This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
File:                     3139302e342e3131322e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          Kl3mFsqVFvbdYO9PE3taXHBfm3IhT7hSTvI6833V/6E=
Subject key identifier:   30:39:4E:D7:A9:2E:17:F2:3A:1F:EF:C1:48:56:87:8E:62:A3:42:73
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       4442D2CB5B9303800F0FC1C43DD62DFE717D7887
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 05 Nov 2025 19:51:44 +0000
ROA not before:           Wed 05 Nov 2025 19:46:44 +0000
ROA not after:            Wed 04 Nov 2026 19:51:44 +0000
asID:                     262196
IP address blocks:        190.4.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 11:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:42:d2:cb:5b:93:03:80:0f:0f:c1:c4:3d:d6:2d:fe:71:7d:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Nov  5 19:46:44 2025 GMT
            Not After : Nov  4 19:51:44 2026 GMT
        Subject: CN=30394ED7A92E17F23A1FEFC14856878E62A34273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:dc:a4:68:d1:f0:f6:da:b0:61:86:bd:68:
                    12:7f:28:e6:0d:04:94:c4:46:af:9b:87:d8:37:52:
                    78:c7:dd:28:6f:10:ac:72:18:57:bf:fb:0e:5c:cf:
                    60:0c:d8:20:59:b1:f5:43:bc:f6:df:5c:23:51:3a:
                    ca:a8:28:e7:8b:77:e1:35:43:c1:0f:05:70:a5:d0:
                    0f:b8:e7:7d:71:4f:01:e6:55:00:fa:d3:4b:10:ad:
                    d7:15:f8:28:86:d9:34:4f:6b:7b:31:25:ce:58:62:
                    80:62:73:ba:21:0f:e3:2b:d4:e2:f1:8c:f8:ca:57:
                    d8:59:95:92:14:86:f1:6b:11:d7:e0:ae:d2:7c:d8:
                    cc:d0:07:69:8c:cd:99:69:10:17:7a:64:93:67:49:
                    f2:ca:97:96:e4:55:3c:98:81:36:8d:95:fa:aa:94:
                    5d:a6:dd:15:d6:12:0a:2a:be:c4:c3:61:81:a1:2c:
                    99:9a:02:40:e0:33:9b:a5:a0:ff:0a:9f:bb:0f:ff:
                    e2:0b:9e:39:c2:a1:61:58:12:5a:1e:6f:d9:e5:0d:
                    a2:41:57:0e:f4:06:13:ea:06:b8:25:12:2b:7a:a0:
                    f7:fb:80:47:6e:3f:9c:83:c6:b1:27:ec:21:85:2c:
                    83:5f:3f:8e:e6:2e:0d:80:4b:8e:e8:fe:aa:4c:91:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:4E:D7:A9:2E:17:F2:3A:1F:EF:C1:48:56:87:8E:62:A3:42:73
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:3a:44:a9:0b:f5:99:a8:af:96:17:76:83:b6:45:b8:48:
         1e:37:a4:0b:50:55:30:56:29:e4:18:51:24:91:df:b6:c4:ff:
         b0:34:05:f7:4b:04:17:1b:51:2f:c5:1f:82:f6:35:0a:0f:c9:
         63:42:af:56:c1:6a:bd:11:7c:0d:38:71:70:a3:dd:af:91:6b:
         63:18:83:02:e5:10:cf:e2:06:59:50:c9:97:34:d2:cc:75:df:
         df:d5:2c:77:94:2d:fb:3a:41:1c:de:b8:4c:92:d2:0a:01:87:
         ec:83:5c:24:4e:d6:89:b8:1e:15:cc:4c:63:8b:21:83:ca:85:
         18:46:ab:e7:69:00:f2:37:1b:34:87:3f:44:5a:8c:39:c5:52:
         53:85:7b:ef:b6:37:6e:f6:37:4c:b1:80:d2:1f:aa:ad:9d:ed:
         26:19:fd:93:d9:88:4a:9c:0e:72:6b:e7:d3:6b:c9:8e:5c:7e:
         59:fc:a9:d2:31:d8:35:f6:fc:7f:15:51:69:07:f8:24:29:33:
         56:7f:e8:bc:7d:8e:37:15:9b:31:d3:4e:aa:17:82:be:54:0b:
         29:d7:bc:b1:40:7e:2d:33:96:78:46:74:c3:e1:3d:0d:b5:de:
         7d:4f:b5:4f:c8:ea:97:ad:fa:3b:b9:c7:d7:ec:0e:74:9d:e4:
         2d:b8:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:38:56 2025 by rpki-client