$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa File: 453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa (raw, json) Hash identifier: 6sf6uif99o7mh5qxJkmcpXgUO3l3wG4EgD121KJLWZ8= Subject key identifier: 8F:81:96:1B:9C:DE:A1:C3:E4:52:7F:9C:DA:98:68:29:ED:E5:BC:37 Certificate issuer: /CN=7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1 Certificate serial: 12DA0B Authority key identifier: F6:DB:39:46:AA:ED:84:59:F5:60:2F:AD:AC:A4:A2:49:FC:F8:61:F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa Signing time: Mon 13 Dec 2021 20:34:02 +0000 ROA not before: Mon 22 Nov 2021 03:00:00 +0000 ROA not after: Sat 22 Nov 2025 03:00:00 +0000 asID: 267755 IP address blocks: 2803:b3a0::/32 maxlen: 34 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.crl rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 10:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235467 (0x12da0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1 Validity Not Before: Nov 22 03:00:00 2021 GMT Not After : Nov 22 03:00:00 2025 GMT Subject: CN=453dde26cd0c82e9e9c5f90185029fd475c29d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:6e:89:0f:43:b3:76:9e:45:00:6f:25:8e: fb:ea:09:e1:36:48:02:7c:0c:28:58:86:e1:47:8f: 3f:10:a6:ba:fb:ed:86:94:1e:c7:87:03:fa:41:32: 68:68:8e:2f:2d:4b:14:fd:16:bc:49:c9:e6:dc:04: 92:b4:57:60:bf:b3:93:19:80:4f:19:a7:1c:58:4b: cd:3b:e8:ea:94:f0:20:11:f4:82:3a:3a:03:19:be: 69:5f:1c:c0:83:6e:60:79:67:77:b6:c1:a2:b4:fc: df:24:1a:3d:da:e8:aa:56:37:e4:e5:ae:ad:ff:c7: ca:8e:b4:ab:68:d0:00:8b:06:f4:7e:55:a8:59:cc: f6:80:03:ee:16:8d:af:b5:f3:28:2c:17:c3:37:4a: 73:7a:68:c2:e9:90:ac:a6:3b:d3:08:ab:39:3a:b5: 09:cd:9f:97:02:4d:eb:26:a8:27:eb:66:bc:a2:26: 65:13:ab:41:de:c4:b4:42:57:c1:8f:55:a7:41:aa: e8:1c:7d:b4:8f:94:8f:e3:83:0c:4c:1e:d0:ff:b7: 97:a6:e9:5d:b7:47:ea:e0:e1:7e:19:14:73:56:28: d6:16:61:77:61:8b:ad:8d:1a:e2:5c:bb:4f:d5:95: 95:ec:cd:92:e7:b3:d9:0c:c5:59:27:f0:0c:67:8a: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:81:96:1B:9C:DE:A1:C3:E4:52:7F:9C:DA:98:68:29:ED:E5:BC:37 X509v3 Authority Key Identifier: keyid:F6:DB:39:46:AA:ED:84:59:F5:60:2F:AD:AC:A4:A2:49:FC:F8:61:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b3a0::/32 Signature Algorithm: sha256WithRSAEncryption b3:8f:a7:f6:ec:34:bb:b2:a9:fd:ed:3e:70:53:4b:0d:9e:a8: 36:d0:57:4a:34:0b:ba:bc:5e:70:d4:c1:17:56:1c:03:48:9c: 4e:74:66:39:8a:93:9d:4a:0d:3a:af:00:60:7f:2d:71:7a:d1: 27:a6:f0:60:71:07:0a:04:0a:a7:5a:b0:2b:e5:cc:38:e9:26: 7c:a2:e3:46:2d:6a:08:9f:ac:6a:cd:fc:1f:99:07:09:4c:d5: 1e:04:66:50:cd:07:15:23:ba:31:a1:43:ee:3f:3d:40:bd:d8: 7d:fb:c8:cc:65:4c:7a:8c:91:53:f9:be:87:2f:96:5b:a9:33: 72:66:e3:f6:3a:ca:7d:1c:df:65:57:73:89:c0:ef:27:be:5c: 01:e2:9b:d6:b7:3f:08:86:9c:50:ee:ba:3f:d6:2b:15:c3:8e: 13:50:4a:43:3c:95:46:d7:e3:03:5a:75:38:d9:4b:dd:a2:c4: bf:1c:ff:7e:82:6f:5e:6e:78:1a:88:bc:c8:0c:53:1f:6a:78: d6:a1:b8:65:89:df:78:4d:30:f1:3a:f3:d2:3a:29:69:c1:c0: 7b:80:95:c7:ec:47:a6:bd:9c:3a:0d:b1:dd:aa:4e:57:85:ce: 35:c3:65:78:84:98:3e:79:a0:31:83:81:a9:c2:42:17:b8:dc: 53:1f:2b:3b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDEtoLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk MzcyNDA3YjUwZWJhMWJiOGY3NjUyMjQ4ZmRiMGRjYzNkZmU3ZjEwHhcNMjExMTIy MDMwMDAwWhcNMjUxMTIyMDMwMDAwWjAzMTEwLwYDVQQDEyg0NTNkZGUyNmNkMGM4 MmU5ZTljNWY5MDE4NTAyOWZkNDc1YzI5ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgmpuiQ9Ds3aeRQBvJY776gnhNkgCfAwoWIbhR48/EKa6++2G lB7HhwP6QTJoaI4vLUsU/Ra8Scnm3ASStFdgv7OTGYBPGaccWEvNO+jqlPAgEfSC OjoDGb5pXxzAg25geWd3tsGitPzfJBo92uiqVjfk5a6t/8fKjrSraNAAiwb0flWo Wcz2gAPuFo2vtfMoLBfDN0pzemjC6ZCspjvTCKs5OrUJzZ+XAk3rJqgn62a8oiZl E6tB3sS0QlfBj1WnQaroHH20j5SP44MMTB7Q/7eXpuldt0fq4OF+GRRzVijWFmF3 YYutjRriXLtP1ZWV7M2S57PZDMVZJ/AMZ4oZYwIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFI+Blhuc3qHD5FJ/nNqYaCnt5bw3MB8GA1UdIwQYMBaAFPbbOUaq7YRZ9WAv raykokn8+GH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2QzNzI0 MDdiNTBlYmExYmI4Zjc2NTIyNDhmZGIwZGNjM2RmZTdmMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjQxZjJhYmItMWRiMC00MTg3LTlmMTctNmVjZDNj Y2M4ZGY0LzQ1M2RkZTI2Y2QwYzgyZTllOWM1ZjkwMTg1MDI5ZmQ0NzVjMjlkOWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iNDFmMmFiYi0xZGIwLTQxODctOWYxNy02ZWNk M2NjYzhkZjQvN2QzNzI0MDdiNTBlYmExYmI4Zjc2NTIyNDhmZGIwZGNjM2RmZTdm MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDs6AwDQYJKoZIhvcNAQELBQADggEBALOPp/bsNLuyqf3t PnBTSw2eqDbQV0o0C7q8XnDUwRdWHANInE50ZjmKk51KDTqvAGB/LXF60Sem8GBx BwoECqdasCvlzDjpJnyi40YtagifrGrN/B+ZBwlM1R4EZlDNBxUjujGhQ+4/PUC9 2H37yMxlTHqMkVP5vocvllupM3Jm4/Y6yn0c32VXc4nA7ye+XAHim9a3PwiGnFDu uj/WKxXDjhNQSkM8lUbX4wNadTjZS92ixL8c/36Cb15ueBqIvMgMUx9qeNahuGWJ 33hNMPE689I6KWnBwHuAlcfsR6a9nDoNsd2qTleFzjXDZXiEmD55oDGDganCQhe4 3FMfKzs= -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:51 2023 by rpki-client on console-fra.rpki-client.org