$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/642933a1c52870d18a03910c31c775c35e5d9dfc.roa File: 642933a1c52870d18a03910c31c775c35e5d9dfc.roa (raw, json) Hash identifier: Gidunm4x6sONfHxBFvet0+JW9IN1NCnuBK97MLZqPjU= Subject key identifier: 42:50:09:3A:2E:1E:7F:A2:69:A3:11:2C:3D:B8:50:5B:85:E8:98:8B Certificate issuer: /CN=9cdbee5404c6b37387353abe6fc9a9bfff700800 Certificate serial: 07C524 Authority key identifier: D1:94:40:28:D7:7F:07:66:65:8B:C2:D3:F6:2C:78:F3:EF:B8:EA:64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/642933a1c52870d18a03910c31c775c35e5d9dfc.roa Signing time: Wed 12 Jul 2023 14:16:25 +0000 ROA not before: Tue 11 Jul 2023 14:16:25 +0000 ROA not after: Sat 12 Jul 2025 14:16:25 +0000 asID: 64139 IP address blocks: 2803:7090::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.crl rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509220 (0x7c524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdbee5404c6b37387353abe6fc9a9bfff700800 Validity Not Before: Jul 11 14:16:25 2023 GMT Not After : Jul 12 14:16:25 2025 GMT Subject: CN=642933a1c52870d18a03910c31c775c35e5d9dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:e5:d0:4a:8d:96:34:2e:73:d2:41:65:97: db:f6:0e:ec:46:61:59:1d:69:b5:b4:ef:e0:dc:03: 9e:18:5f:2e:a8:34:42:00:79:01:71:e3:98:30:09: ac:81:1c:23:7a:2b:e8:41:1d:97:4a:5a:ce:68:99: 01:5c:0b:49:3a:25:de:39:58:e5:a1:85:c7:bd:db: b8:36:47:7b:87:2a:cd:c8:84:8b:5f:05:ac:63:78: 20:5c:4e:a1:de:31:3f:44:ed:c5:61:8d:ea:5e:f6: f7:e8:4a:a2:50:6b:f8:e0:20:58:8d:f2:7d:b6:94: 34:f7:e1:65:cb:6e:cd:a9:df:ab:93:98:d0:1a:8c: 64:be:6b:a9:eb:53:bc:a3:7a:04:27:5f:c9:1d:15: 81:ad:21:bc:59:da:c7:59:7d:61:0e:47:a7:92:c9: 5c:98:62:21:71:c1:7e:6e:ac:6f:39:b5:b0:61:e1: b2:13:39:33:9a:5e:ca:52:7b:75:95:f8:4b:6b:cb: a0:06:c8:c4:b8:24:84:e0:8f:75:69:e0:33:95:a8: 87:70:22:4b:62:14:75:10:ac:d3:35:f4:45:e9:5b: 3c:fb:05:af:0a:22:ce:17:75:77:b8:d0:c2:98:d9: a2:e7:75:df:35:2c:86:81:a1:d0:40:97:f8:ed:d7: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:50:09:3A:2E:1E:7F:A2:69:A3:11:2C:3D:B8:50:5B:85:E8:98:8B X509v3 Authority Key Identifier: keyid:D1:94:40:28:D7:7F:07:66:65:8B:C2:D3:F6:2C:78:F3:EF:B8:EA:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/642933a1c52870d18a03910c31c775c35e5d9dfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7090::/32 Signature Algorithm: sha256WithRSAEncryption 8b:7b:e0:1c:b4:61:04:e2:9e:d0:01:c8:f5:de:ee:5f:f6:26: 55:74:80:b5:1b:af:01:a3:bc:7c:0c:f5:58:1e:6d:dd:bf:4b: 45:64:b1:b1:fe:c2:2d:af:0a:b3:f6:16:58:e2:9c:33:30:c4: 71:7c:e5:c3:b1:c9:3d:fa:3c:13:f5:2c:94:d0:af:4a:93:73: 69:c5:5a:18:ae:da:1d:41:21:9d:a6:46:a0:9b:c6:1b:6a:dc: 53:a6:cc:6b:34:4d:96:0c:8b:8b:8d:ae:42:12:16:3f:2d:10: 60:c5:5d:69:9c:b7:5e:dc:be:69:53:a6:43:74:b5:c8:b4:43: 8c:7c:f1:60:a6:6e:5d:8c:ae:f1:8a:8b:27:80:a0:6e:4c:4d: c0:33:ee:d6:57:db:87:fc:a0:48:35:cd:ec:e9:8f:e0:10:53: 3b:42:af:70:84:7d:b3:9f:76:27:8e:05:13:1d:76:7b:06:d6: 5c:16:e4:89:d5:6a:8c:d3:80:86:2e:15:b9:06:79:c9:07:a4: 2f:9d:6f:8f:f7:69:44:20:a5:fd:fb:e7:29:74:fa:1d:69:05: 27:73:ca:51:b4:8b:a8:74:0e:31:64:13:70:8a:c2:8c:d3:ae: b9:b4:bc:f5:67:4f:82:85:a9:1a:27:7e:e8:b3:ff:04:08:1b: b7:9a:89:b9 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDB8UkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj ZGJlZTU0MDRjNmIzNzM4NzM1M2FiZTZmYzlhOWJmZmY3MDA4MDAwHhcNMjMwNzEx MTQxNjI1WhcNMjUwNzEyMTQxNjI1WjAzMTEwLwYDVQQDEyg2NDI5MzNhMWM1Mjg3 MGQxOGEwMzkxMGMzMWM3NzVjMzVlNWQ5ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAl+nl0EqNljQuc9JBZZfb9g7sRmFZHWm1tO/g3AOeGF8uqDRC AHkBceOYMAmsgRwjeivoQR2XSlrOaJkBXAtJOiXeOVjloYXHvdu4Nkd7hyrNyISL XwWsY3ggXE6h3jE/RO3FYY3qXvb36EqiUGv44CBYjfJ9tpQ09+Fly27Nqd+rk5jQ Goxkvmup61O8o3oEJ1/JHRWBrSG8WdrHWX1hDkenkslcmGIhccF+bqxvObWwYeGy Ezkzml7KUnt1lfhLa8ugBsjEuCSE4I91aeAzlaiHcCJLYhR1EKzTNfRF6Vs8+wWv CiLOF3V3uNDCmNmi53XfNSyGgaHQQJf47dfp+wIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFEJQCTouHn+iaaMRLD24UFuF6JiLMB8GA1UdIwQYMBaAFNGUQCjXfwdmZYvC 0/YsePPvuOpkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWNkYmVl NTQwNGM2YjM3Mzg3MzUzYWJlNmZjOWE5YmZmZjcwMDgwMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjVlYTMwZmEtZjhlMS00NzQ5LWJlZTYtYjBkMjJj MGViZGRiLzY0MjkzM2ExYzUyODcwZDE4YTAzOTEwYzMxYzc3NWMzNWU1ZDlkZmMu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yNWVhMzBmYS1mOGUxLTQ3NDktYmVlNi1iMGQy MmMwZWJkZGIvOWNkYmVlNTQwNGM2YjM3Mzg3MzUzYWJlNmZjOWE5YmZmZjcwMDgw MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDcJAwDQYJKoZIhvcNAQELBQADggEBAIt74By0YQTintAB yPXe7l/2JlV0gLUbrwGjvHwM9Vgebd2/S0VksbH+wi2vCrP2FljinDMwxHF85cOx yT36PBP1LJTQr0qTc2nFWhiu2h1BIZ2mRqCbxhtq3FOmzGs0TZYMi4uNrkISFj8t EGDFXWmct17cvmlTpkN0tci0Q4x88WCmbl2MrvGKiyeAoG5MTcAz7tZX24f8oEg1 zezpj+AQUztCr3CEfbOfdieOBRMddnsG1lwW5InVaozTgIYuFbkGeckHpC+db4/3 aUQgpf375yl0+h1pBSdzylG0i6h0DjFkE3CKwozTrrm0vPVnT4KFqRonfuiz/wQI G7eaibk= -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:37 2024 by rpki-client on console.sobornost.net