$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa File: a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa (raw, json) Hash identifier: AJYT9AphuoqvtxRrGG5einYa024W1uHucl/as3cXbhM= Subject key identifier: 90:6E:37:F2:B9:D5:87:88:ED:F5:6E:B5:A8:1B:32:00:7C:8D:67:CF Certificate issuer: /CN=60077339e10a0ec2c6761ec2643f8be039720bbc Certificate serial: 0DC2DC Authority key identifier: 0C:F7:D2:FA:4C:E2:E7:13:8F:E7:2C:FF:8D:E9:A3:7D:5E:27:F4:51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa Signing time: Wed 24 Mar 2021 14:30:44 +0000 ROA not before: Wed 24 Mar 2021 14:30:44 +0000 ROA not after: Tue 24 Mar 2026 14:30:44 +0000 asID: 263780 IP address blocks: 2803:e440::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.crl rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901852 (0xdc2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60077339e10a0ec2c6761ec2643f8be039720bbc Validity Not Before: Mar 24 14:30:44 2021 GMT Not After : Mar 24 14:30:44 2026 GMT Subject: CN=a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1f:89:b6:a4:81:5b:66:5a:36:a2:9d:20:9c: df:fb:aa:40:dc:a8:8b:73:4d:a7:9e:8d:c3:54:66: 95:34:ca:6b:49:b2:ec:c3:0f:fa:5b:d2:70:8c:5a: fe:c2:ed:28:20:13:a6:ca:41:29:e1:cc:af:ed:7b: ee:58:5d:76:36:ce:98:24:83:74:8a:dd:45:49:f8: 43:c2:17:e2:22:2e:b1:d6:51:23:28:bf:3a:fa:7f: 71:d7:ae:41:a6:61:81:7a:c3:19:ee:2d:72:34:a7: 04:08:ae:80:89:98:49:d1:68:35:ce:29:20:e7:17: fe:88:cd:dc:9f:18:d1:0a:4a:5d:f5:7d:71:2c:de: b4:6a:b7:99:46:08:64:f6:46:b4:74:35:55:7f:64: 35:51:a6:5d:fd:9b:bd:8a:70:b9:b4:97:13:3b:97: af:93:aa:a3:08:81:0d:e9:4e:8b:d0:a3:37:de:e2: e8:8e:26:ca:b8:4c:d5:cc:6d:bc:07:25:c5:92:7d: b3:df:ba:e2:b2:56:7a:77:66:b2:6d:df:4d:63:7a: 31:28:b0:88:03:d1:f6:25:4f:40:c2:d6:2d:2d:e9: b7:fc:cb:d5:a4:19:44:82:5f:fd:3f:04:92:9f:73: 89:7a:cd:be:e2:7c:6e:b5:0a:c2:e2:22:34:39:56: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6E:37:F2:B9:D5:87:88:ED:F5:6E:B5:A8:1B:32:00:7C:8D:67:CF X509v3 Authority Key Identifier: keyid:0C:F7:D2:FA:4C:E2:E7:13:8F:E7:2C:FF:8D:E9:A3:7D:5E:27:F4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e440::/32 Signature Algorithm: sha256WithRSAEncryption 4a:c4:8d:e9:e9:df:5a:47:d0:81:1c:d7:28:d8:4c:f8:90:b6: 6f:b0:9b:9b:13:3d:30:bf:46:fa:2e:a8:72:a3:a4:73:4e:ff: 65:39:3c:38:9c:9e:75:98:5c:e1:0f:ac:af:b5:ba:1a:b0:2a: 45:ac:0b:62:d1:e7:67:b6:04:1d:25:3a:d8:59:96:7d:38:69: 69:32:02:5f:c4:12:7e:06:27:54:7d:8e:9c:a6:5d:b6:31:7b: e1:9a:1f:32:ad:ca:c6:84:54:41:95:42:92:6b:a3:13:79:6a: 7b:a2:f3:bb:c8:03:e1:5f:7f:95:4c:b1:47:45:d0:a4:a1:cf: 55:20:f5:70:25:7b:9b:b8:88:7a:de:4a:7e:d4:65:5a:5f:ca: 8d:40:34:78:d5:66:99:3c:cc:24:ec:da:2e:a6:26:35:33:75: 6c:ca:48:39:37:57:4a:d7:8f:f1:b5:76:49:31:0a:ea:92:75: a1:9e:98:76:f6:62:c7:1b:ae:3f:5f:d3:95:a7:0a:25:77:d1: 9d:44:99:1c:d2:26:77:7b:e1:3d:c0:6f:50:f4:f2:4e:78:ff: 98:c7:d4:75:5f:96:cc:37:b6:0b:92:e7:04:44:f5:91:8e:d1: d8:7c:c7:c2:7b:0f:11:12:fe:b6:f8:c6:70:3c:40:26:8d:ae: cc:20:db:b1 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDcLcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw MDc3MzM5ZTEwYTBlYzJjNjc2MWVjMjY0M2Y4YmUwMzk3MjBiYmMwHhcNMjEwMzI0 MTQzMDQ0WhcNMjYwMzI0MTQzMDQ0WjAzMTEwLwYDVQQDEyhhMWRmMzkxOTQwYTYx MDNjYThlMWE3ZDdmMzBlNTlhMmNjMGJhMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAgB+JtqSBW2ZaNqKdIJzf+6pA3KiLc02nno3DVGaVNMprSbLs ww/6W9JwjFr+wu0oIBOmykEp4cyv7XvuWF12Ns6YJIN0it1FSfhDwhfiIi6x1lEj KL86+n9x165BpmGBesMZ7i1yNKcECK6AiZhJ0Wg1zikg5xf+iM3cnxjRCkpd9X1x LN60areZRghk9ka0dDVVf2Q1UaZd/Zu9inC5tJcTO5evk6qjCIEN6U6L0KM33uLo jibKuEzVzG28ByXFkn2z37rislZ6d2aybd9NY3oxKLCIA9H2JU9AwtYtLem3/MvV pBlEgl/9PwSSn3OJes2+4nxutQrC4iI0OVYDBwIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFJBuN/K51YeI7fVutagbMgB8jWfPMB8GA1UdIwQYMBaAFAz30vpM4ucTj+cs /43po31eJ/RRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjAwNzcz MzllMTBhMGVjMmM2NzYxZWMyNjQzZjhiZTAzOTcyMGJiYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjhlNGM3ZmQtZDQ0Ny00MGEzLTlkZDEtZTlmNGNj YTkxM2QyL2ExZGYzOTE5NDBhNjEwM2NhOGUxYTdkN2YzMGU1OWEyY2MwYmExMmUu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iOGU0YzdmZC1kNDQ3LTQwYTMtOWRkMS1lOWY0 Y2NhOTEzZDIvNjAwNzczMzllMTBhMGVjMmM2NzYxZWMyNjQzZjhiZTAzOTcyMGJi Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgD5EAwDQYJKoZIhvcNAQELBQADggEBAErEjenp31pH0IEc 1yjYTPiQtm+wm5sTPTC/RvouqHKjpHNO/2U5PDicnnWYXOEPrK+1uhqwKkWsC2LR 52e2BB0lOthZln04aWkyAl/EEn4GJ1R9jpymXbYxe+GaHzKtysaEVEGVQpJroxN5 anui87vIA+Fff5VMsUdF0KShz1Ug9XAle5u4iHreSn7UZVpfyo1ANHjVZpk8zCTs 2i6mJjUzdWzKSDk3V0rXj/G1dkkxCuqSdaGemHb2Yscbrj9f05WnCiV30Z1EmRzS Jnd74T3Ab1D08k54/5jH1HVflsw3tguS5wRE9ZGO0dh8x8J7DxES/rb4xnA8QCaN rswg27E= -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:08 2023 by rpki-client on console-ams.rpki-client.org