06:fa:1b:fd:2a:81:70:56:c1:1b: 48:0f:7e:5e:f0:fa:d2:8e:20:8a:96:ed:5b:50:8c: 41:38:92:19:8a:07:8d:13:93:59:2d:fe:3a:3c:ff: f8:31:4a:c9:9a:42:49:f5:f5:6b:56:fb:a0:a2:31: 56:2d:0a:9b:f7:b2:56:84:72:e5:5c:5f:74:ff:7d: 4e:37:a8:cc:d5:d9:3d:e0:41:b7:47:ee:23:76:cf: c5:41:c1:b5:a7:2b:cc:be:f2:13:f5:9d:63:48:8e: 71:72:22:6e:57:98:8c:5b:d8:11:53:d2:5c:8c:60: 57:04:81:38:0c:5d:12:c9:ee:59:c3:10:81:f6:ee: 6c:11:f8:54:09:70:64:e2:5d:ed:99:e9:5b:62:8d: 5c:77:4f:81:77:0d:93:4f:00:75:69:3a:c3:17:88: fe:8f:b9:eb:cb:49:9a:d1:e2:8f:fe:6a:46:ab:15: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:FE:C7:09:2A:8D:5B:70:CE:C4:A9:FB:D2:F3:51:C6:E3:C2:65 X509v3 Authority Key Identifier: keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/430c6b7c06239369b4b8b3ffda0a467b2bbef03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cc20::/32 Signature Algorithm: sha256WithRSAEncryption 5e:90:08:4a:05:fe:09:40:ab:25:49:e0:34:90:12:b8:66:da: 3a:34:86:20:59:8a:53:94:1b:fb:a8:cb:99:37:d9:e2:42:d7: af:a3:33:17:cd:9e:af:91:fd:a1:dc:74:80:61:36:9e:68:33: 63:45:18:83:de:30:dd:3d:c7:11:12:dd:71:c4:07:bb:2a:76: 55:83:b0:87:90:d6:d8:24:76:c4:7b:20:67:fd:ff:e5:bd:d8: 83:65:88:4b:a8:0e:7c:de:44:44:51:47:08:cb:c4:5d:9f:d4: 50:5c:45:c2:59:2e:58:12:e5:aa:3e:10:1f:bc:3d:24:4b:f7: 27:26:1c:b6:af:4c:eb:85:cd:85:0e:7a:6b:30:28:92:de:14: 79:2c:2c:ec:b8:c4:bd:be:e3:39:fc:4e:21:a4:4b:36:73:16: b8:53:c0:a7:c2:65:2b:89:ae:17:13:e4:3e:4f:c6:d8:d6:02: ff:1b:9a:43:67:53:c7:10:cc:60:09:45:d3:4b:42:4a:ae:db: bc:94:13:14:5b:58:71:aa:5e:7e:5e:52:20:5b:5a:d2:f3:f8: ea:50:fa:70:52:7c:a3:5b:0d:20:64:03:26:57:42:96:23:00: 0e:13:8f:63:52:29:29:fc:b5:fd:54:aa:6c:37:f0:b7:48:d2: ba:b1:af:84 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDa/vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm NzRmM2FhNDIzNDBhNGMwM2E3MjRiY2ZlOWQ2MDQzOTBkMDA5OTgwHhcNMjEwMzI0 MTQzODQ1WhcNMjYwMzI0MTQzODQ1WjAzMTEwLwYDVQQDEyg0MzBjNmI3YzA2MjM5 MzY5YjRiOGIzZmZkYTBhNDY3YjJiYmVmMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnzYZD4tVN6P4yu/vkDcjEciw6i1cPtnNYchEYAFad1FVl0+I kdwOV0GqmvoP53/0uCBMXA0poOarEE38rQ6mt1O0F80Z/tvst0WltHjFOAb6G/0q gXBWwRtID35e8PrSjiCKlu1bUIxBOJIZigeNE5NZLf46PP/4MUrJmkJJ9fVrVvug ojFWLQqb97JWhHLlXF90/31ON6jM1dk94EG3R+4jds/FQcG1pyvMvvIT9Z1jSI5x ciJuV5iMW9gRU9JcjGBXBIE4DF0Sye5ZwxCB9u5sEfhUCXBk4l3tmelbYo1cd0+B dw2TTwB1aTrDF4j+j7nry0ma0eKP/mpGqxXiTQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFFDc/scJKo1bcM7EqfvS81HG48JlMB8GA1UdIwQYMBaAFPjADna6vDze/iOT okrklwo0hX7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWY3NGYz YWE0MjM0MGE0YzAzYTcyNGJjZmU5ZDYwNDM5MGQwMDk5OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNmUxMzk0YjktYjA3OC00NGZmLThjNzUtOTM2NTMw M2FjYTRmLzQzMGM2YjdjMDYyMzkzNjliNGI4YjNmZmRhMGE0NjdiMmJiZWYwM2Iu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82ZTEzOTRiOS1iMDc4LTQ0ZmYtOGM3NS05MzY1 MzAzYWNhNGYvYWY3NGYzYWE0MjM0MGE0YzAzYTcyNGJjZmU5ZDYwNDM5MGQwMDk5 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDzCAwDQYJKoZIhvcNAQELBQADggEBAF6QCEoF/glAqyVJ 4DSQErhm2jo0hiBZilOUG/uoy5k32eJC16+jMxfNnq+R/aHcdIBhNp5oM2NFGIPe MN09xxES3XHEB7sqdlWDsIeQ1tgkdsR7IGf9/+W92INliEuoDnzeRERRRwjLxF2f 1FBcRcJZLlgS5ao+EB+8PSRL9ycmHLavTOuFzYUOemswKJLeFHksLOy4xL2+4zn8 TiGkSzZzFrhTwKfCZSuJrhcT5D5PxtjWAv8bmkNnU8cQzGAJRdNLQkqu27yUExRb WHGqXn5eUiBbWtLz+OpQ+nBSfKNbDSBkAyZXQpYjAA4Tj2NSKSn8tf1Uqmw38LdI 0rqxr4Q= -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:45 2023 by rpki-client on console-ams.rpki-client.org