$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/40ca33674dd34593d91b47a09003ef83de1b106c.roa File: 40ca33674dd34593d91b47a09003ef83de1b106c.roa (raw, json) Hash identifier: OFbQ3cPQPMohaDMc7tMrIQXSMBCIzqXCcf3ZidARVYQ= Subject key identifier: 2F:A8:09:A8:64:EE:F1:09:E6:D0:CE:7F:92:04:18:A7:DB:E0:F8:79 Certificate issuer: /CN=1b671156f163047022ae7a64ac80be646ca248ce Certificate serial: 17CCE0 Authority key identifier: CB:8F:FF:F1:2F:4A:72:E2:CE:AD:42:DA:90:A3:49:09:6F:0C:D0:64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/40ca33674dd34593d91b47a09003ef83de1b106c.roa Signing time: Tue 26 Jul 2022 17:46:00 +0000 ROA not before: Tue 26 Jul 2022 03:00:00 +0000 ROA not after: Fri 26 Jul 2024 03:00:00 +0000 asID: 19429 IP address blocks: 2801:15:4800::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/1b671156f163047022ae7a64ac80be646ca248ce.crl rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/1b671156f163047022ae7a64ac80be646ca248ce.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559776 (0x17cce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b671156f163047022ae7a64ac80be646ca248ce Validity Not Before: Jul 26 03:00:00 2022 GMT Not After : Jul 26 03:00:00 2024 GMT Subject: CN=40ca33674dd34593d91b47a09003ef83de1b106c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:e9:4f:7e:7d:af:81:58:a7:61:5a:86:25: 54:74:73:56:b5:b0:41:d3:df:81:3d:cb:35:60:bd: fa:03:77:56:b4:10:a3:50:b4:bb:b1:55:26:34:9f: 91:44:cf:fa:ce:09:a8:73:78:96:91:4a:18:f1:92: ad:e1:24:f0:3c:52:46:84:22:27:d2:f6:20:e8:9e: 6d:c1:8a:6e:f0:23:57:ca:49:61:0e:dc:4c:69:81: eb:d8:f0:7f:13:44:1d:c9:44:28:b9:f6:12:44:22: a7:b3:cc:01:c9:a0:57:fe:7c:65:8e:3c:30:06:54: f0:1a:9c:c8:c8:8c:43:94:57:09:b6:d2:5a:f3:4d: 94:86:f0:18:5b:44:64:0e:e9:20:45:c3:1b:34:71: 14:8f:d8:4f:2e:f3:ae:76:59:f2:6f:e5:57:5e:92: bb:6b:0f:51:1c:a3:a5:64:59:51:3c:f8:92:b8:bf: 41:71:85:2e:db:3e:ad:88:ac:ba:8f:98:99:37:99: d7:08:05:bd:bf:43:cb:8a:a7:82:e3:a4:80:e6:bf: 61:3f:7b:e2:33:71:a2:a4:79:4f:00:ec:0a:33:9b: 81:a8:61:13:5a:7d:1f:d7:c9:e5:47:74:5e:30:f8: 38:47:22:22:43:cf:6c:c2:ae:3c:f3:58:07:d6:81: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A8:09:A8:64:EE:F1:09:E6:D0:CE:7F:92:04:18:A7:DB:E0:F8:79 X509v3 Authority Key Identifier: keyid:CB:8F:FF:F1:2F:4A:72:E2:CE:AD:42:DA:90:A3:49:09:6F:0C:D0:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/40ca33674dd34593d91b47a09003ef83de1b106c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/1b671156f163047022ae7a64ac80be646ca248ce.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:15:4800::/48 Signature Algorithm: sha256WithRSAEncryption 93:0a:1c:22:d9:8f:71:f2:54:f9:be:0e:02:f0:09:7b:8b:f7: 2a:27:3e:29:ca:e4:17:f4:a8:0b:9c:37:8c:2b:27:aa:6d:f2: 69:1e:a8:8a:37:b5:2e:2c:5b:d5:af:34:09:df:3f:33:b8:7d: d7:d9:74:62:93:8c:1c:fc:ad:fe:f9:6c:7e:af:e9:00:af:88: c9:68:d0:8c:85:63:f7:14:d3:a9:bc:0e:a5:93:62:7d:af:8d: b9:58:b3:f1:47:b0:5c:36:0d:db:b9:ee:1d:7e:ce:93:38:4e: ef:49:3e:37:e4:55:5e:a5:59:ab:26:e3:50:5c:d2:55:bf:15: 69:c5:f6:4b:7d:8f:00:43:16:59:a7:94:da:81:5f:c7:b1:18: c6:63:fd:34:6f:36:62:d3:ab:0d:91:66:70:32:f1:ef:8f:b6: 85:7a:36:f0:ed:a5:a2:f4:ab:1d:18:95:5d:20:69:08:7a:c1: 63:19:09:44:74:d6:d8:49:b2:19:78:3d:14:b9:01:ee:13:7d: cf:f1:61:e2:53:c2:1b:7e:19:93:b2:4c:97:28:2f:29:85:7e: 05:2c:ef:fe:0e:02:29:ba:e4:87:41:6c:d0:74:dc:6d:6a:cf: be:47:c4:05:79:ff:8a:00:fc:5d:f3:d3:c3:47:d5:e1:46:6c: 64:68:17:0b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDF8zgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi NjcxMTU2ZjE2MzA0NzAyMmFlN2E2NGFjODBiZTY0NmNhMjQ4Y2UwHhcNMjIwNzI2 MDMwMDAwWhcNMjQwNzI2MDMwMDAwWjAzMTEwLwYDVQQDEyg0MGNhMzM2NzRkZDM0 NTkzZDkxYjQ3YTA5MDAzZWY4M2RlMWIxMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvTjpT359r4FYp2FahiVUdHNWtbBB09+BPcs1YL36A3dWtBCj ULS7sVUmNJ+RRM/6zgmoc3iWkUoY8ZKt4STwPFJGhCIn0vYg6J5twYpu8CNXyklh DtxMaYHr2PB/E0QdyUQoufYSRCKns8wByaBX/nxljjwwBlTwGpzIyIxDlFcJttJa 802UhvAYW0RkDukgRcMbNHEUj9hPLvOudlnyb+VXXpK7aw9RHKOlZFlRPPiSuL9B cYUu2z6tiKy6j5iZN5nXCAW9v0PLiqeC46SA5r9hP3viM3GipHlPAOwKM5uBqGET Wn0f18nlR3ReMPg4RyIiQ89swq4881gH1oFklQIDAQABo4ICXjCCAlowHQYDVR0O BBYEFC+oCahk7vEJ5tDOf5IEGKfb4Ph5MB8GA1UdIwQYMBaAFMuP//EvSnLizq1C 2pCjSQlvDNBkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWI2NzEx NTZmMTYzMDQ3MDIyYWU3YTY0YWM4MGJlNjQ2Y2EyNDhjZS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2Q4YWJmOGEtYzZmOS00YWU5LTliMTctM2NkMjM0 NTM1ZjFkLzQwY2EzMzY3NGRkMzQ1OTNkOTFiNDdhMDkwMDNlZjgzZGUxYjEwNmMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83ZDhhYmY4YS1jNmY5LTRhZTktOWIxNy0zY2Qy MzQ1MzVmMWQvMWI2NzExNTZmMTYzMDQ3MDIyYWU3YTY0YWM4MGJlNjQ2Y2EyNDhj ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACgBABVIADANBgkqhkiG9w0BAQsFAAOCAQEAkwocItmPcfJU +b4OAvAJe4v3Kic+KcrkF/SoC5w3jCsnqm3yaR6oije1Lixb1a80Cd8/M7h919l0 YpOMHPyt/vlsfq/pAK+IyWjQjIVj9xTTqbwOpZNifa+NuViz8UewXDYN27nuHX7O kzhO70k+N+RVXqVZqybjUFzSVb8VacX2S32PAEMWWaeU2oFfx7EYxmP9NG82YtOr DZFmcDLx74+2hXo28O2lovSrHRiVXSBpCHrBYxkJRHTW2EmyGXg9FLkB7hN9z/Fh 4lPCG34Zk7JMlygvKYV+BSzv/g4CKbrkh0Fs0HTcbWrPvkfEBXn/igD8XfPTw0fV 4UZsZGgXCw== -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:50 2023 by rpki-client on console-ams.rpki-client.org