$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS22894.roa File: AS22894.roa (raw, json) Hash identifier: PfMtuXFNy7zBFjIln/GuqZwdETzhtYLYrLre4VNMeE4= Subject key identifier: C3:78:71:2D:D5:07:39:9C:B0:8C:37:A8:FF:D3:1E:81:BB:46:48:5F Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 0A78263D3DB5CE1055AE2CDE7D1A02685D637EB3 Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS22894.roa Signing time: Wed 29 Jan 2025 17:30:04 +0000 ROA not before: Wed 29 Jan 2025 17:25:04 +0000 ROA not after: Wed 28 Jan 2026 17:30:04 +0000 asID: 22894 IP address blocks: 200.23.179.0/24 maxlen: 24 200.33.1.0/24 maxlen: 24 200.33.111.0/24 maxlen: 24 200.34.22.0/24 maxlen: 24 200.94.180.0/24 maxlen: 24 200.94.181.0/24 maxlen: 24 200.94.182.0/24 maxlen: 24 200.94.183.0/24 maxlen: 24 201.131.248.0/24 maxlen: 24 201.131.249.0/24 maxlen: 24 201.131.250.0/24 maxlen: 24 201.131.251.0/24 maxlen: 24 207.248.64.0/24 maxlen: 24 207.248.65.0/24 maxlen: 24 2001:1250::/44 maxlen: 44 2001:1250:10::/44 maxlen: 44 2001:1250:1000::/44 maxlen: 44 2001:1250:2000::/44 maxlen: 44 2001:1250:3000::/44 maxlen: 44 2001:1250:a000::/44 maxlen: 44 2001:1250:b000::/44 maxlen: 44 2001:1250:c000::/44 maxlen: 44 2001:1250:d000::/44 maxlen: 44 2001:1250:e100::/44 maxlen: 44 2001:1250:e200::/44 maxlen: 44 2001:1250:e300::/44 maxlen: 44 2001:1250:ffc0::/44 maxlen: 44 2001:1250:ffe0::/44 maxlen: 44 2001:1250:fff0::/44 maxlen: 44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 08:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:78:26:3d:3d:b5:ce:10:55:ae:2c:de:7d:1a:02:68:5d:63:7e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Jan 29 17:25:04 2025 GMT Not After : Jan 28 17:30:04 2026 GMT Subject: CN=C378712DD507399CB08C37A8FFD31E81BB46485F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7e:0c:05:89:e1:68:ba:eb:30:17:bf:e7:02: 8d:89:07:04:84:b4:4e:0f:e2:75:c1:d2:5a:9b:f0: 24:ee:0c:5a:57:e4:39:33:0a:56:89:46:19:63:3a: d8:92:92:fa:24:c8:7f:57:6e:b2:42:c5:d9:06:af: 57:28:96:e3:ea:b7:69:f6:6d:8c:db:67:0a:fc:7e: 18:10:d2:4e:46:fa:e5:bc:13:55:46:74:03:13:d3: fc:c8:3e:ce:e6:bc:54:87:a6:c0:aa:de:de:f5:e0: 16:5b:ab:32:b3:f3:04:f7:1e:e5:2c:53:3f:8b:9a: bf:99:3e:41:49:98:60:a1:8b:e8:96:08:b3:eb:a2: 6f:d7:ae:82:e3:c0:8a:d8:41:2c:a6:1b:14:55:eb: 08:55:e3:52:61:f6:e9:e1:e9:8f:ae:4c:3d:45:1a: fc:6b:7e:82:07:34:d5:04:59:8f:03:af:25:c2:d6: f2:af:6b:99:79:45:c5:ae:e5:e7:ba:28:b9:60:18: 5d:dd:f4:01:6f:9c:12:cf:46:c0:a9:96:84:4e:02: 02:64:dd:11:65:54:4a:f4:86:c2:56:b6:bc:ef:f3: 90:8e:db:b4:60:62:33:58:1c:24:11:69:bb:cf:46: c4:7b:f0:2d:6e:65:fa:31:63:98:f8:a7:23:bb:c3: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:78:71:2D:D5:07:39:9C:B0:8C:37:A8:FF:D3:1E:81:BB:46:48:5F X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS22894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.179.0/24 200.33.1.0/24 200.33.111.0/24 200.34.22.0/24 200.94.180.0/22 201.131.248.0/22 207.248.64.0/23 IPv6: 2001:1250::/43 2001:1250:1000::/44 2001:1250:2000::/44 2001:1250:3000::/44 2001:1250:a000::/44 2001:1250:b000::/44 2001:1250:c000::/44 2001:1250:d000::/44 2001:1250:e100::/44 2001:1250:e200::/44 2001:1250:e300::/44 2001:1250:ffc0::/44 2001:1250:ffe0::/43 Signature Algorithm: sha256WithRSAEncryption 13:b5:bb:3d:05:2b:cb:92:db:b6:f0:2d:eb:b2:02:89:30:f2: 37:d9:77:1e:9e:df:9a:91:aa:cc:46:c7:0a:43:dd:e2:5e:6a: e2:c8:60:5f:3b:e7:59:70:3b:12:f6:33:2d:ad:15:4e:65:c9: 45:cc:a3:22:ef:16:10:52:4e:f3:90:3c:17:a4:33:16:c0:62: 6a:20:7d:e4:4b:d4:44:dc:d7:11:35:b3:4a:3d:28:66:86:82: e5:59:3d:20:7e:ed:95:49:5c:9b:c9:64:e3:12:c3:73:e9:3e: 13:c7:59:d6:40:9b:eb:e6:66:1b:de:f7:ac:05:c2:22:82:8e: b4:4c:a8:f5:e6:bb:d1:63:f3:c8:a5:e3:c5:22:29:e1:de:57: e7:48:0a:ed:32:44:2e:c6:f9:a0:67:34:0e:12:c4:34:16:05: 74:1d:a9:38:21:23:00:2f:e5:f3:93:32:d0:86:07:06:02:e8: 69:6e:75:de:c0:ca:0c:02:16:c6:24:2c:ab:a3:8a:8a:4a:8f: 8c:e4:80:bb:5a:4e:18:1b:9f:3f:7b:56:5b:a0:50:c2:4f:a4: 97:f6:c4:3a:5e:a4:9a:d3:c1:54:b1:e6:3b:7f:6e:bc:07:2b: d3:73:8c:e4:73:aa:af:34:3e:3b:9c:65:00:ee:af:a2:03:c0: 2d:bb:8c:5e -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUCngmPT21zhBVrizefRoCaF1jfrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNTAxMjkxNzI1MDRaFw0yNjAxMjgxNzMwMDRaMDMxMTAvBgNV BAMTKEMzNzg3MTJERDUwNzM5OUNCMDhDMzdBOEZGRDMxRTgxQkI0NjQ4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvfgwFieFouuswF7/nAo2JBwSE tE4P4nXB0lqb8CTuDFpX5DkzClaJRhljOtiSkvokyH9XbrJCxdkGr1coluPqt2n2 bYzbZwr8fhgQ0k5G+uW8E1VGdAMT0/zIPs7mvFSHpsCq3t714BZbqzKz8wT3HuUs Uz+Lmr+ZPkFJmGChi+iWCLProm/XroLjwIrYQSymGxRV6whV41Jh9unh6Y+uTD1F GvxrfoIHNNUEWY8DryXC1vKva5l5RcWu5ee6KLlgGF3d9AFvnBLPRsCploROAgJk 3RFlVEr0hsJWtrzv85CO27RgYjNYHCQRabvPRsR78C1uZfoxY5j4pyO7w7/NAgMB AAGjggM8MIIDODAdBgNVHQ4EFgQUw3hxLdUHOZywjDeo/9MegbtGSF8wHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyMjg5NC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBwgYIKwYBBQUHAQcBAf8EgbIwga8wMAQCAAEwKgMEAMgX swMEAMghAQMEAMghbwMEAMgiFgMEAshetAMEAsmD+AMEAc/4QDB7BAIAAjB1AwcF IAESUAAAAwcEIAESUBAAAwcEIAESUCAAAwcEIAESUDAAAwcEIAESUKAAAwcEIAES ULAAAwcEIAESUMAAAwcEIAESUNAAAwcEIAESUOEAAwcEIAESUOIAAwcEIAESUOMA AwcEIAESUP/AAwcFIAESUP/gMA0GCSqGSIb3DQEBCwUAA4IBAQATtbs9BSvLktu2 8C3rsgKJMPI32Xcent+akarMRscKQ93iXmriyGBfO+dZcDsS9jMtrRVOZclFzKMi 7xYQUk7zkDwXpDMWwGJqIH3kS9RE3NcRNbNKPShmhoLlWT0gfu2VSVybyWTjEsNz 6T4Tx1nWQJvr5mYb3vesBcIigo60TKj15rvRY/PIpePFIinh3lfnSArtMkQuxvmg ZzQOEsQ0FgV0Hak4ISMAL+XzkzLQhgcGAuhpbnXewMoMAhbGJCyro4qKSo+M5IC7 Wk4YG58/e1ZboFDCT6SX9sQ6XqSa08FUseY7f268ByvTc4zkc6qvND47nGUA7q+i A8Atu4xe -----END CERTIFICATE-----Generated at Thu Apr 17 23:09:40 2025 by rpki-client