Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS46090.roa
File:                     AS46090.roa (raw, json)
Hash identifier:          JaMDIFxNx2CnhVIjzF2t2D0BhAZaXaSWD6dzKjjwdKc=
Subject key identifier:   E3:04:C1:44:8D:26:24:12:D2:EB:7D:8B:86:B9:0F:32:43:86:D2:73
Certificate issuer:       /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial:       7688F8CB17157F076A3DE0B6A888BDED4A70DECE
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS46090.roa
Signing time:             Fri 01 May 2026 20:40:42 +0000
ROA not before:           Fri 01 May 2026 20:35:42 +0000
ROA not after:            Fri 30 Apr 2027 20:40:42 +0000
asID:                     46090
IP address blocks:        187.214.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 01:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:88:f8:cb:17:15:7f:07:6a:3d:e0:b6:a8:88:bd:ed:4a:70:de:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
        Validity
            Not Before: May  1 20:35:42 2026 GMT
            Not After : Apr 30 20:40:42 2027 GMT
        Subject: CN=E304C1448D262412D2EB7D8B86B90F324386D273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:5f:86:1f:14:7e:3e:b2:a4:b4:2b:74:a6:
                    59:5a:94:19:1a:e5:de:16:00:c1:e9:e2:b5:09:c4:
                    46:bf:e3:a2:41:d5:95:5e:bd:94:44:5d:af:1a:ca:
                    f8:b5:b7:b1:31:24:3e:99:16:ee:ad:39:61:dd:d6:
                    22:51:42:70:d6:bc:72:fb:1b:16:34:98:a4:85:b0:
                    01:8b:5e:8e:9c:83:b4:9f:29:e3:52:de:38:4d:40:
                    23:1b:8f:6b:23:b2:27:5d:74:18:d6:39:5c:51:b0:
                    c6:60:c3:af:8e:f2:ea:31:98:bd:22:06:2f:3d:a8:
                    10:e9:e1:b7:fb:1a:19:b3:42:fe:22:43:47:e8:20:
                    f3:db:6b:a4:cd:1b:e6:38:5c:7f:03:9a:65:e9:e4:
                    df:5e:6c:4e:78:15:40:ed:ae:18:a3:c4:d7:63:26:
                    d6:64:cb:67:6a:ad:ed:c8:65:4f:ad:fb:84:d6:51:
                    cb:49:ec:0d:ac:0f:fd:42:af:b5:70:3b:ec:e5:39:
                    06:34:17:b5:95:8b:de:56:0a:5d:36:1b:e2:36:45:
                    bd:63:70:6c:90:a8:cc:c9:b7:f2:dc:97:02:ff:48:
                    95:a7:db:b4:bb:41:df:5a:fb:41:0e:73:df:9c:87:
                    ad:90:90:d6:43:e6:8e:59:1d:0a:f8:62:5a:76:cb:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:C1:44:8D:26:24:12:D2:EB:7D:8B:86:B9:0F:32:43:86:D2:73
            X509v3 Authority Key Identifier:
                keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS46090.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.214.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:78:00:5a:f9:bd:f5:fb:ba:c2:75:49:a6:e1:52:85:6c:
         12:30:5f:8b:23:b3:b5:81:f2:13:64:3b:26:be:03:74:14:0d:
         65:aa:7b:d5:29:37:23:33:2a:d1:69:02:c7:4a:f8:a0:63:95:
         c7:ee:2c:81:e2:d4:7a:b1:cb:db:e1:d2:04:c6:0c:4a:08:7f:
         51:5e:fb:46:80:43:ad:cc:ce:7d:f6:cf:77:6f:03:64:e8:76:
         e8:3a:5f:02:d9:45:10:46:46:f8:14:4f:c3:36:3e:cb:1d:91:
         20:a6:f0:c5:d7:20:87:3d:78:bf:6e:fd:fc:d4:d9:6d:be:6c:
         81:67:c7:b5:1d:0f:49:39:f1:9e:c8:b7:91:ab:04:7e:7a:1b:
         3b:3c:77:4b:13:63:4f:da:4f:12:75:b8:a3:8c:74:1b:70:de:
         21:35:0d:99:f2:6a:98:a1:e2:69:9c:30:29:e9:a3:d4:93:29:
         f2:08:4d:59:25:9b:0b:63:06:dd:8a:de:3a:a9:1f:18:b5:07:
         62:e1:98:90:c5:b6:1f:7b:07:bd:2a:5c:1c:7e:5f:76:14:8a:
         0f:99:e4:7b:96:6c:62:16:58:d0:8d:b3:e5:f2:61:ab:51:d5:
         0b:d8:cc:89:97:91:b0:f5:e5:04:81:99:76:c0:14:77:66:a7:
         26:fa:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:11:30 2026 by rpki-client