$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/69f4902e302d69f1619567223f0ae5aa1d5dd218.roa File: 69f4902e302d69f1619567223f0ae5aa1d5dd218.roa (raw, json) Hash identifier: raIsIkPvNu8ZRozWFL20YZa4YhX++TDJkqTYczYFJOE= Subject key identifier: FF:7F:64:BC:1D:83:4A:FB:4C:CE:42:89:54:99:D7:43:0E:C6:AC:A4 Certificate issuer: /CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b Certificate serial: 05D9DB Authority key identifier: F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/69f4902e302d69f1619567223f0ae5aa1d5dd218.roa Signing time: Mon 02 May 2022 21:08:18 +0000 ROA not before: Mon 02 May 2022 03:00:00 +0000 ROA not after: Thu 02 May 2024 03:00:00 +0000 asID: 263821 IP address blocks: 2803:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.crl rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383451 (0x5d9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b Validity Not Before: May 2 03:00:00 2022 GMT Not After : May 2 03:00:00 2024 GMT Subject: CN=69f4902e302d69f1619567223f0ae5aa1d5dd218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:18:bc:41:45:db:40:0d:b0:fb:95:40:6d: 5f:38:e2:e2:e5:27:15:81:fc:e2:b7:ba:9d:81:e5: 1e:9f:50:f0:9c:84:c4:ef:3c:0f:af:d7:02:9d:09: 34:7c:d6:fd:8d:51:e0:76:81:c4:99:0c:eb:ce:9a: 70:2a:b8:06:20:a3:b9:b0:dc:a1:c0:48:ad:b6:65: 80:95:c9:bd:07:a4:9a:76:c1:26:2a:14:31:67:ff: 86:76:08:78:7b:a2:e9:d2:4e:99:a7:ba:8d:4f:32: d0:e3:29:dd:3c:e0:9c:94:cc:26:a4:31:f9:85:d8: 66:9e:51:ef:c1:28:f3:fa:76:38:4c:25:db:88:d3: 22:4b:03:90:89:5e:bf:31:25:fa:00:18:5e:33:d9: 5c:ab:a3:1d:7b:52:75:91:ed:96:9e:e0:36:ff:80: 10:39:14:93:2f:fb:a7:f9:16:81:20:11:1e:39:25: 3c:9b:1b:c8:0d:ba:34:ca:cd:33:c8:12:a1:b9:d7: 74:2f:93:68:d8:25:a3:08:1b:b6:34:e2:c5:0b:7a: 7f:21:74:67:8b:a5:68:ad:39:24:fe:6d:06:d7:f0: 8c:e6:ef:ee:4c:c8:0c:a6:06:c1:5b:b4:4c:fb:dc: c3:f5:e5:74:3e:ea:e7:8e:c3:46:3c:c4:20:8b:81: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7F:64:BC:1D:83:4A:FB:4C:CE:42:89:54:99:D7:43:0E:C6:AC:A4 X509v3 Authority Key Identifier: keyid:F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/69f4902e302d69f1619567223f0ae5aa1d5dd218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e680::/32 Signature Algorithm: sha256WithRSAEncryption 74:c3:3a:d7:ce:18:8e:37:85:a9:62:13:dc:83:d9:01:15:07: 9a:87:b7:e0:b4:89:c2:8f:b7:d4:fe:5f:7e:2f:ee:39:c7:4a: 97:af:d4:b8:8a:82:08:21:17:67:b0:b8:13:30:aa:1a:ce:20: 80:14:7f:df:77:07:d2:d3:52:db:6d:95:1c:a7:80:1c:0a:0f: ef:86:7e:bc:90:84:7c:54:b8:bf:aa:24:a0:49:a4:5c:a5:14: f8:bc:cf:cd:e6:18:d4:bf:65:d6:9f:53:05:37:1a:4a:c7:ad: d4:d2:1d:eb:f0:0b:34:c8:43:cf:fa:fd:fa:7e:1b:09:5c:e2: f7:0c:2c:9b:a8:d2:c2:7a:bd:51:d8:82:ba:48:b6:b9:87:ad: b9:41:24:cf:0c:75:32:bc:4e:32:99:6e:0a:1a:64:13:f0:07: 31:d7:a7:1c:15:ca:d1:7d:31:2e:ec:59:fa:a4:1b:de:77:a3: 1a:4d:b2:fb:20:67:75:5d:54:72:00:43:90:2d:f8:4b:5a:5e: 36:42:6a:90:0b:7a:61:96:50:1e:9f:ad:0c:80:dd:94:2a:99: 95:1b:c6:6f:9e:05:65:23:2a:b7:67:8b:71:ab:38:54:8f:7e: 61:01:f0:3a:fa:ff:b9:bb:58:d2:35:d2:c1:8b:80:03:ad:c0: 3f:d0:09:53 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDBdnbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw ODIzMGQyYzBjNjgwM2RjNDliNGIyYzZkZWNlMWMwZDYyNzk0MWIwHhcNMjIwNTAy MDMwMDAwWhcNMjQwNTAyMDMwMDAwWjAzMTEwLwYDVQQDEyg2OWY0OTAyZTMwMmQ2 OWYxNjE5NTY3MjIzZjBhZTVhYTFkNWRkMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnqoYvEFF20ANsPuVQG1fOOLi5ScVgfzit7qdgeUen1DwnITE 7zwPr9cCnQk0fNb9jVHgdoHEmQzrzppwKrgGIKO5sNyhwEittmWAlcm9B6SadsEm KhQxZ/+Gdgh4e6Lp0k6Zp7qNTzLQ4yndPOCclMwmpDH5hdhmnlHvwSjz+nY4TCXb iNMiSwOQiV6/MSX6ABheM9lcq6Mde1J1ke2WnuA2/4AQORSTL/un+RaBIBEeOSU8 mxvIDbo0ys0zyBKhudd0L5No2CWjCBu2NOLFC3p/IXRni6VorTkk/m0G1/CM5u/u TMgMpgbBW7RM+9zD9eV0PurnjsNGPMQgi4HzzQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFP9/ZLwdg0r7TM5CiVSZ10MOxqykMB8GA1UdIwQYMBaAFPPNCUz36y+X/TD7 kjcM1pN6tItuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA4MjMw ZDJjMGM2ODAzZGM0OWI0YjJjNmRlY2UxYzBkNjI3OTQxYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2ZmN2E2YzctZjg4OS00NGU3LThjNTktMTFkYmUw YTI0NDBmLzY5ZjQ5MDJlMzAyZDY5ZjE2MTk1NjcyMjNmMGFlNWFhMWQ1ZGQyMTgu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83ZmY3YTZjNy1mODg5LTQ0ZTctOGM1OS0xMWRi ZTBhMjQ0MGYvMTA4MjMwZDJjMGM2ODAzZGM0OWI0YjJjNmRlY2UxYzBkNjI3OTQx Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgD5oAwDQYJKoZIhvcNAQELBQADggEBAHTDOtfOGI43hali E9yD2QEVB5qHt+C0icKPt9T+X34v7jnHSpev1LiKggghF2ewuBMwqhrOIIAUf993 B9LTUtttlRyngBwKD++GfryQhHxUuL+qJKBJpFylFPi8z83mGNS/ZdafUwU3GkrH rdTSHevwCzTIQ8/6/fp+Gwlc4vcMLJuo0sJ6vVHYgrpItrmHrblBJM8MdTK8TjKZ bgoaZBPwBzHXpxwVytF9MS7sWfqkG953oxpNsvsgZ3VdVHIAQ5At+EtaXjZCapAL emGWUB6frQyA3ZQqmZUbxm+eBWUjKrdni3GrOFSPfmEB8Dr6/7m7WNI10sGLgAOt wD/QCVM= -----END CERTIFICATE-----Generated at Fri Mar 29 12:22:13 2024 by rpki-client on console-fra.rpki-client.org