This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3235203d3e20323636363832.roa
File:                     34352e3232382e37362e302f32322d3235203d3e20323636363832.roa (raw, json)
Hash identifier:          8d844V7hlqgHVpfkLOupzGPT2pBVcmBmlUToxMnZCK4=
Subject key identifier:   24:CC:3B:E8:49:B2:7A:39:6C:C2:84:34:F0:7E:66:AD:A3:52:4A:D4
Certificate issuer:       /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial:       01ED71961F6480EB058D20C741A6A18E3A2E096D
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3235203d3e20323636363832.roa
Signing time:             Tue 06 Jan 2026 19:09:04 +0000
ROA not before:           Tue 06 Jan 2026 19:04:04 +0000
ROA not after:            Tue 05 Jan 2027 19:09:04 +0000
asID:                     266682
IP address blocks:        45.228.76.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ed:71:96:1f:64:80:eb:05:8d:20:c7:41:a6:a1:8e:3a:2e:09:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
        Validity
            Not Before: Jan  6 19:04:04 2026 GMT
            Not After : Jan  5 19:09:04 2027 GMT
        Subject: CN=24CC3BE849B27A396CC28434F07E66ADA3524AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:18:20:2c:b2:52:3d:34:ea:c8:63:31:e1:
                    ea:85:dc:e4:eb:18:a4:61:64:73:a3:da:00:17:2d:
                    b6:93:8c:2f:ef:7a:61:5b:fa:29:03:00:5e:a0:aa:
                    7a:59:12:a3:44:cd:06:3a:9a:e9:6a:3c:c4:1c:b4:
                    3b:e9:10:99:09:cd:92:69:59:b2:28:31:c8:66:71:
                    ef:80:72:f2:85:63:e6:7d:7c:fe:ac:a2:b0:b5:bb:
                    7a:62:2c:a0:fb:89:0a:f7:ff:5f:27:ad:cc:44:2a:
                    03:39:75:b2:26:84:64:e2:31:6a:ad:34:e8:58:30:
                    63:ed:70:a0:81:a3:84:b7:1a:69:95:bc:1b:dc:31:
                    3f:a9:db:cb:a4:27:70:5c:db:e5:ca:89:75:73:9c:
                    01:96:87:ba:57:ff:11:53:ef:d9:48:df:55:d3:85:
                    74:dc:e6:75:45:18:e0:9a:37:13:bf:5c:58:05:d9:
                    34:c5:74:10:fa:5e:dd:fe:ab:36:e0:39:79:6c:ea:
                    6e:cb:c5:6c:55:f4:69:56:7e:8e:af:98:3a:42:7f:
                    70:12:68:48:4d:e0:a5:0d:2e:7d:a8:3a:0e:dc:92:
                    a9:59:dc:db:ba:74:92:68:4c:f1:99:2c:83:c4:fe:
                    6d:64:a4:dd:c0:0a:07:23:50:2a:1a:52:e7:25:39:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:3B:E8:49:B2:7A:39:6C:C2:84:34:F0:7E:66:AD:A3:52:4A:D4
            X509v3 Authority Key Identifier:
                keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3235203d3e20323636363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:ba:20:36:3b:92:c8:b1:0b:63:1e:2c:9a:1a:07:e8:c4:
         47:0e:7f:59:24:7d:16:f1:08:a3:14:d6:fe:cc:b0:73:9a:e1:
         ba:ea:4c:3f:7c:a7:6e:ef:cf:09:84:ad:d2:be:93:5b:cd:11:
         01:7d:24:6b:57:d8:36:56:4b:43:9f:e8:b9:15:ca:c9:5c:55:
         33:28:e1:dd:90:06:43:e1:39:21:9d:55:1d:a7:6d:1e:1e:79:
         9b:c5:f9:ce:19:93:5b:8c:ff:05:03:df:bc:e6:66:ca:85:49:
         fb:84:64:6f:ba:48:90:9e:83:be:1d:de:54:04:7d:88:39:42:
         bd:83:bc:83:5c:ab:f8:46:2b:bc:87:af:c7:8e:33:71:55:be:
         f0:c4:0d:27:c6:9b:c0:1e:07:f1:fd:80:fd:fa:c8:29:00:d4:
         59:fd:fa:69:2b:34:7c:b5:21:3e:4b:e1:11:93:e8:e0:19:08:
         f1:0e:cd:4b:5c:f8:da:e9:ca:34:61:8f:29:05:46:83:ae:97:
         4b:73:1f:a5:e6:ec:aa:4c:a8:84:dd:99:bd:78:5a:bb:ae:be:
         0f:62:72:92:9e:c6:14:0d:60:a5:c2:ec:58:34:41:ab:b3:be:
         88:8c:1c:8b:d9:a8:34:08:ff:69:a7:d4:d2:83:8c:47:04:44:
         fd:33:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:38:02 2026 by rpki-client