This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa
File:                     3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          X0dF4FbWB4MWrPpZwHtCtyJvCOyoJ0Cc+US0FZX5bmg=
Subject key identifier:   41:A8:27:19:E5:95:4E:E8:E9:40:E5:68:F2:E7:0C:0D:D8:AF:40:D5
Certificate issuer:       /CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
Certificate serial:       4D671C0B444F4ECD2EF2DECC8630183303CFB7B4
Authority key identifier: 45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa
Signing time:             Tue 06 Jan 2026 19:40:42 +0000
ROA not before:           Tue 06 Jan 2026 19:35:42 +0000
ROA not after:            Tue 05 Jan 2027 19:40:42 +0000
asID:                     271795
IP address blocks:        190.12.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:67:1c:0b:44:4f:4e:cd:2e:f2:de:cc:86:30:18:33:03:cf:b7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
        Validity
            Not Before: Jan  6 19:35:42 2026 GMT
            Not After : Jan  5 19:40:42 2027 GMT
        Subject: CN=41A82719E5954EE8E940E568F2E70C0DD8AF40D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:47:50:2e:e8:32:d3:78:fe:4f:19:20:81:
                    1e:b6:ed:22:7f:23:a0:7e:37:76:8b:a0:34:f3:bc:
                    d1:3a:c8:68:43:46:0d:74:24:b4:79:61:3b:b1:55:
                    9a:46:9f:43:a3:2a:9a:9f:89:59:37:79:03:4d:e5:
                    b1:78:6b:1d:da:82:22:0a:86:3e:d0:73:02:0a:2e:
                    36:3e:31:80:6a:0d:c8:73:05:e2:68:64:bc:81:8e:
                    06:8f:c5:c3:de:85:46:de:98:08:81:0b:88:7a:1b:
                    94:31:9a:b6:18:36:17:e8:68:c5:68:f0:5b:32:97:
                    f5:8d:b1:80:fc:93:86:51:17:d4:41:02:e9:13:9d:
                    46:2f:4d:5f:76:35:ee:1c:11:ba:1f:2f:fe:01:4d:
                    80:c6:f7:21:0b:ed:4a:09:6c:99:22:eb:70:ae:d6:
                    dc:76:2c:97:5c:31:c1:d2:8c:48:ba:39:49:49:6c:
                    43:74:36:e1:23:e4:f1:7e:b2:08:0d:73:b2:c6:b0:
                    b8:3a:4a:07:b8:f8:30:25:c1:d8:25:cb:1d:01:c6:
                    10:d8:1b:23:d0:ef:04:3f:fb:ac:13:65:9a:1a:ac:
                    bd:07:ab:16:02:64:d5:a8:74:44:42:48:72:81:d5:
                    a0:ac:07:3e:31:68:b7:26:13:d6:99:2b:0c:06:16:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A8:27:19:E5:95:4E:E8:E9:40:E5:68:F2:E7:0C:0D:D8:AF:40:D5
            X509v3 Authority Key Identifier:
                keyid:45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:4f:87:b6:4f:f8:9f:ac:f5:06:7b:b2:cb:a7:a0:42:c9:
         68:91:11:2e:24:19:d3:e5:51:6d:1e:a4:4b:cc:8d:e9:d5:89:
         94:90:71:21:4f:be:74:08:78:12:bb:6e:79:fe:08:4a:03:3e:
         46:ee:7b:ce:22:5b:b5:0a:8b:05:78:8c:05:5d:ea:72:f6:66:
         b4:49:d9:8b:0c:83:e1:ff:fb:71:3e:e7:ac:a1:57:ef:fb:b9:
         1e:a6:19:b0:73:75:d1:6b:a6:b6:d0:81:c1:41:26:76:7d:6f:
         66:02:d1:c9:08:35:a4:58:83:79:3b:f6:2b:06:f0:ec:b7:80:
         de:67:c5:3e:18:50:d7:95:ce:69:63:cb:6c:b8:c7:ad:66:3d:
         91:34:98:e0:7c:8f:c2:9c:ad:2e:62:24:1d:2b:6b:45:18:f6:
         7c:d5:9e:a2:58:aa:ba:3b:f1:9e:41:b5:5d:dd:34:b4:a7:5a:
         5b:9d:d3:2b:c2:36:4e:35:4e:f4:35:88:68:82:bc:93:d7:44:
         b8:f6:dd:5e:1a:34:70:23:ed:78:ff:80:96:de:33:75:9e:f4:
         2b:f2:a1:38:1f:0a:73:ef:33:3f:65:44:c5:63:b3:b6:19:96:
         c5:eb:ef:b1:8f:83:02:82:b5:7d:8d:6e:c3:3a:13:ea:61:89:
         93:34:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:04 2026 by rpki-client