$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa File: 1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa (raw, json) Hash identifier: hylfuTN06afckN1duAIhBSYPj1VL+gs3AT3gOcpphWg= Subject key identifier: AE:3C:A2:05:44:82:F2:5B:C9:22:3A:2A:80:F5:3B:BA:17:3B:7F:DC Certificate issuer: /CN=b937c1111990e7b39c1f43b075333acd225a29b1 Certificate serial: 0D358F Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa Signing time: Wed 24 Mar 2021 14:46:29 +0000 ROA not before: Wed 24 Mar 2021 14:46:28 +0000 ROA not after: Tue 24 Mar 2026 14:46:28 +0000 asID: 28103 IP address blocks: 2803:c100::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 05:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865679 (0xd358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1 Validity Not Before: Mar 24 14:46:28 2021 GMT Not After : Mar 24 14:46:28 2026 GMT Subject: CN=1ed99a1045dfeb77818c45720d8c0bf8d9bc86db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:4b:1b:89:d3:ac:75:d2:54:4f:82:0e:98: bc:b3:56:78:77:ad:62:e4:f8:27:a7:be:02:ff:3f: 81:83:b4:89:f7:97:4c:ca:1e:4a:67:aa:45:53:d8: a0:71:b9:53:3a:ae:a3:f5:52:5f:f5:91:f0:27:5c: 8a:6b:2a:a0:7f:28:50:e3:cf:e1:fd:71:91:2e:64: e2:7b:0d:ac:32:2b:35:5e:0c:6c:6a:68:7c:fe:51: 4f:3d:ed:43:c8:d6:de:e9:63:3d:5d:01:e7:49:dd: 02:e6:2b:9f:ce:a5:bd:98:c5:c1:4d:41:b5:3c:f5: 2f:cc:31:5d:2f:38:f9:14:61:0b:9d:c4:3f:67:9e: 4a:ac:96:4e:db:a3:13:10:21:88:5e:67:47:23:b3: fd:b6:9d:16:67:dc:3a:15:6f:12:2c:aa:0e:1c:2f: 40:48:62:a7:9f:7c:11:11:03:64:fd:60:75:31:5a: 4b:a0:9c:08:9c:15:4b:72:ff:21:09:79:e4:0e:e2: c6:0f:65:d2:e0:e9:b6:7c:fc:37:01:da:2d:c5:16: 38:6c:7d:d3:a3:87:ab:0b:bb:bd:6a:a1:5c:73:c2: 4b:14:db:8b:6d:dc:86:9f:61:7e:43:22:7f:dc:3e: 24:7b:c7:31:09:fb:86:0e:3b:2f:e3:f1:71:a7:c5: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:A2:05:44:82:F2:5B:C9:22:3A:2A:80:F5:3B:BA:17:3B:7F:DC X509v3 Authority Key Identifier: keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c100::/32 Signature Algorithm: sha256WithRSAEncryption 7b:33:43:e5:ee:a2:21:c2:66:8f:de:23:c2:be:7f:f3:e4:ff: fc:b7:d6:c6:f6:3a:e9:16:f5:c8:a2:ec:a7:0c:4e:0b:dc:c3: 8f:39:83:b3:15:03:da:1c:05:d0:8b:4c:63:c1:ef:bd:ef:7b: 43:6d:7e:6f:0f:8f:ef:af:25:6e:af:e9:31:ae:ca:75:66:54: 5a:c9:3d:71:93:11:d6:5a:a3:16:bf:10:e5:48:1f:b2:bb:14: 3a:f5:58:bd:4d:e3:6d:4e:48:22:68:4d:bb:6e:d7:b5:cc:9d: 29:0c:03:73:c9:dd:db:85:2f:2c:79:22:e6:fa:ed:85:ac:1d: 46:05:08:b7:08:f0:a0:fa:9c:23:a2:f4:42:53:76:7b:d5:75: 5f:a9:86:44:4d:ac:b0:c1:cb:9a:1a:65:c1:00:1d:7e:14:3d: ad:77:f5:a7:d8:42:7c:7b:65:ee:c1:68:8e:ce:0c:25:56:58: ac:af:00:69:fd:e3:23:b2:63:0d:18:ca:13:9a:48:21:d4:06: a7:ce:e6:82:83:20:8d:4f:42:77:ed:78:32:1d:4d:dc:e9:fd: cd:dd:02:65:8a:fa:22:44:8c:5c:28:2f:44:49:5d:af:d8:31: ed:b9:13:8f:d2:60:bb:5c:01:04:a1:0b:cb:0a:fe:29:8c:fb: 8b:ad:1e:ad -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDTWPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI5 MzdjMTExMTk5MGU3YjM5YzFmNDNiMDc1MzMzYWNkMjI1YTI5YjEwHhcNMjEwMzI0 MTQ0NjI4WhcNMjYwMzI0MTQ0NjI4WjAzMTEwLwYDVQQDEygxZWQ5OWExMDQ1ZGZl Yjc3ODE4YzQ1NzIwZDhjMGJmOGQ5YmM4NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAutdLG4nTrHXSVE+CDpi8s1Z4d61i5Pgnp74C/z+Bg7SJ95dM yh5KZ6pFU9igcblTOq6j9VJf9ZHwJ1yKayqgfyhQ48/h/XGRLmTiew2sMis1Xgxs amh8/lFPPe1DyNbe6WM9XQHnSd0C5iufzqW9mMXBTUG1PPUvzDFdLzj5FGELncQ/ Z55KrJZO26MTECGIXmdHI7P9tp0WZ9w6FW8SLKoOHC9ASGKnn3wREQNk/WB1MVpL oJwInBVLcv8hCXnkDuLGD2XS4Om2fPw3AdotxRY4bH3To4erC7u9aqFcc8JLFNuL bdyGn2F+QyJ/3D4ke8cxCfuGDjsv4/Fxp8UEyQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFK48ogVEgvJbySI6KoD1O7oXO3/cMB8GA1UdIwQYMBaAFB7ao562PcAyfXe7 X5GELT47olGvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjkzN2Mx MTExOTkwZTdiMzljMWY0M2IwNzUzMzNhY2QyMjVhMjliMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTIzYzk3MWYtMjI2Mi00NGU2LWIzMDktM2Y1OWJm YzJkMGY1LzFlZDk5YTEwNDVkZmViNzc4MThjNDU3MjBkOGMwYmY4ZDliYzg2ZGIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hMjNjOTcxZi0yMjYyLTQ0ZTYtYjMwOS0zZjU5 YmZjMmQwZjUvYjkzN2MxMTExOTkwZTdiMzljMWY0M2IwNzUzMzNhY2QyMjVhMjli MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDwQAwDQYJKoZIhvcNAQELBQADggEBAHszQ+XuoiHCZo/e I8K+f/Pk//y31sb2OukW9cii7KcMTgvcw485g7MVA9ocBdCLTGPB773ve0Ntfm8P j++vJW6v6TGuynVmVFrJPXGTEdZaoxa/EOVIH7K7FDr1WL1N421OSCJoTbtu17XM nSkMA3PJ3duFLyx5Iub67YWsHUYFCLcI8KD6nCOi9EJTdnvVdV+phkRNrLDBy5oa ZcEAHX4UPa139afYQnx7Ze7BaI7ODCVWWKyvAGn94yOyYw0YyhOaSCHUBqfO5oKD II1PQnfteDIdTdzp/c3dAmWK+iJEjFwoL0RJXa/YMe25E4/SYLtcAQShC8sK/imM +4utHq0= -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:47 2023 by rpki-client on console-fra.rpki-client.org