This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32322d3232203d3e20323730303839.roa
File:                     3137302e38302e39322e302f32322d3232203d3e20323730303839.roa (raw, json)
Hash identifier:          r9wzg4gUbAsXakriastT/6oxlD3x2J1VYkHY+wU4TZQ=
Subject key identifier:   3D:85:FB:42:1C:2B:56:81:95:72:02:0B:1B:89:1C:43:1D:82:14:C3
Certificate issuer:       /CN=C73971A2080A975B88CBA6005895BD357D233BC8
Certificate serial:       6BB7681ED832F777ED0647CD92B923AC0279C8AD
Authority key identifier: C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32322d3232203d3e20323730303839.roa
Signing time:             Thu 20 Nov 2025 16:50:00 +0000
ROA not before:           Thu 20 Nov 2025 16:45:00 +0000
ROA not after:            Thu 19 Nov 2026 16:50:00 +0000
asID:                     270089
IP address blocks:        170.80.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:68:1e:d8:32:f7:77:ed:06:47:cd:92:b9:23:ac:02:79:c8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73971A2080A975B88CBA6005895BD357D233BC8
        Validity
            Not Before: Nov 20 16:45:00 2025 GMT
            Not After : Nov 19 16:50:00 2026 GMT
        Subject: CN=3D85FB421C2B56819572020B1B891C431D8214C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:63:37:b8:ff:20:67:45:e9:ce:6c:8e:78:
                    d0:8c:5c:07:7f:3c:37:b0:93:fb:1a:c7:60:2f:0b:
                    77:cc:3a:47:94:95:ac:4c:79:26:a7:b2:a8:c0:6b:
                    de:41:4c:32:07:c1:20:5a:34:b3:a8:fd:08:cb:3e:
                    14:72:a3:89:51:e8:91:e3:f8:22:19:cb:dd:4e:8a:
                    99:e7:f8:e6:d8:ea:57:3f:a1:fb:46:61:c7:d2:90:
                    06:85:c1:bb:d1:fe:1d:c2:4f:4b:f0:d1:61:64:3b:
                    50:5a:97:1d:7c:bb:f6:3e:42:ce:96:ee:f7:30:55:
                    88:3e:a1:e2:1c:61:a7:12:7d:04:a1:77:e8:4c:4f:
                    bb:11:c5:c7:19:c2:03:c5:d6:28:4f:c0:82:2b:1a:
                    ff:61:dd:3b:9e:ae:63:ed:e4:e6:fd:71:38:ed:6f:
                    d2:3a:8c:4f:90:ea:67:c3:bc:2d:21:05:ee:7a:01:
                    4a:9e:57:dc:43:c3:ce:ae:48:2f:50:24:eb:8e:fb:
                    e5:79:ec:ed:28:dd:57:f3:47:e4:39:90:19:ab:22:
                    cc:a3:6c:e8:67:07:f3:65:34:f1:df:2f:2b:41:c3:
                    8d:72:40:97:c2:37:b2:1d:04:92:11:a0:e0:f0:c8:
                    2e:cc:48:40:50:2c:7c:af:7a:52:51:dc:4f:c9:07:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:85:FB:42:1C:2B:56:81:95:72:02:0B:1B:89:1C:43:1D:82:14:C3
            X509v3 Authority Key Identifier:
                keyid:C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32322d3232203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:6c:d5:d9:91:23:8d:a1:f3:a8:94:92:21:7a:83:85:52:
         89:29:5a:53:47:89:02:4e:3f:a7:ee:28:dd:c3:c3:7c:96:91:
         58:ca:16:76:3f:b3:dc:f4:63:fd:95:fd:9e:ff:57:d0:d1:95:
         39:b0:4e:8f:95:f1:76:a7:8f:68:39:ba:40:0c:b0:5e:c9:40:
         13:72:ee:c3:ea:95:fd:0f:bf:dd:12:21:a2:7b:6d:d9:e4:67:
         30:14:7b:70:54:23:f3:82:16:bd:66:65:d0:03:93:c6:de:5d:
         d2:9d:7c:aa:d0:85:7f:53:c3:48:23:7d:b5:b1:6b:c2:d5:cf:
         47:7b:01:61:5b:ef:2a:a3:65:d8:3f:e5:2d:a8:59:7f:76:cd:
         23:7b:ad:90:32:61:b6:46:d6:64:e2:ff:95:55:d1:09:86:af:
         f4:05:49:07:db:95:68:5d:3e:cc:9a:52:48:f7:de:2e:36:e6:
         9c:76:9f:3f:88:2a:ee:47:0f:18:35:da:93:b3:aa:86:95:17:
         6b:64:5a:27:31:19:01:75:e3:33:43:f2:82:51:ea:1a:64:03:
         7c:59:d6:52:54:bc:6b:73:2b:53:55:e9:16:49:a3:11:b5:d9:
         54:7b:53:78:97:9e:ad:4d:0c:b1:5f:c7:7a:cc:67:29:b0:03:
         f0:2e:89:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUa7doHtgy93ftBkfNkrkjrAJ5yK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczOTcxQTIwODBBOTc1Qjg4Q0JBNjAwNTg5NUJEMzU3
RDIzM0JDODAeFw0yNTExMjAxNjQ1MDBaFw0yNjExMTkxNjUwMDBaMDMxMTAvBgNV
BAMTKDNEODVGQjQyMUMyQjU2ODE5NTcyMDIwQjFCODkxQzQzMUQ4MjE0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2q2M3uP8gZ0XpzmyOeNCMXAd/
PDewk/sax2AvC3fMOkeUlaxMeSansqjAa95BTDIHwSBaNLOo/QjLPhRyo4lR6JHj
+CIZy91Oipnn+ObY6lc/oftGYcfSkAaFwbvR/h3CT0vw0WFkO1Balx18u/Y+Qs6W
7vcwVYg+oeIcYacSfQShd+hMT7sRxccZwgPF1ihPwIIrGv9h3TuermPt5Ob9cTjt
b9I6jE+Q6mfDvC0hBe56AUqeV9xDw86uSC9QJOuO++V57O0o3VfzR+Q5kBmrIsyj
bOhnB/NlNPHfLytBw41yQJfCN7IdBJIRoODwyC7MSEBQLHyvelJR3E/JBzO5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPYX7QhwrVoGVcgILG4kcQx2CFMMwHwYDVR0j
BBgwFoAUxzlxoggKl1uIy6YAWJW9NX0jO8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MjhENTJFNzA5OTE1Rjg3ODIyQzE5NkQ1MjE3QTZBNTA4
MDkzOTJFQzkzQ0FBRTBDMDE1M0FDRkM0NDk4OThGLzAvQzczOTcxQTIwODBBOTc1
Qjg4Q0JBNjAwNTg5NUJEMzU3RDIzM0JDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzM5NzFBMjA4MEE5NzVCODhD
QkE2MDA1ODk1QkQzNTdEMjMzQkM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjI4RDUyRTcwOTkxNUY4NzgyMkMxOTZENTIxN0E2QTUwODA5MzkyRUM5
M0NBQUUwQzAxNTNBQ0ZDNDQ5ODk4Ri8wLzMxMzczMDJlMzgzMDJlMzkzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMDMwMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpQXDAN
BgkqhkiG9w0BAQsFAAOCAQEAm7ds1dmRI42h86iUkiF6g4VSiSlaU0eJAk4/p+4o
3cPDfJaRWMoWdj+z3PRj/ZX9nv9X0NGVObBOj5XxdqePaDm6QAywXslAE3Luw+qV
/Q+/3RIhontt2eRnMBR7cFQj84IWvWZl0AOTxt5d0p18qtCFf1PDSCN9tbFrwtXP
R3sBYVvvKqNl2D/lLahZf3bNI3utkDJhtkbWZOL/lVXRCYav9AVJB9uVaF0+zJpS
SPfeLjbmnHafP4gq7kcPGDXak7OqhpUXa2RaJzEZAXXjM0PyglHqGmQDfFnWUlS8
a3MrU1XpFkmjEbXZVHtTeJeerU0MsV/HesxnKbAD8C6JMw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:47:21 2025 by rpki-client