Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS3790.roa
File:                     AS3790.roa (raw, json)
Hash identifier:          tS3YQyjTNBjFI8B/z6hAli5XBxm7pm/nukUn8IcSjO4=
Subject key identifier:   80:AE:05:1D:FA:50:16:D7:85:F7:A1:57:74:E8:F4:24:89:41:89:81
Certificate issuer:       /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial:       5A104FA627F2F2BF06BB8ED51C99CFE81DBD4576
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS3790.roa
Signing time:             Thu 16 Apr 2026 16:39:09 +0000
ROA not before:           Thu 16 Apr 2026 16:34:09 +0000
ROA not after:            Thu 15 Apr 2027 16:39:09 +0000
asID:                     3790
IP address blocks:        190.10.0.0/20 maxlen: 24
                          190.10.16.0/23 maxlen: 24
                          190.10.19.0/24 maxlen: 24
                          190.10.20.0/22 maxlen: 24
                          190.10.25.0/24 maxlen: 24
                          190.10.26.0/23 maxlen: 24
                          190.10.28.0/22 maxlen: 24
                          190.10.32.0/24 maxlen: 24
                          190.10.34.0/24 maxlen: 24
                          190.10.64.0/23 maxlen: 24
                          190.10.66.0/24 maxlen: 24
                          190.10.68.0/22 maxlen: 24
                          190.10.76.0/22 maxlen: 24
                          190.10.121.0/24 maxlen: 24
                          190.10.122.0/23 maxlen: 24
                          190.171.0.0/24 maxlen: 24
                          190.171.3.0/24 maxlen: 24
                          190.171.4.0/22 maxlen: 24
                          190.171.8.0/23 maxlen: 24
                          190.171.14.0/24 maxlen: 24
                          190.171.16.0/22 maxlen: 24
                          190.171.20.0/24 maxlen: 24
                          190.171.22.0/23 maxlen: 24
                          190.171.24.0/23 maxlen: 23
                          190.171.24.0/23 maxlen: 24
                          190.171.27.0/24 maxlen: 24
                          190.171.28.0/24 maxlen: 24
                          190.171.32.0/19 maxlen: 24
                          190.241.0.0/22 maxlen: 22
                          190.241.4.0/23 maxlen: 24
                          190.241.6.0/24 maxlen: 24
                          190.241.8.0/23 maxlen: 24
                          190.241.11.0/24 maxlen: 24
                          190.241.12.0/22 maxlen: 24
                          190.241.17.0/24 maxlen: 24
                          190.241.18.0/23 maxlen: 24
                          190.241.20.0/22 maxlen: 24
                          190.241.24.0/22 maxlen: 22
                          190.241.28.0/23 maxlen: 23
                          190.241.30.0/24 maxlen: 24
                          190.241.32.0/19 maxlen: 24
                          190.241.64.0/21 maxlen: 21
                          190.241.72.0/24 maxlen: 24
                          190.241.77.0/24 maxlen: 24
                          190.241.78.0/23 maxlen: 24
                          190.241.80.0/20 maxlen: 24
                          190.241.96.0/20 maxlen: 20
                          190.241.112.0/22 maxlen: 24
                          190.241.116.0/24 maxlen: 24
                          190.241.119.0/24 maxlen: 27
                          190.241.121.0/24 maxlen: 24
                          190.241.122.0/23 maxlen: 23
                          190.241.126.0/23 maxlen: 23
                          190.241.128.0/24 maxlen: 24
                          190.241.132.0/24 maxlen: 24
                          190.241.135.0/24 maxlen: 24
                          190.241.142.0/23 maxlen: 23
                          190.241.144.0/20 maxlen: 20
                          190.241.160.0/19 maxlen: 24
                          190.241.192.0/22 maxlen: 24
                          190.241.196.0/23 maxlen: 23
                          190.241.199.0/24 maxlen: 24
                          190.241.200.0/24 maxlen: 24
                          190.241.202.0/23 maxlen: 23
                          190.241.204.0/23 maxlen: 23
                          190.241.206.0/24 maxlen: 24
                          190.241.208.0/20 maxlen: 20
                          190.241.224.0/19 maxlen: 20
                          196.40.0.0/19 maxlen: 24
                          196.40.34.0/23 maxlen: 24
                          196.40.36.0/22 maxlen: 24
                          196.40.40.0/21 maxlen: 21
                          196.40.40.0/21 maxlen: 24
                          196.40.40.0/23 maxlen: 23
                          196.40.40.0/23 maxlen: 24
                          196.40.49.0/24 maxlen: 24
                          196.40.50.0/23 maxlen: 23
                          196.40.52.0/22 maxlen: 22
                          196.40.56.0/21 maxlen: 24
                          196.40.64.0/21 maxlen: 24
                          196.40.72.0/24 maxlen: 24
                          196.40.74.0/23 maxlen: 23
                          196.40.76.0/22 maxlen: 22
                          196.40.80.0/20 maxlen: 24
                          200.122.128.0/18 maxlen: 24
                          2001:13d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 19:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:4f:a6:27:f2:f2:bf:06:bb:8e:d5:1c:99:cf:e8:1d:bd:45:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
        Validity
            Not Before: Apr 16 16:34:09 2026 GMT
            Not After : Apr 15 16:39:09 2027 GMT
        Subject: CN=80AE051DFA5016D785F7A15774E8F42489418981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:7a:9f:62:52:63:ac:99:54:7e:cd:99:99:
                    59:e2:be:bf:a3:23:cf:16:c1:27:8f:c0:3b:31:a7:
                    81:b9:ab:2a:52:c9:5c:cb:5a:ea:3f:24:03:7d:4d:
                    ae:db:fc:db:55:8a:aa:50:9e:91:20:36:37:f8:12:
                    fb:67:1f:8b:bb:c8:9d:57:95:5a:42:bf:c8:d6:ae:
                    ac:96:d9:5b:75:4a:61:f1:33:81:db:9e:bf:84:bb:
                    1c:23:cd:4b:36:b1:c1:24:b6:c1:80:dd:37:2b:45:
                    c8:80:7a:56:b3:53:e5:d6:7b:19:63:fe:a6:1a:d4:
                    37:72:1d:ac:6a:d4:22:3b:2c:7d:96:9a:90:99:68:
                    61:36:e3:94:36:5c:27:4a:ab:bc:8d:bc:67:f6:5b:
                    06:b7:08:a1:a7:47:65:a2:7b:1e:7e:0e:e1:8b:2e:
                    fd:f4:9b:a2:1a:22:8c:75:0a:cf:f7:a4:0a:66:c8:
                    09:67:21:76:78:1b:48:89:ce:a2:d3:84:7e:bd:40:
                    39:43:3b:16:5f:93:be:9a:2c:cb:6f:16:5b:87:64:
                    a6:16:2c:8b:a9:8a:e2:b1:d6:95:d7:b4:47:e2:e7:
                    37:a5:0b:a7:3d:e7:ac:af:02:65:9d:8e:ea:05:bf:
                    9c:ac:b2:d0:d8:24:91:fe:8d:d4:ae:06:7c:92:33:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AE:05:1D:FA:50:16:D7:85:F7:A1:57:74:E8:F4:24:89:41:89:81
            X509v3 Authority Key Identifier:
                keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS3790.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.0.0-190.10.17.255
                  190.10.19.0-190.10.23.255
                  190.10.25.0-190.10.32.255
                  190.10.34.0/24
                  190.10.64.0-190.10.66.255
                  190.10.68.0/22
                  190.10.76.0/22
                  190.10.121.0-190.10.123.255
                  190.171.0.0/24
                  190.171.3.0-190.171.9.255
                  190.171.14.0/24
                  190.171.16.0-190.171.20.255
                  190.171.22.0-190.171.25.255
                  190.171.27.0-190.171.28.255
                  190.171.32.0/19
                  190.241.0.0-190.241.6.255
                  190.241.8.0/23
                  190.241.11.0-190.241.15.255
                  190.241.17.0-190.241.30.255
                  190.241.32.0-190.241.72.255
                  190.241.77.0-190.241.116.255
                  190.241.119.0/24
                  190.241.121.0-190.241.123.255
                  190.241.126.0-190.241.128.255
                  190.241.132.0/24
                  190.241.135.0/24
                  190.241.142.0-190.241.197.255
                  190.241.199.0-190.241.200.255
                  190.241.202.0-190.241.206.255
                  190.241.208.0-190.241.255.255
                  196.40.0.0/19
                  196.40.34.0-196.40.47.255
                  196.40.49.0-196.40.72.255
                  196.40.74.0-196.40.95.255
                  200.122.128.0/18
                IPv6:
                  2001:13d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ac:76:87:69:57:d9:96:71:63:e0:59:59:52:20:64:76:3b:
         2f:33:a8:d8:27:f9:de:aa:f6:8a:9d:ad:c5:03:2a:82:e0:42:
         e2:e2:13:e9:15:60:c7:07:d6:42:29:ab:b2:94:81:81:14:98:
         d7:f7:44:83:1c:07:82:7c:19:0b:a7:40:4d:7f:fe:8a:36:20:
         11:0a:53:72:f8:c8:7c:e8:c4:d0:13:42:69:d3:1f:e5:a6:33:
         c8:9e:f8:9f:1d:52:6c:e0:a8:cd:df:c3:e1:45:b9:fa:2e:6d:
         0a:ec:1f:28:5f:97:fe:fb:e1:6f:99:ef:6b:fa:b6:59:2a:f0:
         3f:18:47:15:d1:55:c9:6f:88:a9:0b:2e:c5:de:35:f0:59:6f:
         25:ad:c6:c8:5c:c6:96:79:a2:e8:90:56:f7:f5:f4:3c:66:ec:
         b3:af:2a:c8:23:18:20:b7:45:03:ef:f5:83:44:6d:47:30:c5:
         93:d6:70:63:32:3e:6a:74:7c:99:71:df:57:fd:4a:5c:74:35:
         68:e8:ed:fd:76:cd:be:63:3d:d5:3f:b1:25:24:83:a8:b8:94:
         24:26:15:b5:b9:ea:28:0c:6e:ea:99:b8:63:e4:27:36:15:df:
         a2:3a:39:6d:a4:2c:ff:90:22:61:aa:4a:74:d9:c6:76:6a:0f:
         f3:60:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:22:46 2026 by rpki-client