$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: 8xiGCBaBiNL9ndK8rwznpP3MKsvEYZ8QBw7WQhPyENM= Subject key identifier: D3:5A:E7:60:E2:CE:A4:C5:C5:34:C2:B7:B9:1B:B8:0B:F7:C6:9C:80 Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Certificate serial: CCBD71BA7ED89B7417176D8B6D986591DD604D Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa Signing time: Tue 12 May 2026 16:55:00 +0000 ROA not before: Tue 12 May 2026 16:50:00 +0000 ROA not after: Tue 11 May 2027 16:55:00 +0000 asID: 3356 IP address blocks: 190.216.51.32/27 maxlen: 27 200.41.8.0/24 maxlen: 24 201.234.13.168/30 maxlen: 30 201.234.65.90/31 maxlen: 31 201.234.91.0/24 maxlen: 24 201.234.144.76/30 maxlen: 30 201.234.146.208/29 maxlen: 29 2001:13b0:8001:22::/64 maxlen: 64 2001:13b0:8021::/48 maxlen: 48 2001:13b0:be80:f003::/64 maxlen: 64 2001:13b2:8000:28::/64 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cc:bd:71:ba:7e:d8:9b:74:17:17:6d:8b:6d:98:65:91:dd:60:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Validity Not Before: May 12 16:50:00 2026 GMT Not After : May 11 16:55:00 2027 GMT Subject: CN=D35AE760E2CEA4C5C534C2B7B91BB80BF7C69C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:0c:c4:18:9c:47:cf:da:0c:3d:31:f0:32: f1:fa:2b:ec:44:c9:1b:0d:96:2a:e5:ac:61:c7:af: 1c:aa:49:ad:24:ef:4c:28:97:53:66:cd:60:b2:9b: 82:84:d6:20:49:e5:bb:f1:d5:36:c1:28:fa:0f:62: 0e:1e:64:94:94:9c:e3:f1:8d:e3:9f:a9:90:d7:47: 90:10:b3:05:4c:0f:ea:b8:fb:4c:8a:9a:65:e6:69: 35:86:af:70:f8:7e:35:a5:d1:85:e7:78:0c:08:2e: c5:4e:5d:e0:f8:fb:7d:92:34:db:89:9a:65:33:02: 62:28:8c:5a:47:88:76:63:62:08:9e:36:ba:88:11: 72:13:42:03:4f:15:a0:33:90:86:a3:15:09:bd:06: 2f:c3:2c:47:59:af:a3:34:f8:ec:b6:62:c0:16:3a: a0:b9:4a:c9:0c:a5:ff:b9:7f:32:bd:38:b0:dc:38: 02:94:d4:5c:fa:2d:9e:2e:4e:b6:3e:95:8e:fc:54: 95:91:d5:df:63:3d:bb:56:9e:23:fb:79:71:46:d0: cc:2a:7a:aa:de:8e:21:d9:cf:38:d1:f3:6a:0f:36: 8e:26:25:ee:40:96:58:4c:b7:98:19:6a:7d:fd:96: 8b:03:be:f2:76:d0:63:6d:79:0f:6d:3b:6b:93:a6: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5A:E7:60:E2:CE:A4:C5:C5:34:C2:B7:B9:1B:B8:0B:F7:C6:9C:80 X509v3 Authority Key Identifier: keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.216.51.32/27 200.41.8.0/24 201.234.13.168/30 201.234.65.90/31 201.234.91.0/24 201.234.144.76/30 201.234.146.208/29 IPv6: 2001:13b0:8001:22::/64 2001:13b0:8021::/48 2001:13b0:be80:f003::/64 2001:13b2:8000:28::/64 Signature Algorithm: sha256WithRSAEncryption 6d:0d:25:74:b6:1c:14:84:48:e2:a6:d6:6e:6a:21:65:a1:75: d1:7b:4d:61:80:1b:08:15:e2:89:25:44:64:7e:17:80:80:d5: 20:46:31:c8:ec:c0:dd:b4:5b:37:0a:17:83:74:51:1f:a8:32: 9e:1c:0a:a0:ba:ff:4c:1a:fa:9f:aa:2a:4f:48:36:ae:7e:90: 6a:58:64:1c:2b:7b:96:04:84:51:64:49:40:bf:c6:e7:06:e7: c1:25:5c:a1:4c:07:da:32:17:41:fb:87:ec:c9:85:2c:37:2a: f5:b0:4a:1c:77:e2:c0:44:69:2d:6f:19:67:36:2e:31:cf:a6: 18:e4:a4:38:8d:9b:32:8c:ab:59:1c:16:c1:41:57:0e:5f:57: 66:0c:64:5e:30:4c:f1:9f:a9:b2:72:ef:9a:5d:77:dc:f2:b3: 3b:70:96:1b:94:04:f0:0c:d9:b4:7f:4b:51:e5:05:5f:28:0e: 7a:5b:9f:5d:bc:e8:22:45:1f:7f:04:02:f7:77:9c:a7:f2:8e: 0b:04:d3:6a:f6:34:04:9e:77:60:af:75:33:da:a1:42:6d:20: d8:49:66:ef:82:0a:1b:94:f1:a2:98:72:59:7f:e6:34:14:8d: d3:28:54:ba:98:84:e5:7d:05:f4:dc:cc:16:b1:38:b9:4f:17: 35:ca:42:99 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUAMy9cbp+2Jt0Fxdti22YZZHdYE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz QjdDRUM1NjAeFw0yNjA1MTIxNjUwMDBaFw0yNzA1MTExNjU1MDBaMDMxMTAvBgNV BAMTKEQzNUFFNzYwRTJDRUE0QzVDNTM0QzJCN0I5MUJCODBCRjdDNjlDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mgzEGJxHz9oMPTHwMvH6K+xE yRsNlirlrGHHrxyqSa0k70wol1NmzWCym4KE1iBJ5bvx1TbBKPoPYg4eZJSUnOPx jeOfqZDXR5AQswVMD+q4+0yKmmXmaTWGr3D4fjWl0YXneAwILsVOXeD4+32SNNuJ mmUzAmIojFpHiHZjYgieNrqIEXITQgNPFaAzkIajFQm9Bi/DLEdZr6M0+Oy2YsAW OqC5SskMpf+5fzK9OLDcOAKU1Fz6LZ4uTrY+lY78VJWR1d9jPbtWniP7eXFG0Mwq eqrejiHZzzjR82oPNo4mJe5AllhMt5gZan39losDvvJ20GNteQ9tO2uTppehAgMB AAGjggLyMIIC7jAdBgNVHQ4EFgQU01rnYOLOpMXFNMK3uRu4C/fGnIAwHwYDVR0j BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1 ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMG CCsGAQUFBzALhndyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1ODBGQjIwMzgz QjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQVMzMzU2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTA1BAIAATAvAwUFvtgzIAME AMgpCAMFAsnqDagDBQHJ6kFaAwQAyepbAwUCyeqQTAMFA8nqktAwMAQCAAIwKgMJ ACABE7CAAQAiAwcAIAETsIAhAwkAIAETsL6A8AMDCQAgAROygAAAKDANBgkqhkiG 9w0BAQsFAAOCAQEAbQ0ldLYcFIRI4qbWbmohZaF10XtNYYAbCBXiiSVEZH4XgIDV IEYxyOzA3bRbNwoXg3RRH6gynhwKoLr/TBr6n6oqT0g2rn6QalhkHCt7lgSEUWRJ QL/G5wbnwSVcoUwH2jIXQfuH7MmFLDcq9bBKHHfiwERpLW8ZZzYuMc+mGOSkOI2b MoyrWRwWwUFXDl9XZgxkXjBM8Z+psnLvml133PKzO3CWG5QE8AzZtH9LUeUFXygO elufXbzoIkUffwQC93ecp/KOCwTTavY0BJ53YK91M9qhQm0g2Elm74IKG5Txophy WX/mNBSN0yhUupiE5X0F9NzMFrE4uU8XNcpCmQ== -----END CERTIFICATE-----Generated at Wed May 13 07:38:30 2026 by rpki-client