$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa File: AS20940.roa (raw, json) Hash identifier: aRB2R/e4ihidVmj2PJjYbV5pvRS0lSbvlPMOeuNI29k= Subject key identifier: D4:5B:22:96:3E:65:7F:3F:12:DB:7F:33:64:02:45:02:E7:DB:C0:65 Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378 Certificate serial: 57636EDB19139C2CE978B763D974A55535C49F6B Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa Signing time: Thu 20 Aug 2026 21:55:00 +0000 ROA not before: Thu 20 Aug 2026 21:50:00 +0000 ROA not after: Thu 19 Aug 2027 21:55:00 +0000 asID: 20940 IP address blocks: 189.247.167.0/24 maxlen: 24 189.247.204.0/22 maxlen: 24 189.247.210.0/24 maxlen: 24 189.247.212.0/24 maxlen: 24 189.247.214.0/24 maxlen: 24 189.247.216.0/24 maxlen: 24 189.247.220.0/24 maxlen: 24 2806:1040:fc::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Sep 2026 22:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:63:6e:db:19:13:9c:2c:e9:78:b7:63:d9:74:a5:55:35:c4:9f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378 Validity Not Before: Aug 20 21:50:00 2026 GMT Not After : Aug 19 21:55:00 2027 GMT Subject: CN=D45B22963E657F3F12DB7F3364024502E7DBC065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:fe:fa:f2:13:ce:59:77:a8:14:d3:f3:b8: 09:b8:8a:f5:92:b3:d0:1d:d3:88:4f:ee:9d:01:e6: 3f:bd:94:5a:04:c5:04:87:ca:31:ba:94:7c:b7:63: 79:1d:17:d5:a9:9b:ce:72:2e:ec:59:d2:2c:1b:a3: 2e:9c:f3:58:9b:aa:5d:97:f0:0f:44:1f:6f:8f:9e: a5:7b:8a:ba:c6:42:92:ee:f1:fa:ea:eb:61:78:f2: f0:66:77:9a:ca:f3:9f:90:e7:bf:93:cf:71:92:28: 3e:f0:3c:af:d2:f6:d7:4d:20:84:fe:7c:06:6d:77: bc:fd:d2:44:8b:d2:ac:eb:46:6b:93:fd:3e:4d:0e: 44:4b:18:51:0d:17:7e:ed:5e:8f:9e:4e:32:f5:bd: 52:9e:ad:62:07:3e:35:da:3c:87:1b:b1:f1:8a:1e: 13:f4:8d:65:d7:51:d2:9b:f7:f4:9a:de:27:14:cb: 2d:62:13:57:f2:05:3a:d7:ad:ca:65:f8:b1:a4:97: e1:2e:e9:be:9f:c8:7d:15:4d:ff:98:05:0b:20:de: 58:26:a1:03:ad:fa:63:14:03:9f:9e:b6:f7:a2:3d: 97:fc:8f:bc:f3:6e:8e:e0:66:b1:29:8e:bc:76:78: 29:20:d8:65:e0:ca:62:08:3f:2b:3f:da:37:23:04: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5B:22:96:3E:65:7F:3F:12:DB:7F:33:64:02:45:02:E7:DB:C0:65 X509v3 Authority Key Identifier: keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.247.167.0/24 189.247.204.0/22 189.247.210.0/24 189.247.212.0/24 189.247.214.0/24 189.247.216.0/24 189.247.220.0/24 IPv6: 2806:1040:fc::/48 Signature Algorithm: sha256WithRSAEncryption 00:33:6d:71:dc:72:68:68:b0:68:5f:80:51:c8:95:46:d2:40: f2:bc:01:88:98:ce:03:23:a2:d9:09:80:77:2f:d4:fa:76:2d: 04:54:b3:10:0f:65:a4:7c:39:64:7a:23:5a:14:ee:6e:d8:2b: df:31:60:88:f0:6f:d2:69:40:c0:36:e3:07:b0:b4:93:dd:72: 7d:c2:11:47:ea:1f:37:d1:86:7a:63:ac:c7:8b:0e:90:3b:74: 18:ae:77:68:59:4e:6c:6e:7f:e1:8b:2b:77:05:4d:30:d3:d0: 0d:c4:85:51:07:a3:3c:c6:22:dc:86:2c:12:3f:b6:40:a0:aa: 5e:f5:8d:f3:fd:e4:a9:8c:3d:5d:fc:0b:99:eb:bf:06:d2:5b: 9b:d0:21:5e:64:4c:8f:ba:c7:87:a3:1c:8f:ee:0c:01:7b:71: 25:1f:0e:28:21:41:84:b0:99:b8:35:83:4b:12:f5:ff:09:c4: 6c:08:a7:e5:08:74:8d:eb:a7:2c:ea:ac:43:82:72:6f:cd:24: 00:ae:ec:b1:02:2b:56:a9:4c:5f:84:9d:a0:b2:38:98:07:67: ff:f4:89:4e:db:37:e5:36:44:cd:99:b0:68:ae:32:22:22:41: e0:59:3f:61:b1:90:f8:71:ca:84:1d:68:3c:bd:a4:ec:61:2b: 4c:60:7c:ee -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUV2Nu2xkTnCzpeLdj2XSlVTXEn2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAzMDQwNjFFQjk5 OEJGNzM3ODAeFw0yNjA4MjAyMTUwMDBaFw0yNzA4MTkyMTU1MDBaMDMxMTAvBgNV BAMTKEQ0NUIyMjk2M0U2NTdGM0YxMkRCN0YzMzY0MDI0NTAyRTdEQkMwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uf768hPOWXeoFNPzuAm4ivWS s9Ad04hP7p0B5j+9lFoExQSHyjG6lHy3Y3kdF9Wpm85yLuxZ0iwboy6c81ibql2X 8A9EH2+PnqV7irrGQpLu8frq62F48vBmd5rK85+Q57+Tz3GSKD7wPK/S9tdNIIT+ fAZtd7z90kSL0qzrRmuT/T5NDkRLGFENF37tXo+eTjL1vVKerWIHPjXaPIcbsfGK HhP0jWXXUdKb9/Sa3icUyy1iE1fyBTrXrcpl+LGkl+Eu6b6fyH0VTf+YBQsg3lgm oQOt+mMUA5+etveiPZf8j7zzbo7gZrEpjrx2eCkg2GXgymIIPys/2jcjBLclAgMB AAGjggLNMIICyTAdBgNVHQ4EFgQU1Fsilj5lfz8S238zZAJFAufbwGUwHwYDVR0j BBgwFoAUyGjcQiRD+nDndhwDBAYeuZi/c3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0 ODMzRTg1QkU5RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3 MEU3NzYxQzAzMDQwNjFFQjk5OEJGNzM3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODY4REM0MjI0NDNGQTcwRTc3 NjFDMDMwNDA2MUVCOTk4QkY3Mzc4LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5 RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQVMyMDk0MC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRFMEMwMAQCAAEwKgMEAL33pwME Ar33zAMEAL330gMEAL331AMEAL331gMEAL332AMEAL333DAPBAIAAjAJAwcAKAYQ QAD8MA0GCSqGSIb3DQEBCwUAA4IBAQAAM21x3HJoaLBoX4BRyJVG0kDyvAGImM4D I6LZCYB3L9T6di0EVLMQD2WkfDlkeiNaFO5u2CvfMWCI8G/SaUDANuMHsLST3XJ9 whFH6h830YZ6Y6zHiw6QO3QYrndoWU5sbn/hiyt3BU0w09ANxIVRB6M8xiLchiwS P7ZAoKpe9Y3z/eSpjD1d/AuZ678G0lub0CFeZEyPuseHoxyP7gwBe3ElHw4oIUGE sJm4NYNLEvX/CcRsCKflCHSN66cs6qxDgnJvzSQAruyxAitWqUxfhJ2gsjiYB2f/ 9IlO2zflNkTNmbBorjIiIkHgWT9hsZD4ccqEHWg8vaTsYStMYHzu -----END CERTIFICATE-----Generated at Sat Sep 5 05:31:21 2026 by rpki-client