This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa
File:                     34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa (raw, json)
Hash identifier:          xBT1rzrX/TnTTe+kjsS4V+bJCbGtjwpeyF4zw8VqcBI=
Subject key identifier:   77:CD:4A:C1:F8:3E:B7:F9:1F:28:6C:45:0D:A3:C6:67:F9:B9:7B:87
Certificate issuer:       /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Certificate serial:       72C013F06F5E8E5A376951B0567947C762F7FD9A
Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa
Signing time:             Tue 06 Jan 2026 20:51:32 +0000
ROA not before:           Tue 06 Jan 2026 20:46:32 +0000
ROA not after:            Tue 05 Jan 2027 20:51:32 +0000
asID:                     269915
IP address blocks:        45.189.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c0:13:f0:6f:5e:8e:5a:37:69:51:b0:56:79:47:c7:62:f7:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
        Validity
            Not Before: Jan  6 20:46:32 2026 GMT
            Not After : Jan  5 20:51:32 2027 GMT
        Subject: CN=77CD4AC1F83EB7F91F286C450DA3C667F9B97B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:b1:ac:03:ad:b4:1a:03:87:b6:d0:4b:42:
                    a2:d6:64:97:cc:54:b2:fd:61:b1:23:d3:10:b3:fb:
                    e1:52:4c:12:15:9b:09:2e:ee:41:45:19:8f:22:d4:
                    90:bc:13:07:b7:c2:3f:b6:e3:75:06:97:c3:e9:ce:
                    1a:44:86:ed:f0:38:a7:a4:13:49:f1:4f:7a:f3:3b:
                    1d:fa:85:65:b7:e6:9c:93:65:ad:6b:f0:d5:ea:fe:
                    c2:c0:84:8a:48:c9:6a:fa:e8:1b:f1:02:12:ed:7a:
                    44:34:56:6d:1a:1f:8f:99:1f:aa:68:5c:96:95:de:
                    4e:34:1c:3d:eb:d6:df:75:f4:fe:ae:b3:d1:00:cc:
                    45:fc:9a:e3:ab:18:6b:bb:0c:d0:32:c4:d1:68:22:
                    a4:b3:70:fe:50:10:05:59:a4:c7:11:0b:db:60:ff:
                    7f:f7:f8:e9:86:10:6c:76:57:cf:28:66:f1:b9:ac:
                    d0:ba:f0:0f:1a:2a:4b:90:fe:a9:36:f9:61:b5:73:
                    ef:1b:c4:40:43:5e:28:03:5a:fa:be:2a:5b:f3:ea:
                    ff:ec:21:0e:8e:b8:2b:28:a1:68:f3:1a:47:d1:78:
                    b8:08:69:cd:79:51:ac:3f:22:f4:17:7a:61:7a:c8:
                    1e:0f:5a:0c:a2:54:80:70:c8:d9:9a:34:c7:98:66:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:4A:C1:F8:3E:B7:F9:1F:28:6C:45:0D:A3:C6:67:F9:B9:7B:87
            X509v3 Authority Key Identifier:
                keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:24:f3:46:0a:3c:11:88:1f:9b:5f:df:3a:38:08:fb:4a:
         b6:c5:33:f5:9c:15:64:57:4a:9b:96:5d:14:e0:42:9b:3e:92:
         1b:48:d7:0c:74:e9:dc:e5:c7:6a:1b:22:23:f0:4a:1e:a9:2a:
         3a:39:31:63:08:95:19:72:3f:f7:1d:3f:e9:bc:01:e4:6e:a0:
         51:dd:ce:eb:3e:3c:24:83:31:e4:6f:b6:fd:c7:63:6d:da:f2:
         dc:65:0d:5f:e4:b9:fd:9a:c3:2d:84:02:72:2f:9f:a9:f6:4e:
         8b:de:df:af:e3:ea:4a:95:81:d7:59:38:93:80:59:b5:32:b3:
         8f:36:87:33:e6:99:df:01:62:e4:93:83:00:72:fe:76:bb:ff:
         9b:f5:62:6e:26:81:e6:d9:ce:f0:08:ac:a9:0d:6e:09:da:29:
         f7:ae:77:1a:f9:ca:ec:fc:6f:71:3a:15:40:2a:bc:45:7f:f4:
         0d:19:2f:0f:88:74:f5:5f:49:be:7c:06:53:1e:c5:87:2f:90:
         04:f2:af:95:e6:58:d8:1f:3b:8c:3b:4a:6b:7c:33:82:1e:cd:
         02:86:2f:a7:2f:50:0c:0f:fb:fb:f9:0c:93:90:2b:4f:f9:76:
         e7:b6:0b:6a:d5:1c:e0:a8:1b:47:f3:3b:46:37:de:96:b1:80:
         05:54:dd:b9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcsAT8G9ejlo3aVGwVnlHx2L3/ZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDMkM4MENCNTlDOEUzM0M3QkI0RUQxMEJFQTU3RTIx
Q0U3NkNFRTAeFw0yNjAxMDYyMDQ2MzJaFw0yNzAxMDUyMDUxMzJaMDMxMTAvBgNV
BAMTKDc3Q0Q0QUMxRjgzRUI3RjkxRjI4NkM0NTBEQTNDNjY3RjlCOTdCODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFLGsA620GgOHttBLQqLWZJfM
VLL9YbEj0xCz++FSTBIVmwku7kFFGY8i1JC8Ewe3wj+243UGl8PpzhpEhu3wOKek
E0nxT3rzOx36hWW35pyTZa1r8NXq/sLAhIpIyWr66BvxAhLtekQ0Vm0aH4+ZH6po
XJaV3k40HD3r1t919P6us9EAzEX8muOrGGu7DNAyxNFoIqSzcP5QEAVZpMcRC9tg
/3/3+OmGEGx2V88oZvG5rNC68A8aKkuQ/qk2+WG1c+8bxEBDXigDWvq+Klvz6v/s
IQ6OuCsooWjzGkfReLgIac15Uaw/IvQXemF6yB4PWgyiVIBwyNmaNMeYZnLDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUd81Kwfg+t/kfKGxFDaPGZ/m5e4cwHwYDVR0j
BBgwFoAU18LIDLWcjjPHu07RC+pX4hznbO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkUxREYxNDEwMkQyMjlEMkEzMkVGODMwOTI3RTAzQ0Q2
NDI5MDQ0RjY3RUQ4RTIzOUVGNjExNEI5Q0EyRkY2LzAvRDdDMkM4MENCNTlDOEUz
M0M3QkI0RUQxMEJFQTU3RTIxQ0U3NkNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0MyQzgwQ0I1OUM4RTMzQzdC
QjRFRDEwQkVBNTdFMjFDRTc2Q0VFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJFMURGMTQxMDJEMjI5RDJBMzJFRjgzMDkyN0UwM0NENjQyOTA0NEY2
N0VEOEUyMzlFRjYxMTRCOUNBMkZGNi8wLzM0MzUyZTMxMzgzOTJlMzIzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3o
MA0GCSqGSIb3DQEBCwUAA4IBAQAHCyTzRgo8EYgfm1/fOjgI+0q2xTP1nBVkV0qb
ll0U4EKbPpIbSNcMdOnc5cdqGyIj8EoeqSo6OTFjCJUZcj/3HT/pvAHkbqBR3c7r
PjwkgzHkb7b9x2Nt2vLcZQ1f5Ln9msMthAJyL5+p9k6L3t+v4+pKlYHXWTiTgFm1
MrOPNocz5pnfAWLkk4MAcv52u/+b9WJuJoHm2c7wCKypDW4J2in3rnca+crs/G9x
OhVAKrxFf/QNGS8PiHT1X0m+fAZTHsWHL5AE8q+V5ljYHzuMO0prfDOCHs0Chi+n
L1AMD/v7+QyTkCtP+Xbntgtq1RzgqBtH8ztGN96WsYAFVN25
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:15 2026 by rpki-client