$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa File: d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa (raw, json) Hash identifier: osUGITiWW/MuxhN2nkpniADZsrqb6gop6R+E8stNxjI= Subject key identifier: 74:FB:BA:D9:B0:78:72:C7:EB:10:64:A4:03:AD:50:F6:01:7E:B5:C3 Certificate issuer: /CN=915f68a6528ca709ff174bd5596ac8710fb56d18 Certificate serial: 0CF0C8 Authority key identifier: D3:3B:AA:08:ED:C7:29:48:1D:C7:F5:BF:E6:28:5D:A3:85:70:FA:92 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/915f68a6528ca709ff174bd5596ac8710fb56d18.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa Signing time: Wed 24 Mar 2021 14:46:19 +0000 ROA not before: Wed 24 Mar 2021 14:46:19 +0000 ROA not after: Tue 24 Mar 2026 14:46:19 +0000 asID: 263813 IP address blocks: 2803:b240::/32 maxlen: 32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/915f68a6528ca709ff174bd5596ac8710fb56d18.crl rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/915f68a6528ca709ff174bd5596ac8710fb56d18.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/915f68a6528ca709ff174bd5596ac8710fb56d18.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848072 (0xcf0c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=915f68a6528ca709ff174bd5596ac8710fb56d18 Validity Not Before: Mar 24 14:46:19 2021 GMT Not After : Mar 24 14:46:19 2026 GMT Subject: CN=d8ea93927c0cf18ec0fa2b990a32f5556159f14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:97:b3:eb:6f:44:aa:27:80:04:8b:82:70: 43:0f:e3:3b:f7:2d:03:ac:b6:d8:b6:bd:3f:f8:fd: 37:0d:43:7e:c0:09:56:66:93:a8:dc:3f:78:40:c2: e8:cb:ab:13:ea:1b:ab:c0:6d:b7:48:81:b6:4b:b8: 2d:74:7e:f6:9f:f4:13:c4:83:31:8a:fa:a1:8c:a7: 36:01:56:53:98:2a:84:15:3a:c4:cb:cb:6a:5c:f4: 77:b7:f2:44:e3:7e:ab:d5:4f:af:a5:a3:d1:57:b8: e1:85:4c:cf:ee:02:53:5b:7e:90:af:92:8a:21:76: c3:f1:23:fa:cc:d7:89:5b:56:fb:8a:3b:90:b8:dc: 47:20:fc:36:cc:8b:6e:95:38:53:48:41:6f:fe:fd: 6a:db:1e:0d:2b:19:e0:4e:ec:7a:4f:76:fb:b8:b5: 00:2a:31:f7:72:44:b5:7f:34:d2:e6:79:8e:5f:1f: c3:4f:ae:09:f2:1d:4b:f8:24:49:91:89:2d:06:22: 5f:5e:f9:37:e3:3b:25:50:91:44:ea:dc:8a:9e:9f: bb:bb:19:e1:82:49:58:f0:3e:d4:53:b2:45:95:c0: 21:7e:1d:c1:08:b1:40:9f:c8:97:f9:8a:71:88:cd: b6:4e:02:bf:9b:44:c3:23:55:3c:ae:40:ae:e8:7e: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:BA:D9:B0:78:72:C7:EB:10:64:A4:03:AD:50:F6:01:7E:B5:C3 X509v3 Authority Key Identifier: keyid:D3:3B:AA:08:ED:C7:29:48:1D:C7:F5:BF:E6:28:5D:A3:85:70:FA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/915f68a6528ca709ff174bd5596ac8710fb56d18.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/915f68a6528ca709ff174bd5596ac8710fb56d18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b240::/32 Signature Algorithm: sha256WithRSAEncryption 65:4d:02:79:4f:eb:68:92:20:08:60:cb:82:51:ea:04:20:e2: 34:70:f2:71:ef:c5:75:f7:90:c0:8f:cf:66:7c:3a:ae:f1:bd: 64:7a:29:e9:7b:70:44:d7:6e:16:41:08:5d:bb:7a:9f:4b:72: e2:2e:1f:f5:5a:25:06:a0:f0:14:ef:62:59:d8:0b:cc:6b:46: 04:5c:09:64:c0:e1:1e:86:6d:b2:b2:7c:ae:52:2d:6a:92:df: e4:19:2a:1c:2c:06:7f:69:45:c3:c5:9b:6b:b6:ca:d8:24:97: 82:da:b6:c0:fa:36:f6:d6:b8:42:9a:7f:90:4d:1d:e4:d1:49: 19:f1:80:be:44:8c:2a:77:6d:e9:5c:38:62:bc:56:c6:43:da: 20:23:4d:1c:15:d9:f9:24:58:9c:95:e7:5f:5b:b7:37:3d:b5: 59:3b:1d:fe:1b:be:55:37:f5:16:ba:b0:36:be:60:66:2b:c8: d7:e2:7e:aa:5b:41:07:38:2c:2b:eb:db:19:3f:c2:9b:e1:9a: d2:4c:89:a0:a3:29:79:09:f3:3f:c3:d4:3b:1b:e2:8c:ac:4a: a5:f1:2f:62:d6:b9:0a:a3:ca:b9:dc:7a:6f:54:ab:c9:81:5a: a5:7b:97:2b:2f:d8:63:d3:16:ff:f0:6b:05:27:b6:c1:b1:28: 6f:07:4d:a5 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDDPDIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx NWY2OGE2NTI4Y2E3MDlmZjE3NGJkNTU5NmFjODcxMGZiNTZkMTgwHhcNMjEwMzI0 MTQ0NjE5WhcNMjYwMzI0MTQ0NjE5WjAzMTEwLwYDVQQDEyhkOGVhOTM5MjdjMGNm MThlYzBmYTJiOTkwYTMyZjU1NTYxNTlmMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAjGWXs+tvRKongASLgnBDD+M79y0DrLbYtr0/+P03DUN+wAlW ZpOo3D94QMLoy6sT6hurwG23SIG2S7gtdH72n/QTxIMxivqhjKc2AVZTmCqEFTrE y8tqXPR3t/JE436r1U+vpaPRV7jhhUzP7gJTW36Qr5KKIXbD8SP6zNeJW1b7ijuQ uNxHIPw2zItulThTSEFv/v1q2x4NKxngTux6T3b7uLUAKjH3ckS1fzTS5nmOXx/D T64J8h1L+CRJkYktBiJfXvk34zslUJFE6tyKnp+7uxnhgklY8D7UU7JFlcAhfh3B CLFAn8iX+YpxiM22TgK/m0TDI1U8rkCu6H70uQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFHT7utmweHLH6xBkpAOtUPYBfrXDMB8GA1UdIwQYMBaAFNM7qgjtxylIHcf1 v+YoXaOFcPqSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE1ZjY4 YTY1MjhjYTcwOWZmMTc0YmQ1NTk2YWM4NzEwZmI1NmQxOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZmNmZTQ0YjMtOWUwZC00ZjAyLWIzOTktMDQ5NGFl OWI0ZjM5L2Q4ZWE5MzkyN2MwY2YxOGVjMGZhMmI5OTBhMzJmNTU1NjE1OWYxNGEu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mY2ZlNDRiMy05ZTBkLTRmMDItYjM5OS0wNDk0 YWU5YjRmMzkvOTE1ZjY4YTY1MjhjYTcwOWZmMTc0YmQ1NTk2YWM4NzEwZmI1NmQx OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDskAwDQYJKoZIhvcNAQELBQADggEBAGVNAnlP62iSIAhg y4JR6gQg4jRw8nHvxXX3kMCPz2Z8Oq7xvWR6Kel7cETXbhZBCF27ep9LcuIuH/Va JQag8BTvYlnYC8xrRgRcCWTA4R6GbbKyfK5SLWqS3+QZKhwsBn9pRcPFm2u2ytgk l4LatsD6NvbWuEKaf5BNHeTRSRnxgL5EjCp3belcOGK8VsZD2iAjTRwV2fkkWJyV 519btzc9tVk7Hf4bvlU39Ra6sDa+YGYryNfifqpbQQc4LCvr2xk/wpvhmtJMiaCj KXkJ8z/D1Dsb4oysSqXxL2LWuQqjyrncem9Uq8mBWqV7lysv2GPTFv/wawUntsGx KG8HTaU= -----END CERTIFICATE-----Generated at Thu Mar 28 04:54:59 2024 by rpki-client on console-ams.rpki-client.org