$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28511.roa File: AS28511.roa (raw, json) Hash identifier: CF+vU/nI5Y9fcRMVRBPELc+dLYAz1kKEItqBRtj4taw= Subject key identifier: ED:6B:DD:67:9F:FA:53:35:DA:FE:5D:69:88:AA:6F:40:BB:E5:CE:11 Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33 Certificate serial: 12096C9918F3135A39E00F440253ED13A1ABD09E Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28511.roa Signing time: Wed 15 Jul 2026 05:00:00 +0000 ROA not before: Wed 15 Jul 2026 04:55:00 +0000 ROA not after: Wed 14 Jul 2027 05:00:00 +0000 asID: 28511 IP address blocks: 192.100.224.0/24 maxlen: 24 200.33.80.0/24 maxlen: 24 200.94.176.0/24 maxlen: 24 201.131.248.0/24 maxlen: 24 201.131.249.0/24 maxlen: 24 201.131.250.0/24 maxlen: 24 201.131.251.0/24 maxlen: 24 207.248.64.0/24 maxlen: 24 207.248.65.0/24 maxlen: 24 207.248.68.0/24 maxlen: 24 2001:1201:10::/48 maxlen: 48 2001:1250:1000::/44 maxlen: 44 2001:1250:2000::/44 maxlen: 44 2001:1250:3000::/44 maxlen: 44 2001:1250:a000::/44 maxlen: 44 2001:1250:b000::/44 maxlen: 44 2001:1250:c000::/44 maxlen: 44 2001:1250:fe00::/48 maxlen: 48 2001:1258::/32 maxlen: 32 2001:13c7:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:09:6c:99:18:f3:13:5a:39:e0:0f:44:02:53:ed:13:a1:ab:d0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E5523033B41B7E990D9D490339137189366F33 Validity Not Before: Jul 15 04:55:00 2026 GMT Not After : Jul 14 05:00:00 2027 GMT Subject: CN=ED6BDD679FFA5335DAFE5D6988AA6F40BBE5CE11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:c2:29:87:52:d1:64:f2:22:7b:27:d3:f7: b1:44:bf:a9:5e:89:47:ac:2f:3e:ec:bb:6e:68:32: a0:78:07:f7:cb:5d:51:c0:fa:2c:2c:74:a0:1a:50: 73:ab:3b:a0:76:e5:0e:c1:81:f9:04:1c:92:57:f4: 33:d6:0c:81:5f:f8:47:1a:b5:a8:8c:d7:78:5d:a8: fa:06:4e:69:cf:00:fb:c6:63:3b:f3:b2:22:74:20: bc:5e:c5:c0:a5:d6:7d:81:20:d5:ce:24:fb:49:82: d7:1b:11:62:bc:a4:a9:b0:44:f4:ab:74:d1:ea:e3: b4:34:9e:74:bd:92:3f:43:60:8e:0a:1c:63:6c:ad: e0:ce:d6:56:50:d6:e7:67:e7:18:bf:31:07:ec:32: 09:a5:e6:89:b9:26:4d:a8:c1:67:53:e3:34:ff:db: c5:67:93:3a:df:aa:22:3d:56:ce:2f:8a:64:5b:25: b0:fa:75:32:7f:5d:70:c3:f7:a7:4f:18:10:a7:06: c2:53:e3:ec:4a:d1:b6:f7:4c:b8:0d:25:62:5f:0b: 4c:3d:90:eb:72:38:f5:9d:d6:c5:c0:70:12:9b:b1: 6e:f5:4a:a9:2e:d2:be:b4:3a:a5:ce:63:5e:e6:9d: 8b:62:11:3c:7b:c4:08:cc:b0:0b:52:05:76:f4:bc: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6B:DD:67:9F:FA:53:35:DA:FE:5D:69:88:AA:6F:40:BB:E5:CE:11 X509v3 Authority Key Identifier: keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.100.224.0/24 200.33.80.0/24 200.94.176.0/24 201.131.248.0/22 207.248.64.0/23 207.248.68.0/24 IPv6: 2001:1201:10::/48 2001:1250:1000::/44 2001:1250:2000::/44 2001:1250:3000::/44 2001:1250:a000::/44 2001:1250:b000::/44 2001:1250:c000::/44 2001:1250:fe00::/48 2001:1258::/32 2001:13c7:7000::/48 Signature Algorithm: sha256WithRSAEncryption 1b:55:37:39:83:af:d7:2b:4c:ed:20:58:b5:46:fe:46:52:fb: be:65:c2:56:ba:0d:0b:20:1e:d2:f7:bb:11:cc:ca:cc:d3:de: 67:8b:d1:ad:e5:25:db:07:23:88:5e:1c:d9:38:87:59:eb:4e: 2e:7c:f3:99:a8:d6:80:fe:2d:98:ec:74:53:b5:96:60:ec:cc: 1a:d0:21:39:38:49:9c:ad:c4:fe:6d:88:68:73:96:95:83:d5: 47:92:e3:f4:bf:dd:c7:2c:24:79:56:27:a2:1d:b5:ee:e1:42: aa:a4:89:43:c2:0f:20:06:94:95:13:45:5c:07:ee:a9:1f:9a: dd:96:47:dc:82:ff:74:34:9b:b2:3a:53:38:a5:f3:3f:2d:a9: 81:54:fa:77:f4:c6:4b:4f:c5:47:d2:3e:b9:24:40:f8:5d:37: fd:11:c6:6e:12:1a:3c:d9:44:fd:4e:d5:8d:67:20:07:b1:49: 3b:af:9f:1e:ef:c3:a1:14:3c:fd:98:7f:6b:00:90:e1:b5:b3: 1e:47:67:bd:89:0d:06:e6:c0:b9:85:bb:09:1e:c4:81:d4:89: 9d:4c:e9:43:e3:e5:5b:4e:2f:ec:29:2e:b0:d5:67:c8:42:e2: d1:81:1a:6e:9c:36:f3:05:5d:ca:ae:25:10:62:31:b6:47:b5: 9a:31:47:9c -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIUEglsmRjzE1o54A9EAlPtE6Gr0J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4 OTM2NkYzMzAeFw0yNjA3MTUwNDU1MDBaFw0yNzA3MTQwNTAwMDBaMDMxMTAvBgNV BAMTKEVENkJERDY3OUZGQTUzMzVEQUZFNUQ2OTg4QUE2RjQwQkJFNUNFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMsIph1LRZPIieyfT97FEv6le iUesLz7su25oMqB4B/fLXVHA+iwsdKAaUHOrO6B25Q7BgfkEHJJX9DPWDIFf+Eca taiM13hdqPoGTmnPAPvGYzvzsiJ0ILxexcCl1n2BINXOJPtJgtcbEWK8pKmwRPSr dNHq47Q0nnS9kj9DYI4KHGNsreDO1lZQ1udn5xi/MQfsMgml5om5Jk2owWdT4zT/ 28VnkzrfqiI9Vs4vimRbJbD6dTJ/XXDD96dPGBCnBsJT4+xK0bb3TLgNJWJfC0w9 kOtyOPWd1sXAcBKbsW71Sqku0r60OqXOY17mnYtiETx7xAjMsAtSBXb0vINVAgMB AAGjggMZMIIDFTAdBgNVHQ4EFgQU7WvdZ5/6UzXa/l1piKpvQLvlzhEwHwYDVR0j BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3 RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZCQzA1MjEzOEZD OUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvQVMyODUxMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBnwYIKwYBBQUHAQcBAf8EgY8wgYwwKgQCAAEwJAMEAMBk 4AMEAMghUAMEAMhesAMEAsmD+AMEAc/4QAMEAM/4RDBeBAIAAjBYAwcAIAESAQAQ AwcEIAESUBAAAwcEIAESUCAAAwcEIAESUDAAAwcEIAESUKAAAwcEIAESULAAAwcE IAESUMAAAwcAIAESUP4AAwUAIAESWAMHACABE8dwADANBgkqhkiG9w0BAQsFAAOC AQEAG1U3OYOv1ytM7SBYtUb+RlL7vmXCVroNCyAe0ve7EczKzNPeZ4vRreUl2wcj iF4c2TiHWetOLnzzmajWgP4tmOx0U7WWYOzMGtAhOThJnK3E/m2IaHOWlYPVR5Lj 9L/dxywkeVYnoh217uFCqqSJQ8IPIAaUlRNFXAfuqR+a3ZZH3IL/dDSbsjpTOKXz Py2pgVT6d/TGS0/FR9I+uSRA+F03/RHGbhIaPNlE/U7VjWcgB7FJO6+fHu/DoRQ8 /Zh/awCQ4bWzHkdnvYkNBubAuYW7CR7EgdSJnUzpQ+PlW04v7CkusNVnyELi0YEa bpw28wVdyq4lEGIxtke1mjFHnA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:48:17 2026 by rpki-client