$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28500.roa File: AS28500.roa (raw, json) Hash identifier: I8Prfkevfpcw8LZoCNP2Ch+CJ42TokVQQLdyyinb2YI= Subject key identifier: BC:3F:F1:B6:4E:52:B6:76:1F:BF:A2:E6:1A:33:BF:BF:9E:B1:DD:2E Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 7C6C0B571075ED687F3EF5017893D512075E6805 Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28500.roa Signing time: Wed 29 Jan 2025 17:30:04 +0000 ROA not before: Wed 29 Jan 2025 17:25:04 +0000 ROA not after: Wed 28 Jan 2026 17:30:04 +0000 asID: 28500 IP address blocks: 207.248.68.0/24 maxlen: 24 2801:c4:d0::/44 maxlen: 44 2801:c4:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 08:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6c:0b:57:10:75:ed:68:7f:3e:f5:01:78:93:d5:12:07:5e:68:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Jan 29 17:25:04 2025 GMT Not After : Jan 28 17:30:04 2026 GMT Subject: CN=BC3FF1B64E52B6761FBFA2E61A33BFBF9EB1DD2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:82:02:c0:84:d5:0a:c3:c2:b3:70:f6:28:f0: ee:39:6b:8d:59:37:70:59:2e:f8:43:65:27:56:b9: b3:57:8b:87:88:6b:bf:e3:bc:23:fd:d2:22:48:55: c3:61:52:b0:0d:b4:23:88:13:43:a3:74:74:23:95: 11:88:78:c5:fc:c6:25:e7:88:a7:94:4e:43:16:3c: 5a:e1:f8:83:78:94:9c:88:1b:5c:a0:95:cf:e0:6d: b8:64:89:9d:e6:b8:ce:d0:ff:3b:d0:08:97:4c:a7: e9:4f:4d:5d:5a:cc:21:55:26:90:81:b0:6b:22:07: e7:62:8b:90:41:0d:86:e2:95:52:09:ac:4a:e8:1c: c2:52:48:a9:25:6f:cd:52:f5:2a:de:94:02:ab:09: 71:4a:45:4e:39:51:5a:06:11:36:b3:c9:31:76:42: f3:a8:25:48:91:50:d7:9d:b7:ba:3d:83:44:11:0f: be:54:f5:ee:f1:a7:6c:9f:c5:70:14:3a:58:6d:6c: 0a:cc:58:b2:7a:ff:c2:85:44:60:d0:7f:6f:77:c9: c4:89:71:05:ff:08:c1:3e:86:e1:e3:26:ea:69:a4: 25:f9:6d:78:5f:b6:1c:c9:d4:82:80:84:51:c6:83: 7a:7a:fb:1d:78:ec:44:65:7e:37:ea:32:7a:8c:81: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3F:F1:B6:4E:52:B6:76:1F:BF:A2:E6:1A:33:BF:BF:9E:B1:DD:2E X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28500.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.68.0/24 IPv6: 2801:c4:d0::/44 Signature Algorithm: sha256WithRSAEncryption 91:55:8b:f2:e9:c1:4a:37:f0:53:89:89:db:22:f3:f7:f6:66: 16:32:e4:ce:95:49:c6:63:63:1e:d0:61:9c:8c:a8:bf:a4:91: 4a:7f:17:82:19:59:a6:f7:69:90:cf:96:c5:e0:8b:59:fe:03: 09:69:2b:10:b6:27:57:5b:fc:70:00:29:ab:fe:d5:29:da:c3: b0:fb:b9:ba:90:ed:fb:3f:c9:89:15:80:aa:d1:9c:64:87:b0: 0c:ac:76:68:92:51:84:d5:65:ec:83:a1:eb:a9:9b:01:6d:4e: 12:98:81:90:26:0f:75:10:81:7b:76:59:49:cb:0a:65:f0:f0: fe:0e:4c:58:00:aa:cf:3f:43:84:77:ce:6d:04:b9:cb:68:5c: b7:74:61:91:eb:6f:eb:89:10:e4:b4:ef:0e:6e:62:3f:50:5d: d2:2c:54:b9:ec:f0:d8:60:01:db:39:34:67:dc:ea:90:7a:02: 44:1e:a1:c3:bc:4c:ef:bc:ac:df:b4:82:03:cc:33:cd:bb:f6: 1b:2b:a0:ce:81:9c:e7:28:d6:3a:cf:3a:36:e7:d7:b1:1b:65: 4d:e0:0f:a0:c4:3d:1b:fe:c9:e5:a9:50:0b:73:99:d8:de:9c: 54:7b:23:57:3d:4c:2b:00:e0:69:29:d7:26:71:2c:26:ac:70: c5:51:40:13 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfGwLVxB17Wh/PvUBeJPVEgdeaAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNTAxMjkxNzI1MDRaFw0yNjAxMjgxNzMwMDRaMDMxMTAvBgNV BAMTKEJDM0ZGMUI2NEU1MkI2NzYxRkJGQTJFNjFBMzNCRkJGOUVCMUREMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtggLAhNUKw8KzcPYo8O45a41Z N3BZLvhDZSdWubNXi4eIa7/jvCP90iJIVcNhUrANtCOIE0OjdHQjlRGIeMX8xiXn iKeUTkMWPFrh+IN4lJyIG1yglc/gbbhkiZ3muM7Q/zvQCJdMp+lPTV1azCFVJpCB sGsiB+dii5BBDYbilVIJrEroHMJSSKklb81S9SrelAKrCXFKRU45UVoGETazyTF2 QvOoJUiRUNedt7o9g0QRD75U9e7xp2yfxXAUOlhtbArMWLJ6/8KFRGDQf293ycSJ cQX/CME+huHjJupppCX5bXhfthzJ1IKAhFHGg3p6+x147ERlfjfqMnqMgScJAgMB AAGjggKpMIICpTAdBgNVHQ4EFgQUvD/xtk5StnYfv6LmGjO/v56x3S4wHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyODUwMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAM/4RDAP BAIAAjAJAwcEKAEAxADQMA0GCSqGSIb3DQEBCwUAA4IBAQCRVYvy6cFKN/BTiYnb IvP39mYWMuTOlUnGY2Me0GGcjKi/pJFKfxeCGVmm92mQz5bF4ItZ/gMJaSsQtidX W/xwACmr/tUp2sOw+7m6kO37P8mJFYCq0Zxkh7AMrHZoklGE1WXsg6HrqZsBbU4S mIGQJg91EIF7dllJywpl8PD+DkxYAKrPP0OEd85tBLnLaFy3dGGR62/riRDktO8O bmI/UF3SLFS57PDYYAHbOTRn3OqQegJEHqHDvEzvvKzftIIDzDPNu/YbK6DOgZzn KNY6zzo259exG2VN4A+gxD0b/snlqVALc5nY3pxUeyNXPUwrAOBpKdcmcSwmrHDF UUAT -----END CERTIFICATE-----Generated at Thu Apr 17 23:09:43 2025 by rpki-client