$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/e00825886ed457ef67c0643498bee630acbf7b11.roa File: e00825886ed457ef67c0643498bee630acbf7b11.roa (raw, json) Hash identifier: 2yOIWVbnbQPpyOEVCKwsw5zsttC/i1A+PS0jWM7+U/U= Subject key identifier: CC:7B:69:F0:48:78:2B:06:04:86:7A:30:C2:74:D4:76:4C:AC:8F:FD Certificate issuer: /CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab Certificate serial: 0BFBB9 Authority key identifier: A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/e00825886ed457ef67c0643498bee630acbf7b11.roa Signing time: Wed 24 Mar 2021 14:48:04 +0000 ROA not before: Wed 24 Mar 2021 14:48:04 +0000 ROA not after: Tue 24 Mar 2026 14:48:04 +0000 asID: 267693 IP address blocks: 2803:c1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.crl rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 12:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785337 (0xbfbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab Validity Not Before: Mar 24 14:48:04 2021 GMT Not After : Mar 24 14:48:04 2026 GMT Subject: CN=e00825886ed457ef67c0643498bee630acbf7b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:54:e4:5d:69:25:3f:ff:42:14:80:a7:8a: d9:cf:cb:4e:ec:17:77:ea:57:ef:ad:5b:96:41:40: 30:23:73:a8:ee:9f:3c:e1:f1:55:9d:79:3d:ed:0d: a2:3b:3a:50:35:51:94:81:8b:5f:34:a4:3c:1a:6d: 9a:8d:13:fa:b5:b7:04:fb:ca:fb:b2:c3:c4:38:bb: 2a:94:74:58:b6:76:d3:ad:0f:a3:ef:bf:7c:3a:c3: 87:99:fb:a6:00:19:0d:d1:9e:bd:48:46:84:aa:9a: 4d:ab:2e:7f:46:95:c3:52:ce:ae:2c:24:1e:29:44: 30:45:c1:0a:07:a1:9a:85:ce:05:fe:08:1b:fd:b3: 3a:1e:a9:57:fc:3d:2e:f8:a9:c5:25:4f:28:3b:ba: 4f:5f:dd:62:c7:b1:46:4c:cb:d7:a6:87:bb:d7:4b: 58:25:b8:ac:0b:79:8f:d4:c3:fc:83:7c:b7:d5:81: ef:35:ff:24:09:3d:df:30:5f:fa:e2:01:08:53:a8: 11:73:b7:5d:9e:64:05:69:41:52:77:42:35:dd:cd: 55:36:3c:73:25:2c:1d:00:7b:94:57:88:4e:24:c9: 0e:07:50:37:50:68:3f:ef:24:b2:e4:44:51:dc:24: f8:4b:5f:f7:8e:07:45:9b:9f:85:56:37:b7:bb:6d: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7B:69:F0:48:78:2B:06:04:86:7A:30:C2:74:D4:76:4C:AC:8F:FD X509v3 Authority Key Identifier: keyid:A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/e00825886ed457ef67c0643498bee630acbf7b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c1a0::/32 Signature Algorithm: sha256WithRSAEncryption a7:42:c8:a4:bb:f0:80:51:1e:72:d6:a8:bd:b3:3d:08:3d:cc: 06:4a:25:77:f5:c3:0d:e2:d2:42:b3:ea:11:39:d2:fa:80:27: e1:f2:3f:df:90:2f:44:d4:6a:2b:d4:e6:cf:23:d8:56:b4:b5: 0d:ea:d4:f1:55:1f:7b:e8:ed:97:aa:13:b3:10:ef:96:be:45: 02:52:f5:14:a7:20:6e:bf:71:fe:0e:85:d0:32:c7:4e:81:19: 57:25:51:26:97:ac:3d:e2:fd:71:74:81:d7:2d:b7:8d:a5:cc: ce:83:79:5c:89:e1:a1:65:d5:97:61:dd:aa:f4:09:9d:ed:cb: 66:f1:03:1d:b1:d4:ba:9e:9b:a3:3d:6a:4e:46:99:38:3f:d8: d4:50:cc:bd:f7:62:37:22:02:49:79:7b:c3:e1:50:87:d8:44: 78:d9:25:27:7e:d8:5c:9a:24:57:7d:ba:3f:e5:1c:62:4d:f6: 78:1b:05:ba:aa:4c:73:b9:1e:88:78:dd:6d:24:11:8a:9e:f0: 3d:e9:dd:84:f8:09:e0:ca:ca:94:05:97:6b:5b:dc:5c:6c:46: 9d:d4:c3:2d:fc:50:93:e3:9e:77:f0:2e:19:d8:85:89:e0:4b: aa:87:ea:93:80:90:50:6e:96:ad:bb:af:e5:0e:12:ce:22:17: 09:59:98:8f -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDC/u5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk ZjYwZGFkNWNiMDJmYTEzZTIyYTAzY2Y3ZTBmNWNhY2UzMmNlYWIwHhcNMjEwMzI0 MTQ0ODA0WhcNMjYwMzI0MTQ0ODA0WjAzMTEwLwYDVQQDEyhlMDA4MjU4ODZlZDQ1 N2VmNjdjMDY0MzQ5OGJlZTYzMGFjYmY3YjExMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAk2tU5F1pJT//QhSAp4rZz8tO7Bd36lfvrVuWQUAwI3Oo7p88 4fFVnXk97Q2iOzpQNVGUgYtfNKQ8Gm2ajRP6tbcE+8r7ssPEOLsqlHRYtnbTrQ+j 7798OsOHmfumABkN0Z69SEaEqppNqy5/RpXDUs6uLCQeKUQwRcEKB6Gahc4F/ggb /bM6HqlX/D0u+KnFJU8oO7pPX91ix7FGTMvXpoe710tYJbisC3mP1MP8g3y31YHv Nf8kCT3fMF/64gEIU6gRc7ddnmQFaUFSd0I13c1VNjxzJSwdAHuUV4hOJMkOB1A3 UGg/7ySy5ERR3CT4S1/3jgdFm5+FVje3u22FywIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFMx7afBIeCsGBIZ6MMJ01HZMrI/9MB8GA1UdIwQYMBaAFKmSt3NGc73lHUHm loX1yNMLczKsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWRmNjBk YWQ1Y2IwMmZhMTNlMjJhMDNjZjdlMGY1Y2FjZTMyY2VhYi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYzM0MzgzMjAtODdhMi00MjNmLWFmODEtNDQ1YmE2 YmVhMzg3L2UwMDgyNTg4NmVkNDU3ZWY2N2MwNjQzNDk4YmVlNjMwYWNiZjdiMTEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jMzQzODMyMC04N2EyLTQyM2YtYWY4MS00NDVi YTZiZWEzODcvOWRmNjBkYWQ1Y2IwMmZhMTNlMjJhMDNjZjdlMGY1Y2FjZTMyY2Vh Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDwaAwDQYJKoZIhvcNAQELBQADggEBAKdCyKS78IBRHnLW qL2zPQg9zAZKJXf1ww3i0kKz6hE50vqAJ+HyP9+QL0TUaivU5s8j2Fa0tQ3q1PFV H3vo7ZeqE7MQ75a+RQJS9RSnIG6/cf4OhdAyx06BGVclUSaXrD3i/XF0gdctt42l zM6DeVyJ4aFl1Zdh3ar0CZ3ty2bxAx2x1Lqem6M9ak5GmTg/2NRQzL33YjciAkl5 e8PhUIfYRHjZJSd+2FyaJFd9uj/lHGJN9ngbBbqqTHO5Hoh43W0kEYqe8D3p3YT4 CeDKypQFl2tb3FxsRp3Uwy38UJPjnnfwLhnYhYngS6qH6pOAkFBulq27r+UOEs4i FwlZmI8= -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:55 2023 by rpki-client on console-fra.rpki-client.org