
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa
File: AS28541.roa (raw, json)
Hash identifier: YPfDU50+XSjHgJ2G/2uWwA23423eq1htarKVHf770UM=
Subject key identifier: C1:F1:83:CC:94:12:B1:4A:72:67:AC:7D:E0:BC:59:6C:39:46:DD:78
Certificate issuer: /CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
Certificate serial: 27D205FCB98B2B66C990341D9C05F7ABD1E0FDA5
Authority key identifier: D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa
Signing time: Wed 05 Aug 2026 07:00:00 +0000
ROA not before: Wed 05 Aug 2026 06:55:00 +0000
ROA not after: Wed 04 Aug 2027 07:00:00 +0000
asID: 28541
IP address blocks: 177.242.192.0/21 maxlen: 21
177.242.200.0/21 maxlen: 24
177.247.176.0/23 maxlen: 23
201.159.192.0/21 maxlen: 24
201.159.207.0/24 maxlen: 24
2806:260:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl
rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 07 Sep 2026 08:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d2:05:fc:b9:8b:2b:66:c9:90:34:1d:9c:05:f7:ab:d1:e0:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
Validity
Not Before: Aug 5 06:55:00 2026 GMT
Not After : Aug 4 07:00:00 2027 GMT
Subject: CN=C1F183CC9412B14A7267AC7DE0BC596C3946DD78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:d2:77:db:dd:2b:81:f8:b4:f6:5d:26:93:
e6:5d:a0:57:29:7d:15:c9:de:c2:5a:4f:c7:df:0d:
c3:a4:75:a1:ca:ca:42:52:a1:a2:97:e6:7a:c7:d2:
02:56:c4:bb:b2:86:1e:80:48:f6:ed:80:38:db:f9:
1d:24:98:35:b6:17:f2:0e:d6:94:b8:ad:77:5e:a4:
a4:09:e1:bb:83:c5:7f:71:46:c0:eb:37:39:30:12:
43:b8:cc:59:df:17:87:e9:c7:07:ed:e6:c2:23:9c:
50:94:aa:8b:c7:ec:d5:30:61:f3:3f:60:4a:a5:69:
26:2c:7b:e0:db:19:2f:af:ac:71:5f:be:38:01:e3:
94:01:2d:9b:9d:a6:95:f6:d7:07:45:af:28:fd:da:
7f:ef:8b:c0:bd:5e:b2:16:7d:1f:33:c6:ca:09:df:
a7:6f:09:e3:d0:41:58:e7:03:c7:ef:9e:e4:22:dc:
b8:48:1b:3d:0c:59:c2:9c:34:d9:06:cc:38:e5:e8:
ba:c2:70:da:ee:62:58:b1:ff:3c:40:82:35:62:d4:
dd:e8:ff:93:97:1c:8d:3d:ca:ec:ea:0e:6b:e8:06:
82:62:64:b0:95:62:e0:ed:57:5f:af:2a:11:08:8b:
6d:ef:f2:83:0d:d4:25:e7:92:af:80:02:2c:2e:ce:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:83:CC:94:12:B1:4A:72:67:AC:7D:E0:BC:59:6C:39:46:DD:78
X509v3 Authority Key Identifier:
keyid:D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.242.192.0/20
177.247.176.0/23
201.159.192.0/21
201.159.207.0/24
IPv6:
2806:260:1020::/48
Signature Algorithm: sha256WithRSAEncryption
50:e2:06:d3:3d:ed:28:35:c1:cb:b6:df:ad:39:a4:6b:78:3f:
04:41:fc:5e:b9:6d:85:e9:74:19:b2:d3:0a:6d:80:d9:7d:b6:
c7:b6:51:8e:1d:6a:73:07:85:d1:04:b0:57:40:20:b6:cf:64:
c9:89:57:3e:fa:30:f0:d1:1f:ab:96:f8:f0:c3:06:27:1e:63:
fc:8b:05:ba:26:0f:50:de:e1:2f:e1:1a:b4:dd:09:e5:f9:2a:
79:55:13:9f:5b:f6:f0:bf:1b:0d:1c:84:17:59:c2:a1:af:70:
7a:c1:1a:51:7e:a6:09:c5:47:83:80:79:bf:58:4d:4f:e0:f2:
64:ff:7b:5b:b4:88:cd:34:48:98:df:f4:f3:fa:ec:d9:e9:24:
4d:46:92:29:14:7a:0c:e2:be:d1:67:60:8f:6c:0d:75:81:ec:
c0:0a:9b:63:fa:f6:31:13:95:a7:58:f9:22:b2:77:9e:df:4e:
47:a9:c0:35:1f:5f:b6:5c:78:bb:e6:ed:bf:46:3e:f1:2e:e8:
0a:2d:53:e0:0d:82:df:16:99:5b:a9:4d:c2:9c:fb:c6:f4:47:
aa:5d:0f:1c:25:a3:0f:8d:aa:2d:a4:e7:2c:88:58:b6:0f:72:
42:c0:48:3a:b2:b7:16:bb:10:e9:7e:cd:33:cc:e9:e7:43:d4:
f0:98:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:11:34 2026 by rpki-client