$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa File: AS28497.roa (raw, json) Hash identifier: YXygVRd48vG9YztWbAVZn4EkWuAp0ejfg2CfUNnSwLI= Subject key identifier: F8:DB:A8:8D:0C:91:2F:F5:BE:8A:60:93:23:03:C5:A6:A0:B0:29:A8 Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 46207B52A453CCFB9A2B7B1DC60DE5C735538A64 Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa Signing time: Wed 29 Jan 2025 17:30:02 +0000 ROA not before: Wed 29 Jan 2025 17:25:02 +0000 ROA not after: Wed 28 Jan 2026 17:30:02 +0000 asID: 28497 IP address blocks: 200.33.0.0/24 maxlen: 24 2001:13c7:7014::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 08:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:20:7b:52:a4:53:cc:fb:9a:2b:7b:1d:c6:0d:e5:c7:35:53:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Jan 29 17:25:02 2025 GMT Not After : Jan 28 17:30:02 2026 GMT Subject: CN=F8DBA88D0C912FF5BE8A60932303C5A6A0B029A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:76:9c:89:77:f8:3b:55:2c:35:83:c6:d3:73: 20:82:4e:12:e3:84:7e:e3:b7:38:ba:ae:bb:1c:aa: 97:79:7d:d9:e5:5e:66:66:ca:be:5b:54:5a:a8:54: c7:97:af:fb:87:2d:83:4d:d8:bb:e8:5e:0c:b7:5e: 88:97:f4:ad:b7:c1:9b:e1:be:2a:f4:70:52:f1:8c: a9:a9:d0:be:61:fd:4d:98:50:74:bc:b0:a7:97:ad: fc:ec:c9:d1:ab:65:b5:cc:d8:7d:4a:43:0b:46:27: 4a:c1:a8:23:3c:c3:b9:20:fb:0c:74:f8:a1:6c:65: b2:08:02:be:2b:8e:87:50:cc:d1:8e:f9:cf:b8:f8: bd:fd:2b:fa:12:b8:4e:9d:ad:11:53:9c:2d:51:7b: a5:a0:a9:63:12:60:65:cf:d4:d8:09:a4:c8:a1:5c: 63:2c:85:4f:47:f4:1d:f7:61:f5:20:97:74:5f:9a: c9:91:34:4f:81:7f:93:07:7d:46:8f:f9:f6:b2:6c: 23:a6:af:77:7a:19:ac:07:d7:31:0b:c7:8b:4a:1b: 50:10:28:a5:00:d7:30:ee:47:ff:20:15:b6:6b:9c: f9:3a:74:83:e1:7a:b7:67:ab:ed:e2:61:06:07:6e: 9e:79:99:3d:c9:5d:f4:14:7e:a9:78:5f:b3:46:2f: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DB:A8:8D:0C:91:2F:F5:BE:8A:60:93:23:03:C5:A6:A0:B0:29:A8 X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.0.0/24 IPv6: 2001:13c7:7014::/48 Signature Algorithm: sha256WithRSAEncryption 33:1a:c1:a3:b5:4c:ae:59:ea:62:b0:ca:cb:d5:ae:d6:85:f3: d0:71:3b:e5:63:2b:03:b6:74:42:17:d7:f2:60:b1:74:96:10: c6:9c:f0:86:51:90:71:af:26:98:56:06:c6:dd:50:d3:a6:3e: 6f:3c:bc:52:b4:e4:53:f9:12:99:6f:4c:59:30:4c:0e:17:7d: 3e:42:50:1e:10:fc:93:ac:a0:c0:c6:ff:e1:37:cb:45:d9:bc: b3:61:62:b1:4e:83:a9:8c:75:06:ee:1b:a5:b3:ab:da:77:aa: d3:8a:68:f0:1e:0d:c0:94:4f:8d:e0:a1:0b:52:74:50:7f:29: b3:8e:23:92:c1:cf:44:42:f4:12:c0:de:e0:70:2c:18:07:79: 33:aa:bb:4e:ec:4c:b6:c6:8f:ef:f9:79:3c:03:9b:bd:f6:ff: f7:cf:4b:3c:84:f0:7b:65:69:97:3a:47:b8:15:ef:cb:35:41: 72:40:04:ce:75:47:f7:6c:38:e5:5c:ea:c8:95:4d:f9:40:52: e5:8d:66:0e:17:20:04:b6:9a:e9:67:ac:1b:8c:07:7a:1c:1d: f4:55:47:9d:67:ce:cc:3a:b6:2c:dc:36:e8:c0:bb:9f:42:8d: 12:b1:74:16:92:34:a6:fb:fd:5e:96:72:96:29:f3:5b:fa:c8: 87:7b:b3:82 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURiB7UqRTzPuaK3sdxg3lxzVTimQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNTAxMjkxNzI1MDJaFw0yNjAxMjgxNzMwMDJaMDMxMTAvBgNV BAMTKEY4REJBODhEMEM5MTJGRjVCRThBNjA5MzIzMDNDNUE2QTBCMDI5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDudpyJd/g7VSw1g8bTcyCCThLj hH7jtzi6rrscqpd5fdnlXmZmyr5bVFqoVMeXr/uHLYNN2LvoXgy3XoiX9K23wZvh vir0cFLxjKmp0L5h/U2YUHS8sKeXrfzsydGrZbXM2H1KQwtGJ0rBqCM8w7kg+wx0 +KFsZbIIAr4rjodQzNGO+c+4+L39K/oSuE6drRFTnC1Re6WgqWMSYGXP1NgJpMih XGMshU9H9B33YfUgl3RfmsmRNE+Bf5MHfUaP+faybCOmr3d6GawH1zELx4tKG1AQ KKUA1zDuR/8gFbZrnPk6dIPherdnq+3iYQYHbp55mT3JXfQUfql4X7NGL8YbAgMB AAGjggKpMIICpTAdBgNVHQ4EFgQU+NuojQyRL/W+imCTIwPFpqCwKagwHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyODQ5Ny5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMghADAP BAIAAjAJAwcAIAETx3AUMA0GCSqGSIb3DQEBCwUAA4IBAQAzGsGjtUyuWepisMrL 1a7WhfPQcTvlYysDtnRCF9fyYLF0lhDGnPCGUZBxryaYVgbG3VDTpj5vPLxStORT +RKZb0xZMEwOF30+QlAeEPyTrKDAxv/hN8tF2byzYWKxToOpjHUG7huls6vad6rT imjwHg3AlE+N4KELUnRQfymzjiOSwc9EQvQSwN7gcCwYB3kzqrtO7Ey2xo/v+Xk8 A5u99v/3z0s8hPB7ZWmXOke4Fe/LNUFyQATOdUf3bDjlXOrIlU35QFLljWYOFyAE tprpZ6wbjAd6HB30VUedZ87MOrYs3DbowLufQo0SsXQWkjSm+/1elnKWKfNb+siH e7OC -----END CERTIFICATE-----Generated at Thu Apr 17 23:09:53 2025 by rpki-client