$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa File: 3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa (raw, json) Hash identifier: 2mDkNUbygsVtq53ebfKbMn50L1fgMvFZUo/FHZZNI8Q= Subject key identifier: 66:95:D9:D6:C9:F0:1B:E1:D2:08:FF:B3:C1:80:5C:0E:C8:34:B4:86 Certificate issuer: /CN=5acbc1040078c2c220281be4e4aebb06b6460703 Certificate serial: 1245D8 Authority key identifier: 22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa Signing time: Mon 24 Apr 2023 08:30:00 +0000 ROA not before: Sun 23 Apr 2023 08:30:00 +0000 ROA not after: Tue 22 Apr 2025 08:30:00 +0000 asID: 14080 IP address blocks: 2801:1e:6800::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.crl rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 12 Jan 2024 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197528 (0x1245d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acbc1040078c2c220281be4e4aebb06b6460703 Validity Not Before: Apr 23 08:30:00 2023 GMT Not After : Apr 22 08:30:00 2025 GMT Subject: CN=3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:d3:3b:4a:2f:20:8e:da:b6:db:2f:3f:a8: 5b:34:ac:f5:f8:0e:57:7b:94:88:45:82:25:ca:29: 0d:71:a8:3b:c2:3b:42:84:e2:ca:cd:b8:4d:f6:f1: f1:c6:f7:8c:b5:75:bf:c5:ea:b6:8f:73:32:ad:db: db:92:cf:b4:91:c7:e8:62:e1:48:06:ce:d9:79:b5: e0:52:c5:07:4c:99:1f:8e:44:dd:ed:76:96:ab:3e: fd:5d:9a:b3:99:19:50:7b:15:65:48:52:e0:60:b5: 36:f7:ff:2a:4f:65:8f:f3:47:01:6a:76:1e:65:d9: 50:fe:5b:27:0b:78:24:04:e4:c6:82:8f:a2:bd:fd: 79:bf:bd:e8:00:56:76:0a:28:dc:42:15:30:26:aa: f8:c6:13:76:58:ab:72:e7:ba:bd:85:6a:0a:04:0d: b2:28:1a:8f:7b:a5:43:0f:ac:d1:84:e4:72:c1:ca: 4d:76:fe:5c:d6:3e:9d:29:ba:d9:20:e4:a8:e1:06: ce:03:07:c7:d9:ca:74:a6:f5:00:ae:ba:cb:2b:98: ff:3d:44:0f:d3:7e:8d:ad:81:b1:b9:34:61:09:c3: b3:e5:ec:5a:e7:86:12:ce:1f:c5:5a:14:38:6f:fa: d1:b6:d6:49:79:be:b3:33:4a:34:d2:93:ac:cf:2a: 9e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:D9:D6:C9:F0:1B:E1:D2:08:FF:B3:C1:80:5C:0E:C8:34:B4:86 X509v3 Authority Key Identifier: keyid:22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e:6800::/48 Signature Algorithm: sha256WithRSAEncryption 73:66:6f:fa:13:04:f4:2e:27:3b:3f:2a:84:fe:93:cd:73:1d: 49:66:04:4b:13:9c:30:e2:b4:55:ac:1a:c3:de:39:fb:78:41: 6f:83:a1:9d:af:5c:27:fe:95:5e:59:63:c5:b5:6a:e7:b0:33: c4:f0:50:a9:36:78:e5:dd:6d:39:89:a6:71:38:1d:2a:38:44: b0:11:82:14:c7:25:da:54:e6:5f:58:c0:0c:c3:58:d8:0f:bb: 94:03:20:9c:d3:60:a2:86:e2:7d:7e:ed:4c:43:11:9d:a5:03: 35:e0:a3:54:d8:3a:b1:47:45:e1:cb:76:37:6e:79:78:f4:9f: 2d:39:bf:47:5e:b6:d5:46:7c:57:3a:94:7c:0e:1b:80:9d:b7: 2a:d5:65:e0:7d:be:0c:74:1a:15:41:c9:d3:0d:17:2a:1e:5c: cc:ca:54:1a:69:8d:66:b1:33:1c:7c:00:46:aa:40:30:a9:e0: 6e:2c:24:49:b5:e5:e3:ea:af:8b:d9:66:72:e9:ea:db:63:60: 6e:0a:7a:fa:98:83:dd:ed:e6:bf:e2:d9:60:6f:d2:b0:27:3e: b7:e8:6d:e7:c6:06:f5:b8:e9:9b:05:6e:30:1e:15:72:b0:29: d5:7b:01:4f:65:5d:89:c2:65:a0:32:9c:26:fe:b9:bb:3e:99: a3:70:75:67 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDEkXYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh Y2JjMTA0MDA3OGMyYzIyMDI4MWJlNGU0YWViYjA2YjY0NjA3MDMwHhcNMjMwNDIz MDgzMDAwWhcNMjUwNDIyMDgzMDAwWjAzMTEwLwYDVQQDEygzYjBhYzdmYTFiOGIx NWYxZDNhYWMzMGU5ZTc2MWUwMzFhNDIzODVkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAr/LTO0ovII7attsvP6hbNKz1+A5Xe5SIRYIlyikNcag7wjtC hOLKzbhN9vHxxveMtXW/xeq2j3Myrdvbks+0kcfoYuFIBs7ZebXgUsUHTJkfjkTd 7XaWqz79XZqzmRlQexVlSFLgYLU29/8qT2WP80cBanYeZdlQ/lsnC3gkBOTGgo+i vf15v73oAFZ2CijcQhUwJqr4xhN2WKty57q9hWoKBA2yKBqPe6VDD6zRhORywcpN dv5c1j6dKbrZIOSo4QbOAwfH2cp0pvUArrrLK5j/PUQP036NrYGxuTRhCcOz5exa 54YSzh/FWhQ4b/rRttZJeb6zM0o00pOszyqeRQIDAQABo4ICXjCCAlowHQYDVR0O BBYEFGaV2dbJ8Bvh0gj/s8GAXA7INLSGMB8GA1UdIwQYMBaAFCK9Zy9Dhy1dRs7D KW1cxcbBeCQvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWFjYmMx MDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcwMy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZmJhZTI0NjMtZTNlOS00ZGZkLTk1ZGUtNTMzOWNj NWQxNDk4LzNiMGFjN2ZhMWI4YjE1ZjFkM2FhYzMwZTllNzYxZTAzMWE0MjM4NWQu cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mYmFlMjQ2My1lM2U5LTRkZmQtOTVkZS01MzM5 Y2M1ZDE0OTgvNWFjYmMxMDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcw My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACgBAB5oADANBgkqhkiG9w0BAQsFAAOCAQEAc2Zv+hME9C4n Oz8qhP6TzXMdSWYESxOcMOK0Vawaw945+3hBb4Ohna9cJ/6VXlljxbVq57AzxPBQ qTZ45d1tOYmmcTgdKjhEsBGCFMcl2lTmX1jADMNY2A+7lAMgnNNgoobifX7tTEMR naUDNeCjVNg6sUdF4ct2N255ePSfLTm/R1621UZ8VzqUfA4bgJ23KtVl4H2+DHQa FUHJ0w0XKh5czMpUGmmNZrEzHHwARqpAMKngbiwkSbXl4+qvi9lmcunq22Ngbgp6 +piD3e3mv+LZYG/SsCc+t+ht58YG9bjpmwVuMB4VcrAp1XsBT2VdicJloDKcJv65 uz6Zo3B1Zw== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:37 2024 by rpki-client on console.sobornost.net