This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa
File:                     323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (raw, json)
Hash identifier:          WV3Sc6/e9ASnOR19uOajKVNUzIq4fJ0IUG0LmjoTmkI=
Subject key identifier:   94:18:B7:4E:AF:56:2D:5C:87:10:9E:DE:41:E6:3E:C8:8F:9F:72:CA
Certificate issuer:       /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
Certificate serial:       3DDC7CDD939963B37CFE585B686C00E9E3399B52
Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa
Signing time:             Tue 06 Jan 2026 19:07:38 +0000
ROA not before:           Tue 06 Jan 2026 19:02:38 +0000
ROA not after:            Tue 05 Jan 2027 19:07:38 +0000
asID:                     266823
IP address blocks:        2803:24a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dc:7c:dd:93:99:63:b3:7c:fe:58:5b:68:6c:00:e9:e3:39:9b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
        Validity
            Not Before: Jan  6 19:02:38 2026 GMT
            Not After : Jan  5 19:07:38 2027 GMT
        Subject: CN=9418B74EAF562D5C87109EDE41E63EC88F9F72CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:6b:a7:ae:49:ae:eb:0e:81:04:62:b9:d7:
                    3a:d5:6e:36:ee:cb:92:80:f0:ac:a6:03:59:d7:a9:
                    33:b3:7b:b0:d8:e1:cc:2a:98:18:e7:11:c0:96:ec:
                    7c:b9:70:d6:c9:53:77:41:c9:8f:38:3d:6e:3a:fe:
                    af:76:73:80:2c:50:04:ba:9d:2b:b8:02:25:34:28:
                    ba:86:b8:ce:38:6e:dd:c7:a2:d7:4d:c9:73:71:2c:
                    01:8b:fc:7e:0a:bc:8b:e5:4a:21:2d:37:72:f0:87:
                    95:41:04:62:a9:66:37:62:58:ea:ee:43:5b:fc:f2:
                    ab:a0:85:6c:a0:fc:96:57:89:d7:39:8e:40:5a:51:
                    28:20:48:e2:6d:3f:41:f1:7d:cb:b3:11:fa:be:c4:
                    a8:49:e1:ef:5a:65:9c:9d:9a:15:1c:b5:17:7b:e6:
                    2c:36:95:9a:d3:4c:85:e2:90:1c:1b:de:fb:51:da:
                    d9:d0:82:2f:75:82:38:52:aa:f0:ac:30:26:6a:0b:
                    0f:67:69:f9:f4:00:bd:9d:96:96:e1:f5:d9:2e:71:
                    9e:f3:ec:f3:5a:d8:03:8d:34:fd:51:f8:2b:6b:40:
                    ec:07:8d:fe:36:4c:d1:b0:70:52:5a:95:6f:15:7a:
                    b9:10:81:ac:8b:9d:b9:73:17:6e:54:a3:ca:6a:5a:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:18:B7:4E:AF:56:2D:5C:87:10:9E:DE:41:E6:3E:C8:8F:9F:72:CA
            X509v3 Authority Key Identifier:
                keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:de:92:21:c6:62:15:d6:e1:d9:fa:b9:e4:23:f6:8a:81:98:
         35:1f:d9:24:11:c9:71:92:a9:bc:07:25:0d:78:38:2a:eb:14:
         06:4f:a7:de:0d:9c:6d:f1:b3:57:be:7a:2b:66:ac:79:7a:34:
         f2:2d:0c:02:d2:53:21:58:9c:6c:91:c2:bb:56:32:8b:d9:6f:
         5a:52:32:15:5d:c3:90:be:58:ae:a2:ca:08:2f:14:6f:e8:de:
         5c:a2:43:fb:02:07:58:87:47:c1:8c:55:7f:2d:7c:6c:ee:98:
         b0:69:51:62:ce:52:73:d8:e3:c3:56:e5:02:f5:b6:23:4e:9f:
         76:41:cb:89:d9:b9:86:d3:7f:26:66:82:b6:99:54:c0:0d:b2:
         ef:a3:43:da:5f:68:ea:50:5a:fb:78:6e:92:72:26:3a:f1:f4:
         2d:96:d4:f7:5e:8b:30:5c:18:7c:21:a0:94:95:07:d0:bb:8f:
         49:1b:a1:42:83:56:64:ab:2d:f5:75:f1:ca:d9:49:fd:d4:5b:
         37:15:bc:39:dc:e5:2c:03:b6:d2:a7:4e:a4:3f:ff:2e:e2:10:
         a1:0f:bb:39:9b:b0:08:fa:69:42:e5:a0:2c:12:ad:5b:bd:12:
         c5:ac:59:b5:8b:a0:dd:30:08:1d:3a:21:98:6d:1c:83:f6:9a:
         02:f3:c6:17
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPdx83ZOZY7N8/lhbaGwA6eM5m1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1NjRDM0I1REEyRjdFQ0VCODVDQkM1NzBEMTY1MUJG
MUJENjJBMjAeFw0yNjAxMDYxOTAyMzhaFw0yNzAxMDUxOTA3MzhaMDMxMTAvBgNV
BAMTKDk0MThCNzRFQUY1NjJENUM4NzEwOUVERTQxRTYzRUM4OEY5RjcyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mWunrkmu6w6BBGK51zrVbjbu
y5KA8KymA1nXqTOze7DY4cwqmBjnEcCW7Hy5cNbJU3dByY84PW46/q92c4AsUAS6
nSu4AiU0KLqGuM44bt3HotdNyXNxLAGL/H4KvIvlSiEtN3Lwh5VBBGKpZjdiWOru
Q1v88qughWyg/JZXidc5jkBaUSggSOJtP0HxfcuzEfq+xKhJ4e9aZZydmhUctRd7
5iw2lZrTTIXikBwb3vtR2tnQgi91gjhSqvCsMCZqCw9nafn0AL2dlpbh9dkucZ7z
7PNa2AONNP1R+CtrQOwHjf42TNGwcFJalW8VerkQgayLnblzF25Uo8pqWrvfAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUlBi3Tq9WLVyHEJ7eQeY+yI+fcsowHwYDVR0j
BBgwFoAUvVZMO12i9+zrhcvFcNFlG/G9YqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85ODczMTU1QjA1MkFCREY3OUU1RkZCREI5NzM1ODU5NzA4
MUM5MTIyQzFBMkY1MUEwNTRFNEZFMkNGMENENTgyLzAvQkQ1NjRDM0I1REEyRjdF
Q0VCODVDQkM1NzBEMTY1MUJGMUJENjJBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDU2NEMzQjVEQTJGN0VDRUI4
NUNCQzU3MEQxNjUxQkYxQkQ2MkEyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTg3MzE1NUIwNTJBQkRGNzlFNUZGQkRCOTczNTg1OTcwODFDOTEyMkMx
QTJGNTFBMDU0RTRGRTJDRjBDRDU4Mi8wLzMyMzgzMDMzM2EzMjM0NjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJKAw
DQYJKoZIhvcNAQELBQADggEBAGPekiHGYhXW4dn6ueQj9oqBmDUf2SQRyXGSqbwH
JQ14OCrrFAZPp94NnG3xs1e+eitmrHl6NPItDALSUyFYnGyRwrtWMovZb1pSMhVd
w5C+WK6iyggvFG/o3lyiQ/sCB1iHR8GMVX8tfGzumLBpUWLOUnPY48NW5QL1tiNO
n3ZBy4nZuYbTfyZmgraZVMANsu+jQ9pfaOpQWvt4bpJyJjrx9C2W1PdeizBcGHwh
oJSVB9C7j0kboUKDVmSrLfV18crZSf3UWzcVvDnc5SwDttKnTqQ//y7iEKEPuzmb
sAj6aULloCwSrVu9EsWsWbWLoN0wCB06IZhtHIP2mgLzxhc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:34 2026 by rpki-client