$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa File: ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa (raw, json) Hash identifier: cSOmsyEOEweU9ndy4Dza3XXA3roiIlVpvBJqs+B/R0g= Subject key identifier: 3A:42:43:18:62:27:F9:D6:82:6C:3E:E6:43:64:E3:E8:E2:1E:4F:29 Certificate issuer: /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765 Certificate serial: 0D6E61 Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa Signing time: Wed 24 Mar 2021 14:29:04 +0000 ROA not before: Wed 24 Mar 2021 14:29:03 +0000 ROA not after: Tue 24 Mar 2026 14:29:03 +0000 asID: 28114 IP address blocks: 2803:2600::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Mar 2023 09:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880225 (0xd6e61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765 Validity Not Before: Mar 24 14:29:03 2021 GMT Not After : Mar 24 14:29:03 2026 GMT Subject: CN=ac55db7eadfdebb7a227507a9f61c57b43f0118a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:7c:9e:d1:8c:27:0b:fa:09:e2:fe:49:41: d7:fe:14:63:34:c2:e6:09:3a:03:ca:33:26:4c:c6: 87:0d:94:df:27:a6:63:89:96:9f:77:b9:d6:24:27: d6:86:94:e0:88:5a:71:d2:2b:64:3d:d9:7e:88:b1: a6:dc:94:17:2d:d6:cf:ba:0d:37:b9:b4:96:4a:5d: 8e:b6:e7:3f:66:6b:c7:b3:95:8d:fe:32:cf:be:1f: d9:9d:1c:a5:50:2b:df:c9:27:92:64:2b:61:c7:54: 31:64:c0:5f:0f:0e:40:57:77:5c:4b:a6:6f:c8:78: ec:20:79:ea:0e:85:2e:8d:b4:78:99:94:2c:60:60: 60:f1:e0:1b:87:78:b4:dd:6c:4d:64:24:40:05:81: 1c:bf:07:26:1b:ca:f6:34:a5:a9:9a:87:4e:d2:c7: b9:8a:a4:ec:cd:ad:07:10:f4:a8:32:71:74:2b:0b: 20:2f:1f:99:ff:89:3b:73:07:8d:af:cf:cd:f5:64: 25:70:ad:85:d9:08:b3:9b:85:e7:24:58:80:07:1c: c6:bb:d5:c0:8a:fa:d5:17:33:db:a1:dd:0b:f5:b5: 75:9d:c4:a2:e5:de:b4:80:56:41:39:ce:bd:04:04: 9e:ab:2f:e6:3a:c3:4b:a1:0c:29:2f:d0:dd:6f:ed: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:43:18:62:27:F9:D6:82:6C:3E:E6:43:64:E3:E8:E2:1E:4F:29 X509v3 Authority Key Identifier: keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2600::/32 Signature Algorithm: sha256WithRSAEncryption 29:7a:e6:12:d7:7c:5f:4b:22:91:c2:d2:75:20:f4:35:6d:f0: e5:46:2d:b3:9e:91:d7:1e:f4:ca:0f:d0:41:41:31:13:6b:f7: 42:6b:d5:49:a4:f2:ab:52:6b:75:f7:bb:39:29:73:d4:4f:74: 8c:f4:bd:17:f9:1e:62:d8:c6:de:23:64:4c:82:38:6a:3f:46: da:1d:3d:09:19:8a:b2:a8:a8:f0:8b:c0:58:fc:71:97:b7:c4: 1a:ac:3d:3b:5b:6f:4d:f8:f3:21:0d:5c:9a:13:12:59:0c:43: 58:d5:c4:49:a4:c6:ac:c4:c0:ea:85:2b:66:6c:6e:83:9d:45: 80:1d:d3:b5:61:0d:b9:46:0e:59:87:da:b4:62:f2:39:f3:b4: 44:e1:a0:1d:2d:ba:64:e9:c2:71:67:01:43:ba:eb:cc:9c:2d: be:cf:27:04:e3:a2:ec:07:39:8c:d9:4e:10:7c:78:a7:8b:29: 41:2b:cc:88:04:d8:72:3f:0c:67:97:55:b9:70:e7:dd:ea:91: 77:ea:d5:18:9a:d0:6c:43:78:65:fe:48:cb:55:62:28:a3:07: 19:f4:e4:45:60:54:ee:5c:70:b8:ba:cf:06:dd:ca:02:12:df: 04:c7:c3:62:d2:15:90:a1:e5:d6:21:8b:ba:e8:75:00:8a:10: 1e:89:dd:22 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDW5hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4 Y2IxODVkYzJiNjdmZWE0ZThmY2M5MzAzZGU3NmIyZTZiM2U3NjUwHhcNMjEwMzI0 MTQyOTAzWhcNMjYwMzI0MTQyOTAzWjAzMTEwLwYDVQQDEyhhYzU1ZGI3ZWFkZmRl YmI3YTIyNzUwN2E5ZjYxYzU3YjQzZjAxMThhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAikZ8ntGMJwv6CeL+SUHX/hRjNMLmCToDyjMmTMaHDZTfJ6Zj iZafd7nWJCfWhpTgiFpx0itkPdl+iLGm3JQXLdbPug03ubSWSl2Otuc/ZmvHs5WN /jLPvh/ZnRylUCvfySeSZCthx1QxZMBfDw5AV3dcS6ZvyHjsIHnqDoUujbR4mZQs YGBg8eAbh3i03WxNZCRABYEcvwcmG8r2NKWpmodO0se5iqTsza0HEPSoMnF0Kwsg Lx+Z/4k7cweNr8/N9WQlcK2F2Qizm4XnJFiABxzGu9XAivrVFzPbod0L9bV1ncSi 5d60gFZBOc69BASeqy/mOsNLoQwpL9Ddb+0lJwIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFDpCQxhiJ/nWgmw+5kNk4+jiHk8pMB8GA1UdIwQYMBaAFEA3K4qkZDF+pWHm xGPL9wTNlKBjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhjYjE4 NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvY2ZmNzZlYzAtN2Q0YS00OWMzLWI0YWUtM2U2YTkx YjcyM2NiL2FjNTVkYjdlYWRmZGViYjdhMjI3NTA3YTlmNjFjNTdiNDNmMDExOGEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jZmY3NmVjMC03ZDRhLTQ5YzMtYjRhZS0zZTZh OTFiNzIzY2IvZDhjYjE4NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDJgAwDQYJKoZIhvcNAQELBQADggEBACl65hLXfF9LIpHC 0nUg9DVt8OVGLbOekdce9MoP0EFBMRNr90Jr1Umk8qtSa3X3uzkpc9RPdIz0vRf5 HmLYxt4jZEyCOGo/RtodPQkZirKoqPCLwFj8cZe3xBqsPTtbb0348yENXJoTElkM Q1jVxEmkxqzEwOqFK2ZsboOdRYAd07VhDblGDlmH2rRi8jnztEThoB0tumTpwnFn AUO668ycLb7PJwTjouwHOYzZThB8eKeLKUErzIgE2HI/DGeXVblw593qkXfq1Ria 0GxDeGX+SMtVYiijBxn05EVgVO5ccLi6zwbdygIS3wTHw2LSFZCh5dYhi7rodQCK EB6J3SI= -----END CERTIFICATE-----Generated at Wed Mar 15 11:46:58 2023 by rpki-client on console-fra.rpki-client.org