Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS3790.roa
File: AS3790.roa (raw, json)
Hash identifier: 9Aiz+1tNSqcFoOCCV9v8XRBy+YRn7r2Y22xpJr/FoQs=
Subject key identifier: 3A:86:20:95:9D:1C:5D:09:FD:17:1F:C6:88:C0:56:AD:13:70:D4:57
Certificate issuer: /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial: 28F75D6AE0803A2895DF4198CF51BC0C30AFF41A
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS3790.roa
Signing time: Tue 29 Sep 2026 06:35:00 +0000
ROA not before: Tue 29 Sep 2026 06:30:00 +0000
ROA not after: Tue 28 Sep 2027 06:35:00 +0000
asID: 3790
IP address blocks: 190.10.0.0/20 maxlen: 24
190.10.16.0/23 maxlen: 24
190.10.19.0/24 maxlen: 24
190.10.20.0/22 maxlen: 24
190.10.25.0/24 maxlen: 24
190.10.26.0/23 maxlen: 24
190.10.28.0/22 maxlen: 24
190.10.32.0/24 maxlen: 24
190.10.34.0/24 maxlen: 24
190.10.64.0/23 maxlen: 24
190.10.66.0/24 maxlen: 24
190.10.68.0/22 maxlen: 24
190.10.76.0/22 maxlen: 24
190.10.121.0/24 maxlen: 24
190.10.122.0/23 maxlen: 24
190.171.0.0/24 maxlen: 24
190.171.3.0/24 maxlen: 24
190.171.4.0/22 maxlen: 24
190.171.8.0/23 maxlen: 24
190.171.14.0/24 maxlen: 24
190.171.16.0/22 maxlen: 24
190.171.20.0/24 maxlen: 24
190.171.22.0/23 maxlen: 24
190.171.24.0/23 maxlen: 24
190.171.27.0/24 maxlen: 24
190.171.28.0/24 maxlen: 24
190.171.32.0/19 maxlen: 24
190.241.0.0/22 maxlen: 22
190.241.4.0/23 maxlen: 24
190.241.6.0/24 maxlen: 24
190.241.8.0/23 maxlen: 24
190.241.11.0/24 maxlen: 24
190.241.12.0/22 maxlen: 24
190.241.17.0/24 maxlen: 24
190.241.18.0/23 maxlen: 24
190.241.20.0/22 maxlen: 24
190.241.24.0/22 maxlen: 22
190.241.28.0/23 maxlen: 23
190.241.30.0/24 maxlen: 24
190.241.32.0/19 maxlen: 24
190.241.68.0/23 maxlen: 24
190.241.70.0/23 maxlen: 24
190.241.72.0/24 maxlen: 24
190.241.77.0/24 maxlen: 24
190.241.78.0/23 maxlen: 24
190.241.80.0/20 maxlen: 24
190.241.96.0/20 maxlen: 24
190.241.112.0/22 maxlen: 24
190.241.116.0/24 maxlen: 24
190.241.119.0/24 maxlen: 27
190.241.121.0/24 maxlen: 24
190.241.122.0/23 maxlen: 24
190.241.126.0/23 maxlen: 24
190.241.128.0/24 maxlen: 24
190.241.132.0/24 maxlen: 24
190.241.135.0/24 maxlen: 24
190.241.142.0/23 maxlen: 23
190.241.144.0/20 maxlen: 20
190.241.160.0/19 maxlen: 24
190.241.192.0/22 maxlen: 24
190.241.196.0/23 maxlen: 24
190.241.199.0/24 maxlen: 24
190.241.200.0/24 maxlen: 24
190.241.202.0/23 maxlen: 24
190.241.204.0/23 maxlen: 24
190.241.206.0/24 maxlen: 24
190.241.208.0/20 maxlen: 20
190.241.224.0/19 maxlen: 20
196.40.0.0/19 maxlen: 24
196.40.34.0/23 maxlen: 24
196.40.36.0/22 maxlen: 24
196.40.40.0/21 maxlen: 24
196.40.49.0/24 maxlen: 24
196.40.50.0/23 maxlen: 23
196.40.52.0/22 maxlen: 24
196.40.52.0/24 maxlen: 24
196.40.56.0/21 maxlen: 24
196.40.64.0/21 maxlen: 24
196.40.72.0/24 maxlen: 24
196.40.74.0/23 maxlen: 23
196.40.76.0/22 maxlen: 22
196.40.80.0/20 maxlen: 24
200.122.128.0/18 maxlen: 24
2001:13d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 04 Oct 2026 11:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f7:5d:6a:e0:80:3a:28:95:df:41:98:cf:51:bc:0c:30:af:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Validity
Not Before: Sep 29 06:30:00 2026 GMT
Not After : Sep 28 06:35:00 2027 GMT
Subject: CN=3A8620959D1C5D09FD171FC688C056AD1370D457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:5a:a9:d7:4a:c3:94:b3:38:de:df:e6:fb:
dc:ac:17:ff:97:de:53:7b:5e:a0:f8:df:5f:86:37:
ab:ad:76:0e:28:5c:3f:38:4c:5d:ef:81:36:32:4e:
e2:d8:ae:6a:aa:e4:bd:4f:b4:47:e5:fa:fb:f6:6a:
0e:ec:2b:01:77:64:9a:fb:1e:1e:65:f9:b2:22:ec:
22:a0:fc:09:69:79:10:e5:b1:24:64:f5:c2:6c:f2:
a0:f7:f2:7e:15:61:d1:41:ae:4c:48:80:c0:72:35:
2a:40:69:53:64:3e:39:6d:a3:95:04:6b:53:a5:e5:
8d:f7:dd:20:45:1e:57:b0:32:e6:9b:f8:7e:e7:04:
14:3b:f6:6c:ec:8c:81:96:0d:21:5b:ce:a6:e3:5b:
a4:ba:79:fe:b4:a2:9b:72:42:37:38:87:52:48:ba:
ee:b9:ea:55:fc:88:40:48:77:0b:f1:ef:76:7d:10:
3a:75:2c:2a:81:3e:58:5b:ac:56:64:ce:e3:f0:c2:
93:ba:52:f6:b4:99:c0:d4:e3:96:5a:0b:2f:93:13:
e3:f3:0b:6f:2e:ae:f6:3d:96:43:11:a8:6a:bc:e2:
56:1a:c1:4a:a3:90:cb:9d:22:7a:e2:21:ac:3a:81:
b2:6b:66:68:0c:49:a2:e1:cb:bc:c5:60:3a:30:cb:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:20:95:9D:1C:5D:09:FD:17:1F:C6:88:C0:56:AD:13:70:D4:57
X509v3 Authority Key Identifier:
keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS3790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.10.0.0-190.10.17.255
190.10.19.0-190.10.23.255
190.10.25.0-190.10.32.255
190.10.34.0/24
190.10.64.0-190.10.66.255
190.10.68.0/22
190.10.76.0/22
190.10.121.0-190.10.123.255
190.171.0.0/24
190.171.3.0-190.171.9.255
190.171.14.0/24
190.171.16.0-190.171.20.255
190.171.22.0-190.171.25.255
190.171.27.0-190.171.28.255
190.171.32.0/19
190.241.0.0-190.241.6.255
190.241.8.0/23
190.241.11.0-190.241.15.255
190.241.17.0-190.241.30.255
190.241.32.0/19
190.241.68.0-190.241.72.255
190.241.77.0-190.241.116.255
190.241.119.0/24
190.241.121.0-190.241.123.255
190.241.126.0-190.241.128.255
190.241.132.0/24
190.241.135.0/24
190.241.142.0-190.241.197.255
190.241.199.0-190.241.200.255
190.241.202.0-190.241.206.255
190.241.208.0-190.241.255.255
196.40.0.0/19
196.40.34.0-196.40.47.255
196.40.49.0-196.40.72.255
196.40.74.0-196.40.95.255
200.122.128.0/18
IPv6:
2001:13d8::/32
Signature Algorithm: sha256WithRSAEncryption
72:0d:cb:d0:8a:93:bd:4c:95:e4:7a:ee:9e:92:6e:18:9a:c7:
b1:83:e3:be:49:d2:93:76:47:b5:b1:c2:cc:da:42:38:0f:0c:
41:15:26:bd:7f:dd:f3:24:36:5c:e2:81:5e:2d:99:e0:1c:eb:
d6:4c:d8:30:1d:51:d9:2c:02:3e:93:28:11:cb:8d:c0:69:b4:
3e:eb:6b:22:24:2f:a0:9d:a3:13:4c:93:79:c0:6a:c9:34:bc:
6a:b3:a7:ae:cb:df:b4:e8:cd:3b:62:86:5d:aa:d5:eb:e4:ca:
87:93:48:7e:54:60:fa:82:e8:3a:7c:7b:6d:a4:0e:27:02:99:
bb:28:a9:3c:18:b3:0c:65:38:c8:8b:ed:9c:f2:3d:6f:5f:85:
17:03:9f:21:b0:b0:84:a1:33:9f:91:f0:b5:f6:2a:86:0e:4b:
25:9a:3b:71:92:54:8f:65:c0:0f:ed:a8:3f:f3:4d:39:89:be:
3c:4c:53:1e:f3:28:93:9d:7e:92:8c:48:9f:94:fb:30:2d:2c:
89:51:f9:8f:57:4a:7b:38:fa:8a:fa:f4:b0:48:b5:58:bb:54:
2d:99:18:f6:eb:3a:7d:64:37:a5:ae:56:01:f1:25:f9:f0:56:
57:72:ab:a5:57:12:62:23:1e:c6:f2:25:28:b4:46:37:98:b1:
93:93:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:17:16 2026 by rpki-client