$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/705c5d1dd35cfc783ab8bb607564a17037464516.roa File: 705c5d1dd35cfc783ab8bb607564a17037464516.roa (raw, json) Hash identifier: i3fs8eS3WAPVuoBRcS3eLIaFfl6ksaoEsDhh9Y/n/hY= Subject key identifier: 8C:72:B5:1A:9C:01:57:B6:CD:2B:7B:D6:F6:87:94:83:A1:5D:32:E0 Certificate issuer: /CN=4789febdd964d87e5889a5b09898a4b17ff3c551 Certificate serial: 021D Authority key identifier: 77:E4:49:2F:D0:8B:7A:AA:59:5D:FD:52:31:3F:94:12:15:00:FF:57 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/705c5d1dd35cfc783ab8bb607564a17037464516.roa Signing time: Fri 01 Jul 2022 17:29:55 +0000 ROA not before: Fri 01 Jul 2022 03:00:00 +0000 ROA not after: Mon 01 Jul 2024 03:00:00 +0000 asID: 262589 IP address blocks: 2801:1ae::/44 maxlen: 44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.crl rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4789febdd964d87e5889a5b09898a4b17ff3c551 Validity Not Before: Jul 1 03:00:00 2022 GMT Not After : Jul 1 03:00:00 2024 GMT Subject: CN=705c5d1dd35cfc783ab8bb607564a17037464516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:96:7e:f2:ce:59:a7:14:a9:a6:4d:31:91: dd:f5:e3:7f:31:d6:a7:e0:d7:11:80:d8:d5:88:d2: 37:3d:6b:96:bf:a1:5d:c7:ac:94:c1:90:5d:fd:e2: 19:02:ab:de:7b:ef:15:62:70:1f:ad:b0:a6:11:e6: 0e:1a:31:3d:71:2c:b2:86:0b:10:ec:b3:57:70:8e: 6a:fa:1b:7c:6f:df:03:dc:22:d9:4d:9a:d4:d0:04: 31:6d:50:fa:8b:2e:82:fa:33:53:ba:64:e9:e9:9a: f3:21:bf:e1:03:48:d6:3a:29:20:e7:94:13:14:ea: 91:9f:eb:97:3d:ba:02:18:54:4b:18:be:ea:d5:09: 8b:69:d9:bd:28:bc:af:a9:e1:af:7d:38:9a:aa:a1: 5b:5c:f3:02:dd:52:af:5b:ba:83:e2:63:80:f4:12: a2:01:e8:8f:6b:34:0d:4d:08:28:b5:52:0a:c9:b8: 99:8d:9c:8f:c6:73:2f:a1:ca:e8:76:31:bf:d4:db: f8:42:7d:d6:03:5f:2b:76:67:08:89:93:24:45:43: 85:b6:39:50:ae:1e:a0:c1:42:ad:1f:0c:3a:83:36: e5:75:0d:97:9b:c4:6e:17:b4:d4:e6:9e:c0:7d:f2: 85:e4:b5:10:e1:ea:b9:17:b7:a8:eb:27:75:43:a3: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:72:B5:1A:9C:01:57:B6:CD:2B:7B:D6:F6:87:94:83:A1:5D:32:E0 X509v3 Authority Key Identifier: keyid:77:E4:49:2F:D0:8B:7A:AA:59:5D:FD:52:31:3F:94:12:15:00:FF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/705c5d1dd35cfc783ab8bb607564a17037464516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1ae::/44 Signature Algorithm: sha256WithRSAEncryption 1f:b3:79:38:9a:bf:aa:97:7f:47:05:95:d0:c3:a3:90:98:e0: 2b:2e:2e:d0:15:0a:de:63:c6:b0:24:ac:96:bd:d8:28:48:a7: c9:6e:0b:71:8b:e9:6b:9d:b6:b8:93:02:28:51:c9:26:53:d9: e7:96:f7:61:39:53:62:4f:fd:00:2d:de:35:cc:5e:4f:d7:f1: 00:56:d8:6e:39:14:65:b3:ab:e2:ff:04:de:21:a9:36:37:96: 1e:4c:f6:b1:0d:75:63:50:3e:b7:19:d6:5c:c2:44:35:2d:0e: 29:2e:90:1e:56:3f:a5:b7:07:f8:ae:1a:87:d5:4c:0e:4c:95: 95:75:d5:c4:6a:81:e1:2c:b5:02:01:6b:89:ae:6a:e9:97:30: 3d:74:2f:01:33:93:1e:3e:3d:25:77:d7:6e:2b:e9:e5:c9:de: 98:50:63:a1:c3:7b:a3:49:19:46:72:36:9d:8c:9a:11:4b:ce: 35:5e:ba:b5:29:73:31:9a:9a:9e:9a:f4:87:a6:b8:0e:a5:b6: 33:f1:d0:0b:5e:08:18:e9:f0:e9:9e:0f:35:25:5b:fa:2c:83: 96:5e:c4:d4:06:d5:eb:8f:8c:79:e3:ba:ff:6d:ed:cd:ce:ef: 2d:ca:01:aa:74:ff:4f:58:e8:89:d0:26:6a:72:ff:4b:3b:f1: 37:e7:7d:b6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc4 OWZlYmRkOTY0ZDg3ZTU4ODlhNWIwOTg5OGE0YjE3ZmYzYzU1MTAeFw0yMjA3MDEw MzAwMDBaFw0yNDA3MDEwMzAwMDBaMDMxMTAvBgNVBAMTKDcwNWM1ZDFkZDM1Y2Zj NzgzYWI4YmI2MDc1NjRhMTcwMzc0NjQ1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU6ZZ+8s5ZpxSppk0xkd31438x1qfg1xGA2NWI0jc9a5a/oV3H rJTBkF394hkCq9577xVicB+tsKYR5g4aMT1xLLKGCxDss1dwjmr6G3xv3wPcItlN mtTQBDFtUPqLLoL6M1O6ZOnpmvMhv+EDSNY6KSDnlBMU6pGf65c9ugIYVEsYvurV CYtp2b0ovK+p4a99OJqqoVtc8wLdUq9buoPiY4D0EqIB6I9rNA1NCCi1UgrJuJmN nI/Gcy+hyuh2Mb/U2/hCfdYDXyt2ZwiJkyRFQ4W2OVCuHqDBQq0fDDqDNuV1DZeb xG4XtNTmnsB98oXktRDh6rkXt6jrJ3VDo92fAgMBAAGjggJeMIICWjAdBgNVHQ4E FgQUjHK1GpwBV7bNK3vW9oeUg6FdMuAwHwYDVR0jBBgwFoAUd+RJL9CLeqpZXf1S MT+UEhUA/1cwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80Nzg5ZmVi ZGQ5NjRkODdlNTg4OWE1YjA5ODk4YTRiMTdmZjNjNTUxLmNlcjCBmgYIKwYBBQUH AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj Lm5ldC9ycGtpL2xhY25pYy83ZWY5MGM3NS0wZTRiLTRmNTItOTRhOC00MTEzMjU1 YWFjMWYvNzA1YzVkMWRkMzVjZmM3ODNhYjhiYjYwNzU2NGExNzAzNzQ2NDUxNi5y b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu aWMubmV0L3Jwa2kvbGFjbmljLzdlZjkwYzc1LTBlNGItNGY1Mi05NGE4LTQxMTMy NTVhYWMxZi80Nzg5ZmViZGQ5NjRkODdlNTg4OWE1YjA5ODk4YTRiMTdmZjNjNTUx LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcEKAEBrgAAMA0GCSqGSIb3DQEBCwUAA4IBAQAfs3k4mr+ql39H BZXQw6OQmOArLi7QFQreY8awJKyWvdgoSKfJbgtxi+lrnba4kwIoUckmU9nnlvdh OVNiT/0ALd41zF5P1/EAVthuORRls6vi/wTeIak2N5YeTPaxDXVjUD63GdZcwkQ1 LQ4pLpAeVj+ltwf4rhqH1UwOTJWVddXEaoHhLLUCAWuJrmrplzA9dC8BM5MePj0l d9duK+nlyd6YUGOhw3ujSRlGcjadjJoRS841Xrq1KXMxmpqemvSHprgOpbYz8dAL XggY6fDpng81JVv6LIOWXsTUBtXrj4x547r/be3Nzu8tygGqdP9PWOiJ0CZqcv9L O/E35322 -----END CERTIFICATE-----Generated at Fri Mar 29 02:33:38 2024 by rpki-client on console-fra.rpki-client.org