This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa
File:                     34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa (raw, json)
Hash identifier:          rVIiu5WVqu8Y4cV98xhMjmLXT3IdAb8P0MOsNFgJoxw=
Subject key identifier:   A9:44:C8:FD:1D:D5:B4:45:91:9B:B5:96:78:D8:5C:E8:C5:C0:EB:B4
Certificate issuer:       /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial:       470181486FEE9EA0B3E2C186E0A17AD74CC16CB0
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa
Signing time:             Fri 19 Dec 2025 18:55:36 +0000
ROA not before:           Fri 19 Dec 2025 18:50:36 +0000
ROA not after:            Fri 18 Dec 2026 18:55:36 +0000
asID:                     265613
IP address blocks:        45.189.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:01:81:48:6f:ee:9e:a0:b3:e2:c1:86:e0:a1:7a:d7:4c:c1:6c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
        Validity
            Not Before: Dec 19 18:50:36 2025 GMT
            Not After : Dec 18 18:55:36 2026 GMT
        Subject: CN=A944C8FD1DD5B445919BB59678D85CE8C5C0EBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:2f:f2:6d:59:96:b9:85:2e:0a:f1:f8:cb:
                    79:78:10:ba:32:1f:ca:40:b4:02:ec:6b:fc:60:0f:
                    bc:3a:0c:91:14:cf:b1:1a:9f:81:cf:04:29:c7:11:
                    fc:9d:8a:fc:f6:8a:eb:06:a7:ce:7f:46:56:dc:bc:
                    05:9a:62:93:e8:94:8c:ec:c3:9f:5f:44:c9:91:02:
                    5c:c1:74:4a:79:fd:f1:c5:18:ec:0c:f2:72:b5:c7:
                    f1:a1:22:7c:f6:79:5d:99:bc:e4:71:d4:9b:0f:6a:
                    f8:57:f3:cc:c5:53:d8:d9:1a:37:57:1e:ef:86:f2:
                    79:b0:1e:8c:fb:dc:16:7e:de:a7:d0:c4:4c:0c:8e:
                    ef:5b:ad:7c:29:11:50:e1:da:f4:42:77:42:18:08:
                    7b:6b:27:48:9b:66:e0:4c:46:ff:22:ba:be:28:6b:
                    06:c7:33:ca:f9:56:ce:d1:99:95:a7:25:43:b9:46:
                    69:8a:71:87:ff:36:66:ae:2b:77:87:51:a8:5b:3b:
                    31:0b:99:99:2e:14:8a:f1:fe:04:f8:39:86:fe:5d:
                    26:25:60:ec:a7:e6:54:ef:89:5c:f8:d6:8c:a6:cb:
                    53:02:01:9f:f9:41:27:c0:6c:9a:02:92:21:c0:cd:
                    d5:b9:34:aa:db:18:38:91:59:69:64:a8:b9:d6:6e:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:C8:FD:1D:D5:B4:45:91:9B:B5:96:78:D8:5C:E8:C5:C0:EB:B4
            X509v3 Authority Key Identifier:
                keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:a8:00:c0:d9:be:15:7d:38:76:a0:81:3d:65:c0:dd:1c:
         21:87:1a:c8:ce:33:ea:e2:52:25:86:e5:ab:0c:80:65:46:8e:
         68:f9:37:36:9c:bb:23:71:24:b7:dc:3c:b6:0e:ce:77:30:50:
         5a:80:de:fa:f9:02:da:5d:50:a2:d3:05:50:c0:1f:e8:47:e5:
         96:4b:ed:0d:cb:20:0f:69:96:f7:0f:45:ac:50:ab:d3:c0:f5:
         39:71:93:c4:f3:b5:80:0a:69:e1:1d:16:bc:7a:e9:f2:60:c7:
         05:ca:fa:04:71:1c:8d:bd:ff:96:6d:bb:6d:db:bf:5d:25:96:
         d3:0a:24:e6:9b:d1:2a:da:4e:5b:19:30:a0:45:b5:56:94:46:
         63:72:44:b9:1e:1c:34:83:88:7e:79:1f:5d:af:f3:86:82:e6:
         0b:c6:b5:9e:31:af:95:72:da:3a:65:e9:cc:14:ed:62:e0:0a:
         64:2f:e3:5d:97:7b:36:31:d3:c8:e8:c4:b3:13:0a:ec:02:c8:
         de:54:1c:cb:21:35:5f:68:3d:f0:bc:53:0f:d6:2a:53:97:4a:
         02:4f:7b:97:2a:1f:b7:84:46:d1:12:d2:4f:33:bf:14:9e:43:
         d7:b5:8a:60:aa:86:71:08:75:56:a4:96:d3:58:27:39:79:ad:
         4e:d1:f5:fa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURwGBSG/unqCz4sGG4KF610zBbLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNDE0RDFEQjk4RkYzRjhDMEMwMDI3MkMwMEIyOTAx
MzJDNUNDNDAeFw0yNTEyMTkxODUwMzZaFw0yNjEyMTgxODU1MzZaMDMxMTAvBgNV
BAMTKEE5NDRDOEZEMURENUI0NDU5MTlCQjU5Njc4RDg1Q0U4QzVDMEVCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpHy/ybVmWuYUuCvH4y3l4ELoy
H8pAtALsa/xgD7w6DJEUz7Ean4HPBCnHEfydivz2iusGp85/RlbcvAWaYpPolIzs
w59fRMmRAlzBdEp5/fHFGOwM8nK1x/GhInz2eV2ZvORx1JsPavhX88zFU9jZGjdX
Hu+G8nmwHoz73BZ+3qfQxEwMju9brXwpEVDh2vRCd0IYCHtrJ0ibZuBMRv8iur4o
awbHM8r5Vs7RmZWnJUO5RmmKcYf/NmauK3eHUahbOzELmZkuFIrx/gT4OYb+XSYl
YOyn5lTviVz41oymy1MCAZ/5QSfAbJoCkiHAzdW5NKrbGDiRWWlkqLnWbh5BAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqUTI/R3VtEWRm7WWeNhc6MXA67QwHwYDVR0j
BBgwFoAUMiQU0duY/z+MDAAnLACykBMsXMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUMxMzkyRUQ3MUI0QjBFRTVCODE1NzExQTQ1QjkzMTgz
NjY3ODU2MjEwQjE3MzdFMTBDOThBM0RDOTUwOTk0LzAvMzIyNDE0RDFEQjk4RkYz
RjhDMEMwMDI3MkMwMEIyOTAxMzJDNUNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjI0MTREMURCOThGRjNGOEMw
QzAwMjcyQzAwQjI5MDEzMkM1Q0M0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlDMTM5MkVENzFCNEIwRUU1QjgxNTcxMUE0NUI5MzE4MzY2Nzg1NjIx
MEIxNzM3RTEwQzk4QTNEQzk1MDk5NC8wLzM0MzUyZTMxMzgzOTJlMzIzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3+
MA0GCSqGSIb3DQEBCwUAA4IBAQA4f6gAwNm+FX04dqCBPWXA3RwhhxrIzjPq4lIl
huWrDIBlRo5o+Tc2nLsjcSS33Dy2Ds53MFBagN76+QLaXVCi0wVQwB/oR+WWS+0N
yyAPaZb3D0WsUKvTwPU5cZPE87WACmnhHRa8eunyYMcFyvoEcRyNvf+Wbbtt279d
JZbTCiTmm9Eq2k5bGTCgRbVWlEZjckS5Hhw0g4h+eR9dr/OGguYLxrWeMa+Vcto6
ZenMFO1i4ApkL+Ndl3s2MdPI6MSzEwrsAsjeVBzLITVfaD3wvFMP1ipTl0oCT3uX
Kh+3hEbREtJPM78UnkPXtYpgqoZxCHVWpJbTWCc5ea1O0fX6
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:07:18 2025 by rpki-client