This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a383030303a3a2f33362d3634203d3e20323733303837.roa
File:                     323830333a626639303a383030303a3a2f33362d3634203d3e20323733303837.roa (raw, json)
Hash identifier:          tybtxGip7ezyR/0YAJPkcRbz7EGCjDhV7ZFXkSjM8aA=
Subject key identifier:   3F:03:FC:A7:A9:A6:62:E9:06:EF:9E:E5:AB:D5:2E:C2:BF:AE:17:7F
Certificate issuer:       /CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
Certificate serial:       5140425F8BB3363550C24D73D03DF7AE67EE2FFD
Authority key identifier: E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a383030303a3a2f33362d3634203d3e20323733303837.roa
Signing time:             Sat 13 Sep 2025 06:45:01 +0000
ROA not before:           Sat 13 Sep 2025 06:40:01 +0000
ROA not after:            Sat 12 Sep 2026 06:45:01 +0000
asID:                     273087
IP address blocks:        2803:bf90:8000::/36 maxlen: 64
Validation:               Failed, certificate revoked on Tue 23 Sep 2025 23:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:40:42:5f:8b:b3:36:35:50:c2:4d:73:d0:3d:f7:ae:67:ee:2f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E1D885BBE196030A5A9C36B3F0DA89829D02B5
        Validity
            Not Before: Sep 13 06:40:01 2025 GMT
            Not After : Sep 12 06:45:01 2026 GMT
        Subject: CN=3F03FCA7A9A662E906EF9EE5ABD52EC2BFAE177F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:63:86:26:33:4b:ae:8c:50:dd:ca:6b:36:
                    ea:e0:20:5e:c1:89:04:50:8d:8c:eb:2b:29:10:66:
                    88:46:1f:1c:a4:1d:69:47:15:50:a2:00:a5:62:30:
                    62:d8:2f:87:d8:4f:db:8f:fa:c3:2f:38:f1:4b:a1:
                    9b:9c:66:d1:c2:eb:9d:5a:f7:80:1f:40:8e:69:5a:
                    7b:8d:2a:02:4c:33:15:21:56:e8:c6:ed:da:3f:1f:
                    e8:5f:3d:1c:15:db:bc:db:92:57:48:a1:d9:ef:4a:
                    9e:f2:8d:59:b5:9f:4c:e3:14:53:f1:32:89:04:1a:
                    c8:14:7e:5a:c3:12:72:b7:16:51:c0:0c:a9:b2:9a:
                    1d:c5:06:a7:dd:5f:d3:95:1a:9b:d8:97:51:02:fd:
                    0e:84:ae:57:50:47:03:58:a7:5e:8e:a0:a5:95:2e:
                    c0:6c:de:41:0d:1a:d2:9a:53:22:3f:5f:f5:d6:40:
                    fd:8b:a3:31:36:53:5e:22:01:08:f4:91:67:16:ab:
                    27:f9:9f:7e:8a:8d:ec:a0:db:85:22:04:fa:98:06:
                    25:ed:e3:ad:7b:d0:04:03:18:57:9b:70:9a:a4:df:
                    9e:ed:ba:da:a1:e6:6b:4a:8a:de:0a:19:2d:6e:9d:
                    c6:24:fd:4f:61:ef:cf:9d:b9:a5:e2:ce:39:2b:b5:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:03:FC:A7:A9:A6:62:E9:06:EF:9E:E5:AB:D5:2E:C2:BF:AE:17:7F
            X509v3 Authority Key Identifier:
                keyid:E3:E1:D8:85:BB:E1:96:03:0A:5A:9C:36:B3:F0:DA:89:82:9D:02:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3E1D885BBE196030A5A9C36B3F0DA89829D02B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A71CC203CA8C5F36586A2AD40DF5C0E44EFC89C486A9009FC290532DF49BD4B8/0/323830333a626639303a383030303a3a2f33362d3634203d3e20323733303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bf90:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:f1:ee:67:3c:73:de:d2:b6:c4:ad:c5:65:a7:73:0b:24:
         cd:8d:17:cd:5b:77:0c:ce:15:ed:dc:16:ec:4f:fa:91:66:45:
         5a:35:7b:08:f3:e5:b9:51:3c:87:f6:2e:d7:78:2b:3c:57:61:
         06:81:3a:75:85:c9:d5:db:20:56:d3:5a:3a:51:01:d2:c6:59:
         34:99:bd:77:5b:7b:8f:62:df:63:5e:63:ad:7e:b5:7e:92:bd:
         0f:57:16:2d:ed:ef:c7:73:8a:28:bc:98:60:f5:80:93:cd:66:
         b2:81:07:a5:4e:92:ca:8c:77:bb:35:55:57:4c:ad:91:96:78:
         5d:a1:ca:6a:08:2b:fb:1d:24:e5:27:e9:ac:0a:77:56:38:a3:
         9b:30:f2:ee:5e:c1:95:9e:b4:03:e0:26:67:7f:d3:c8:b0:4f:
         c7:71:b1:f7:c9:89:37:ad:3b:d2:28:56:46:60:f5:f8:e5:f4:
         40:99:0e:d8:23:ca:f9:44:6d:38:e7:a7:07:a0:7a:02:3d:4d:
         b9:39:ad:ac:96:a8:6f:64:88:df:7a:da:6e:7d:e2:24:25:10:
         0e:06:fd:d9:b1:c8:5b:61:36:14:db:5d:49:c1:18:7d:39:ed:
         e6:08:d7:4a:8d:ba:0e:77:31:f8:e0:1a:9a:8b:ea:8d:17:2a:
         c4:9f:88:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----