This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32332d3233203d3e20323639373738.roa
File:                     34352e3138302e36302e302f32332d3233203d3e20323639373738.roa (raw, json)
Hash identifier:          xQfL5jM0ngCvEKhIkIWdE25pgWyKeme50ZydyjtA91Q=
Subject key identifier:   03:25:81:F0:5C:15:B1:C6:6E:B2:9C:BB:9F:7F:46:BB:AD:87:16:01
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       12E7CE383CD5FB09F83E36C13D4D2C553AFF23EA
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32332d3233203d3e20323639373738.roa
Signing time:             Sat 22 Nov 2025 04:53:27 +0000
ROA not before:           Sat 22 Nov 2025 04:48:27 +0000
ROA not after:            Sat 21 Nov 2026 04:53:27 +0000
asID:                     269778
IP address blocks:        45.180.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl
                          rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e7:ce:38:3c:d5:fb:09:f8:3e:36:c1:3d:4d:2c:55:3a:ff:23:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Nov 22 04:48:27 2025 GMT
            Not After : Nov 21 04:53:27 2026 GMT
        Subject: CN=032581F05C15B1C66EB29CBB9F7F46BBAD871601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:5b:84:ab:12:c7:72:aa:44:21:b2:3e:1b:
                    55:8c:47:b2:82:03:dd:a3:60:f0:64:e3:71:42:14:
                    39:ad:c3:79:22:d0:72:5d:c8:6c:f3:41:6a:60:bd:
                    90:94:07:d3:0d:d9:75:3e:12:d7:22:0e:40:7c:bd:
                    53:e8:8f:b2:31:f3:b7:b0:41:fe:94:95:3e:cf:ea:
                    58:f8:80:90:16:ba:b0:d9:38:29:86:6a:79:28:5c:
                    ad:3e:73:77:cf:42:72:25:bc:94:f7:65:94:2a:11:
                    3b:c0:e7:d9:4b:f5:0e:4a:1c:96:54:02:00:e7:ab:
                    99:d7:f2:e4:21:8d:d3:23:87:e0:2c:6c:66:99:29:
                    8f:4a:15:b6:2d:37:7f:7e:51:b0:6c:b5:ef:3a:b4:
                    1e:75:62:e0:c7:6a:ef:0c:af:da:54:ac:f1:a2:c5:
                    88:95:87:e0:83:41:1b:6c:7f:eb:b6:11:cf:6f:bb:
                    18:9c:97:c5:b9:e3:27:6a:27:b7:8c:3a:cf:89:a9:
                    4a:7c:ca:d6:c2:0c:88:31:ff:8e:11:b9:42:30:d5:
                    89:73:7b:2c:f6:c7:c3:2b:99:a2:90:3f:98:8c:a0:
                    36:c7:77:4d:7f:46:ca:12:0e:8a:89:9f:a1:29:a0:
                    46:0c:51:e9:90:a6:5d:21:ce:c9:f6:ec:72:13:63:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:25:81:F0:5C:15:B1:C6:6E:B2:9C:BB:9F:7F:46:BB:AD:87:16:01
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32332d3233203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:f2:b8:27:73:59:01:dd:89:99:a5:a9:e0:dd:5e:9c:41:
         30:e9:27:45:77:d1:db:8a:c8:55:52:65:ed:a9:8a:31:5b:fc:
         54:53:d7:51:0d:82:4e:c7:e1:62:ee:0a:c8:6b:e3:08:6a:df:
         32:28:58:46:a5:4a:44:dd:62:e6:c2:b1:11:54:95:10:a6:98:
         11:50:7f:e5:d0:f1:4a:ab:62:61:4d:a7:df:dd:26:eb:95:43:
         3c:1d:53:26:e8:a9:96:05:60:40:4a:13:90:c9:ad:47:01:0f:
         fb:f2:b8:ae:9a:ee:31:2b:c7:29:45:7b:e2:7e:84:0e:f9:be:
         1e:50:d6:06:65:eb:35:ec:95:69:d4:91:4c:97:ac:00:ed:5f:
         30:a0:82:97:7c:14:01:9c:c7:f3:0e:a7:39:8b:2a:7a:4a:e7:
         16:68:d8:70:de:d2:bd:1b:63:73:f8:a6:00:65:1e:79:ed:3d:
         4d:fd:56:5c:26:bf:26:eb:fc:61:c0:b0:21:77:23:d9:2b:81:
         db:8d:81:b6:86:1d:e0:dd:a7:36:73:37:fb:bf:19:61:18:62:
         c8:ba:ad:97:0c:3c:34:19:0a:75:ec:d4:70:96:86:34:f9:10:
         43:0a:66:ba:07:64:c7:10:cc:ad:e8:21:d3:7a:0d:dd:21:d0:
         72:2b:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:18:19 2025 by rpki-client