This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/323830333a363136303a3a2f33322d3332203d3e20323639373738.roa
File:                     323830333a363136303a3a2f33322d3332203d3e20323639373738.roa (raw, json)
Hash identifier:          ndW6INHxwd4r7hTZZ4S7ubk8JenKN5qb2VO0RiKe1CQ=
Subject key identifier:   52:DB:E1:CF:7B:CC:64:09:0F:20:12:AA:63:E6:21:02:B8:CA:7B:5A
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       3D15521DF3E297922FA80E1F2E6A442DC6EABB03
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/323830333a363136303a3a2f33322d3332203d3e20323639373738.roa
Signing time:             Sat 22 Nov 2025 04:53:28 +0000
ROA not before:           Sat 22 Nov 2025 04:48:28 +0000
ROA not after:            Sat 21 Nov 2026 04:53:28 +0000
asID:                     269778
IP address blocks:        2803:6160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl
                          rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:15:52:1d:f3:e2:97:92:2f:a8:0e:1f:2e:6a:44:2d:c6:ea:bb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Nov 22 04:48:28 2025 GMT
            Not After : Nov 21 04:53:28 2026 GMT
        Subject: CN=52DBE1CF7BCC64090F2012AA63E62102B8CA7B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ee:9c:96:ca:b8:86:66:38:68:68:69:ea:44:
                    09:c6:33:75:d9:62:30:ed:49:a0:6f:3f:16:65:67:
                    76:2d:48:ca:c4:6c:93:55:f5:1e:18:69:58:ac:7a:
                    12:4b:60:a0:0a:07:2e:2d:87:fc:43:a9:b0:09:24:
                    ab:24:05:8b:db:2d:13:45:c7:a7:83:e8:a1:5b:a6:
                    5c:f5:a0:44:2f:66:db:7f:f6:ea:16:a1:06:4b:a4:
                    b6:f5:56:54:7f:15:5c:d3:bb:da:40:31:40:60:7c:
                    d8:06:3f:ac:8a:2f:45:65:3e:71:97:9d:f6:8d:f5:
                    b9:a5:3c:47:f2:7f:1a:fd:79:03:f8:1f:10:fa:35:
                    46:bc:60:29:b4:96:ca:23:7b:2d:66:fd:ce:17:e5:
                    e5:f0:45:f5:ac:2d:e0:b9:cc:27:14:1d:25:1f:3c:
                    af:8e:3d:36:10:d7:03:7f:29:e4:6d:61:0c:02:36:
                    af:c8:26:df:bc:a0:19:58:40:b2:a1:a8:be:e4:09:
                    f4:fd:77:5d:81:5b:1a:c7:b3:fd:ec:90:b2:a4:43:
                    88:b7:a6:2c:a8:c8:77:6e:3e:79:45:86:ce:d5:52:
                    07:83:1e:40:9f:63:f1:f6:05:4a:9d:bf:49:bc:9d:
                    38:85:26:b4:ec:11:f0:1a:e3:34:e7:21:3e:04:9c:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:E1:CF:7B:CC:64:09:0F:20:12:AA:63:E6:21:02:B8:CA:7B:5A
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/323830333a363136303a3a2f33322d3332203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6160::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:80:47:94:79:e4:39:6b:f3:fd:fa:93:07:77:e4:5b:9f:
         de:03:da:72:52:ec:ae:72:e0:f0:3e:57:06:e3:63:bc:c2:88:
         de:c8:10:5f:30:8d:a9:3e:6d:5f:87:06:f6:a4:06:99:1f:4c:
         a8:be:2a:79:93:10:97:98:b4:ae:d5:eb:68:25:83:db:e0:6f:
         05:d9:53:c5:6d:08:ea:06:73:32:04:db:63:3f:f9:40:16:f4:
         47:64:40:72:b1:82:b4:32:4d:9d:af:61:7a:5d:4b:a7:15:25:
         fd:ad:27:6c:86:27:13:1d:ca:5d:6c:e1:19:a5:08:21:2a:93:
         57:d1:34:e7:8a:87:ec:e1:69:10:ef:3d:ae:b1:35:ba:24:74:
         17:11:7b:09:62:17:bb:05:bf:0d:a6:60:3f:3b:3b:6d:57:4e:
         53:90:56:37:86:33:5b:33:fc:4a:ef:d4:1d:74:b8:4c:b8:91:
         e7:19:c4:94:6d:e6:bc:ea:52:a1:2e:7e:e4:e5:d3:17:f6:9c:
         77:1c:8a:50:66:cc:dc:76:9a:b1:1d:de:fd:56:76:81:e2:ff:
         bb:a1:92:79:99:7d:0a:aa:25:a7:b5:59:6e:99:43:af:7e:78:
         6c:3f:77:30:8d:79:91:64:48:25:af:a2:53:8c:07:04:5f:9d:
         15:a3:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:18:16 2025 by rpki-client