$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS22894.roa File: AS22894.roa (raw, json) Hash identifier: 5/X2kaQuD3DelIS4dT0S+W+/YgloG97/hIBKGs2VydY= Subject key identifier: 92:11:50:3C:EB:11:4D:8F:52:64:DB:39:6B:4A:B0:D6:C5:29:97:6F Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 5C6BD93336F877420375F0BFDA8C083E62368540 Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS22894.roa Signing time: Wed 15 Jul 2026 05:05:00 +0000 ROA not before: Wed 15 Jul 2026 05:00:00 +0000 ROA not after: Wed 14 Jul 2027 05:05:00 +0000 asID: 22894 IP address blocks: 200.23.1.0/24 maxlen: 24 200.23.179.0/24 maxlen: 24 200.33.1.0/24 maxlen: 24 200.33.111.0/24 maxlen: 24 200.34.22.0/24 maxlen: 24 200.94.180.0/24 maxlen: 24 200.94.181.0/24 maxlen: 24 200.94.182.0/24 maxlen: 24 200.94.183.0/24 maxlen: 24 201.131.248.0/24 maxlen: 24 201.131.249.0/24 maxlen: 24 201.131.250.0/24 maxlen: 24 201.131.251.0/24 maxlen: 24 207.248.64.0/24 maxlen: 24 207.248.65.0/24 maxlen: 24 2001:1201::/48 maxlen: 48 2001:1250::/44 maxlen: 44 2001:1250:10::/44 maxlen: 44 2001:1250:1000::/44 maxlen: 44 2001:1250:2000::/44 maxlen: 44 2001:1250:3000::/44 maxlen: 44 2001:1250:a000::/44 maxlen: 44 2001:1250:b000::/44 maxlen: 44 2001:1250:c000::/44 maxlen: 44 2001:1250:d000::/44 maxlen: 44 2001:1250:e100::/44 maxlen: 44 2001:1250:e200::/44 maxlen: 44 2001:1250:e300::/44 maxlen: 44 2001:1250:ffc0::/44 maxlen: 44 2001:1250:ffe0::/44 maxlen: 44 2001:1250:fff0::/44 maxlen: 44 2801:c4:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6b:d9:33:36:f8:77:42:03:75:f0:bf:da:8c:08:3e:62:36:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Jul 15 05:00:00 2026 GMT Not After : Jul 14 05:05:00 2027 GMT Subject: CN=9211503CEB114D8F5264DB396B4AB0D6C529976F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:e5:9e:92:ac:60:0d:55:9c:29:bb:a6:a1: 2c:2a:3e:f5:94:d2:b9:b8:51:58:6a:13:5d:22:bf: 2c:71:15:5d:1f:88:0b:bf:27:d8:76:47:b5:a9:13: 12:26:57:d7:3e:2b:59:95:34:3d:0c:c4:ee:f3:d0: 01:a1:20:c0:a4:56:c1:5a:0b:a8:8b:27:ce:60:4f: b8:0c:15:ef:ff:86:a9:fd:8d:7d:27:46:f0:73:07: 0e:d7:0c:fb:f4:4a:a8:9e:83:6c:9e:2a:5b:66:35: 1b:57:1c:61:74:f0:ac:5f:9d:4a:78:6d:99:db:6c: 51:38:94:24:06:bc:d1:44:aa:1a:bd:a0:7f:a3:6b: 7c:29:d9:47:da:4d:d9:97:4f:fd:5c:35:6f:42:5f: bb:dc:67:d6:f4:da:b9:50:ca:09:8c:6a:c9:73:47: 65:b7:e1:2b:8a:7f:b1:3d:48:a7:c6:b6:0d:c5:9f: 28:9d:d0:2f:0d:78:c0:43:bd:f4:86:58:78:98:c0: 22:93:f4:be:0d:a5:cb:62:a9:9c:20:ba:7b:b4:35: a0:bf:f7:e9:06:15:c1:34:01:f1:e4:4e:84:60:e8: 4c:68:0f:23:66:16:90:00:54:0d:c0:aa:57:22:82: ec:45:c6:2e:37:16:03:6f:e3:ec:c4:48:5a:bc:93: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:11:50:3C:EB:11:4D:8F:52:64:DB:39:6B:4A:B0:D6:C5:29:97:6F X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS22894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.1.0/24 200.23.179.0/24 200.33.1.0/24 200.33.111.0/24 200.34.22.0/24 200.94.180.0/22 201.131.248.0/22 207.248.64.0/23 IPv6: 2001:1201::/48 2001:1250::/43 2001:1250:1000::/44 2001:1250:2000::/44 2001:1250:3000::/44 2001:1250:a000::/44 2001:1250:b000::/44 2001:1250:c000::/44 2001:1250:d000::/44 2001:1250:e100::/44 2001:1250:e200::/44 2001:1250:e300::/44 2001:1250:ffc0::/44 2001:1250:ffe0::/43 2801:c4:d0::/48 Signature Algorithm: sha256WithRSAEncryption 51:c2:6b:9a:b8:d2:29:01:88:01:9b:96:47:1e:0f:1f:39:60: 54:fd:b7:43:c3:19:7f:2c:c8:73:af:dd:6b:57:6f:da:b6:f1: dd:99:db:08:f0:35:72:a2:4a:8b:2c:9a:90:da:3c:3f:8c:33: df:07:4e:ba:bd:b0:4a:46:86:ba:3e:06:cd:50:b4:d7:ca:14: 97:3d:e8:d1:a7:80:6e:f6:11:e5:5a:db:05:57:65:fd:c9:34: 07:8e:ff:40:a3:b1:07:4f:07:ff:99:74:63:e7:a1:29:a9:c7: c5:d8:09:df:c9:82:8a:61:ee:ce:15:cb:46:a6:3b:6d:d6:b8: a4:63:f9:61:8f:d5:0b:96:82:5f:f4:a1:79:7c:54:66:20:27: 80:1a:c8:29:d2:70:86:34:25:ce:a3:2c:ce:f8:27:0c:a3:3c: 86:de:33:cd:c5:06:32:3c:a7:03:34:e8:e0:48:2d:19:92:5a: a3:30:ef:82:cc:4c:0f:15:fd:94:66:04:60:f0:41:1e:de:e7: 2c:53:cf:c8:26:23:97:e9:b9:24:75:c0:e6:d0:f4:77:d2:e4: ed:94:2b:4f:74:44:3a:bb:e9:69:59:76:dd:cd:c4:43:79:44: f1:09:cc:e2:72:7b:b3:05:93:c6:cc:7c:bf:44:3e:61:84:42: 7a:8a:b4:fb -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUXGvZMzb4d0IDdfC/2owIPmI2hUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNjA3MTUwNTAwMDBaFw0yNzA3MTQwNTA1MDBaMDMxMTAvBgNV BAMTKDkyMTE1MDNDRUIxMTREOEY1MjY0REIzOTZCNEFCMEQ2QzUyOTk3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeOWekqxgDVWcKbumoSwqPvWU 0rm4UVhqE10ivyxxFV0fiAu/J9h2R7WpExImV9c+K1mVND0MxO7z0AGhIMCkVsFa C6iLJ85gT7gMFe//hqn9jX0nRvBzBw7XDPv0Sqieg2yeKltmNRtXHGF08KxfnUp4 bZnbbFE4lCQGvNFEqhq9oH+ja3wp2UfaTdmXT/1cNW9CX7vcZ9b02rlQygmMaslz R2W34SuKf7E9SKfGtg3Fnyid0C8NeMBDvfSGWHiYwCKT9L4NpctiqZwgunu0NaC/ 9+kGFcE0AfHkToRg6ExoDyNmFpAAVA3AqlciguxFxi43FgNv4+zESFq8kx0pAgMB AAGjggNWMIIDUjAdBgNVHQ4EFgQUkhFQPOsRTY9SZNs5a0qw1sUpl28wHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyMjg5NC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCB3AYIKwYBBQUHAQcBAf8EgcwwgckwNgQCAAEwMAMEAMgX AQMEAMgXswMEAMghAQMEAMghbwMEAMgiFgMEAshetAMEAsmD+AMEAc/4QDCBjgQC AAIwgYcDBwAgARIBAAADBwUgARJQAAADBwQgARJQEAADBwQgARJQIAADBwQgARJQ MAADBwQgARJQoAADBwQgARJQsAADBwQgARJQwAADBwQgARJQ0AADBwQgARJQ4QAD BwQgARJQ4gADBwQgARJQ4wADBwQgARJQ/8ADBwUgARJQ/+ADBwAoAQDEANAwDQYJ KoZIhvcNAQELBQADggEBAFHCa5q40ikBiAGblkceDx85YFT9t0PDGX8syHOv3WtX b9q28d2Z2wjwNXKiSossmpDaPD+MM98HTrq9sEpGhro+Bs1QtNfKFJc96NGngG72 EeVa2wVXZf3JNAeO/0CjsQdPB/+ZdGPnoSmpx8XYCd/Jgoph7s4Vy0amO23WuKRj +WGP1QuWgl/0oXl8VGYgJ4AayCnScIY0Jc6jLM74JwyjPIbeM83FBjI8pwM06OBI LRmSWqMw74LMTA8V/ZRmBGDwQR7e5yxTz8gmI5fpuSR1wObQ9HfS5O2UK090RDq7 6WlZdt3NxEN5RPEJzOJye7MFk8bMfL9EPmGEQnqKtPs= -----END CERTIFICATE-----Generated at Fri Jul 24 22:48:17 2026 by rpki-client