This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
File:                     3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa (raw, json)
Hash identifier:          TnZzvpsiTN6Gde4WaTt1vNLBZLfCyGVsC3Mic8zo+FA=
Subject key identifier:   7A:43:C5:2F:B1:AF:6C:25:2B:58:8C:73:B5:3F:AD:86:0A:97:74:F7
Certificate issuer:       /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Certificate serial:       32DAEB11894D468F16DBD202A17A2566E5ABD4AA
Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
Signing time:             Tue 06 Jan 2026 20:49:32 +0000
ROA not before:           Tue 06 Jan 2026 20:44:32 +0000
ROA not after:            Tue 05 Jan 2027 20:49:32 +0000
asID:                     262207
IP address blocks:        186.64.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:da:eb:11:89:4d:46:8f:16:db:d2:02:a1:7a:25:66:e5:ab:d4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
        Validity
            Not Before: Jan  6 20:44:32 2026 GMT
            Not After : Jan  5 20:49:32 2027 GMT
        Subject: CN=7A43C52FB1AF6C252B588C73B53FAD860A9774F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:3b:19:eb:96:72:6f:8a:c5:16:c8:62:2f:
                    8f:3f:eb:65:04:d8:dc:80:62:65:73:62:27:8f:a0:
                    ad:f3:3a:78:71:98:1c:97:a2:97:b6:49:99:98:88:
                    c3:48:c8:ed:17:f8:71:7f:c2:b2:b8:0a:d9:90:6a:
                    6c:ff:ab:72:35:c7:1a:22:5d:f0:a6:be:a9:ab:d1:
                    14:ce:16:18:25:ac:3b:d0:fb:bb:65:06:13:2a:f1:
                    d1:64:a6:3c:0e:03:16:96:b1:a3:ad:d0:ea:66:0d:
                    f3:d1:40:b9:d7:02:95:e2:64:90:52:64:65:92:ff:
                    35:63:64:cd:45:39:10:1f:89:69:e0:1d:f4:11:d2:
                    51:2f:b5:2d:27:57:16:b7:99:48:27:74:c3:e6:33:
                    2f:ec:1d:bc:1b:a8:75:44:19:82:0b:53:00:e7:36:
                    0c:ec:47:d1:60:b7:bd:4e:76:78:97:2d:ff:c9:af:
                    a2:37:cb:54:47:6c:6d:cf:44:58:82:c8:31:cf:e3:
                    89:e8:6f:28:82:c2:61:78:c3:11:7f:e4:74:c6:46:
                    fa:81:69:5b:f2:61:ab:4c:2a:40:23:0c:69:7a:98:
                    5f:b6:3e:ac:fd:45:de:b3:a1:14:98:fe:48:d1:8f:
                    97:a5:8a:c5:77:6b:ed:41:26:22:18:cc:fc:fd:81:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:43:C5:2F:B1:AF:6C:25:2B:58:8C:73:B5:3F:AD:86:0A:97:74:F7
            X509v3 Authority Key Identifier:
                keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:01:56:61:1e:87:a0:5e:5c:21:65:6f:37:45:9f:3f:2a:10:
         e2:69:bd:3d:cb:ba:c2:8e:3c:03:99:65:70:9b:27:e0:78:80:
         68:3b:a4:b2:a4:c4:18:44:69:76:cd:df:41:79:ab:d6:ba:65:
         f4:b5:1b:13:3f:f2:e4:8e:5f:12:4f:9d:c7:53:cb:40:31:5f:
         03:a2:ec:75:d9:99:05:05:a3:0f:2d:e7:04:f8:d9:ce:11:2e:
         37:2a:39:62:34:1b:a7:da:86:b1:68:40:68:e0:9d:59:f7:45:
         f3:c8:7f:99:81:97:60:d4:c9:38:0a:04:1d:4e:98:91:2f:a3:
         d0:2f:2b:79:4a:f2:1d:ee:69:72:0b:a9:d9:4b:06:60:79:e1:
         45:8d:19:ba:2e:24:aa:6a:00:4e:03:28:03:cb:a2:fb:63:ed:
         50:df:e6:a6:d7:0a:60:a1:db:03:39:65:d7:86:f7:3f:4c:1e:
         99:72:e0:8d:51:63:26:62:97:31:85:9a:31:9a:f1:ba:81:d5:
         1a:ba:15:7e:10:eb:d8:09:6a:2b:2f:e3:71:28:33:f8:27:63:
         db:c7:45:a1:63:93:0e:28:63:ee:5d:f7:62:c2:60:db:6f:0a:
         12:50:54:49:d4:01:1b:a8:a7:b6:94:71:c7:73:4b:9f:30:14:
         47:d8:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:30 2026 by rpki-client