$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28496.roa File: AS28496.roa (raw, json) Hash identifier: Y+yAjTLKDjUEQY994QNrHrGRTzrIykDwyRX8Xvw6XLM= Subject key identifier: 1C:21:5B:B6:41:13:6D:94:65:0C:D4:59:C7:08:2C:33:D3:86:EE:6A Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 6B660D477BADE76428866E8FF9D8260AB7F5716B Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28496.roa Signing time: Wed 29 Jan 2025 17:30:00 +0000 ROA not before: Wed 29 Jan 2025 17:25:00 +0000 ROA not after: Wed 28 Jan 2026 17:30:00 +0000 asID: 28496 IP address blocks: 200.23.30.0/24 maxlen: 24 2001:1221::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 08:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:66:0d:47:7b:ad:e7:64:28:86:6e:8f:f9:d8:26:0a:b7:f5:71:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Jan 29 17:25:00 2025 GMT Not After : Jan 28 17:30:00 2026 GMT Subject: CN=1C215BB641136D94650CD459C7082C33D386EE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:3f:40:0d:79:cc:9d:80:88:3d:92:93:92: 1b:d1:12:a0:40:ca:6d:01:08:fb:ad:64:ae:40:39: a0:83:eb:19:46:86:76:13:04:bc:87:3c:59:a9:ec: 35:99:8f:33:c7:11:67:f7:87:9b:6d:36:98:77:be: e1:5f:7f:74:a2:62:ec:1b:6f:02:64:cd:30:f5:c9: 76:3a:42:41:ef:49:2c:b4:54:c6:1d:1f:30:51:5c: 1a:43:f7:17:23:2e:9c:24:1d:37:2a:12:d1:f2:34: 66:2d:79:c0:c7:0a:88:18:9a:80:a5:af:e9:04:1e: 2c:72:69:37:d7:51:63:2d:9f:9b:8e:3f:f4:05:8e: 06:a4:2a:f6:9d:95:3e:04:6e:a9:da:69:91:0e:ef: 02:23:15:fd:de:60:5e:91:e4:c2:28:5c:6f:87:65: 7d:c6:fd:67:44:1c:bd:68:27:36:ca:dc:c9:96:75: 08:27:0e:d7:5e:10:ac:b9:81:2e:fc:62:a5:24:a1: 85:d5:04:f6:f4:c9:f8:ea:72:5c:a4:5a:7b:34:21: 22:b0:23:67:43:c0:c4:24:fb:af:7c:5f:c3:cd:d0: 26:2b:ee:0c:31:39:18:81:76:9e:63:19:68:e2:a5: ab:37:1f:46:6b:99:d9:cc:47:79:a8:d9:06:d3:5b: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:5B:B6:41:13:6D:94:65:0C:D4:59:C7:08:2C:33:D3:86:EE:6A X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.30.0/24 IPv6: 2001:1221::/48 Signature Algorithm: sha256WithRSAEncryption 9c:92:f6:d6:ea:93:c2:c5:20:89:fb:1b:bf:61:ce:0a:44:0c: e7:d4:d9:57:f4:bd:f3:91:cd:55:69:bf:37:90:0d:fa:e7:47: 3d:12:66:a6:1b:c8:6f:d1:05:9e:77:b3:d5:8f:70:e2:e8:6c: f3:60:b0:15:02:22:4a:74:12:85:2f:10:c7:4e:9f:5b:c6:22: 9d:39:7c:3d:78:c7:ef:6c:56:6d:53:b7:4e:6c:f7:22:f7:1a: d2:e7:73:cb:b0:42:01:c9:b9:dc:3b:f9:7f:c9:52:33:b2:eb: 1f:12:db:8c:42:e2:24:b8:08:b3:69:84:67:46:d0:d1:a4:5b: 37:7b:31:24:de:a6:28:0a:c9:8e:26:3b:75:34:cc:11:a2:d2: 90:9d:8f:fb:94:14:3c:f9:71:55:cf:b3:14:ad:0a:7b:fb:6e: f4:d2:be:77:f8:47:ac:c9:dc:3a:c8:83:d6:7f:32:a4:0d:0d: d2:f2:38:4a:60:d5:a2:77:cf:6d:2a:bf:18:ed:20:08:95:ed: ea:47:f5:e2:f7:3a:8c:f4:03:5f:ce:e6:73:ee:c6:00:52:7a: 10:3d:e2:01:10:d6:8c:8f:f3:84:fc:c1:3e:f7:d9:5b:09:28: 86:7d:ca:d0:3d:31:e6:bd:f2:fe:d4:63:8e:24:3a:96:eb:b5: 5c:3e:16:29 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUa2YNR3ut52Qohm6P+dgmCrf1cWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNTAxMjkxNzI1MDBaFw0yNjAxMjgxNzMwMDBaMDMxMTAvBgNV BAMTKDFDMjE1QkI2NDExMzZEOTQ2NTBDRDQ1OUM3MDgyQzMzRDM4NkVFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zD9ADXnMnYCIPZKTkhvREqBA ym0BCPutZK5AOaCD6xlGhnYTBLyHPFmp7DWZjzPHEWf3h5ttNph3vuFff3SiYuwb bwJkzTD1yXY6QkHvSSy0VMYdHzBRXBpD9xcjLpwkHTcqEtHyNGYtecDHCogYmoCl r+kEHixyaTfXUWMtn5uOP/QFjgakKvadlT4EbqnaaZEO7wIjFf3eYF6R5MIoXG+H ZX3G/WdEHL1oJzbK3MmWdQgnDtdeEKy5gS78YqUkoYXVBPb0yfjqclykWns0ISKw I2dDwMQk+698X8PN0CYr7gwxORiBdp5jGWjipas3H0ZrmdnMR3mo2QbTW1xTAgMB AAGjggKpMIICpTAdBgNVHQ4EFgQUHCFbtkETbZRlDNRZxwgsM9OG7mowHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyODQ5Ni5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMgXHjAP BAIAAjAJAwcAIAESIQAAMA0GCSqGSIb3DQEBCwUAA4IBAQCckvbW6pPCxSCJ+xu/ Yc4KRAzn1NlX9L3zkc1Vab83kA3650c9EmamG8hv0QWed7PVj3Di6GzzYLAVAiJK dBKFLxDHTp9bxiKdOXw9eMfvbFZtU7dObPci9xrS53PLsEIBybncO/l/yVIzsusf EtuMQuIkuAizaYRnRtDRpFs3ezEk3qYoCsmOJjt1NMwRotKQnY/7lBQ8+XFVz7MU rQp7+2700r53+Eesydw6yIPWfzKkDQ3S8jhKYNWid89tKr8Y7SAIle3qR/Xi9zqM 9ANfzuZz7sYAUnoQPeIBENaMj/OE/ME+99lbCSiGfcrQPTHmvfL+1GOOJDqW67Vc PhYp -----END CERTIFICATE-----Generated at Thu Apr 17 23:10:31 2025 by rpki-client