This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0F1354040C254265E8FDBAF9058B916A59B65DFF29526359544047324D6D800/0/34352e3233312e37322e302f32322d3234203d3e20323636373332.roa
File:                     34352e3233312e37322e302f32322d3234203d3e20323636373332.roa (raw, json)
Hash identifier:          AT54I9JRW3kx0D09f78fdvHT0w3DbBQ/FkcR1WhWj1Q=
Subject key identifier:   FC:01:74:08:E4:D3:74:7E:EB:33:4A:D9:76:EB:6B:15:19:E3:46:09
Certificate issuer:       /CN=60472E5148E5C206EF01AB80222C1224E4F330E1
Certificate serial:       62C4C5CB825B05C01CCC4AF41D015B13AC3CF8B2
Authority key identifier: 60:47:2E:51:48:E5:C2:06:EF:01:AB:80:22:2C:12:24:E4:F3:30:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60472E5148E5C206EF01AB80222C1224E4F330E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0F1354040C254265E8FDBAF9058B916A59B65DFF29526359544047324D6D800/0/34352e3233312e37322e302f32322d3234203d3e20323636373332.roa
Signing time:             Tue 06 Jan 2026 20:56:23 +0000
ROA not before:           Tue 06 Jan 2026 20:51:23 +0000
ROA not after:            Tue 05 Jan 2027 20:56:23 +0000
asID:                     266732
IP address blocks:        45.231.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0F1354040C254265E8FDBAF9058B916A59B65DFF29526359544047324D6D800/0/60472E5148E5C206EF01AB80222C1224E4F330E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0F1354040C254265E8FDBAF9058B916A59B65DFF29526359544047324D6D800/0/60472E5148E5C206EF01AB80222C1224E4F330E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60472E5148E5C206EF01AB80222C1224E4F330E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c4:c5:cb:82:5b:05:c0:1c:cc:4a:f4:1d:01:5b:13:ac:3c:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60472E5148E5C206EF01AB80222C1224E4F330E1
        Validity
            Not Before: Jan  6 20:51:23 2026 GMT
            Not After : Jan  5 20:56:23 2027 GMT
        Subject: CN=FC017408E4D3747EEB334AD976EB6B1519E34609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:2b:d4:e8:2a:87:e5:e5:62:be:c5:56:25:
                    5e:c1:00:bd:a4:4b:38:39:79:90:8b:57:d5:e2:7d:
                    7a:37:0b:d7:fa:3c:e5:50:6e:fa:83:ef:88:f0:dc:
                    42:c0:e9:ec:72:9b:42:cf:b7:c4:9d:e0:51:3e:d8:
                    92:e8:71:1f:7c:4c:6f:a1:0b:29:00:d8:81:f6:9f:
                    1f:93:1d:b8:61:8c:5b:08:fd:8f:db:4a:73:17:86:
                    34:fa:d2:42:17:1d:4a:9b:74:0c:65:13:c7:fa:ee:
                    f2:6f:55:7f:34:fc:5d:3d:fb:32:0a:60:1d:64:7d:
                    0c:30:59:5e:43:c6:ce:09:7c:c8:8e:a5:17:a8:34:
                    5f:f8:51:f2:15:c1:fb:31:4c:a7:2f:ce:5a:df:43:
                    c2:e2:9b:f7:44:e2:41:39:81:2c:12:0a:d8:fa:1b:
                    19:51:ff:94:65:75:a5:ca:ef:ca:75:f2:4b:e0:e8:
                    b3:35:0d:3b:af:26:51:e6:5f:6e:58:d7:0a:9e:83:
                    01:22:18:04:c5:99:b9:0d:6e:26:06:3e:0c:9e:c9:
                    76:32:80:80:87:0c:d5:b6:09:e2:e9:e1:7f:1c:f3:
                    cd:ce:f4:68:1a:ac:44:ed:99:78:35:d3:ed:cb:0c:
                    43:7b:c7:52:fd:cc:9a:fb:bc:26:d5:a9:f6:ea:b7:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:74:08:E4:D3:74:7E:EB:33:4A:D9:76:EB:6B:15:19:E3:46:09
            X509v3 Authority Key Identifier:
                keyid:60:47:2E:51:48:E5:C2:06:EF:01:AB:80:22:2C:12:24:E4:F3:30:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0F1354040C254265E8FDBAF9058B916A59B65DFF29526359544047324D6D800/0/60472E5148E5C206EF01AB80222C1224E4F330E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60472E5148E5C206EF01AB80222C1224E4F330E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0F1354040C254265E8FDBAF9058B916A59B65DFF29526359544047324D6D800/0/34352e3233312e37322e302f32322d3234203d3e20323636373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:24:79:44:47:ca:77:06:28:07:90:4e:b6:65:5c:5e:f5:1c:
         cb:dc:44:3e:52:06:36:d8:2c:59:3b:4c:da:23:61:26:13:64:
         e8:9a:4d:d1:a3:38:09:5a:f1:03:bd:81:e3:e9:82:20:5e:f7:
         08:02:f8:a2:b0:de:11:5e:ce:84:2e:6d:b6:1d:19:36:f3:be:
         d1:76:9e:a3:a1:34:12:b1:5f:ae:a7:ea:a1:c2:a1:cb:46:1c:
         1f:72:52:a6:3e:4e:e6:50:07:4c:9b:1c:0f:b9:0f:b2:26:a5:
         df:4c:e3:45:42:cc:46:a8:60:36:25:c6:23:ea:0a:68:bd:76:
         dc:31:5e:ec:34:5f:6d:97:91:c0:1a:36:94:14:7a:31:bc:15:
         48:f0:70:6a:34:d9:ec:a1:20:b9:1b:82:29:56:6f:6a:fc:ab:
         3a:d2:c3:cc:90:fa:a8:cd:a7:ad:f0:52:4d:b3:cd:21:83:fd:
         96:4f:bf:85:d5:5d:e0:c1:61:8b:aa:4b:dd:f7:f6:19:af:fa:
         80:41:9e:f6:34:2f:9e:18:e4:c1:a4:45:16:91:01:a4:94:23:
         26:c8:ec:dd:98:4b:5b:60:34:44:cb:28:d4:d7:34:10:5e:8d:
         1c:ec:a9:63:86:27:bf:12:bc:5b:70:fd:ee:fd:16:9d:8c:17:
         1f:dc:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:28 2026 by rpki-client