
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28555.roa
File: AS28555.roa (raw, json)
Hash identifier: dwwZpIHKopo4QybAll4kq0mTU7erW/rb5liLDgmDAIY=
Subject key identifier: B7:07:05:6A:74:16:0D:E6:34:8A:EC:C7:C0:EC:F6:37:9A:76:92:A5
Certificate issuer: /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial: 745AF3576C69B32B820423243DA6420257CECD7A
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28555.roa
Signing time: Wed 20 May 2026 05:20:00 +0000
ROA not before: Wed 20 May 2026 05:15:00 +0000
ROA not after: Wed 19 May 2027 05:20:00 +0000
asID: 28555
IP address blocks: 187.184.32.0/20 maxlen: 20
187.185.68.0/24 maxlen: 24
189.214.132.0/22 maxlen: 22
189.221.163.0/24 maxlen: 24
200.95.130.0/23 maxlen: 23
200.95.142.0/24 maxlen: 24
201.150.140.0/22 maxlen: 22
201.166.44.0/22 maxlen: 22
201.166.48.0/20 maxlen: 22
201.166.116.0/23 maxlen: 24
2806:250:10::/48 maxlen: 48
2806:250:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 27 May 2026 07:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5a:f3:57:6c:69:b3:2b:82:04:23:24:3d:a6:42:02:57:ce:cd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Validity
Not Before: May 20 05:15:00 2026 GMT
Not After : May 19 05:20:00 2027 GMT
Subject: CN=B707056A74160DE6348AECC7C0ECF6379A7692A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:dc:8d:84:3b:02:8c:e2:fe:ad:d1:b2:17:
54:dc:29:0a:6c:db:e7:10:88:f6:27:8c:ac:49:c9:
1f:d2:ad:40:06:39:51:35:24:20:25:52:92:f4:a1:
8b:09:ae:03:69:1e:ca:99:fd:f2:5f:68:be:55:87:
aa:0b:a5:dc:03:af:80:88:c2:29:d7:e9:88:f3:ad:
ac:d5:54:65:84:94:f4:7f:98:1d:f5:5e:44:c3:b6:
56:91:30:17:90:2e:cf:ea:f4:07:06:bc:ae:6d:a9:
9e:49:aa:25:32:42:3e:50:25:89:c4:a4:66:5c:84:
24:2e:71:6c:93:c0:1c:6d:4b:a3:14:8b:3f:7d:0e:
63:12:2a:e7:b2:4a:0f:64:96:41:e6:f5:a7:42:e6:
ad:20:d7:c0:0e:4d:ee:bf:94:67:32:41:f8:36:27:
ac:b2:65:8a:ba:c9:03:84:a0:08:51:45:fc:3e:22:
2a:c5:3e:77:2c:39:9a:9d:c3:47:ee:c4:c2:81:72:
4f:4f:5d:60:54:c8:5d:ca:79:23:d3:5b:a7:02:07:
a9:f8:25:d7:bc:cc:a4:41:51:1f:e1:23:15:95:92:
95:1a:22:d1:1c:94:ba:78:35:38:b7:48:ee:cc:2d:
ac:1c:f6:77:62:23:dc:7b:07:97:33:9e:05:17:2e:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:05:6A:74:16:0D:E6:34:8A:EC:C7:C0:EC:F6:37:9A:76:92:A5
X509v3 Authority Key Identifier:
keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.184.32.0/20
187.185.68.0/24
189.214.132.0/22
189.221.163.0/24
200.95.130.0/23
200.95.142.0/24
201.150.140.0/22
201.166.44.0-201.166.63.255
201.166.116.0/23
IPv6:
2806:250:10::/48
2806:250:200::/40
Signature Algorithm: sha256WithRSAEncryption
6a:66:0c:f1:0a:56:56:52:fe:5f:d9:ae:53:06:87:bc:78:a9:
5e:c1:4c:33:ca:86:43:b9:1a:67:60:33:98:64:54:2d:ed:db:
57:17:47:4b:1c:ee:25:40:0f:6d:b3:db:21:2f:a8:d4:d6:2b:
c1:84:0c:f3:68:8d:89:35:f6:b9:fd:99:03:04:87:15:46:79:
7c:56:d1:59:af:5d:56:6d:f3:b2:7a:f9:8b:73:58:fb:60:22:
11:b1:ad:0d:73:46:e9:da:e3:1f:f3:c9:86:2d:b4:28:b2:19:
bf:7e:ec:0b:00:db:99:85:66:71:c3:86:f9:54:a2:ab:7f:42:
76:ed:88:fd:ae:d6:66:36:60:4b:d4:43:b9:f0:60:43:c8:9d:
eb:1a:29:a2:3f:83:94:a4:ac:72:a0:de:dc:7f:e4:ef:12:ea:
7e:6f:22:85:fc:8b:85:ab:88:6e:2a:c9:fc:74:71:84:e0:9e:
6f:9a:85:b3:71:a7:2e:7b:3d:8b:0b:d3:47:db:d1:1b:f1:9e:
d4:2d:3c:9e:f7:6a:af:22:5c:ce:43:cc:61:a5:0b:aa:2b:00:
87:df:6e:a1:ce:69:9a:97:4f:8a:67:40:4d:1c:20:b5:b1:0a:
1b:1d:aa:4e:9f:35:8d:75:22:45:57:0b:3d:d6:d0:17:4a:f5:
fb:eb:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:51:13 2026 by rpki-client