$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28545.roa File: AS28545.roa (raw, json) Hash identifier: qfrLbu00z/Hcm5mPAiChWkDDCEYid/DguVYFfNFZ6LY= Subject key identifier: 57:80:87:41:BE:4D:FD:23:9B:59:69:83:B0:F6:42:F0:B4:AB:21:88 Certificate issuer: /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A Certificate serial: 41F5D7146D348A086A6C753494C26B23F17CACF9 Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28545.roa Signing time: Wed 20 May 2026 05:10:00 +0000 ROA not before: Wed 20 May 2026 05:05:00 +0000 ROA not after: Wed 19 May 2027 05:10:00 +0000 asID: 28545 IP address blocks: 187.184.24.0/21 maxlen: 22 187.184.96.0/19 maxlen: 22 187.184.152.0/21 maxlen: 22 187.184.160.0/20 maxlen: 22 187.185.224.0/24 maxlen: 24 189.202.20.0/22 maxlen: 24 189.214.0.0/21 maxlen: 22 189.215.48.0/21 maxlen: 22 189.215.245.0/24 maxlen: 24 189.220.40.0/24 maxlen: 24 189.220.43.0/24 maxlen: 24 200.34.142.0/24 maxlen: 24 2806:250:8::/48 maxlen: 48 2806:250:9::/48 maxlen: 48 2806:250:b::/48 maxlen: 48 2806:250:400::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 May 2026 07:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f5:d7:14:6d:34:8a:08:6a:6c:75:34:94:c2:6b:23:f1:7c:ac:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A Validity Not Before: May 20 05:05:00 2026 GMT Not After : May 19 05:10:00 2027 GMT Subject: CN=57808741BE4DFD239B596983B0F642F0B4AB2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:dd:03:24:31:37:89:79:73:b6:76:b5:32: 6b:c9:34:1a:d5:e3:07:cc:46:b6:0d:f0:7d:cf:a1: 61:b6:de:d3:65:f7:9a:44:c7:ac:d9:9e:00:f0:7b: 01:9d:dd:8a:54:ae:58:10:a3:8d:6a:92:68:e9:d3: e6:0b:57:f1:4b:8b:87:1f:57:89:3e:a9:af:81:4b: a1:f5:61:3e:b2:bf:36:eb:be:b8:34:08:b2:87:74: 91:2e:34:69:da:de:f6:37:20:5e:4f:66:68:08:6b: 3c:43:12:8e:b0:dc:5d:3c:d4:83:7a:b2:4a:db:0f: 00:97:a2:e3:79:4b:06:73:30:cb:5c:83:1a:c5:9d: c1:9d:75:fc:7c:bd:3b:96:07:96:21:65:e3:d0:84: 35:af:b7:b6:cc:81:cd:e7:eb:99:fc:33:40:a9:1b: a0:6f:ee:91:fa:95:97:4b:f6:df:a5:04:79:d7:fc: 43:8f:cb:ba:43:13:fd:3a:b3:e6:98:9c:b1:cb:d9: b6:d1:4c:fa:e1:58:13:18:d6:26:74:b4:a9:c8:ef: ec:1b:84:ff:25:6c:9a:d1:07:e0:02:0a:9c:6d:e9: 3e:68:15:1f:6f:7a:3e:07:9a:ee:58:a9:65:21:01: 56:78:e5:1b:fb:20:d5:8e:0f:c9:e8:01:bc:ae:9a: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:87:41:BE:4D:FD:23:9B:59:69:83:B0:F6:42:F0:B4:AB:21:88 X509v3 Authority Key Identifier: keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.184.24.0/21 187.184.96.0/19 187.184.152.0-187.184.175.255 187.185.224.0/24 189.202.20.0/22 189.214.0.0/21 189.215.48.0/21 189.215.245.0/24 189.220.40.0/24 189.220.43.0/24 200.34.142.0/24 IPv6: 2806:250:8::/47 2806:250:b::/48 2806:250:400::/40 Signature Algorithm: sha256WithRSAEncryption 9c:dd:eb:e7:68:23:03:5e:5c:e2:2d:15:b8:d2:a2:19:55:ec: d4:a7:ed:48:3c:d7:00:76:2c:9c:03:2d:81:68:1a:8d:6c:4a: 0e:7f:b8:f7:6c:5c:e5:6c:0f:1c:e5:ee:78:6c:45:ef:dc:45: 17:c1:f4:12:04:f0:49:f9:08:2b:44:47:ec:0b:4f:88:e0:5f: 72:ab:ae:95:e2:00:18:53:38:ec:65:3f:b8:8e:6b:a9:c1:d7: ce:10:4f:8b:8f:68:b0:3e:3d:2d:84:3f:d0:1f:b9:93:bb:92: 54:05:1a:0c:fe:91:34:d9:3c:07:e3:b3:38:a7:27:62:33:ed: 8d:94:76:84:5d:13:58:72:cc:ef:f1:a0:74:dc:73:15:ca:0d: fe:b2:ca:ce:a5:45:f4:92:d4:52:20:fe:7f:87:10:af:52:94: ea:d4:cb:08:5f:9b:cd:83:3e:a4:d6:9f:b2:6a:aa:2f:61:2b: 0e:d8:2c:a5:a0:74:b0:c0:13:91:ba:fa:c9:c7:06:9a:df:57: c9:1c:57:df:30:e8:c0:37:f0:49:e0:9f:d3:25:02:88:75:c4: 5b:d3:74:b1:03:da:29:94:d8:57:c0:dd:42:fb:a1:92:bb:40: 2e:0d:4f:3f:d5:08:c6:bf:4c:fa:22:c2:cb:0e:ae:e3:df:11: a5:29:5a:99 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgIUQfXXFG00ighqbHU0lMJrI/F8rPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCQUFDODYzRkE3N0RBMDg0RkI2RkY2OENDNEQ1MDA4 QzMxNTUyQTAeFw0yNjA1MjAwNTA1MDBaFw0yNzA1MTkwNTEwMDBaMDMxMTAvBgNV BAMTKDU3ODA4NzQxQkU0REZEMjM5QjU5Njk4M0IwRjY0MkYwQjRBQjIxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1N0DJDE3iXlztna1MmvJNBrV 4wfMRrYN8H3PoWG23tNl95pEx6zZngDwewGd3YpUrlgQo41qkmjp0+YLV/FLi4cf V4k+qa+BS6H1YT6yvzbrvrg0CLKHdJEuNGna3vY3IF5PZmgIazxDEo6w3F081IN6 skrbDwCXouN5SwZzMMtcgxrFncGddfx8vTuWB5YhZePQhDWvt7bMgc3n65n8M0Cp G6Bv7pH6lZdL9t+lBHnX/EOPy7pDE/06s+aYnLHL2bbRTPrhWBMY1iZ0tKnI7+wb hP8lbJrRB+ACCpxt6T5oFR9vej4Hmu5YqWUhAVZ45Rv7INWOD8noAbyumm5nAgMB AAGjggL/MIIC+zAdBgNVHQ4EFgQUV4CHQb5N/SObWWmDsPZC8LSrIYgwHwYDVR0j BBgwFoAU4bqshj+nfaCE+2/2jMTVAIwxVSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkFDRkI4QkM3QTQzQkI5NTdEOEU0ODYyMDlDODBCQzkw MTE4REZEM0VENUVCMkNEMzI4MkRGQTE3RUExNjM5LzAvRTFCQUFDODYzRkE3N0RB MDg0RkI2RkY2OENDNEQ1MDA4QzMxNTUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMUJBQUM4NjNGQTc3REEwODRG QjZGRjY4Q0M0RDUwMDhDMzE1NTJBLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRkFDRkI4QkM3QTQzQkI5NTdEOEU0ODYyMDlDODBCQzkwMTE4REZEM0VE NUVCMkNEMzI4MkRGQTE3RUExNjM5LzAvQVMyODU0NS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBhQYIKwYBBQUHAQcBAf8EdjB0MFAEAgABMEoDBAO7uBgD BAW7uGAwDAMEA7u4mAMEBLu4oAMEALu54AMEAr3KFAMEA73WAAMEA73XMAMEAL3X 9QMEAL3cKAMEAL3cKwMEAMgijjAgBAIAAjAaAwcBKAYCUAAIAwcAKAYCUAALAwYA KAYCUAQwDQYJKoZIhvcNAQELBQADggEBAJzd6+doIwNeXOItFbjSohlV7NSn7Ug8 1wB2LJwDLYFoGo1sSg5/uPdsXOVsDxzl7nhsRe/cRRfB9BIE8En5CCtER+wLT4jg X3KrrpXiABhTOOxlP7iOa6nB184QT4uPaLA+PS2EP9AfuZO7klQFGgz+kTTZPAfj szinJ2Iz7Y2UdoRdE1hyzO/xoHTccxXKDf6yys6lRfSS1FIg/n+HEK9SlOrUywhf m82DPqTWn7Jqqi9hKw7YLKWgdLDAE5G6+snHBprfV8kcV98w6MA38Engn9MlAoh1 xFvTdLED2imU2FfA3UL7oZK7QC4NTz/VCMa/TPoiwssOruPfEaUpWpk= -----END CERTIFICATE-----Generated at Sat May 23 18:49:46 2026 by rpki-client