$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa File: AS20940.roa (raw, json) Hash identifier: BkaTuMZHi5dZpS0cNURumAT+ARoI871lcHTz4MqBc6Y= Subject key identifier: 0D:DB:9F:39:6D:C7:7A:E1:D0:75:7E:32:BF:4B:BF:0A:53:3A:79:9E Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378 Certificate serial: 34112765A4F57AC02E8DBFB6752123468C9E9533 Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa Signing time: Tue 29 Sep 2026 21:20:00 +0000 ROA not before: Tue 29 Sep 2026 21:15:00 +0000 ROA not after: Tue 28 Sep 2027 21:20:00 +0000 asID: 20940 IP address blocks: 187.210.208.0/24 maxlen: 24 189.247.167.0/24 maxlen: 24 189.247.204.0/22 maxlen: 24 189.247.210.0/24 maxlen: 24 189.247.212.0/24 maxlen: 24 189.247.214.0/24 maxlen: 24 189.247.216.0/24 maxlen: 24 189.247.220.0/24 maxlen: 24 2806:1040:fc::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 06:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:11:27:65:a4:f5:7a:c0:2e:8d:bf:b6:75:21:23:46:8c:9e:95:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378 Validity Not Before: Sep 29 21:15:00 2026 GMT Not After : Sep 28 21:20:00 2027 GMT Subject: CN=0DDB9F396DC77AE1D0757E32BF4BBF0A533A799E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:74:f8:cb:a5:8c:75:f0:90:e7:ed:98:05: 25:14:2b:2b:87:a2:de:6e:d1:6b:b2:ec:73:ce:ce: e1:3b:08:00:58:a7:1d:5f:94:a6:73:bc:c1:94:ca: 9d:09:12:d7:eb:76:ae:ae:f0:f1:fd:9f:92:e2:59: 25:dc:a1:9f:f6:b5:ef:96:4d:4d:ad:b2:1c:45:22: 32:15:0a:2f:6c:b1:5a:40:62:63:63:04:9b:f3:36: 6a:04:4d:43:d7:49:e8:e5:02:e7:ea:5c:87:4d:37: 14:d1:ac:2b:3b:27:08:6a:c8:fc:88:9d:24:5a:e6: c9:c0:63:e1:66:cc:15:38:88:79:88:f2:c7:22:6c: 21:02:86:08:c6:86:de:76:92:29:2b:a8:af:fe:f1: d1:7c:bd:8d:af:7d:2d:ca:99:ef:7e:9b:cc:a8:b7: 18:b6:4f:af:ee:51:3d:81:15:34:1d:33:a6:d3:e1: ae:5c:71:3f:fb:f7:56:15:b5:5e:f9:7e:68:b5:47: 1b:4c:f0:bb:0b:6c:b5:06:9a:ea:ff:52:57:b0:e5: 21:8b:da:85:f8:f3:d9:46:68:f7:f0:0c:de:d0:a4: b4:d4:b8:e9:5c:a1:38:dd:d9:2f:8c:d7:43:ce:8c: 9c:81:4c:9c:e4:30:9c:d1:f9:fc:95:5c:0b:4f:2f: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:9F:39:6D:C7:7A:E1:D0:75:7E:32:BF:4B:BF:0A:53:3A:79:9E X509v3 Authority Key Identifier: keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS20940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.210.208.0/24 189.247.167.0/24 189.247.204.0/22 189.247.210.0/24 189.247.212.0/24 189.247.214.0/24 189.247.216.0/24 189.247.220.0/24 IPv6: 2806:1040:fc::/48 Signature Algorithm: sha256WithRSAEncryption 65:8e:cf:3d:e3:b3:46:e2:58:be:e1:b5:c6:7c:ad:11:a1:0c: 15:87:67:52:22:30:22:85:58:d3:cb:1d:1e:2d:ae:a2:1a:46: a4:b4:3e:0d:61:73:fa:6a:e9:77:27:7d:eb:bf:08:cc:fe:68: fc:73:11:b1:ce:11:e8:65:0e:bc:08:a3:22:c4:ea:a6:f9:9c: 3b:cd:b0:ec:a5:3c:84:5e:52:89:2c:ab:92:b0:79:54:c9:1b: 85:d4:6a:25:53:e8:ba:d7:5b:42:85:56:d1:4b:4b:a6:1d:d8: a1:65:fe:fa:c3:eb:97:a4:92:7f:52:63:f7:80:4b:61:74:69: b0:9c:64:91:3d:d4:8f:ac:de:36:73:8e:82:c2:32:3a:0d:18: 20:1c:45:41:e0:a0:22:e5:6c:20:93:38:2b:57:94:d0:66:00: b3:39:9d:91:9d:91:88:0d:f6:d6:05:ce:67:68:de:98:41:44: 76:c1:96:19:44:4a:65:25:d3:a9:1e:56:0c:54:7c:67:6a:b6: 45:bf:a4:ef:49:9b:e7:9d:c3:3d:4a:db:28:92:02:2d:d4:d1: c9:f0:f0:92:fd:d6:83:83:ad:05:72:b2:f5:fc:5b:c1:35:96: d5:e9:cf:52:26:cb:c6:65:5b:c6:5f:2d:54:55:0f:f7:e8:9e: f9:a4:74:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNBEnZaT1esAujb+2dSEjRoyelTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAzMDQwNjFFQjk5 OEJGNzM3ODAeFw0yNjA5MjkyMTE1MDBaFw0yNzA5MjgyMTIwMDBaMDMxMTAvBgNV BAMTKDBEREI5RjM5NkRDNzdBRTFEMDc1N0UzMkJGNEJCRjBBNTMzQTc5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFnT4y6WMdfCQ5+2YBSUUKyuH ot5u0Wuy7HPOzuE7CABYpx1flKZzvMGUyp0JEtfrdq6u8PH9n5LiWSXcoZ/2te+W TU2tshxFIjIVCi9ssVpAYmNjBJvzNmoETUPXSejlAufqXIdNNxTRrCs7JwhqyPyI nSRa5snAY+FmzBU4iHmI8scibCEChgjGht52kikrqK/+8dF8vY2vfS3Kme9+m8yo txi2T6/uUT2BFTQdM6bT4a5ccT/791YVtV75fmi1RxtM8LsLbLUGmur/Ulew5SGL 2oX489lGaPfwDN7QpLTUuOlcoTjd2S+M10POjJyBTJzkMJzR+fyVXAtPL0xZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDdufOW3HeuHQdX4yv0u/ClM6eZ4wHwYDVR0j BBgwFoAUyGjcQiRD+nDndhwDBAYeuZi/c3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0 ODMzRTg1QkU5RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3 MEU3NzYxQzAzMDQwNjFFQjk5OEJGNzM3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODY4REM0MjI0NDNGQTcwRTc3 NjFDMDMwNDA2MUVCOTk4QkY3Mzc4LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5 RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQVMyMDk0MC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRLMEkwNgQCAAEwMAMEALvS0AME AL33pwMEAr33zAMEAL330gMEAL331AMEAL331gMEAL332AMEAL333DAPBAIAAjAJ AwcAKAYQQAD8MA0GCSqGSIb3DQEBCwUAA4IBAQBljs8947NG4li+4bXGfK0RoQwV h2dSIjAihVjTyx0eLa6iGkaktD4NYXP6aul3J33rvwjM/mj8cxGxzhHoZQ68CKMi xOqm+Zw7zbDspTyEXlKJLKuSsHlUyRuF1GolU+i611tChVbRS0umHdihZf76w+uX pJJ/UmP3gEthdGmwnGSRPdSPrN42c46CwjI6DRggHEVB4KAi5WwgkzgrV5TQZgCz OZ2RnZGIDfbWBc5naN6YQUR2wZYZREplJdOpHlYMVHxnarZFv6TvSZvnncM9Stso kgIt1NHJ8PCS/daDg60FcrL1/FvBNZbV6c9SJsvGZVvGXy1UVQ/36J75pHSR -----END CERTIFICATE-----Generated at Sun Oct 11 17:36:07 2026 by rpki-client