This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3438203d3e20323637383432.roa
File:                     323830333a393436303a3a2f33322d3438203d3e20323637383432.roa (raw, json)
Hash identifier:          uEVcITAXKWGDPbSdMKo273DmEF83Dt/5uYHqQbL+Hao=
Subject key identifier:   D8:8F:0E:E0:A5:8B:3F:49:09:93:A4:7A:B4:CD:EC:7C:C6:77:2C:8B
Certificate issuer:       /CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
Certificate serial:       2DE7A5D256D601B7BEB3DE0A1ADC4940041CA203
Authority key identifier: F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3438203d3e20323637383432.roa
Signing time:             Wed 03 Dec 2025 01:00:00 +0000
ROA not before:           Wed 03 Dec 2025 00:55:00 +0000
ROA not after:            Wed 02 Dec 2026 01:00:00 +0000
asID:                     267842
IP address blocks:        2803:9460::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e7:a5:d2:56:d6:01:b7:be:b3:de:0a:1a:dc:49:40:04:1c:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
        Validity
            Not Before: Dec  3 00:55:00 2025 GMT
            Not After : Dec  2 01:00:00 2026 GMT
        Subject: CN=D88F0EE0A58B3F490993A47AB4CDEC7CC6772C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:3c:2a:b8:55:dd:06:db:9a:47:54:b2:03:
                    3f:7e:29:78:bc:0d:bd:2f:a6:7b:a4:e5:fc:aa:49:
                    f4:1a:59:8a:49:7f:54:24:f2:1c:f9:d9:6d:e0:f5:
                    7d:89:41:63:f1:91:90:8d:8f:62:21:e6:f0:f0:c1:
                    43:3e:ce:8d:ab:20:90:bd:6c:a3:5f:5a:18:4c:3b:
                    9e:de:fb:e6:ae:95:58:21:d7:d7:18:de:11:79:35:
                    c7:02:e7:c4:c2:6f:78:3c:73:00:39:37:99:2d:c1:
                    c0:a8:68:31:55:db:99:60:d4:f1:a6:2f:71:21:10:
                    04:95:af:b4:f8:ce:f6:79:97:f2:9b:72:94:bc:5a:
                    1a:46:f8:5f:95:47:49:30:1e:6f:d0:20:5e:96:cf:
                    d9:34:bb:1b:d9:3f:0a:d4:bb:f4:96:1e:ca:a2:f1:
                    28:89:b5:b3:39:4a:eb:39:4b:92:9c:ae:81:11:cf:
                    95:48:25:1f:6e:2d:11:19:e8:b5:cb:4a:e3:70:2a:
                    27:cd:38:da:77:2a:b9:43:51:c4:d6:17:7c:bd:42:
                    11:2f:08:55:49:b5:79:68:9c:8a:7f:10:6b:99:e9:
                    10:2f:bd:95:9a:6c:1b:c0:94:28:ce:11:70:2b:0b:
                    49:55:08:84:e7:e7:6d:02:52:e1:77:30:c7:28:e1:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:0E:E0:A5:8B:3F:49:09:93:A4:7A:B4:CD:EC:7C:C6:77:2C:8B
            X509v3 Authority Key Identifier:
                keyid:F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3438203d3e20323637383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:98:9a:c1:4e:23:79:7d:86:22:3d:1b:73:de:18:eb:6d:
         a5:e9:1a:6a:97:d1:91:b7:23:aa:1e:12:f8:d3:11:2a:e1:a8:
         ca:fd:39:f5:8b:c0:43:8d:74:2c:45:d8:84:5f:29:b3:9e:1b:
         41:7e:b9:76:00:58:ef:b6:8e:76:0c:9b:d5:bd:68:0f:85:a2:
         c9:1d:6b:c1:42:0c:50:f0:40:3d:dc:df:17:74:75:cf:44:ff:
         da:96:35:6f:25:9f:d6:36:dc:a2:a2:5a:74:09:a9:50:4d:f0:
         c1:1d:ab:27:d8:f5:0e:dc:58:18:2d:62:ef:66:01:27:c3:79:
         5f:0f:7d:2c:04:b2:f1:62:01:2f:f0:a6:a5:f4:6b:47:1d:5b:
         33:e2:63:2e:7e:32:cd:5e:05:92:90:97:ed:57:44:03:fa:25:
         77:d3:d3:91:99:a4:0e:54:f3:fb:4d:4b:00:3c:58:2e:fe:d7:
         d9:44:08:8b:0a:d6:5a:8f:47:a0:da:cf:4d:b5:0a:47:5c:28:
         93:25:1d:c2:9e:30:8f:a7:7b:5a:e9:8c:36:e8:79:90:52:b8:
         4c:49:80:74:d7:f7:2f:1e:4a:2e:e0:42:7f:45:34:09:5e:2f:
         67:c3:2f:36:a4:93:35:5a:ae:54:19:69:3f:f9:10:0e:92:1f:
         9b:24:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:45:16 2025 by rpki-client