
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa
File: AS28541.roa (raw, json)
Hash identifier: Nb1UqTgxJJf3dvvJV+Uc/c/7vJgDScoJphyXEMlV8A0=
Subject key identifier: 32:9D:88:13:3B:81:52:17:97:BD:51:82:43:D2:E9:51:64:F3:94:D6
Certificate issuer: /CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
Certificate serial: 1A77FB0C8F5C5F6F9F35F983CFECB11C9FC96C37
Authority key identifier: D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa
Signing time: Thu 08 Oct 2026 07:25:00 +0000
ROA not before: Thu 08 Oct 2026 07:20:00 +0000
ROA not after: Thu 07 Oct 2027 07:25:00 +0000
asID: 28541
IP address blocks: 177.242.192.0/20 maxlen: 24
177.247.176.0/23 maxlen: 23
189.198.229.0/24 maxlen: 24
201.159.192.0/21 maxlen: 24
201.159.207.0/24 maxlen: 24
2806:260:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl
rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 06:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:77:fb:0c:8f:5c:5f:6f:9f:35:f9:83:cf:ec:b1:1c:9f:c9:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB
Validity
Not Before: Oct 8 07:20:00 2026 GMT
Not After : Oct 7 07:25:00 2027 GMT
Subject: CN=329D88133B81521797BD518243D2E95164F394D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:9c:bb:b5:65:10:7b:b7:06:55:eb:73:8d:
ab:07:a1:ad:fa:18:f0:11:0c:0c:db:55:4a:06:cf:
1e:de:ca:79:2a:08:a2:03:0d:ac:e5:0d:78:20:50:
9e:d4:28:4e:2d:9a:be:61:e1:a4:48:55:08:46:61:
2d:c9:53:9f:00:7a:3e:d2:32:89:f7:80:e3:cc:22:
4f:75:1b:cd:b4:16:d7:23:24:16:ad:aa:c4:0c:11:
c3:a1:c5:97:05:e3:3f:ca:9e:cf:90:9e:f2:21:a4:
5e:5d:c6:99:9a:3a:2e:98:50:7f:98:0f:bc:68:2c:
19:9e:c9:78:d0:18:eb:d3:d3:40:b7:84:ac:88:27:
f3:34:62:e1:0a:78:95:b8:d5:20:7f:62:4e:4b:88:
77:f8:08:a6:32:bb:31:d0:93:53:16:f8:09:e1:86:
2c:cc:bb:6e:1d:ba:eb:3e:f2:e0:cd:5e:30:17:10:
6d:c1:22:f6:50:6a:76:53:ea:43:aa:4e:fb:ac:40:
13:7b:db:46:d2:67:b0:62:9a:cf:0d:93:26:34:a4:
48:06:33:fa:e8:f0:a0:79:4e:f2:81:0b:22:d9:b3:
a1:88:f8:d4:b7:fb:13:4a:fd:63:de:b0:4b:89:08:
64:9c:f9:7e:6b:ce:90:6d:e0:ef:92:e0:49:8b:39:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:88:13:3B:81:52:17:97:BD:51:82:43:D2:E9:51:64:F3:94:D6
X509v3 Authority Key Identifier:
keyid:D8:BB:09:6E:E8:20:CC:7F:18:A1:B4:56:C6:35:9B:CE:B4:CD:A8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8BB096EE820CC7F18A1B456C6359BCEB4CDA8DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28541.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.242.192.0/20
177.247.176.0/23
189.198.229.0/24
201.159.192.0/21
201.159.207.0/24
IPv6:
2806:260:1020::/48
Signature Algorithm: sha256WithRSAEncryption
19:69:7f:87:f8:2a:bd:ea:55:e5:16:24:93:1d:a8:aa:26:4a:
ed:e6:fb:26:ae:4b:b4:4a:d4:be:47:d9:5c:26:65:d2:0a:5e:
cb:89:f8:a6:5b:0f:f0:c7:a7:5b:ac:26:e0:2c:2a:5a:68:a2:
4e:18:38:1f:60:9b:08:d9:cc:22:c4:7a:f0:cf:e5:95:12:88:
f5:5c:c5:2a:ad:b0:b1:c3:b7:b6:d5:09:d4:9a:cf:77:e0:72:
71:b6:66:6f:f3:be:56:1c:9e:79:31:ac:60:84:0e:2a:0c:6d:
70:90:84:f2:9c:4c:d0:35:02:b3:fc:2d:64:54:52:28:27:5d:
15:3c:a5:96:ba:7a:8e:39:28:45:67:19:c7:8e:cd:ee:93:0f:
b1:93:f4:ba:4b:0d:08:f4:5e:af:4c:94:00:23:4c:54:04:95:
12:8a:63:66:ca:e2:b4:d8:d0:87:0b:dc:22:e8:ee:4c:e4:74:
c7:f6:2f:73:6b:69:c9:33:0b:f4:d7:b5:11:d1:b1:80:78:83:
13:a8:26:04:30:b3:cc:36:f2:aa:80:a4:b1:e8:5f:ef:56:d2:
b0:3e:b5:ca:82:4b:0f:16:24:f6:91:0c:9f:ae:87:8d:46:cd:
ba:27:49:e2:b5:e7:55:be:b4:eb:68:0e:aa:3c:d5:68:6d:80:
45:c3:4b:60
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUGnf7DI9cX2+fNfmDz+yxHJ/JbDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCQjA5NkVFODIwQ0M3RjE4QTFCNDU2QzYzNTlCQ0VC
NENEQThEQjAeFw0yNjEwMDgwNzIwMDBaFw0yNzEwMDcwNzI1MDBaMDMxMTAvBgNV
BAMTKDMyOUQ4ODEzM0I4MTUyMTc5N0JENTE4MjQzRDJFOTUxNjRGMzk0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtZy7tWUQe7cGVetzjasHoa36
GPARDAzbVUoGzx7eynkqCKIDDazlDXggUJ7UKE4tmr5h4aRIVQhGYS3JU58Aej7S
Mon3gOPMIk91G820FtcjJBatqsQMEcOhxZcF4z/Kns+QnvIhpF5dxpmaOi6YUH+Y
D7xoLBmeyXjQGOvT00C3hKyIJ/M0YuEKeJW41SB/Yk5LiHf4CKYyuzHQk1MW+Anh
hizMu24duus+8uDNXjAXEG3BIvZQanZT6kOqTvusQBN720bSZ7Bims8NkyY0pEgG
M/ro8KB5TvKBCyLZs6GI+NS3+xNK/WPesEuJCGSc+X5rzpBt4O+S4EmLOa2bAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUMp2IEzuBUheXvVGCQ9LpUWTzlNYwHwYDVR0j
BBgwFoAU2LsJbuggzH8YobRWxjWbzrTNqNswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvRDhCQjA5NkVFODIwQ0M3
RjE4QTFCNDU2QzYzNTlCQ0VCNENEQThEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEJCMDk2RUU4MjBDQzdGMThB
MUI0NTZDNjM1OUJDRUI0Q0RBOERCLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD
N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyODU0MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBIBggrBgEFBQcBBwEB/wQ5MDcwJAQCAAEwHgMEBLHywAME
AbH3sAMEAL3G5QMEA8mfwAMEAMmfzzAPBAIAAjAJAwcAKAYCYBAgMA0GCSqGSIb3
DQEBCwUAA4IBAQAZaX+H+Cq96lXlFiSTHaiqJkrt5vsmrku0StS+R9lcJmXSCl7L
ifimWw/wx6dbrCbgLCpaaKJOGDgfYJsI2cwixHrwz+WVEoj1XMUqrbCxw7e21QnU
ms934HJxtmZv875WHJ55MaxghA4qDG1wkITynEzQNQKz/C1kVFIoJ10VPKWWunqO
OShFZxnHjs3ukw+xk/S6Sw0I9F6vTJQAI0xUBJUSimNmyuK02NCHC9wi6O5M5HTH
9i9za2nJMwv017UR0bGAeIMTqCYEMLPMNvKqgKSx6F/vVtKwPrXKgksPFiT2kQyf
roeNRs26J0nitedVvrTraA6qPNVobYBFw0tg
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:12:27 2026 by rpki-client