$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa File: AS28541.roa (raw, json) Hash identifier: etRUXt8tSXqZ1zupD52RMBmPFiUutxwwm7/bpXgEH3s= Subject key identifier: F5:C3:47:D5:12:C3:D9:52:54:0E:E4:42:48:6B:EE:10:27:E7:FD:82 Certificate issuer: /CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB Certificate serial: 584A40C26059E0DF1ADF14C43B29A3A247B9DDBF Authority key identifier: D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa Signing time: Thu 10 Sep 2026 08:00:00 +0000 ROA not before: Thu 10 Sep 2026 07:55:00 +0000 ROA not after: Thu 09 Sep 2027 08:00:00 +0000 asID: 28541 IP address blocks: 177.242.192.0/21 maxlen: 21 177.242.200.0/21 maxlen: 24 177.247.176.0/23 maxlen: 23 189.198.229.0/24 maxlen: 24 201.159.192.0/21 maxlen: 24 201.159.207.0/24 maxlen: 24 2806:260:1020::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 Oct 2026 11:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4a:40:c2:60:59:e0:df:1a:df:14:c4:3b:29:a3:a2:47:b9:dd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB Validity Not Before: Sep 10 07:55:00 2026 GMT Not After : Sep 9 08:00:00 2027 GMT Subject: CN=F5C347D512C3D952540EE442486BEE1027E7FD82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:68:38:b3:5f:63:9e:bd:26:0c:44:d3:29: e1:98:2e:c7:dd:2a:a6:0d:7b:4a:4c:cc:08:93:c3: 9b:e0:61:79:81:47:93:90:a2:37:8e:9c:9c:a8:1e: 55:ef:36:c6:d4:cf:ea:8a:d4:9b:f1:fa:22:bb:e1: ec:af:e1:a8:ed:72:e6:31:5b:83:ea:b0:0b:84:5d: af:00:ad:5b:cd:05:ef:11:00:ef:e4:41:d4:e2:f8: 20:cb:2a:dc:10:8f:2e:f6:5f:1d:dc:38:0c:5a:b5: 09:94:6a:6d:f0:9f:03:41:3a:21:81:83:80:6f:6f: a4:9e:e1:4f:a2:62:72:26:ee:64:be:00:68:cc:8d: db:05:f6:f5:09:93:5d:74:31:d7:b8:e0:9c:7c:b4: 5e:d3:09:f9:8d:ea:40:91:09:cf:dc:2c:b5:4d:bc: f6:51:cf:dc:a1:58:01:be:25:f9:17:a3:4f:c1:10: e9:f9:cc:d6:22:ec:94:f0:9a:9d:a3:2c:61:f3:4f: 48:9a:0f:07:d6:40:08:09:25:97:6a:57:0b:67:d7: d0:bb:3a:c3:fc:e0:d4:f5:05:fe:25:a2:0c:41:44: 36:0f:4d:30:2c:3b:03:0f:ec:e4:af:5c:1d:12:dc: c5:d6:6b:99:31:f5:fc:5a:f1:da:67:47:e9:53:19: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C3:47:D5:12:C3:D9:52:54:0E:E4:42:48:6B:EE:10:27:E7:FD:82 X509v3 Authority Key Identifier: keyid:D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.242.192.0/20 177.247.176.0/23 189.198.229.0/24 201.159.192.0/21 201.159.207.0/24 IPv6: 2806:260:1020::/48 Signature Algorithm: sha256WithRSAEncryption 18:52:78:3f:e5:a5:54:c1:74:b9:76:eb:eb:d4:5d:58:f3:94: 52:a6:a2:86:39:06:0e:5f:93:24:e7:cf:f3:a3:d3:d5:c1:63: e1:6c:c0:f7:6f:bb:11:5c:66:be:8e:69:b1:20:5b:f3:5e:e7: 88:2a:92:cf:94:17:92:10:b0:63:64:0a:87:e4:53:a8:49:3e: 6e:c5:29:aa:79:f1:98:76:f2:97:b9:c8:45:d0:97:f1:e7:3a: 6f:11:a4:0d:40:5d:e7:e3:af:9d:cd:4e:66:c8:18:ae:12:75: 61:45:9c:8c:03:8e:03:44:4c:fa:ac:85:a8:d1:28:b3:c3:28: 4b:07:a0:ad:2b:04:55:c4:ee:9b:ba:e2:b5:85:ff:65:d7:7d: ac:b7:1d:44:cb:7c:ce:84:99:50:9c:e8:03:6c:12:8a:b8:6d: 43:e0:c3:55:61:ef:85:ba:36:4b:8c:2d:89:37:55:96:80:59: 11:9f:a8:f1:f7:3a:61:dd:8a:e4:48:4e:af:af:7f:81:04:92: c8:b6:7d:33:84:6d:97:1e:7a:a3:02:6a:b0:db:c7:64:3c:5c: c0:aa:96:38:b3:f3:60:c6:f5:bf:92:13:d3:81:6c:a0:5f:29: 74:9d:f1:68:ad:52:0a:dc:23:45:f5:38:20:75:4d:ca:de:e7: c2:db:ad:af -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgIUWEpAwmBZ4N8a3xTEOymjoke53b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQjA5NkVFODIwQ0M3RjE4QTFCNDU2QzYzNTlCQ0VC NENEQThEQjAeFw0yNjA5MTAwNzU1MDBaFw0yNzA5MDkwODAwMDBaMDMxMTAvBgNV BAMTKEY1QzM0N0Q1MTJDM0Q5NTI1NDBFRTQ0MjQ4NkJFRTEwMjdFN0ZEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIzmg4s19jnr0mDETTKeGYLsfd KqYNe0pMzAiTw5vgYXmBR5OQojeOnJyoHlXvNsbUz+qK1Jvx+iK74eyv4ajtcuYx W4PqsAuEXa8ArVvNBe8RAO/kQdTi+CDLKtwQjy72Xx3cOAxatQmUam3wnwNBOiGB g4Bvb6Se4U+iYnIm7mS+AGjMjdsF9vUJk110Mde44Jx8tF7TCfmN6kCRCc/cLLVN vPZRz9yhWAG+JfkXo0/BEOn5zNYi7JTwmp2jLGHzT0iaDwfWQAgJJZdqVwtn19C7 OsP84NT1Bf4logxBRDYPTTAsOwMP7OSvXB0S3MXWa5kx9fxa8dpnR+lTGdiHAgMB AAGjggLBMIICvTAdBgNVHQ4EFgQU9cNH1RLD2VJUDuRCSGvuECfn/YIwHwYDVR0j BBgwFoAU2LsJbuggzH8YobRWxjWbzrTNqNswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvRDhCQjA5NkVFODIwQ0M3 RjE4QTFCNDU2QzYzNTlCQ0VCNENEQThEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEJCMDk2RUU4MjBDQzdGMThB MUI0NTZDNjM1OUJDRUI0Q0RBOERCLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyODU0MS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBIBggrBgEFBQcBBwEB/wQ5MDcwJAQCAAEwHgMEBLHywAME AbH3sAMEAL3G5QMEA8mfwAMEAMmfzzAPBAIAAjAJAwcAKAYCYBAgMA0GCSqGSIb3 DQEBCwUAA4IBAQAYUng/5aVUwXS5duvr1F1Y85RSpqKGOQYOX5Mk58/zo9PVwWPh bMD3b7sRXGa+jmmxIFvzXueIKpLPlBeSELBjZAqH5FOoST5uxSmqefGYdvKXuchF 0Jfx5zpvEaQNQF3n46+dzU5myBiuEnVhRZyMA44DREz6rIWo0SizwyhLB6CtKwRV xO6buuK1hf9l132stx1Ey3zOhJlQnOgDbBKKuG1D4MNVYe+FujZLjC2JN1WWgFkR n6jx9zph3YrkSE6vr3+BBJLItn0zhG2XHnqjAmqw28dkPFzAqpY4s/NgxvW/khPT gWygXyl0nfForVIK3CNF9TggdU3K3ufC262v -----END CERTIFICATE-----Generated at Wed Sep 30 19:58:33 2026 by rpki-client