$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa File: d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa (raw, json) Hash identifier: quVHPUj6h/Ity1VraKOKlE6202j7WIHIwnD4jqAPzvc= Subject key identifier: B4:D3:8B:8B:2C:12:52:82:87:C5:67:5B:F3:F5:57:1F:4F:03:CD:0B Certificate issuer: /CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b Certificate serial: 03475D Authority key identifier: E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa Signing time: Mon 18 Dec 2023 19:33:29 +0000 ROA not before: Mon 18 Dec 2023 19:33:29 +0000 ROA not after: Thu 18 Dec 2025 19:33:29 +0000 asID: 273114 IP address blocks: 2803:790::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214877 (0x3475d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b Validity Not Before: Dec 18 19:33:29 2023 GMT Not After : Dec 18 19:33:29 2025 GMT Subject: CN=d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:79:5b:9b:61:79:9a:8f:ed:6f:83:ab:98: ae:a5:9c:6a:60:33:87:0d:dd:12:9f:4f:a1:20:39: 25:ce:ac:f1:d8:86:f0:22:a7:5a:95:30:69:8e:63: 14:e6:00:d3:05:cd:c7:c1:97:dc:02:b9:d3:b5:a9: a3:eb:2b:41:1e:b9:92:95:d3:6b:4f:20:42:d0:0b: cc:70:d1:cf:4b:87:a0:b1:b0:ed:38:23:eb:50:02: ef:c4:75:ae:24:9c:ec:17:da:85:b4:b8:dc:62:27: f1:1f:99:32:0e:75:18:82:03:41:b0:71:f5:17:d8: 87:11:87:9e:6e:3f:3d:70:ee:c0:04:18:66:9f:cc: 20:ad:4c:94:b5:f2:7a:ce:70:b6:42:8c:9b:16:2f: 54:41:bf:be:7e:9c:cc:29:de:54:72:0f:2a:72:41: ef:b0:3a:b4:ae:c0:03:55:c1:7c:10:f7:40:0e:b5: e1:2a:6a:d1:1a:4c:bb:7d:f3:35:67:e8:c3:f7:84: f8:d2:71:66:55:fa:27:61:e3:ee:9a:26:ef:4f:48: a3:be:f6:52:df:1e:2a:19:66:d7:b4:2d:9c:97:a2: 3a:93:fc:99:ac:67:8c:48:09:b2:06:1f:4b:83:06: a2:bb:60:c4:82:24:c2:fc:6e:f9:ad:23:02:36:18: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D3:8B:8B:2C:12:52:82:87:C5:67:5B:F3:F5:57:1F:4F:03:CD:0B X509v3 Authority Key Identifier: keyid:E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:790::/32 Signature Algorithm: sha256WithRSAEncryption 76:a0:7a:bb:a8:4d:f3:6e:7a:db:07:18:79:e5:32:63:24:55: bf:34:43:88:f9:cd:f3:3a:f9:46:50:4f:3d:05:98:aa:1e:f9: 1d:3d:c0:a1:bb:4b:2a:08:6f:5d:bc:a4:85:3f:72:49:8a:94: f4:58:4f:6c:60:3f:18:ef:21:9f:d8:35:78:94:af:b1:4d:99: fb:c0:de:77:9d:b8:c6:0e:68:9b:b4:6c:55:b3:06:0b:48:c0: 6e:c2:70:6b:8d:de:02:d6:db:19:a2:a3:7a:90:c0:f2:24:86: 48:b6:e0:9e:5d:bd:50:d6:0f:d3:b6:fd:12:ea:fd:12:e0:37: 0d:e4:25:b7:bb:5c:b0:43:d5:a7:55:fb:64:c1:0a:51:2b:be: 1a:ed:b2:38:67:44:ac:71:58:83:75:fc:87:3a:33:e5:e5:d2: 15:87:41:b6:9a:fb:2a:51:5e:37:76:a7:99:e0:2c:f2:91:13: 9f:d2:4d:c7:f7:68:72:1b:ab:12:48:d3:b4:d8:12:bd:df:f6: 78:a4:f2:a0:cc:b9:09:24:19:41:9a:a5:51:b9:93:78:9a:fd: b4:fb:6f:b0:fc:36:f5:f7:20:1f:b4:76:28:04:5f:c5:da:a8: 99:ea:30:7c:70:55:53:8f:1c:60:40:ad:06:4d:0f:b8:9c:e0: a0:58:18:c7 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIDA0ddMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3 MWVmN2FhYWYzOGMzNjhkMzMxMmU2OGY0OTRlODM5ZmU2ZjZiOWIwHhcNMjMxMjE4 MTkzMzI5WhcNMjUxMjE4MTkzMzI5WjAzMTEwLwYDVQQDEyhkMDY2MWU3NDEzMWJk Y2VjZmE3NzNjYzVmZDQzYmJmYThmZDdhMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmNl5W5theZqP7W+Dq5iupZxqYDOHDd0Sn0+hIDklzqzx2Ibw IqdalTBpjmMU5gDTBc3HwZfcArnTtamj6ytBHrmSldNrTyBC0AvMcNHPS4egsbDt OCPrUALvxHWuJJzsF9qFtLjcYifxH5kyDnUYggNBsHH1F9iHEYeebj89cO7ABBhm n8wgrUyUtfJ6znC2QoybFi9UQb++fpzMKd5Ucg8qckHvsDq0rsADVcF8EPdADrXh KmrRGky7ffM1Z+jD94T40nFmVfonYePumibvT0ijvvZS3x4qGWbXtC2cl6I6k/yZ rGeMSAmyBh9Lgwaiu2DEgiTC/G75rSMCNhitOQIDAQABo4ICXDCCAlgwHQYDVR0O BBYEFLTTi4ssElKCh8VnW/P1Vx9PA80LMB8GA1UdIwQYMBaAFObKaMy9n4toYryG n9BWWd7eZllGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDcxZWY3 YWFhZjM4YzM2OGQzMzEyZTY4ZjQ5NGU4MzlmZTZmNmI5Yi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZDcxMWJkYTAtZjEzNi00NzliLTk5MWYtNTZmZmMx NDI3MmNiL2QwNjYxZTc0MTMxYmRjZWNmYTc3M2NjNWZkNDNiYmZhOGZkN2ExZDIu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kNzExYmRhMC1mMTM2LTQ3OWItOTkxZi01NmZm YzE0MjcyY2IvNDcxZWY3YWFhZjM4YzM2OGQzMzEyZTY4ZjQ5NGU4MzlmZTZmNmI5 Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgDB5AwDQYJKoZIhvcNAQELBQADggEBAHageruoTfNuetsH GHnlMmMkVb80Q4j5zfM6+UZQTz0FmKoe+R09wKG7SyoIb128pIU/ckmKlPRYT2xg PxjvIZ/YNXiUr7FNmfvA3neduMYOaJu0bFWzBgtIwG7CcGuN3gLW2xmio3qQwPIk hki24J5dvVDWD9O2/RLq/RLgNw3kJbe7XLBD1adV+2TBClErvhrtsjhnRKxxWIN1 /Ic6M+Xl0hWHQbaa+ypRXjd2p5ngLPKRE5/STcf3aHIbqxJI07TYEr3f9nik8qDM uQkkGUGapVG5k3ia/bT7b7D8NvX3IB+0digEX8XaqJnqMHxwVVOPHGBArQZND7ic 4KBYGMc= -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net