This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233322e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233322e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          N+IIN1KulfRoyB1PdVVpSGzFNn5+2gQNm45+5S9KfGw=
Subject key identifier:   BC:5A:39:70:DB:BB:A3:76:86:5C:74:B4:F0:BD:D7:D9:39:80:07:8B
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       57ACCCB984C3BAAE029A8ED17E23EDC092D51419
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233322e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:00 +0000
ROA not before:           Wed 12 Nov 2025 19:45:00 +0000
ROA not after:            Wed 11 Nov 2026 19:50:00 +0000
asID:                     52270
IP address blocks:        190.105.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:cc:b9:84:c3:ba:ae:02:9a:8e:d1:7e:23:ed:c0:92:d5:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:00 2025 GMT
            Not After : Nov 11 19:50:00 2026 GMT
        Subject: CN=BC5A3970DBBBA376865C74B4F0BDD7D93980078B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:c5:f5:2d:0a:7d:8a:ba:4c:34:cb:fc:eb:
                    4f:0d:fc:63:f9:e2:0c:f3:57:c3:db:64:07:f7:cb:
                    24:f8:e7:6f:d5:c5:e3:ba:35:e6:7c:08:91:28:3c:
                    ac:6d:cd:91:0a:e5:40:e6:6b:b7:cc:37:74:4b:ed:
                    6a:10:23:4e:ba:84:37:eb:1c:c6:2c:d7:17:58:7f:
                    02:23:2e:08:ac:da:76:f3:7e:ad:01:10:7f:de:7b:
                    15:b4:3d:3d:66:29:e0:b5:90:a4:42:56:2e:21:2a:
                    02:6a:d5:c8:b2:2e:9d:3a:e7:8c:50:20:f5:68:7c:
                    2f:53:8f:03:bc:9c:84:6b:44:1f:9a:00:41:a4:26:
                    fe:ab:f5:66:ed:d0:91:8c:a9:fe:3c:bd:37:c9:e5:
                    64:86:97:b9:9e:18:56:d7:6d:5d:2a:8b:f4:be:ef:
                    96:1d:0e:64:74:0f:a1:5a:d7:82:e6:a1:25:fa:90:
                    31:16:bc:d6:e7:71:d2:be:96:c9:2f:8f:a8:1a:35:
                    0f:71:83:9d:48:66:e2:4c:1d:b0:b8:e3:fa:cb:c5:
                    66:14:33:2c:8d:c5:b2:60:23:44:53:90:48:8a:06:
                    7e:e7:e3:99:4b:7d:52:0c:94:b1:c7:49:fb:c3:3e:
                    a4:65:da:71:c3:2a:7d:eb:68:6a:bc:26:87:5d:02:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5A:39:70:DB:BB:A3:76:86:5C:74:B4:F0:BD:D7:D9:39:80:07:8B
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233322e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:27:47:6e:2f:2b:6a:a0:3d:c7:62:8e:2d:29:a7:6e:94:
         d5:fe:bf:ac:bf:18:7b:7b:81:ad:29:70:65:90:65:32:12:10:
         e3:1b:ab:bb:72:d4:cc:13:70:e9:36:8c:d8:7c:ab:1a:08:b0:
         14:0b:dd:08:97:ea:d9:c4:b2:bf:47:f9:59:d2:f3:85:99:67:
         e2:fc:90:8c:98:95:89:0a:6e:8b:bf:95:6f:8d:75:fa:4c:65:
         95:18:0c:ee:1e:a3:ef:84:93:36:32:f8:aa:c9:39:37:55:0f:
         15:79:6f:76:4a:07:6d:f9:58:35:d5:f2:b9:35:20:96:3c:0b:
         c7:ab:d2:ed:44:83:83:f6:79:e8:36:57:8f:a7:db:6a:96:8c:
         0d:69:82:94:29:38:19:92:e7:e7:76:85:fd:fb:d8:f7:36:0a:
         d6:01:55:77:cd:39:7b:b4:72:91:19:c9:9f:58:c7:f6:a4:ca:
         9c:f3:6c:66:a6:23:27:12:24:a6:f8:33:71:f6:3c:40:78:37:
         d3:30:1f:2b:fc:90:c8:d9:81:3c:84:44:0a:4a:e0:38:c3:bf:
         f1:b5:dd:cb:b5:59:c1:2b:1b:26:12:59:3b:9d:e2:c6:78:8a:
         3e:68:c6:fb:72:29:64:cf:ef:c6:5e:39:79:78:42:c2:79:37:
         ab:71:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:11 2025 by rpki-client