$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS23520.roa File: AS23520.roa (raw, json) Hash identifier: Hk3idbwKuAZjDdUy768m/OOU4+/qTMGHxP4tv/yNgVI= Subject key identifier: E2:66:3A:9A:E7:49:85:DC:88:B5:4D:68:F2:1A:14:16:8A:1E:E7:80 Certificate issuer: /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784 Certificate serial: 019AED89196B0ED14A9AC73FA21721FC1D2C98FF Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS23520.roa Signing time: Thu 03 Sep 2026 21:33:44 +0000 ROA not before: Thu 03 Sep 2026 21:28:44 +0000 ROA not after: Thu 02 Sep 2027 21:33:44 +0000 asID: 23520 IP address blocks: 190.242.10.0/24 maxlen: 24 190.242.12.0/24 maxlen: 24 190.242.14.0/24 maxlen: 24 190.242.20.0/24 maxlen: 24 190.242.31.0/24 maxlen: 24 190.242.36.0/22 maxlen: 24 190.242.40.0/23 maxlen: 24 190.242.46.0/23 maxlen: 24 190.242.48.0/24 maxlen: 24 190.242.49.0/24 maxlen: 24 190.242.56.0/23 maxlen: 24 190.242.57.0/24 maxlen: 24 190.242.102.0/24 maxlen: 24 190.242.105.0/24 maxlen: 24 190.242.118.0/24 maxlen: 24 190.242.119.0/24 maxlen: 24 190.242.126.0/24 maxlen: 24 190.242.132.0/24 maxlen: 24 190.242.133.0/24 maxlen: 24 190.242.134.0/24 maxlen: 24 190.242.135.0/24 maxlen: 24 190.242.136.0/23 maxlen: 24 190.242.140.0/24 maxlen: 24 190.242.141.0/24 maxlen: 24 190.242.142.0/24 maxlen: 24 190.242.145.0/24 maxlen: 24 190.242.147.0/24 maxlen: 24 190.242.155.0/24 maxlen: 24 190.242.156.0/24 maxlen: 24 190.242.157.0/24 maxlen: 24 190.242.163.0/24 maxlen: 24 190.242.166.0/24 maxlen: 24 190.242.167.0/24 maxlen: 24 190.242.169.0/24 maxlen: 24 190.242.170.0/24 maxlen: 24 190.242.171.0/24 maxlen: 24 190.242.172.0/24 maxlen: 24 190.242.173.0/24 maxlen: 24 190.242.174.0/24 maxlen: 24 190.242.175.0/24 maxlen: 24 190.242.176.0/24 maxlen: 24 190.242.177.0/24 maxlen: 24 190.242.178.0/24 maxlen: 24 190.242.179.0/24 maxlen: 24 190.242.180.0/24 maxlen: 24 190.242.181.0/24 maxlen: 24 190.242.182.0/24 maxlen: 24 190.242.183.0/24 maxlen: 24 190.242.192.0/24 maxlen: 24 190.242.255.0/24 maxlen: 24 2803:f950::/32 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Sep 2026 18:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:89:19:6b:0e:d1:4a:9a:c7:3f:a2:17:21:fc:1d:2c:98:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784 Validity Not Before: Sep 3 21:28:44 2026 GMT Not After : Sep 2 21:33:44 2027 GMT Subject: CN=E2663A9AE74985DC88B54D68F21A14168A1EE780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:55:28:05:d6:0c:46:51:96:51:82:9a:7e: f1:c6:50:26:5f:5a:11:90:b6:1a:6a:aa:ce:15:76: b8:f2:09:18:ca:3a:96:6c:7a:25:db:b5:c7:74:ab: bf:50:de:73:b0:32:68:30:9c:aa:23:a1:9e:80:0e: 3d:ad:6b:cb:b1:11:7b:d4:fa:8e:8c:c0:13:ff:be: 0f:fb:97:80:9d:77:0d:bb:b0:b1:47:b8:19:24:c9: 36:5a:46:98:f2:b0:6e:de:2b:1d:ad:93:4c:d6:16: 55:d3:72:76:2d:8f:72:ca:df:65:ef:76:1a:4e:14: ce:28:da:aa:c4:99:56:d6:41:85:71:7f:e2:20:3c: b0:c2:e4:52:fb:c8:c7:32:20:dd:fe:07:2c:4a:72: 67:86:5a:f2:c5:b4:36:f7:f1:5d:f3:49:29:3e:01: ee:6e:49:57:82:6d:f5:82:ef:52:be:4f:ce:a7:2e: d9:c2:c7:01:88:80:16:57:92:ab:67:c3:2e:f0:2f: 02:25:06:11:c4:0c:66:c7:c0:43:8d:fe:5a:fa:81: 76:37:fa:fc:71:6d:9e:c7:51:d0:e5:0d:36:e4:ec: c6:8f:c1:7e:2d:08:54:70:a9:6a:c7:bf:44:54:7b: ce:42:55:79:90:e7:c6:cf:73:23:13:6d:4b:97:da: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:66:3A:9A:E7:49:85:DC:88:B5:4D:68:F2:1A:14:16:8A:1E:E7:80 X509v3 Authority Key Identifier: keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS23520.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.242.10.0/24 190.242.12.0/24 190.242.14.0/24 190.242.20.0/24 190.242.31.0/24 190.242.36.0-190.242.41.255 190.242.46.0-190.242.49.255 190.242.56.0/23 190.242.102.0/24 190.242.105.0/24 190.242.118.0/23 190.242.126.0/24 190.242.132.0-190.242.137.255 190.242.140.0-190.242.142.255 190.242.145.0/24 190.242.147.0/24 190.242.155.0-190.242.157.255 190.242.163.0/24 190.242.166.0/23 190.242.169.0-190.242.183.255 190.242.192.0/24 190.242.255.0/24 IPv6: 2803:f950::/32 Signature Algorithm: sha256WithRSAEncryption e2:c9:df:94:e6:3a:8f:a4:77:a2:e6:b5:b8:82:3c:d1:9e:eb: e7:11:da:24:58:18:56:2f:46:f2:bb:9e:ac:49:b9:4f:8c:9d: f1:70:b8:f7:d7:b2:a2:a5:8f:ac:e0:25:b4:95:0c:85:01:a8: 01:f5:aa:c9:3d:bf:d6:16:d6:9b:03:17:a3:b0:89:4f:df:f5: 8b:f9:85:e1:5e:e7:78:79:c3:e6:0f:48:5c:a5:00:93:8e:cd: 2e:5a:78:0a:22:ab:c5:a8:03:ea:e5:86:66:11:66:d4:00:6f: a0:a9:63:93:7d:b9:60:b1:38:b9:d1:b1:cf:b1:18:58:27:2a: 96:28:85:29:84:0f:b5:a7:49:12:3b:0f:15:51:e6:49:9b:93: d2:ad:43:1e:e8:79:88:ed:8b:0d:ed:82:db:4f:a5:4e:7f:f5: f5:a0:33:35:9d:e0:b0:f3:f8:6a:84:07:08:52:f5:89:24:9f: 73:37:16:2f:a2:06:ab:4f:73:a8:6e:1c:f1:41:de:a6:12:6e: 09:88:20:d7:39:38:93:d7:0a:80:bb:36:11:bf:93:98:bf:66: 85:73:7d:86:59:19:ad:c0:e6:e1:2f:e2:6b:ca:eb:74:b3:61: 86:e8:24:5f:5c:e3:75:34:ff:01:62:f0:19:f9:38:be:c7:91: 6e:5e:98:09 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAZrtiRlrDtFKmsc/ohch/B0smP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE QjBEQjc4NDAeFw0yNjA5MDMyMTI4NDRaFw0yNzA5MDIyMTMzNDRaMDMxMTAvBgNV BAMTKEUyNjYzQTlBRTc0OTg1REM4OEI1NEQ2OEYyMUExNDE2OEExRUU3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gFUoBdYMRlGWUYKafvHGUCZf WhGQthpqqs4VdrjyCRjKOpZseiXbtcd0q79Q3nOwMmgwnKojoZ6ADj2ta8uxEXvU +o6MwBP/vg/7l4Cddw27sLFHuBkkyTZaRpjysG7eKx2tk0zWFlXTcnYtj3LK32Xv dhpOFM4o2qrEmVbWQYVxf+IgPLDC5FL7yMcyIN3+ByxKcmeGWvLFtDb38V3zSSk+ Ae5uSVeCbfWC71K+T86nLtnCxwGIgBZXkqtnwy7wLwIlBhHEDGbHwEON/lr6gXY3 +vxxbZ7HUdDlDTbk7MaPwX4tCFRwqWrHv0RUe85CVXmQ58bPcyMTbUuX2p47AgMB AAGjggNaMIIDVjAdBgNVHQ4EFgQU4mY6mudJhdyItU1o8hoUFooe54AwHwYDVR0j BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0 NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVDNUE0MDNEOEU0 QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvQVMyMzUyMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCB4AYIKwYBBQUHAQcBAf8EgdAwgc0wgbsEAgABMIG0AwQA vvIKAwQAvvIMAwQAvvIOAwQAvvIUAwQAvvIfMAwDBAK+8iQDBAG+8igwDAMEAb7y LgMEAb7yMAMEAb7yOAMEAL7yZgMEAL7yaQMEAb7ydgMEAL7yfjAMAwQCvvKEAwQB vvKIMAwDBAK+8owDBAC+8o4DBAC+8pEDBAC+8pMwDAMEAL7ymwMEAb7ynAMEAL7y owMEAb7ypjAMAwQAvvKpAwQDvvKwAwQAvvLAAwQAvvL/MA0EAgACMAcDBQAoA/lQ MA0GCSqGSIb3DQEBCwUAA4IBAQDiyd+U5jqPpHei5rW4gjzRnuvnEdokWBhWL0by u56sSblPjJ3xcLj317KipY+s4CW0lQyFAagB9arJPb/WFtabAxejsIlP3/WL+YXh Xud4ecPmD0hcpQCTjs0uWngKIqvFqAPq5YZmEWbUAG+gqWOTfblgsTi50bHPsRhY JyqWKIUphA+1p0kSOw8VUeZJm5PSrUMe6HmI7YsN7YLbT6VOf/X1oDM1neCw8/hq hAcIUvWJJJ9zNxYvogarT3OobhzxQd6mEm4JiCDXOTiT1wqAuzYRv5OYv2aFc32G WRmtwObhL+Jryut0s2GG6CRfXON1NP8BYvAZ+Ti+x5FuXpgJ -----END CERTIFICATE-----Generated at Thu Sep 10 10:09:17 2026 by rpki-client