$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/ba3b7022fb793e89895c5be64803eec3aade3c35.roa File: ba3b7022fb793e89895c5be64803eec3aade3c35.roa (raw, json) Hash identifier: hZnVBhjpM3ZziTxqY6g/6hAs+gIhy96ylgJlRdCam4s= Subject key identifier: 64:DE:46:0A:98:95:36:A9:4D:3D:67:09:09:25:93:82:A8:F8:C4:0C Certificate issuer: /CN=dd6660715432dca219d013cf5f8591f73aafbd11 Certificate serial: 0CB32F Authority key identifier: 97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/ba3b7022fb793e89895c5be64803eec3aade3c35.roa Signing time: Wed 21 Dec 2022 18:25:06 +0000 ROA not before: Sat 29 Jan 2022 07:30:00 +0000 ROA not after: Tue 30 Jan 2024 07:30:00 +0000 asID: 271925 IP address blocks: 2801:13:e800::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.crl rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 05:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832303 (0xcb32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6660715432dca219d013cf5f8591f73aafbd11 Validity Not Before: Jan 29 07:30:00 2022 GMT Not After : Jan 30 07:30:00 2024 GMT Subject: CN=ba3b7022fb793e89895c5be64803eec3aade3c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7d:29:12:bf:f8:fe:dc:0a:b0:2b:5c:9b:8e: 6f:17:62:8e:f3:81:bc:b4:d6:03:1b:34:d1:55:d6: d9:b4:c3:39:c2:c8:16:3e:82:66:96:04:c7:e0:4a: 30:24:e6:0b:0e:71:9e:d2:42:65:81:58:b9:c1:33: 1e:b0:d3:fa:be:de:7a:f7:8f:50:da:bd:6c:ea:95: eb:ef:19:8f:0b:b5:86:d2:a3:00:c2:60:a5:5a:0a: 2c:99:7c:b8:3d:1e:59:b3:15:fe:09:1a:3d:47:5a: aa:1b:21:03:73:4b:39:c9:10:f1:26:8a:ff:f2:03: cc:35:b2:10:2b:81:91:ab:a5:b4:d6:60:7c:94:86: ba:76:1f:a8:f9:b5:dd:29:d5:77:4a:cf:26:6b:b1: 3a:7b:55:34:3a:9e:fd:1b:69:be:78:90:95:e7:39: 24:b2:3c:62:a9:86:76:e8:5c:58:b7:90:f9:9e:f7: 31:35:c2:bc:46:22:fd:c5:8a:7a:d6:44:23:0a:8e: 32:0e:6f:f3:b7:54:cd:e9:12:55:0e:98:6e:ea:d3: a6:3d:0c:77:26:94:47:5e:f2:f6:01:dd:a4:db:fb: 4d:ce:45:6b:48:a9:ca:c6:66:1c:23:0c:b2:d9:62: 24:4d:80:4e:c3:18:9a:fe:5b:ad:ce:46:07:b6:5e: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:46:0A:98:95:36:A9:4D:3D:67:09:09:25:93:82:A8:F8:C4:0C X509v3 Authority Key Identifier: keyid:97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/ba3b7022fb793e89895c5be64803eec3aade3c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:13:e800::/48 Signature Algorithm: sha256WithRSAEncryption 0c:0f:3a:aa:49:54:2f:62:87:14:83:53:55:0f:9d:57:45:6a: 89:3d:ff:ad:2f:82:32:9f:73:f7:85:17:d2:aa:fc:34:18:94: 35:32:31:cc:75:e2:ba:c0:75:28:62:d8:13:6a:79:eb:8e:c8: a1:9c:97:d8:9a:78:69:1e:96:e5:55:3c:71:a5:bb:38:6e:0d: e8:55:a0:5f:28:96:a4:07:5a:32:1e:5c:79:eb:f5:44:54:99: 48:b6:3f:81:fc:bd:07:71:c7:e5:21:9c:c6:26:88:fd:37:53: 75:1e:f2:31:2a:b1:ce:ac:0f:c4:8b:0d:2c:9c:34:47:49:ff: dc:83:e9:79:0f:31:2c:6e:26:9e:e7:b0:75:4c:64:98:04:9e: 8e:16:7b:2d:75:ff:6f:52:15:b8:56:03:24:dc:f8:6f:ec:07: 8b:41:e5:6c:cb:ea:48:be:e2:c9:3d:48:a6:29:e4:6b:53:b5: 5e:0e:52:6b:95:68:54:de:79:12:b1:29:60:60:14:0e:c7:3a: c9:08:3c:3f:bc:89:c1:6d:d1:2a:f0:46:fe:7f:a5:c7:61:54: 82:62:ef:c4:2f:88:14:19:c2:49:5e:34:f8:1d:4f:b0:a4:b0: 32:0c:5b:a4:b4:1f:ac:6c:1c:d8:d1:fd:69:11:f3:c4:73:cf: fc:7d:c1:1a -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDDLMvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk NjY2MDcxNTQzMmRjYTIxOWQwMTNjZjVmODU5MWY3M2FhZmJkMTEwHhcNMjIwMTI5 MDczMDAwWhcNMjQwMTMwMDczMDAwWjAzMTEwLwYDVQQDEyhiYTNiNzAyMmZiNzkz ZTg5ODk1YzViZTY0ODAzZWVjM2FhZGUzYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgH0pEr/4/twKsCtcm45vF2KO84G8tNYDGzTRVdbZtMM5wsgW PoJmlgTH4EowJOYLDnGe0kJlgVi5wTMesNP6vt56949Q2r1s6pXr7xmPC7WG0qMA wmClWgosmXy4PR5ZsxX+CRo9R1qqGyEDc0s5yRDxJor/8gPMNbIQK4GRq6W01mB8 lIa6dh+o+bXdKdV3Ss8ma7E6e1U0Op79G2m+eJCV5zkksjxiqYZ26FxYt5D5nvcx NcK8RiL9xYp61kQjCo4yDm/zt1TN6RJVDphu6tOmPQx3JpRHXvL2Ad2k2/tNzkVr SKnKxmYcIwyy2WIkTYBOwxia/lutzkYHtl5sXQIDAQABo4ICXjCCAlowHQYDVR0O BBYEFGTeRgqYlTapTT1nCQklk4Ko+MQMMB8GA1UdIwQYMBaAFJcH/bA4BaJ4h9mu g98TZ7dukvZVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ2NjYw NzE1NDMyZGNhMjE5ZDAxM2NmNWY4NTkxZjczYWFmYmQxMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjQ2NjU3YmYtMGVhMy00OTBmLTk1YjUtZTk1Zjhm ZWJmODY5L2JhM2I3MDIyZmI3OTNlODk4OTVjNWJlNjQ4MDNlZWMzYWFkZTNjMzUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iNDY2NTdiZi0wZWEzLTQ5MGYtOTViNS1lOTVm OGZlYmY4NjkvZGQ2NjYwNzE1NDMyZGNhMjE5ZDAxM2NmNWY4NTkxZjczYWFmYmQx MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACgBABPoADANBgkqhkiG9w0BAQsFAAOCAQEADA86qklUL2KH FINTVQ+dV0VqiT3/rS+CMp9z94UX0qr8NBiUNTIxzHXiusB1KGLYE2p5647IoZyX 2Jp4aR6W5VU8caW7OG4N6FWgXyiWpAdaMh5ceev1RFSZSLY/gfy9B3HH5SGcxiaI /TdTdR7yMSqxzqwPxIsNLJw0R0n/3IPpeQ8xLG4mnuewdUxkmASejhZ7LXX/b1IV uFYDJNz4b+wHi0HlbMvqSL7iyT1Ipinka1O1Xg5Sa5VoVN55ErEpYGAUDsc6yQg8 P7yJwW3RKvBG/n+lx2FUgmLvxC+IFBnCSV40+B1PsKSwMgxbpLQfrGwc2NH9aRHz xHPP/H3BGg== -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:51 2023 by rpki-client on console-fra.rpki-client.org