$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2143c80dffd9cb582896824ba283c0006956737d.roa File: 2143c80dffd9cb582896824ba283c0006956737d.roa (raw, json) Hash identifier: wDDtJO6JtiVeN82yA3OkTfj4ScdNAEdmdxZjvHfIH0g= Subject key identifier: 6B:8D:E6:A8:26:3A:2E:50:4A:C0:66:2E:19:42:91:51:34:F9:AA:C3 Certificate issuer: /CN=2b939ded2e75718e5bbc83d14b5856c5338fc629 Certificate serial: 0B9B56 Authority key identifier: D9:32:86:8B:61:3F:75:BE:31:5D:59:C4:26:23:5D:AD:AF:C3:61:FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b939ded2e75718e5bbc83d14b5856c5338fc629.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2143c80dffd9cb582896824ba283c0006956737d.roa Signing time: Wed 24 Mar 2021 14:47:23 +0000 ROA not before: Wed 24 Mar 2021 14:47:23 +0000 ROA not after: Tue 24 Mar 2026 14:47:23 +0000 asID: 269738 IP address blocks: 2803:e960::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2b939ded2e75718e5bbc83d14b5856c5338fc629.crl rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2b939ded2e75718e5bbc83d14b5856c5338fc629.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b939ded2e75718e5bbc83d14b5856c5338fc629.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760662 (0xb9b56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b939ded2e75718e5bbc83d14b5856c5338fc629 Validity Not Before: Mar 24 14:47:23 2021 GMT Not After : Mar 24 14:47:23 2026 GMT Subject: CN=2143c80dffd9cb582896824ba283c0006956737d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:fa:e5:dd:1b:08:52:7e:55:ac:fe:31:38: 99:d3:1b:c4:ae:62:e5:0c:9a:c4:99:74:ec:d1:38: 97:31:f1:07:31:82:06:76:76:87:81:ea:97:60:70: 2c:a1:2b:d7:89:f5:30:b7:49:bc:5d:a8:1e:92:14: 57:4f:75:43:37:b3:a2:58:c5:d4:fd:38:4a:5f:45: b1:e3:5f:c1:bd:e5:c3:be:e5:83:43:61:ed:88:27: 83:44:4e:4b:a2:17:9d:fc:10:29:d3:46:4d:9a:16: ab:58:69:72:22:cf:61:cd:1c:af:cf:fd:ab:81:40: df:08:a5:6c:f1:54:a6:d7:86:34:61:41:b0:d2:f8: 2e:ec:43:a9:9d:65:75:9b:32:cc:fd:30:25:e0:f8: d9:13:22:bc:df:cc:d2:79:e4:56:48:fd:6c:30:98: 45:d5:3d:ce:be:31:d5:58:63:bf:31:b5:b5:e8:f4: a4:81:7f:2a:63:cc:3d:2d:da:37:38:cb:aa:4f:bc: ce:8d:c0:5d:e7:07:85:a3:d5:d8:a3:17:06:ff:f8: e2:e5:ef:01:11:3f:2d:9e:a2:7c:ea:35:1b:f0:6f: 05:2c:74:80:62:9d:0f:66:97:41:66:ba:a7:4c:4e: 12:20:92:d8:cf:20:0b:9a:84:0c:6c:12:e2:0e:bb: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:E6:A8:26:3A:2E:50:4A:C0:66:2E:19:42:91:51:34:F9:AA:C3 X509v3 Authority Key Identifier: keyid:D9:32:86:8B:61:3F:75:BE:31:5D:59:C4:26:23:5D:AD:AF:C3:61:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b939ded2e75718e5bbc83d14b5856c5338fc629.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2143c80dffd9cb582896824ba283c0006956737d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2b939ded2e75718e5bbc83d14b5856c5338fc629.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e960::/32 Signature Algorithm: sha256WithRSAEncryption 0b:df:91:7d:23:91:c6:ae:45:28:00:ee:1d:c5:e8:e0:64:d6: e5:ff:7f:07:87:1f:76:08:31:20:7c:1d:bd:3a:88:90:9d:0e: 3a:2d:ab:a8:7b:df:bb:3e:af:64:e7:76:30:f9:18:5a:76:89: a4:a8:d4:d7:37:dd:f6:1e:30:dd:37:f0:15:d9:61:0f:61:cb: e4:ad:28:8c:d3:ed:d0:5a:6e:a9:cd:95:92:9f:c6:ce:9e:fe: 84:1c:41:3d:4f:d7:93:47:bf:a7:82:6c:2c:e6:a6:1b:f8:72: 4d:26:9f:a4:d7:be:8e:da:26:72:e1:5f:05:2a:93:01:ca:4e: 02:bf:9a:97:fe:bb:1b:c0:0e:8a:a7:01:c0:fe:05:1b:fa:a5: 81:76:bc:0d:b6:76:b8:5f:1a:f0:62:07:3f:25:d5:69:06:ec: 34:ab:48:08:42:c5:12:ce:cd:51:38:03:6e:c9:4d:e2:bc:ec: 9d:57:7c:30:d3:55:6a:82:f8:03:1d:48:0d:b6:ac:ff:64:af: b1:79:2c:b3:89:d8:15:62:a0:19:82:f8:47:94:97:3e:8b:e9: 62:74:29:7d:70:3d:db:bc:40:ce:fb:0c:b9:a0:f8:24:de:cd: 98:77:0e:b5:5a:8e:a1:35:9f:57:9d:0e:19:21:d8:1f:db:05: 10:32:bf:9d -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDC5tWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi OTM5ZGVkMmU3NTcxOGU1YmJjODNkMTRiNTg1NmM1MzM4ZmM2MjkwHhcNMjEwMzI0 MTQ0NzIzWhcNMjYwMzI0MTQ0NzIzWjAzMTEwLwYDVQQDEygyMTQzYzgwZGZmZDlj YjU4Mjg5NjgyNGJhMjgzYzAwMDY5NTY3MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApGf65d0bCFJ+Vaz+MTiZ0xvErmLlDJrEmXTs0TiXMfEHMYIG dnaHgeqXYHAsoSvXifUwt0m8XagekhRXT3VDN7OiWMXU/ThKX0Wx41/BveXDvuWD Q2HtiCeDRE5Lohed/BAp00ZNmharWGlyIs9hzRyvz/2rgUDfCKVs8VSm14Y0YUGw 0vgu7EOpnWV1mzLM/TAl4PjZEyK838zSeeRWSP1sMJhF1T3OvjHVWGO/MbW16PSk gX8qY8w9Ldo3OMuqT7zOjcBd5weFo9XYoxcG//ji5e8BET8tnqJ86jUb8G8FLHSA Yp0PZpdBZrqnTE4SIJLYzyALmoQMbBLiDrvhhwIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFGuN5qgmOi5QSsBmLhlCkVE0+arDMB8GA1UdIwQYMBaAFNkyhothP3W+MV1Z xCYjXa2vw2H+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmI5Mzlk ZWQyZTc1NzE4ZTViYmM4M2QxNGI1ODU2YzUzMzhmYzYyOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvODczN2QxZTktZmQyNC00MjE2LThkNGUtMzlkYzYx NDU0NTJjLzIxNDNjODBkZmZkOWNiNTgyODk2ODI0YmEyODNjMDAwNjk1NjczN2Qu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy84NzM3ZDFlOS1mZDI0LTQyMTYtOGQ0ZS0zOWRj NjE0NTQ1MmMvMmI5MzlkZWQyZTc1NzE4ZTViYmM4M2QxNGI1ODU2YzUzMzhmYzYy OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgD6WAwDQYJKoZIhvcNAQELBQADggEBAAvfkX0jkcauRSgA 7h3F6OBk1uX/fweHH3YIMSB8Hb06iJCdDjotq6h737s+r2TndjD5GFp2iaSo1Nc3 3fYeMN038BXZYQ9hy+StKIzT7dBabqnNlZKfxs6e/oQcQT1P15NHv6eCbCzmphv4 ck0mn6TXvo7aJnLhXwUqkwHKTgK/mpf+uxvADoqnAcD+BRv6pYF2vA22drhfGvBi Bz8l1WkG7DSrSAhCxRLOzVE4A27JTeK87J1XfDDTVWqC+AMdSA22rP9kr7F5LLOJ 2BVioBmC+EeUlz6L6WJ0KX1wPdu8QM77DLmg+CTezZh3DrVajqE1n1edDhkh2B/b BRAyv50= -----END CERTIFICATE-----Generated at Wed Mar 15 11:34:54 2023 by rpki-client on console-ams.rpki-client.org