This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa
File:                     3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa (raw, json)
Hash identifier:          esfF8agKgznOzNxAz/WX3hFbRoMfemSK0YYahzk/+V4=
Subject key identifier:   30:B4:21:AF:B7:45:E7:35:05:E7:EA:BA:C4:6D:61:5B:31:BD:CE:27
Certificate issuer:       /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial:       4F5A60A234D097179C5A1357296CD6F080CC75D0
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa
Signing time:             Tue 06 Jan 2026 19:42:54 +0000
ROA not before:           Tue 06 Jan 2026 19:37:54 +0000
ROA not after:            Tue 05 Jan 2027 19:42:54 +0000
asID:                     265815
IP address blocks:        201.182.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 06:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5a:60:a2:34:d0:97:17:9c:5a:13:57:29:6c:d6:f0:80:cc:75:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
        Validity
            Not Before: Jan  6 19:37:54 2026 GMT
            Not After : Jan  5 19:42:54 2027 GMT
        Subject: CN=30B421AFB745E73505E7EABAC46D615B31BDCE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:1a:c9:ed:fc:2c:dc:a9:86:69:3c:9b:44:
                    a6:f0:d6:96:78:b5:65:13:59:0d:ba:a0:3a:4d:aa:
                    4e:67:97:4a:78:7c:39:3c:53:8c:6f:64:a0:36:a2:
                    da:40:25:84:4e:ee:c7:b1:4a:c0:0c:7b:2b:a8:70:
                    ec:65:67:f2:24:a7:ee:b3:dc:ac:44:86:29:d6:4d:
                    f1:3d:9f:da:8e:52:f8:32:94:62:7f:d8:76:50:85:
                    1c:03:41:42:89:f0:bd:81:e2:48:7d:a3:98:35:23:
                    13:de:c5:37:e0:45:fd:ea:6c:70:f9:d9:e1:c9:a9:
                    80:fa:24:70:75:ac:56:8f:f4:07:44:59:ad:3a:fa:
                    be:c3:81:c2:8d:8b:67:52:f7:37:45:99:e4:86:e2:
                    2d:18:fc:46:b2:fc:57:79:a7:d9:b6:de:09:9f:80:
                    54:2a:7d:48:fc:4e:57:89:b6:7e:6a:94:1f:97:87:
                    1b:78:b3:4f:33:29:d0:c9:f5:8d:cc:8e:0d:27:fd:
                    02:68:88:94:b4:8b:75:57:55:01:f4:a5:ba:c8:06:
                    b1:2a:be:c5:25:4d:94:3c:f6:a9:53:e3:ec:46:aa:
                    50:2a:d9:0c:ad:11:7f:69:64:68:14:b7:6b:8a:8d:
                    72:7f:f0:4b:67:2d:62:42:a8:aa:1c:ce:71:96:19:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B4:21:AF:B7:45:E7:35:05:E7:EA:BA:C4:6D:61:5B:31:BD:CE:27
            X509v3 Authority Key Identifier:
                keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:46:ad:b5:5c:33:df:4f:4d:bd:0f:9c:60:27:37:e9:fb:6a:
         13:87:bd:07:ce:e3:a6:52:f2:1c:2a:a5:61:60:d4:2b:60:f5:
         df:79:97:e8:7b:32:71:64:3e:2a:c0:cb:b1:ee:02:62:e8:77:
         6d:1a:03:74:ac:b7:d1:d4:e4:38:16:fa:cb:71:80:1d:9d:ef:
         e9:41:67:93:f1:7d:31:e8:d9:f8:4f:c3:a0:8f:f9:34:84:28:
         7f:80:7b:83:39:27:d5:08:0c:31:bf:6d:88:74:1b:e0:f7:6e:
         0e:3a:0c:56:b8:18:03:28:4b:79:ca:09:1a:1d:03:3d:1f:0a:
         b3:e9:a5:ab:48:18:2c:fc:67:84:df:ce:44:1b:63:a0:48:9f:
         9f:c8:e8:6f:29:bd:0d:9a:38:ae:1e:b9:e6:85:4f:0c:c4:6c:
         d4:f6:f8:25:4a:78:e6:f4:9c:f9:96:9a:22:69:82:e1:ee:c8:
         bd:19:b5:e6:3a:64:42:3f:36:6e:d4:ea:a2:c9:e3:3b:44:2a:
         a5:15:9c:b7:4e:da:87:0f:74:a4:6f:56:6a:12:9a:68:3b:a5:
         12:56:f1:90:10:a1:73:cf:e0:74:98:b0:0b:f4:d3:be:0b:97:
         53:ab:d0:84:66:98:d6:57:e4:31:c0:8e:af:d0:4b:13:27:40:
         19:8c:c5:50
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUT1pgojTQlxecWhNXKWzW8IDMddAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4NjJBOUJGQ0I5N0VFNkI2MkNFMURCMDc3RTNCNkVB
RDVGRTI1MzAeFw0yNjAxMDYxOTM3NTRaFw0yNzAxMDUxOTQyNTRaMDMxMTAvBgNV
BAMTKDMwQjQyMUFGQjc0NUU3MzUwNUU3RUFCQUM0NkQ2MTVCMzFCRENFMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOBrJ7fws3KmGaTybRKbw1pZ4
tWUTWQ26oDpNqk5nl0p4fDk8U4xvZKA2otpAJYRO7sexSsAMeyuocOxlZ/Ikp+6z
3KxEhinWTfE9n9qOUvgylGJ/2HZQhRwDQUKJ8L2B4kh9o5g1IxPexTfgRf3qbHD5
2eHJqYD6JHB1rFaP9AdEWa06+r7DgcKNi2dS9zdFmeSG4i0Y/Eay/Fd5p9m23gmf
gFQqfUj8TleJtn5qlB+Xhxt4s08zKdDJ9Y3Mjg0n/QJoiJS0i3VXVQH0pbrIBrEq
vsUlTZQ89qlT4+xGqlAq2QytEX9pZGgUt2uKjXJ/8EtnLWJCqKocznGWGbO9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMLQhr7dF5zUF5+q6xG1hWzG9zicwHwYDVR0j
BBgwFoAUA4Yqm/y5fua2LOHbB347bq1f4lMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNEM4OUQ0MzE2OTY2NEI5QjBGNDI3Nzk3NDlCOEUyNzE4
NEJFMTA3OUQ1N0M3QTc2QTc2RDVEODgxMDhGODBDLzAvMDM4NjJBOUJGQ0I5N0VF
NkI2MkNFMURCMDc3RTNCNkVBRDVGRTI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMzg2MkE5QkZDQjk3RUU2QjYy
Q0UxREIwNzdFM0I2RUFENUZFMjUzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTRDODlENDMxNjk2NjRCOUIwRjQyNzc5NzQ5QjhFMjcxODRCRTEwNzlE
NTdDN0E3NkE3NkQ1RDg4MTA4RjgwQy8wLzMyMzAzMTJlMzEzODMyMmUzMTM0Mzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzUzODMxMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHJ
tpQwDQYJKoZIhvcNAQELBQADggEBADJGrbVcM99PTb0PnGAnN+n7ahOHvQfO46ZS
8hwqpWFg1Ctg9d95l+h7MnFkPirAy7HuAmLod20aA3Sst9HU5DgW+stxgB2d7+lB
Z5PxfTHo2fhPw6CP+TSEKH+Ae4M5J9UIDDG/bYh0G+D3bg46DFa4GAMoS3nKCRod
Az0fCrPppatIGCz8Z4TfzkQbY6BIn5/I6G8pvQ2aOK4eueaFTwzEbNT2+CVKeOb0
nPmWmiJpguHuyL0ZteY6ZEI/Nm7U6qLJ4ztEKqUVnLdO2ocPdKRvVmoSmmg7pRJW
8ZAQoXPP4HSYsAv0074Ll1Or0IRmmNZX5DHAjq/QSxMnQBmMxVA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:34 2026 by rpki-client