$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa File: 5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa (raw, json) Hash identifier: Lh3Q3aA0jJGNAUKCVzthxmpFn8fHkgHRRVn3K5I9AJw= Subject key identifier: 28:21:5F:16:F5:09:9F:B4:F0:D8:15:C9:79:02:4E:28:50:E4:A4:1B Certificate issuer: /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52 Certificate serial: 030AC0 Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa Signing time: Tue 01 Feb 2022 20:42:08 +0000 ROA not before: Tue 16 Nov 2021 03:00:00 +0000 ROA not after: Mon 15 Jan 2024 03:00:00 +0000 asID: 22822 IP address blocks: 2801:114::/44 maxlen: 48 2803:9310::/32 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199360 (0x30ac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52 Validity Not Before: Nov 16 03:00:00 2021 GMT Not After : Jan 15 03:00:00 2024 GMT Subject: CN=5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:46:67:3a:e9:58:b1:05:6d:1f:07:c4:b3: 20:aa:48:0e:3c:9f:99:ff:f9:d4:3a:3e:01:4e:2b: 8f:cc:f6:8f:ff:a2:8a:3a:31:bb:56:d5:79:80:ae: e7:5e:71:78:77:03:95:40:b7:bb:be:d9:32:ee:0e: 17:ec:ca:c4:58:6d:ec:85:ea:a8:64:e8:a6:ee:0e: 38:6b:73:6e:cd:1c:6b:a0:62:a6:85:62:35:e9:a8: ea:d5:5f:48:13:13:43:ee:12:b0:82:f4:74:88:aa: 67:8e:bb:78:ff:19:dd:53:7f:7c:6b:27:f0:77:51: 1e:92:aa:29:6b:dd:ec:3f:ed:ca:6f:16:9d:00:1f: 9d:59:59:ff:c4:22:10:1b:a1:3f:04:4d:09:38:51: 20:52:27:b0:cc:32:df:e5:e1:c8:0a:66:d1:d6:76: ad:78:8e:d0:50:a9:44:27:63:a3:0f:02:6c:ca:4c: ec:ad:c1:1e:bc:c2:f6:a4:f9:6b:a7:4b:51:a4:ac: 68:f5:07:91:08:aa:43:f0:3a:a5:f2:30:8f:13:09: c2:9c:28:e6:46:1c:9a:e1:c0:d1:e5:f7:e7:fa:cd: 74:33:5d:30:e2:9e:95:30:ff:ab:9a:df:94:be:0e: 97:d1:03:f1:2a:75:d3:d4:9b:a2:da:f0:77:6b:27: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:5F:16:F5:09:9F:B4:F0:D8:15:C9:79:02:4E:28:50:E4:A4:1B X509v3 Authority Key Identifier: keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:114::/44 2803:9310::/32 Signature Algorithm: sha256WithRSAEncryption 66:ad:72:de:40:ec:2d:2d:b0:0c:5a:65:25:e8:a3:67:38:e1: 5a:18:cd:82:4f:7a:c6:a9:99:dd:02:f1:ee:83:ea:3b:ee:26: 95:bb:aa:44:63:a7:01:8f:0e:45:ec:ec:0c:2e:25:9a:90:13: c7:0c:d2:5a:1d:23:97:2c:d1:ab:87:d0:84:e7:ff:e9:88:a2: fc:60:0b:e9:26:0f:90:af:69:e4:b4:3f:6b:8f:72:bf:d7:48: cd:79:65:3b:2d:5c:fc:d4:14:ff:a4:73:87:0f:a5:12:c1:f3: 9b:2c:cf:5b:8f:3b:e3:7f:f9:9e:8f:3f:15:c2:1f:9e:99:43: 4b:ae:68:12:4c:fc:56:cf:8b:de:34:a6:2a:95:0f:0c:4f:46: d6:5d:42:e1:3a:4e:67:8d:48:ae:0a:97:46:d3:81:bd:35:7f: 18:ca:3f:b2:df:03:77:dc:47:0f:8a:5b:2a:d9:1e:30:fa:f1: 57:7e:62:26:cc:d7:c6:91:0e:a1:b4:9e:95:6c:96:5b:8d:a8: 6d:6d:fb:1e:a3:5c:14:39:a3:7d:2d:71:76:35:73:9c:98:b8: 08:ca:f1:84:ef:36:44:36:10:68:1a:19:93:ab:1c:fb:b2:ec: 2a:b6:e6:de:4a:4f:e3:77:e9:7c:03:ea:44:25:29:18:e8:e7: e2:93:16:71 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIDAwrAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2 NGFhZjlkNzBjMjE2NTUxYjFiNjE5YmM0Yzg1NzNjM2IzZTFiNTIwHhcNMjExMTE2 MDMwMDAwWhcNMjQwMTE1MDMwMDAwWjAzMTEwLwYDVQQDEyg1ZGEyYzlhMWM0OTkw ZDE5NTg0ZmVjODA1YTg3ZjJjOWVjOGNiOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwlNGZzrpWLEFbR8HxLMgqkgOPJ+Z//nUOj4BTiuPzPaP/6KK OjG7VtV5gK7nXnF4dwOVQLe7vtky7g4X7MrEWG3sheqoZOim7g44a3NuzRxroGKm hWI16ajq1V9IExND7hKwgvR0iKpnjrt4/xndU398ayfwd1Eekqopa93sP+3Kbxad AB+dWVn/xCIQG6E/BE0JOFEgUiewzDLf5eHICmbR1nateI7QUKlEJ2OjDwJsykzs rcEevML2pPlrp0tRpKxo9QeRCKpD8Dql8jCPEwnCnCjmRhya4cDR5ffn+s10M10w 4p6VMP+rmt+Uvg6X0QPxKnXT1Jui2vB3ayfkewIDAQABo4ICZTCCAmEwHQYDVR0O BBYEFCghXxb1CZ+08NgVyXkCTihQ5KQbMB8GA1UdIwQYMBaAFISm8Fb2MnQz/0/c UNnzstjFz/6bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY0YWFm OWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1Mi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvN2VhZmY4OWEtODU3YS00ODcwLTgxMmMtN2E1NzRk ZTE2YjI2LzVkYTJjOWExYzQ5OTBkMTk1ODRmZWM4MDVhODdmMmM5ZWM4Y2I5YmIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83ZWFmZjg5YS04NTdhLTQ4NzAtODEyYy03YTU3 NGRlMTZiMjYvNDY0YWFmOWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1 Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQa MBgwFgQCAAIwEAMHBCgBARQAAAMFACgDkxAwDQYJKoZIhvcNAQELBQADggEBAGat ct5A7C0tsAxaZSXoo2c44VoYzYJPesapmd0C8e6D6jvuJpW7qkRjpwGPDkXs7Awu JZqQE8cM0lodI5cs0auH0ITn/+mIovxgC+kmD5CvaeS0P2uPcr/XSM15ZTstXPzU FP+kc4cPpRLB85ssz1uPO+N/+Z6PPxXCH56ZQ0uuaBJM/FbPi940piqVDwxPRtZd QuE6TmeNSK4Kl0bTgb01fxjKP7LfA3fcRw+KWyrZHjD68Vd+YibM18aRDqG0npVs lluNqG1t+x6jXBQ5o30tcXY1c5yYuAjK8YTvNkQ2EGgaGZOrHPuy7Cq25t5KT+N3 6XwD6kQlKRjo5+KTFnE= -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:08 2024 by rpki-client on console.sobornost.net