$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/64efa9bfc8c3284480ee98016778926d168f1c17.roa File: 64efa9bfc8c3284480ee98016778926d168f1c17.roa (raw, json) Hash identifier: lO//jdxdI5eCObDqWKE/EUc6ciV1NnEVBt6vwQZ/hcM= Subject key identifier: 77:44:D5:41:35:8A:DE:DA:09:1D:4E:3B:5A:AA:44:81:E6:30:86:29 Certificate issuer: /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765 Certificate serial: 0D72C1 Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/64efa9bfc8c3284480ee98016778926d168f1c17.roa Signing time: Wed 24 Mar 2021 14:29:04 +0000 ROA not before: Wed 24 Mar 2021 14:29:03 +0000 ROA not after: Tue 24 Mar 2026 14:29:03 +0000 asID: 28114 IP address blocks: 2803:2600::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 02:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881345 (0xd72c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765 Validity Not Before: Mar 24 14:29:03 2021 GMT Not After : Mar 24 14:29:03 2026 GMT Subject: CN=64efa9bfc8c3284480ee98016778926d168f1c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:b9:f2:84:6d:35:3f:11:96:9e:70:d8:45: fc:68:44:3d:c6:96:18:b7:4a:7b:4a:13:d5:2b:fd: 8d:22:0e:38:e3:46:06:62:9f:2d:a1:c4:90:6d:a9: 7e:cb:87:96:f0:51:0a:d4:0b:83:19:39:91:f5:36: ae:00:b2:fd:d2:cd:27:27:50:da:53:68:49:5b:6f: 2b:17:96:c2:6c:59:88:ee:89:cd:06:8f:16:54:e3: 6f:b8:c5:0c:8b:e2:18:3b:a4:5e:a7:14:e5:a1:bb: 02:37:12:9e:78:8c:cf:a2:17:ad:58:d1:09:c6:98: 62:0a:5e:4a:41:f9:d9:74:f6:21:4e:34:99:86:d1: 8d:0e:16:b9:c6:24:0c:0b:3b:2a:fd:44:f0:3e:77: 9a:f6:20:de:3f:d4:80:13:de:d2:d0:90:56:bb:1a: 5e:ae:dd:07:99:83:8d:79:0e:0e:25:a7:b6:09:d6: ef:69:65:80:bc:9d:24:5b:5e:f2:39:50:1b:bc:9f: 50:94:cf:00:05:d9:0d:b4:c3:c5:06:1e:38:66:04: bb:66:eb:52:1f:59:3c:61:eb:6c:7b:66:72:d4:81: b0:22:11:37:a3:8e:37:db:e9:0f:ff:98:66:97:26: bc:b0:91:87:6b:0d:6e:d5:6c:e0:46:87:1b:57:f9: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:D5:41:35:8A:DE:DA:09:1D:4E:3B:5A:AA:44:81:E6:30:86:29 X509v3 Authority Key Identifier: keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/64efa9bfc8c3284480ee98016778926d168f1c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2600::/32 Signature Algorithm: sha256WithRSAEncryption 42:bd:a5:7b:f3:e2:70:4f:0e:62:fa:ac:0d:8b:35:e3:89:36: f3:49:3e:8a:72:bb:31:3d:a0:e1:d6:56:dd:1d:4c:0d:70:ef: 4b:d7:ac:af:82:c7:1a:aa:19:0c:50:9e:ea:69:81:6f:48:d2: e8:48:6f:18:31:c0:52:2a:a3:28:b8:92:6c:cb:64:6b:83:53: 8c:1a:d0:6a:e5:42:1f:a0:e2:a8:0f:f1:a1:bb:75:55:6a:fe: 4c:b5:b9:a9:71:1e:d7:86:a7:b0:38:3c:24:95:ce:0b:a7:f3: 97:4c:cd:a6:0f:54:f5:9a:8f:ae:51:d7:b7:93:98:e5:f0:fa: ca:f1:e4:c6:8f:52:30:8c:ab:93:0d:4a:07:00:ec:08:02:28: 24:75:3f:7e:59:54:f8:67:21:8a:69:f4:d8:04:04:23:c5:e2: b7:08:40:f4:8e:3d:a2:c8:fa:af:b9:52:ba:b2:eb:da:d7:27: 57:d6:bd:c2:e6:92:6e:ef:7d:fe:d6:c8:9f:bd:5b:49:2e:04: 06:8f:da:a5:d3:77:1d:0f:fb:36:d5:84:f1:03:21:e1:78:f4: e3:ec:b5:4a:c2:5f:9b:fb:c5:1e:8e:d4:01:75:d7:6d:97:5f: ee:bd:4e:cc:10:d9:bb:db:37:3c:3e:3b:a9:63:a7:dd:75:9d: 94:17:21:18 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDXLBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4 Y2IxODVkYzJiNjdmZWE0ZThmY2M5MzAzZGU3NmIyZTZiM2U3NjUwHhcNMjEwMzI0 MTQyOTAzWhcNMjYwMzI0MTQyOTAzWjAzMTEwLwYDVQQDEyg2NGVmYTliZmM4YzMy ODQ0ODBlZTk4MDE2Nzc4OTI2ZDE2OGYxYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAp4W58oRtNT8Rlp5w2EX8aEQ9xpYYt0p7ShPVK/2NIg4440YG Yp8tocSQbal+y4eW8FEK1AuDGTmR9TauALL90s0nJ1DaU2hJW28rF5bCbFmI7onN Bo8WVONvuMUMi+IYO6RepxTlobsCNxKeeIzPohetWNEJxphiCl5KQfnZdPYhTjSZ htGNDha5xiQMCzsq/UTwPnea9iDeP9SAE97S0JBWuxpert0HmYONeQ4OJae2Cdbv aWWAvJ0kW17yOVAbvJ9QlM8ABdkNtMPFBh44ZgS7ZutSH1k8Yetse2Zy1IGwIhE3 o4432+kP/5hmlya8sJGHaw1u1WzgRocbV/kWUQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFHdE1UE1it7aCR1OO1qqRIHmMIYpMB8GA1UdIwQYMBaAFEA3K4qkZDF+pWHm xGPL9wTNlKBjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhjYjE4 NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvY2ZmNzZlYzAtN2Q0YS00OWMzLWI0YWUtM2U2YTkx YjcyM2NiLzY0ZWZhOWJmYzhjMzI4NDQ4MGVlOTgwMTY3Nzg5MjZkMTY4ZjFjMTcu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jZmY3NmVjMC03ZDRhLTQ5YzMtYjRhZS0zZTZh OTFiNzIzY2IvZDhjYjE4NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDJgAwDQYJKoZIhvcNAQELBQADggEBAEK9pXvz4nBPDmL6 rA2LNeOJNvNJPopyuzE9oOHWVt0dTA1w70vXrK+CxxqqGQxQnuppgW9I0uhIbxgx wFIqoyi4kmzLZGuDU4wa0GrlQh+g4qgP8aG7dVVq/ky1ualxHteGp7A4PCSVzgun 85dMzaYPVPWaj65R17eTmOXw+srx5MaPUjCMq5MNSgcA7AgCKCR1P35ZVPhnIYpp 9NgEBCPF4rcIQPSOPaLI+q+5Urqy69rXJ1fWvcLmkm7vff7WyJ+9W0kuBAaP2qXT dx0P+zbVhPEDIeF49OPstUrCX5v7xR6O1AF1122XX+69TswQ2bvbNzw+O6ljp911 nZQXIRg= -----END CERTIFICATE-----Generated at Wed Mar 15 11:35:15 2023 by rpki-client on console-ams.rpki-client.org