$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa File: AS28541.roa (raw, json) Hash identifier: Y6UpJEuSj7Bkg8SE6S7LVJJv2R0SxTA5dumqmhW47+4= Subject key identifier: 9F:48:59:84:44:2C:85:CD:4C:1D:DF:93:29:74:DE:59:6F:33:42:56 Certificate issuer: /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3 Certificate serial: 3301C6BAFE7661BADF188049EBA3023D77B9F56F Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa Signing time: Wed 29 May 2024 04:20:00 +0000 ROA not before: Wed 29 May 2024 04:15:00 +0000 ROA not after: Wed 28 May 2025 04:20:00 +0000 asID: 28541 IP address blocks: 201.159.192.0/21 maxlen: 24 201.159.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:01:c6:ba:fe:76:61:ba:df:18:80:49:eb:a3:02:3d:77:b9:f5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3 Validity Not Before: May 29 04:15:00 2024 GMT Not After : May 28 04:20:00 2025 GMT Subject: CN=9F485984442C85CD4C1DDF932974DE596F334256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:18:79:95:bd:2e:ec:34:55:a2:77:72:d0: d6:0f:4b:38:dd:d5:d5:6a:71:b8:c2:10:6d:80:66: 0c:c3:8f:d7:ae:f0:e1:29:7a:08:13:50:a8:65:4e: 36:9b:2a:5e:43:35:74:3e:e8:89:45:77:4b:40:12: 38:ad:2e:34:7f:d1:16:0d:d0:2c:56:6a:4c:4e:cd: 0d:d7:94:fc:a8:18:10:ca:fe:d4:fe:54:72:d0:18: 9b:d7:53:14:8f:b2:22:a7:e9:16:2a:29:b9:a4:3a: ec:7d:c5:fb:be:48:dc:27:f2:77:99:33:29:82:7e: 30:67:2c:3f:c0:96:92:7c:26:50:36:e1:6d:96:08: 30:af:c9:e2:94:7d:63:02:1b:53:3e:11:a4:a6:84: 6e:05:64:0d:f8:fa:01:35:3c:47:2e:95:59:74:92: 38:8d:d9:35:05:67:31:a6:aa:4c:0f:cb:91:32:45: 8e:8d:96:2a:67:39:4a:c4:40:ab:9c:da:09:76:6a: 08:d6:bc:d2:2d:fa:86:c7:17:dc:a1:bc:46:06:c6: 3a:38:47:69:38:83:9b:b9:21:c4:06:50:b9:10:93: f9:99:28:5f:95:eb:93:43:ef:33:f1:23:81:0c:4f: c7:3b:da:53:ad:ba:fa:0f:fb:1c:e5:e8:04:77:62: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:48:59:84:44:2C:85:CD:4C:1D:DF:93:29:74:DE:59:6F:33:42:56 X509v3 Authority Key Identifier: keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.159.192.0/21 201.159.207.0/24 Signature Algorithm: sha256WithRSAEncryption 24:94:fc:a7:33:19:c8:e0:8e:de:a0:c1:a6:8d:64:35:d1:94: ff:ff:a7:be:03:46:48:08:3f:73:9a:47:b8:03:10:08:75:62: 9f:f5:2e:6b:05:e4:f9:75:ff:70:2a:9d:f0:01:3f:16:b1:77: 08:24:ee:c8:83:15:c4:11:6f:8a:e7:5d:01:50:5b:32:c2:53: fd:22:a9:34:0b:d4:9b:d8:11:e8:6f:c1:fb:2b:22:85:9a:da: 8d:44:5c:8a:40:9b:41:15:51:e1:47:31:e9:61:30:35:c7:33: f6:d3:c7:12:25:9c:c5:4b:2d:41:7b:5a:ad:37:92:95:79:33: 6d:4f:31:02:d0:63:2c:ca:8b:c6:67:62:b4:c4:6c:c7:c2:64: ff:7b:1c:81:fa:b8:be:25:32:f8:6c:96:27:49:aa:84:1c:e4: 66:f2:cf:3d:82:43:9e:b5:c9:4c:40:30:46:11:92:ae:d2:08: 80:3f:bb:72:d5:57:ff:97:8e:b4:5d:62:1f:e7:9f:74:74:82: 25:62:56:b7:f3:d6:13:4b:17:63:49:26:26:f1:00:71:98:3e: 63:8a:57:e2:cb:97:02:3b:18:79:59:53:7e:75:99:60:b9:d5: 43:02:ff:4b:9b:d0:c6:28:24:9a:32:6f:0c:46:5b:82:2c:81: 79:4c:6c:5e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgIUMwHGuv52YbrfGIBJ66MCPXe59W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF MTk0QTJBMzAeFw0yNDA1MjkwNDE1MDBaFw0yNTA1MjgwNDIwMDBaMDMxMTAvBgNV BAMTKDlGNDg1OTg0NDQyQzg1Q0Q0QzFEREY5MzI5NzRERTU5NkYzMzQyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Sxh5lb0u7DRVondy0NYPSzjd 1dVqcbjCEG2AZgzDj9eu8OEpeggTUKhlTjabKl5DNXQ+6IlFd0tAEjitLjR/0RYN 0CxWakxOzQ3XlPyoGBDK/tT+VHLQGJvXUxSPsiKn6RYqKbmkOux9xfu+SNwn8neZ MymCfjBnLD/AlpJ8JlA24W2WCDCvyeKUfWMCG1M+EaSmhG4FZA34+gE1PEculVl0 kjiN2TUFZzGmqkwPy5EyRY6NlipnOUrEQKuc2gl2agjWvNIt+obHF9yhvEYGxjo4 R2k4g5u5IcQGULkQk/mZKF+V65ND7zPxI4EMT8c72lOtuvoP+xzl6AR3YvaFAgMB AAGjggKeMIICmjAdBgNVHQ4EFgQUn0hZhEQshc1MHd+TKXTeWW8zQlYwHwYDVR0j BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2 QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyODU0MS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA8mfwAME AMmfzzANBgkqhkiG9w0BAQsFAAOCAQEAJJT8pzMZyOCO3qDBpo1kNdGU//+nvgNG SAg/c5pHuAMQCHVin/UuawXk+XX/cCqd8AE/FrF3CCTuyIMVxBFviuddAVBbMsJT /SKpNAvUm9gR6G/B+ysihZrajURcikCbQRVR4Ucx6WEwNccz9tPHEiWcxUstQXta rTeSlXkzbU8xAtBjLMqLxmditMRsx8Jk/3scgfq4viUy+GyWJ0mqhBzkZvLPPYJD nrXJTEAwRhGSrtIIgD+7ctVX/5eOtF1iH+efdHSCJWJWt/PWE0sXY0kmJvEAcZg+ Y4pX4suXAjsYeVlTfnWZYLnVQwL/S5vQxigkmjJvDEZbgiyBeUxsXg== -----END CERTIFICATE-----Generated at Tue Jun 25 19:35:28 2024 by rpki-client on console-fra.rpki-client.org