$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa File: 6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa (raw, json) Hash identifier: TVyd4Wlepx3YbdSyOA7haziT/CZZB/kj4IbynX84shE= Subject key identifier: 3A:85:BD:10:37:13:22:E7:C7:D1:E8:F1:3E:16:84:65:DD:28:13:85 Certificate issuer: /CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab Certificate serial: 1B5985 Authority key identifier: 03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa Signing time: Mon 31 Oct 2022 20:23:50 +0000 ROA not before: Tue 23 Mar 2021 14:45:27 +0000 ROA not after: Tue 24 Mar 2026 14:45:27 +0000 asID: 61497 IP address blocks: 138.99.136.0/22 maxlen: 24 2803:d040::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 07:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792389 (0x1b5985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab Validity Not Before: Mar 23 14:45:27 2021 GMT Not After : Mar 24 14:45:27 2026 GMT Subject: CN=6d1b31adec6bfb598586649ac4f90d6a3e4cff1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:26:d8:b7:61:8c:15:cc:b5:ee:6e:72:4e: e9:1d:24:ba:86:d1:aa:bb:c5:04:dd:f0:cb:28:6c: 64:6c:98:be:57:68:57:52:fd:57:fb:fe:62:79:59: e6:47:83:8b:06:2d:02:b8:c0:78:46:7c:05:54:98: 46:5c:2d:93:d8:77:8c:15:a6:13:da:47:6e:24:c2: bd:a2:15:c0:9e:ee:09:8c:7c:7a:76:74:af:f5:2e: a8:ed:f3:79:a3:2c:6d:e7:32:26:5d:25:e6:9e:d7: 5e:a6:57:f1:dc:c4:82:dd:c0:65:2a:4c:33:ff:2c: 09:76:49:f3:68:84:da:27:c3:42:bb:93:23:7d:e8: a3:d7:e0:5f:89:9c:5d:92:f4:65:d8:41:b2:4a:8f: e9:c7:2c:f9:8c:b4:af:3e:9a:98:13:75:bd:0e:91: 70:1e:7e:d0:67:50:50:dd:20:5d:2d:7e:9b:ef:a0: ff:2b:6e:cf:e9:97:64:01:1e:c9:d5:41:03:ab:c5: 72:27:e0:d5:c9:cd:a1:fe:16:e2:95:02:02:ec:68: 4b:cf:ee:0a:34:51:d4:bf:e3:db:0b:b7:74:d6:65: 87:9b:d2:fb:8c:14:b8:f6:da:b0:b5:e5:d7:36:50: 01:a0:2c:e4:62:c9:91:c3:fe:6a:0f:84:f4:2c:24: a5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:BD:10:37:13:22:E7:C7:D1:E8:F1:3E:16:84:65:DD:28:13:85 X509v3 Authority Key Identifier: keyid:03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.136.0/22 IPv6: 2803:d040::/32 Signature Algorithm: sha256WithRSAEncryption 15:02:3d:b0:bd:0d:f2:93:fa:fd:cf:70:a4:9b:31:42:1a:ae: 37:bc:67:15:b3:52:61:69:0d:62:db:23:8b:94:a8:b0:5b:98: 29:01:0a:12:11:28:11:6a:b9:1c:63:c2:f9:25:82:28:14:59: f2:73:6e:04:49:a9:e0:15:01:fa:fb:e0:d5:13:46:b6:8e:66: ac:3d:3c:99:7a:2f:7c:e8:b2:52:52:93:8e:01:da:f5:4b:a0: cf:02:1f:b3:7b:72:22:8d:89:38:7a:fe:1d:fe:57:d6:f3:83: 48:e3:c1:a5:00:ef:14:87:be:e0:b8:b5:f9:46:c9:43:dc:27: d1:c7:33:fc:dd:f2:6f:20:31:a3:97:66:04:5b:b7:67:b4:20: 2d:39:5f:f2:ca:81:a0:2b:55:45:98:84:f4:d3:ce:e5:a5:2f: 33:7d:15:1a:e9:a6:56:91:4e:a2:35:f3:95:fc:6e:21:67:9d: d2:1f:63:90:9b:af:79:77:bc:e3:1d:c1:2b:b7:6b:d7:76:72: 0e:c4:6e:f7:24:3d:f9:c5:5a:f2:a9:52:73:f3:01:ee:50:a7: 2f:cd:98:90:89:4c:c0:3c:9a:6f:73:1f:de:a5:ac:f8:57:a7: f1:3c:85:55:c4:94:ba:c2:f6:11:2e:8c:41:a7:a4:57:c4:2a: 5c:4e:e6:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDG1mFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0 ZTY1ZDljZmEwNGQ3NDdiODhlYTI4ZmQ5YWQ5NzhlN2M3NjhmYWIwHhcNMjEwMzIz MTQ0NTI3WhcNMjYwMzI0MTQ0NTI3WjAzMTEwLwYDVQQDEyg2ZDFiMzFhZGVjNmJm YjU5ODU4NjY0OWFjNGY5MGQ2YTNlNGNmZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhsMm2LdhjBXMte5uck7pHSS6htGqu8UE3fDLKGxkbJi+V2hX Uv1X+/5ieVnmR4OLBi0CuMB4RnwFVJhGXC2T2HeMFaYT2kduJMK9ohXAnu4JjHx6 dnSv9S6o7fN5oyxt5zImXSXmntdeplfx3MSC3cBlKkwz/ywJdknzaITaJ8NCu5Mj feij1+BfiZxdkvRl2EGySo/pxyz5jLSvPpqYE3W9DpFwHn7QZ1BQ3SBdLX6b76D/ K27P6ZdkAR7J1UEDq8VyJ+DVyc2h/hbilQIC7GhLz+4KNFHUv+PbC7d01mWHm9L7 jBS49tqwteXXNlABoCzkYsmRw/5qD4T0LCSlCQIDAQABo4ICajCCAmYwHQYDVR0O BBYEFDqFvRA3EyLnx9Ho8T4WhGXdKBOFMB8GA1UdIwQYMBaAFAPVabhWZqs+ob9z x9E/TVl1iBVgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDRlNjVk OWNmYTA0ZDc0N2I4OGVhMjhmZDlhZDk3OGU3Yzc2OGZhYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvOTI5MjAzYzYtY2JiMS00ODk0LWIyYTgtYmVkNTQ0 OTg2NGVhLzZkMWIzMWFkZWM2YmZiNTk4NTg2NjQ5YWM0ZjkwZDZhM2U0Y2ZmMWIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy85MjkyMDNjNi1jYmIxLTQ4OTQtYjJhOC1iZWQ1 NDQ5ODY0ZWEvMDRlNjVkOWNmYTA0ZDc0N2I4OGVhMjhmZDlhZDk3OGU3Yzc2OGZh Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAopjiDANBAIAAjAHAwUAKAPQQDANBgkqhkiG9w0BAQsFAAOC AQEAFQI9sL0N8pP6/c9wpJsxQhquN7xnFbNSYWkNYtsji5SosFuYKQEKEhEoEWq5 HGPC+SWCKBRZ8nNuBEmp4BUB+vvg1RNGto5mrD08mXovfOiyUlKTjgHa9UugzwIf s3tyIo2JOHr+Hf5X1vODSOPBpQDvFIe+4Li1+UbJQ9wn0ccz/N3ybyAxo5dmBFu3 Z7QgLTlf8sqBoCtVRZiE9NPO5aUvM30VGummVpFOojXzlfxuIWed0h9jkJuveXe8 4x3BK7dr13ZyDsRu9yQ9+cVa8qlSc/MB7lCnL82YkIlMwDyab3Mf3qWs+Fen8TyF VcSUusL2ES6MQaekV8QqXE7mog== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:42 2023 by rpki-client on console-fra.rpki-client.org