$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa File: b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa (raw, json) Hash identifier: S1pNRaARvKHXOrYTCyfCCyMdvddWPQRwBCt8YTOW9jQ= Subject key identifier: 63:E4:8B:B3:FC:BD:34:1C:E3:CF:B5:AF:B4:DA:D5:84:6E:B4:24:1B Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2 Certificate serial: 21AB3E Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa Signing time: Thu 06 Apr 2023 12:03:00 +0000 ROA not before: Wed 05 Apr 2023 12:03:00 +0000 ROA not after: Sun 06 Apr 2025 12:03:00 +0000 asID: 394353 IP address blocks: 2001:13c7:702f::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206526 (0x21ab3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2 Validity Not Before: Apr 5 12:03:00 2023 GMT Not After : Apr 6 12:03:00 2025 GMT Subject: CN=b7949d20e5fae19e3e337123b99ec9d2d3349a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:20:10:27:7d:87:3b:b1:24:4f:a8:32:67: 3b:48:49:0d:15:f9:94:c8:07:8f:04:41:0e:aa:6b: a4:e9:d3:95:da:6a:15:94:69:ec:36:bd:eb:d7:1a: f8:64:ef:4b:7d:1e:a7:f5:1c:47:95:aa:b1:78:69: 47:d4:b8:1f:54:07:61:ba:81:f3:be:5e:b2:8c:31: 4c:d9:6d:d4:90:69:37:85:18:5a:df:6d:f9:1d:0c: 9e:ea:a7:8d:e3:b0:20:ec:d6:44:72:16:94:49:90: 65:d7:96:57:86:ac:b2:3e:0c:ad:78:19:b0:38:35: 16:94:f3:f4:7f:1b:a0:d7:11:85:c5:c6:e9:fd:5b: a7:40:20:b0:19:cd:80:34:b5:42:ab:95:3e:c8:22: 64:a0:0b:cb:19:59:af:e3:0b:d8:12:ef:8f:4e:09: ca:50:b8:92:27:50:f1:81:b0:3f:ea:38:aa:52:f3: b9:2b:26:d7:a1:a5:fd:8f:c9:18:db:c3:c5:c4:da: 3f:4a:ee:35:82:53:d0:52:68:56:46:87:bb:28:7c: c7:fa:ac:4c:fa:c6:76:e8:66:c4:43:24:f6:df:f3: 44:6b:ad:a3:80:80:89:c0:ff:5c:5b:cc:3b:b4:a7: 17:95:0b:3b:ef:f6:3c:86:82:15:72:0c:59:59:88: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E4:8B:B3:FC:BD:34:1C:E3:CF:B5:AF:B4:DA:D5:84:6E:B4:24:1B X509v3 Authority Key Identifier: keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:13c7:702f::/48 Signature Algorithm: sha256WithRSAEncryption 3d:dc:49:d5:3c:ac:ac:b1:e6:04:0b:0b:c6:02:4f:62:46:59: ae:74:6d:a0:81:af:9f:fe:ff:bf:6b:6a:c8:58:d2:20:f8:d0: 2d:cb:0c:7a:2a:fd:cc:54:81:cc:31:2d:cb:69:27:e7:e8:bf: 6a:4a:19:d1:0b:07:5f:73:34:48:a7:66:f9:4b:80:fd:13:b9: 9e:89:2b:af:99:e2:39:27:af:69:79:62:f5:1b:02:26:4e:92: 17:99:26:07:2b:5b:76:89:9b:88:d6:41:ac:f4:a8:1e:e0:3e: a7:a3:e7:d1:8c:39:c9:15:79:47:25:c3:36:9e:ca:37:09:db: c7:1c:c5:a5:a6:98:fc:0a:30:bd:17:08:28:f9:33:61:a9:68: 6f:53:7b:3b:44:cb:b8:49:4d:35:13:a0:6b:e5:95:1c:75:2e: 6a:b1:45:56:15:1f:0a:b8:ff:f0:1d:18:72:69:59:19:90:5a: 5f:1f:be:fd:96:bc:60:42:17:7e:0b:9a:89:65:11:dd:04:44: ba:28:c0:b0:32:ce:17:f9:f6:c7:0c:d7:f3:a1:a8:04:02:89: 74:89:38:48:16:8d:5f:26:f2:f7:8d:97:02:38:e4:0d:33:93: 54:78:d2:81:a1:70:5f:48:a8:2c:6e:38:c4:a1:e3:5e:c7:6b: e8:ed:fa:a0 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDIas+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNDA1 MTIwMzAwWhcNMjUwNDA2MTIwMzAwWjAzMTEwLwYDVQQDEyhiNzk0OWQyMGU1ZmFl MTllM2UzMzcxMjNiOTllYzlkMmQzMzQ5YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAv4sgECd9hzuxJE+oMmc7SEkNFfmUyAePBEEOqmuk6dOV2moV lGnsNr3r1xr4ZO9LfR6n9RxHlaqxeGlH1LgfVAdhuoHzvl6yjDFM2W3UkGk3hRha 3235HQye6qeN47Ag7NZEchaUSZBl15ZXhqyyPgyteBmwODUWlPP0fxug1xGFxcbp /VunQCCwGc2ANLVCq5U+yCJkoAvLGVmv4wvYEu+PTgnKULiSJ1DxgbA/6jiqUvO5 KybXoaX9j8kY28PFxNo/Su41glPQUmhWRoe7KHzH+qxM+sZ26GbEQyT23/NEa62j gICJwP9cW8w7tKcXlQs77/Y8hoIVcgxZWYimVQIDAQABo4ICXjCCAlowHQYDVR0O BBYEFGPki7P8vTQc48+1r7Ta1YRutCQbMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2 MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3 Y2VkMjA5L2I3OTQ5ZDIwZTVmYWUxOWUzZTMzNzEyM2I5OWVjOWQyZDMzNDlhMjAu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABE8dwLzANBgkqhkiG9w0BAQsFAAOCAQEAPdxJ1TysrLHm BAsLxgJPYkZZrnRtoIGvn/7/v2tqyFjSIPjQLcsMeir9zFSBzDEty2kn5+i/akoZ 0QsHX3M0SKdm+UuA/RO5nokrr5niOSevaXli9RsCJk6SF5kmBytbdombiNZBrPSo HuA+p6Pn0Yw5yRV5RyXDNp7KNwnbxxzFpaaY/AowvRcIKPkzYalob1N7O0TLuElN NROga+WVHHUuarFFVhUfCrj/8B0YcmlZGZBaXx++/Za8YEIXfguaiWUR3QREuijA sDLOF/n2xwzX86GoBAKJdIk4SBaNXyby942XAjjkDTOTVHjSgaFwX0ioLG44xKHj Xsdr6O36oA== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:18 2024 by rpki-client on console.sobornost.net