This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa
File:                     3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa (raw, json)
Hash identifier:          blxNi1/0d+YtoxeQ+14YAkq5e14QFErtw4pC18tjpKI=
Subject key identifier:   6C:62:8F:30:E1:30:29:DC:5D:BC:A9:F0:BB:CD:29:CE:CD:22:69:57
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       1154AE603C5153567CFBFE359FF30786E3173CC0
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa
Signing time:             Tue 06 Jan 2026 19:21:09 +0000
ROA not before:           Tue 06 Jan 2026 19:16:09 +0000
ROA not after:            Tue 05 Jan 2027 19:21:09 +0000
asID:                     28432
IP address blocks:        201.131.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:54:ae:60:3c:51:53:56:7c:fb:fe:35:9f:f3:07:86:e3:17:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Jan  6 19:16:09 2026 GMT
            Not After : Jan  5 19:21:09 2027 GMT
        Subject: CN=6C628F30E13029DC5DBCA9F0BBCD29CECD226957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:29:bf:77:5f:95:0b:72:50:cd:83:6f:2e:
                    f7:53:71:27:aa:92:03:c2:6b:2c:0a:22:4d:fa:f5:
                    f7:6d:ef:72:8d:40:a7:82:46:45:e2:37:39:15:42:
                    47:f9:3f:c3:80:f4:84:75:39:34:ea:9c:31:85:58:
                    61:8a:34:38:c7:dc:0f:2f:b2:d4:6a:43:71:36:b0:
                    60:b4:97:7b:94:8e:c9:83:02:b1:2c:ea:f5:12:5f:
                    06:98:d9:12:5a:94:fb:93:42:b1:b6:c1:00:77:10:
                    88:ff:66:1b:71:d7:c1:f6:87:03:83:78:fc:63:cb:
                    66:e3:e0:8e:bf:55:9f:79:3a:aa:9c:7d:f8:bf:90:
                    e3:2c:e0:5e:18:ac:ca:d1:e4:73:29:82:d1:e6:24:
                    b1:1f:f7:01:ba:76:81:e6:69:ff:1f:4e:74:11:b6:
                    7f:c9:1d:c8:84:ec:e2:e8:be:90:9f:de:58:95:3a:
                    47:72:30:f3:81:ee:6d:79:fc:2a:8e:2e:33:e2:3d:
                    c5:d8:5d:20:9e:ff:01:08:b5:e9:f4:0b:71:4f:bc:
                    d1:7c:cb:a0:d5:7b:5b:09:ce:13:0e:b6:0f:ef:b8:
                    e9:d9:31:eb:2e:20:36:10:b3:97:0b:b9:47:cc:b2:
                    a0:4c:f1:f3:b2:81:c0:b6:0d:07:ff:f7:3f:ec:96:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:62:8F:30:E1:30:29:DC:5D:BC:A9:F0:BB:CD:29:CE:CD:22:69:57
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:27:54:49:f1:63:59:22:95:fd:64:91:77:3f:83:24:fd:
         69:0b:12:3e:c4:4c:83:29:3d:e4:82:c0:9e:53:17:70:cc:b3:
         a9:61:2a:f1:62:d0:22:1b:6a:e7:19:d3:b5:59:52:a2:1c:1f:
         39:80:33:0f:27:11:3b:7f:db:ab:0e:5a:e1:13:24:68:45:92:
         69:9d:1c:ce:67:bc:57:c4:e3:85:02:b1:c0:16:3f:aa:03:ad:
         e9:d2:da:49:57:1e:8a:78:d5:04:00:ed:af:25:c3:40:db:40:
         49:fd:b6:4b:0d:bd:24:0b:11:6f:54:e0:11:94:a2:ab:16:57:
         b4:7a:19:dd:1a:6c:be:32:f8:34:d3:5e:61:a2:54:22:82:a7:
         ff:13:fe:77:2c:89:45:e1:e7:7b:05:d3:6d:b1:8d:d5:b0:c6:
         cd:9c:21:63:89:94:0d:d6:27:a0:69:e3:4e:df:7d:f3:70:9e:
         f7:3a:88:81:37:b8:e2:83:bc:7f:78:9b:44:9f:91:19:5f:60:
         55:7d:87:23:b6:16:08:f0:c6:11:13:e3:0b:af:02:d1:d6:0f:
         82:29:76:9b:26:10:1a:02:07:e3:a0:09:69:e9:56:d5:02:da:
         61:f7:3d:85:c6:06:82:f2:da:c6:ec:82:a6:03:97:fe:6d:07:
         d9:b1:05:65
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEVSuYDxRU1Z8+/41n/MHhuMXPMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCRjM1NUEzODI2M0RBQzBDNEYzRDgyNEYyQTQyRTg4
Qjc4QTFCNjAeFw0yNjAxMDYxOTE2MDlaFw0yNzAxMDUxOTIxMDlaMDMxMTAvBgNV
BAMTKDZDNjI4RjMwRTEzMDI5REM1REJDQTlGMEJCQ0QyOUNFQ0QyMjY5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KCm/d1+VC3JQzYNvLvdTcSeq
kgPCaywKIk369fdt73KNQKeCRkXiNzkVQkf5P8OA9IR1OTTqnDGFWGGKNDjH3A8v
stRqQ3E2sGC0l3uUjsmDArEs6vUSXwaY2RJalPuTQrG2wQB3EIj/Zhtx18H2hwOD
ePxjy2bj4I6/VZ95Oqqcffi/kOMs4F4YrMrR5HMpgtHmJLEf9wG6doHmaf8fTnQR
tn/JHciE7OLovpCf3liVOkdyMPOB7m15/CqOLjPiPcXYXSCe/wEIten0C3FPvNF8
y6DVe1sJzhMOtg/vuOnZMesuIDYQs5cLuUfMsqBM8fOygcC2DQf/9z/slkCfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbGKPMOEwKdxdvKnwu80pzs0iaVcwHwYDVR0j
BBgwFoAUGb81WjgmPawMTz2CTypC6It4obYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEM0NDk5QzEzODcxQzAxQ0MxM0M0RDMyNzNBOEFDRjEx
NjcxRjA3MTMwMDI5Mzk4ODJFREFEREREQzU3NUQ1LzAvMTlCRjM1NUEzODI2M0RB
QzBDNEYzRDgyNEYyQTQyRTg4Qjc4QTFCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOUJGMzU1QTM4MjYzREFDMEM0
RjNEODI0RjJBNDJFODhCNzhBMUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDNDQ5OUMxMzg3MUMwMUNDMTNDNEQzMjczQThBQ0YxMTY3MUYwNzEz
MDAyOTM5ODgyRURBREREREM1NzVENS8wLzMyMzAzMTJlMzEzMzMxMmUzMjMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzQzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyYPs
MA0GCSqGSIb3DQEBCwUAA4IBAQAj8SdUSfFjWSKV/WSRdz+DJP1pCxI+xEyDKT3k
gsCeUxdwzLOpYSrxYtAiG2rnGdO1WVKiHB85gDMPJxE7f9urDlrhEyRoRZJpnRzO
Z7xXxOOFArHAFj+qA63p0tpJVx6KeNUEAO2vJcNA20BJ/bZLDb0kCxFvVOARlKKr
Fle0ehndGmy+Mvg0015holQigqf/E/53LIlF4ed7BdNtsY3VsMbNnCFjiZQN1ieg
aeNO333zcJ73OoiBN7jig7x/eJtEn5EZX2BVfYcjthYI8MYRE+MLrwLR1g+CKXab
JhAaAgfjoAlp6VbVAtph9z2FxgaC8trG7IKmA5f+bQfZsQVl
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:12 2026 by rpki-client