Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS46090.roa
File:                     AS46090.roa (raw, json)
Hash identifier:          0K1oq2z+6KJeAXPuu4Ga5hco4ialqKs5jFFP7qoGIuM=
Subject key identifier:   0C:50:7A:30:26:71:DA:F1:39:3E:FC:CF:B7:79:B4:6C:EC:15:8B:64
Certificate issuer:       /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial:       248D28D6706C5D994C77F13348DBE4EDE922B69B
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS46090.roa
Signing time:             Tue 04 Aug 2026 04:05:00 +0000
ROA not before:           Tue 04 Aug 2026 04:00:00 +0000
ROA not after:            Tue 03 Aug 2027 04:05:00 +0000
asID:                     46090
IP address blocks:        187.174.66.0/24 maxlen: 24
                          187.174.67.0/24 maxlen: 24
                          187.174.68.0/24 maxlen: 24
                          187.214.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8d:28:d6:70:6c:5d:99:4c:77:f1:33:48:db:e4:ed:e9:22:b6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
        Validity
            Not Before: Aug  4 04:00:00 2026 GMT
            Not After : Aug  3 04:05:00 2027 GMT
        Subject: CN=0C507A302671DAF1393EFCCFB779B46CEC158B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:fa:35:09:a2:f6:4b:db:e1:6d:e3:cf:17:
                    f3:d0:18:c5:1e:cd:cd:c6:df:35:66:36:30:2e:e4:
                    5a:ed:d7:a8:c7:51:33:e4:8d:ee:5a:ad:83:37:8e:
                    ca:e3:45:f0:b6:d3:e4:7c:03:0f:9f:6e:2b:7c:48:
                    f2:cf:12:bf:32:94:ae:5a:6d:e3:c9:ba:58:ce:66:
                    bb:cf:18:46:5a:44:52:7c:95:f7:5f:e7:70:a6:69:
                    4b:10:77:d4:42:98:13:e6:50:5f:14:3d:81:64:65:
                    9d:a4:fe:42:9f:43:ce:cd:63:fd:6a:a0:41:aa:86:
                    7c:f5:41:6b:d5:50:3c:d3:10:2e:36:15:06:92:57:
                    68:30:0b:02:bf:32:bd:f5:83:cf:13:4e:0c:44:0e:
                    21:71:7c:77:bd:51:32:ec:82:f0:4e:75:d0:a8:97:
                    b3:0f:6a:4b:4a:df:c1:58:58:92:9d:01:e7:42:fe:
                    27:85:17:a4:c8:b9:12:4a:de:a3:6c:d6:e9:38:ef:
                    67:00:01:cb:b1:ab:1c:fd:cf:e5:c9:48:0a:fc:bc:
                    b6:ac:85:78:2f:4a:ee:a1:01:52:ca:ce:4e:e5:31:
                    ba:9a:13:04:ce:2e:fb:c5:fd:cd:a8:36:a4:ab:08:
                    5f:a8:7f:f6:e2:0b:99:65:7a:5a:74:a6:e2:08:9c:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:7A:30:26:71:DA:F1:39:3E:FC:CF:B7:79:B4:6C:EC:15:8B:64
            X509v3 Authority Key Identifier:
                keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS46090.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.174.66.0-187.174.68.255
                  187.214.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:e4:f8:9d:9f:99:ae:63:2f:f1:11:59:b2:41:8e:dc:19:
         2f:15:60:25:be:bd:b4:79:b3:00:d3:1e:0f:b2:d1:fa:36:2d:
         6d:a0:29:6d:a3:9c:b0:75:d2:1b:cc:eb:46:2d:cb:6b:45:f1:
         9f:37:d1:e5:21:af:be:b5:a1:bb:e3:49:44:f6:59:1f:cc:37:
         da:39:be:fb:56:ca:ce:12:7e:43:1b:97:d6:02:f5:81:ce:5e:
         0a:5e:8c:ba:87:52:da:47:1a:db:8f:d6:45:5c:36:8b:9f:1b:
         ca:04:05:b8:e3:b3:f5:65:22:a6:26:f0:49:f3:5e:e1:55:0f:
         06:73:8e:3e:9d:e4:2c:60:8c:4e:b2:ca:26:64:26:df:97:09:
         df:cf:c8:4b:37:0b:ed:f0:7a:9f:a0:13:b1:bf:05:8e:5d:fc:
         dd:a7:a3:03:75:ed:4e:3f:e4:cc:ab:4b:58:78:22:97:9f:51:
         2f:56:12:2c:34:fa:22:a6:1d:86:3d:6e:67:85:82:93:06:69:
         df:87:29:7f:1b:fc:b9:ec:b3:74:3b:a2:e0:ab:7a:22:fb:ab:
         93:2b:e0:53:4f:33:2a:e3:6c:7d:61:ec:b7:fa:15:96:69:b3:
         91:52:0e:06:da:25:db:24:a8:67:3f:d8:19:f0:1d:0c:3f:b0:
         23:47:19:77
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUJI0o1nBsXZlMd/EzSNvk7ekitpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAzMDQwNjFFQjk5
OEJGNzM3ODAeFw0yNjA4MDQwNDAwMDBaFw0yNzA4MDMwNDA1MDBaMDMxMTAvBgNV
BAMTKDBDNTA3QTMwMjY3MURBRjEzOTNFRkNDRkI3NzlCNDZDRUMxNThCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5l/o1CaL2S9vhbePPF/PQGMUe
zc3G3zVmNjAu5Frt16jHUTPkje5arYM3jsrjRfC20+R8Aw+fbit8SPLPEr8ylK5a
bePJuljOZrvPGEZaRFJ8lfdf53CmaUsQd9RCmBPmUF8UPYFkZZ2k/kKfQ87NY/1q
oEGqhnz1QWvVUDzTEC42FQaSV2gwCwK/Mr31g88TTgxEDiFxfHe9UTLsgvBOddCo
l7MPaktK38FYWJKdAedC/ieFF6TIuRJK3qNs1uk472cAAcuxqxz9z+XJSAr8vLas
hXgvSu6hAVLKzk7lMbqaEwTOLvvF/c2oNqSrCF+of/biC5llelp0puIInASPAgMB
AAGjggKmMIICojAdBgNVHQ4EFgQUDFB6MCZx2vE5PvzPt3m0bOwVi2QwHwYDVR0j
BBgwFoAUyGjcQiRD+nDndhwDBAYeuZi/c3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0
ODMzRTg1QkU5RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3
MEU3NzYxQzAzMDQwNjFFQjk5OEJGNzM3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODY4REM0MjI0NDNGQTcwRTc3
NjFDMDMwNDA2MUVCOTk4QkY3Mzc4LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5
RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQVM0NjA5MC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQBu65C
AwQAu65EAwQAu9YcMA0GCSqGSIb3DQEBCwUAA4IBAQBsReT4nZ+ZrmMv8RFZskGO
3BkvFWAlvr20ebMA0x4PstH6Ni1toClto5ywddIbzOtGLctrRfGfN9HlIa++taG7
40lE9lkfzDfaOb77VsrOEn5DG5fWAvWBzl4KXoy6h1LaRxrbj9ZFXDaLnxvKBAW4
47P1ZSKmJvBJ817hVQ8Gc44+neQsYIxOssomZCbflwnfz8hLNwvt8HqfoBOxvwWO
Xfzdp6MDde1OP+TMq0tYeCKXn1EvVhIsNPoiph2GPW5nhYKTBmnfhyl/G/y57LN0
O6Lgq3oi+6uTK+BTTzMq42x9Yey3+hWWabORUg4G2iXbJKhnP9gZ8B0MP7AjRxl3
-----END CERTIFICATE-----
Generated at Mon Sep 14 07:50:50 2026 by rpki-client