$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: b2jbBQEBg70yMWIVf4DWgEPtQcvxgkZ7MZhScTf9/lw= Subject key identifier: 88:20:08:FA:B4:63:9F:A2:E0:94:79:25:6A:06:9F:FE:D8:0F:99:92 Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Certificate serial: 4D5B1F9997211D1C7B478CD75AF2CD61E2C90AAF Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa Signing time: Tue 14 Apr 2026 19:20:00 +0000 ROA not before: Tue 14 Apr 2026 19:15:00 +0000 ROA not after: Tue 13 Apr 2027 19:20:00 +0000 asID: 3356 IP address blocks: 190.216.51.32/27 maxlen: 27 190.216.110.0/24 maxlen: 24 200.41.8.0/24 maxlen: 24 201.234.13.168/30 maxlen: 30 201.234.65.90/31 maxlen: 31 201.234.91.0/24 maxlen: 24 201.234.144.76/30 maxlen: 30 201.234.146.208/29 maxlen: 29 2001:13b0:8001:22::/64 maxlen: 64 2001:13b0:8021::/48 maxlen: 48 2001:13b0:be80:f003::/64 maxlen: 64 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Apr 2026 17:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5b:1f:99:97:21:1d:1c:7b:47:8c:d7:5a:f2:cd:61:e2:c9:0a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56 Validity Not Before: Apr 14 19:15:00 2026 GMT Not After : Apr 13 19:20:00 2027 GMT Subject: CN=882008FAB4639FA2E09479256A069FFED80F9992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7b:42:ba:7a:9a:10:f2:d2:15:5c:d7:b7:49: d7:af:9b:0b:cc:20:8e:28:34:2c:63:73:50:0d:33: 5b:89:d1:a4:a0:94:2c:88:32:50:ef:ac:79:35:dc: 31:35:8f:3c:68:34:07:b5:15:f2:5a:b3:6a:06:b7: 49:25:c1:22:73:41:65:ef:cd:c7:e3:06:68:f6:43: 93:c0:60:f9:dc:3f:69:71:ef:1a:f9:a1:41:4a:43: 63:f7:03:c0:fb:71:a9:0c:f7:3f:9b:a1:b9:e2:ed: d2:09:03:27:1c:f4:17:68:2c:06:9c:a7:30:cd:95: 1b:3f:bb:6a:22:e1:da:c7:c3:4a:44:cb:5f:db:3d: 27:02:59:dc:48:59:a7:0c:12:d3:69:d4:85:cc:a6: ca:7b:b1:db:a5:07:03:a6:2b:96:9e:07:3e:67:00: b2:e9:fb:b3:21:27:5c:34:e5:24:2b:cf:bf:ac:d5: c0:c8:0a:b7:d5:10:e2:34:80:d5:d7:c7:97:4c:d2: 6d:d5:ef:fb:39:13:df:44:01:14:fd:80:ae:b9:cd: 20:a7:ce:41:7d:cf:ac:30:9f:f0:81:fa:fb:3f:03: c7:bd:8e:e7:9c:bf:81:41:4b:cb:d6:81:59:7e:5a: 40:e4:c7:9b:78:c2:da:4f:aa:20:28:de:7e:f3:7f: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:20:08:FA:B4:63:9F:A2:E0:94:79:25:6A:06:9F:FE:D8:0F:99:92 X509v3 Authority Key Identifier: keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.216.51.32/27 190.216.110.0/24 200.41.8.0/24 201.234.13.168/30 201.234.65.90/31 201.234.91.0/24 201.234.144.76/30 201.234.146.208/29 IPv6: 2001:13b0:8001:22::/64 2001:13b0:8021::/48 2001:13b0:be80:f003::/64 Signature Algorithm: sha256WithRSAEncryption 7d:f2:0c:89:dd:20:31:1f:e5:8a:27:56:16:1e:6a:40:5f:00: e7:40:d3:83:e4:24:41:1e:ff:6c:1c:d5:31:3d:4d:1d:23:b2: 37:07:0c:00:ab:4d:7b:80:0b:be:c7:b1:fd:15:4b:4f:02:fa: 25:3c:ae:72:61:9e:6c:da:db:26:f1:c2:a3:53:a9:b9:08:56: 73:a5:1d:0f:3b:b9:ea:14:3e:d3:5a:eb:2f:76:04:a0:0b:2c: 66:38:31:a7:e4:71:e1:e9:30:ed:4d:7f:a7:74:42:6f:49:f6: 34:70:af:5d:ee:f7:ff:c9:1b:61:e4:37:3f:cc:03:f8:3f:f2: 1b:d8:e2:e9:6d:37:0d:5d:c6:8e:e5:3b:fa:28:58:93:d4:92: 47:84:63:33:17:2c:13:68:57:ba:b1:ec:cb:be:c2:30:44:fb: 1b:0b:56:78:1a:81:88:53:70:98:d7:18:0e:a3:1c:16:a2:56: 31:8e:5b:bc:9a:83:32:8f:b5:31:05:73:0c:d6:b0:21:ae:4d: c2:4f:0d:6a:97:a6:19:dd:0e:99:6d:2c:82:9a:42:2d:6b:63: 8d:1b:0e:5f:fe:a4:1b:ef:5d:4e:7c:06:4e:75:2f:e7:9b:61: 40:fa:25:b5:b1:11:e9:10:fc:8a:5a:fd:02:a2:12:bc:63:5f: 06:00:7d:42 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUTVsfmZchHRx7R4zXWvLNYeLJCq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz QjdDRUM1NjAeFw0yNjA0MTQxOTE1MDBaFw0yNzA0MTMxOTIwMDBaMDMxMTAvBgNV BAMTKDg4MjAwOEZBQjQ2MzlGQTJFMDk0NzkyNTZBMDY5RkZFRDgwRjk5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDte0K6epoQ8tIVXNe3SdevmwvM II4oNCxjc1ANM1uJ0aSglCyIMlDvrHk13DE1jzxoNAe1FfJas2oGt0klwSJzQWXv zcfjBmj2Q5PAYPncP2lx7xr5oUFKQ2P3A8D7cakM9z+bobni7dIJAycc9BdoLAac pzDNlRs/u2oi4drHw0pEy1/bPScCWdxIWacMEtNp1IXMpsp7sdulBwOmK5aeBz5n ALLp+7MhJ1w05SQrz7+s1cDICrfVEOI0gNXXx5dM0m3V7/s5E99EART9gK65zSCn zkF9z6wwn/CB+vs/A8e9juecv4FBS8vWgVl+WkDkx5t4wtpPqiAo3n7zf+h3AgMB AAGjggLtMIIC6TAdBgNVHQ4EFgQUiCAI+rRjn6LglHklagaf/tgPmZIwHwYDVR0j BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1 ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMG CCsGAQUFBzALhndyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1ODBGQjIwMzgz QjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQVMzMzU2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDA7BAIAATA1AwUFvtgzIAME AL7YbgMEAMgpCAMFAsnqDagDBQHJ6kFaAwQAyepbAwUCyeqQTAMFA8nqktAwJQQC AAIwHwMJACABE7CAAQAiAwcAIAETsIAhAwkAIAETsL6A8AMwDQYJKoZIhvcNAQEL BQADggEBAH3yDIndIDEf5YonVhYeakBfAOdA04PkJEEe/2wc1TE9TR0jsjcHDACr TXuAC77Hsf0VS08C+iU8rnJhnmza2ybxwqNTqbkIVnOlHQ87ueoUPtNa6y92BKAL LGY4MafkceHpMO1Nf6d0Qm9J9jRwr13u9//JG2HkNz/MA/g/8hvY4ultNw1dxo7l O/ooWJPUkkeEYzMXLBNoV7qx7Mu+wjBE+xsLVngagYhTcJjXGA6jHBaiVjGOW7ya gzKPtTEFcwzWsCGuTcJPDWqXphndDpltLIKaQi1rY40bDl/+pBvvXU58Bk51L+eb YUD6JbWxEekQ/Ipa/QKiErxjXwYAfUI= -----END CERTIFICATE-----Generated at Fri Apr 17 03:55:13 2026 by rpki-client