This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa
File:                     34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa (raw, json)
Hash identifier:          cG/mNGqly/Dgb1V+TfniMYfR9vSbFZ7r9NAfWI49Q78=
Subject key identifier:   F3:9D:E7:53:38:20:D5:4F:DA:47:15:58:8F:6A:F3:A5:3D:09:9C:10
Certificate issuer:       /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial:       3CAFF4963F2469A9D031D92995AEC07C1598E688
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa
Signing time:             Fri 19 Dec 2025 18:55:37 +0000
ROA not before:           Fri 19 Dec 2025 18:50:37 +0000
ROA not after:            Fri 18 Dec 2026 18:55:37 +0000
asID:                     265613
IP address blocks:        45.189.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:af:f4:96:3f:24:69:a9:d0:31:d9:29:95:ae:c0:7c:15:98:e6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
        Validity
            Not Before: Dec 19 18:50:37 2025 GMT
            Not After : Dec 18 18:55:37 2026 GMT
        Subject: CN=F39DE7533820D54FDA4715588F6AF3A53D099C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:37:bf:e2:c1:d6:89:35:23:7b:a1:36:96:
                    76:b4:f9:68:e0:74:8d:8d:f2:d3:d0:95:a2:e7:3b:
                    e1:09:27:f2:bf:c1:c5:4b:3f:20:7d:09:87:6e:c5:
                    51:9e:7a:fc:85:99:6c:c1:53:1f:79:b4:45:f8:35:
                    d8:d2:67:ae:8a:0f:c3:da:f7:66:0e:a7:65:6d:cc:
                    91:ae:1c:3f:b5:1e:33:28:95:d9:77:31:9c:ac:0f:
                    aa:22:91:8e:2f:12:3f:8c:f0:4e:76:a9:29:13:3e:
                    bf:d3:5b:93:9f:a0:74:51:8e:34:80:84:13:70:2c:
                    0f:bd:e2:e1:ff:74:d1:89:3d:13:66:42:34:25:26:
                    9f:95:19:db:16:57:88:fd:87:ec:83:fe:5b:7b:e7:
                    cf:b0:68:d4:62:d7:a4:d7:34:a7:af:b8:0e:c4:79:
                    4a:77:cc:d5:29:ce:0e:79:56:b4:86:bb:89:84:eb:
                    25:01:89:43:89:e6:c5:f7:1a:45:5c:77:b6:17:54:
                    15:82:08:25:70:ba:af:93:26:81:f7:67:37:cb:72:
                    ac:00:de:af:7a:2c:2f:95:fd:c9:20:b9:1e:f9:1f:
                    f1:c6:fa:89:0b:f1:31:f7:60:0f:5c:d2:8a:4d:b7:
                    2e:11:9b:e9:14:48:7f:81:ff:d5:5b:5f:85:9f:79:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:E7:53:38:20:D5:4F:DA:47:15:58:8F:6A:F3:A5:3D:09:9C:10
            X509v3 Authority Key Identifier:
                keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:38:7a:0e:ad:85:aa:c8:29:ed:ba:c3:11:f0:37:49:3c:
         3e:04:2f:90:0c:43:43:e7:57:39:d1:30:17:6e:8d:f4:01:1a:
         11:be:1a:fa:fd:be:37:72:e9:54:d7:27:9c:a6:e6:2f:b4:c2:
         6e:38:af:fd:20:b9:22:57:6a:71:56:63:20:81:de:d4:8b:bc:
         cc:bb:e0:6e:57:d1:82:b1:8a:b7:07:66:6f:3b:36:73:21:17:
         2f:dc:5d:ec:69:71:02:68:98:2c:3e:ca:92:e5:84:f9:8e:29:
         13:5c:98:89:d8:6d:ac:56:29:fb:9b:61:2f:70:31:53:3e:fe:
         59:9c:f8:55:9a:4b:37:07:44:db:6c:78:ac:07:01:0c:ff:b2:
         c7:10:27:07:93:2d:bf:3b:d4:92:aa:7f:47:bb:0b:a6:4f:cd:
         53:70:3d:ac:39:06:d0:b1:65:a1:60:88:8e:9d:3d:7c:ea:f7:
         79:67:0e:ee:2d:04:6f:1e:9d:e3:a8:55:c8:48:03:84:15:c5:
         2b:4b:39:06:ad:0b:e9:ae:0e:02:b7:f9:bd:98:df:a9:36:c3:
         96:16:b3:fc:c0:37:90:aa:50:04:3c:88:e5:2c:d3:72:53:5e:
         9d:bb:e1:33:65:88:b2:24:95:55:c2:ff:7c:00:2d:15:4f:a3:
         c3:a9:80:c1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPK/0lj8kaanQMdkpla7AfBWY5ogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNDE0RDFEQjk4RkYzRjhDMEMwMDI3MkMwMEIyOTAx
MzJDNUNDNDAeFw0yNTEyMTkxODUwMzdaFw0yNjEyMTgxODU1MzdaMDMxMTAvBgNV
BAMTKEYzOURFNzUzMzgyMEQ1NEZEQTQ3MTU1ODhGNkFGM0E1M0QwOTlDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezze/4sHWiTUje6E2lna0+Wjg
dI2N8tPQlaLnO+EJJ/K/wcVLPyB9CYduxVGeevyFmWzBUx95tEX4NdjSZ66KD8Pa
92YOp2VtzJGuHD+1HjMoldl3MZysD6oikY4vEj+M8E52qSkTPr/TW5OfoHRRjjSA
hBNwLA+94uH/dNGJPRNmQjQlJp+VGdsWV4j9h+yD/lt758+waNRi16TXNKevuA7E
eUp3zNUpzg55VrSGu4mE6yUBiUOJ5sX3GkVcd7YXVBWCCCVwuq+TJoH3ZzfLcqwA
3q96LC+V/ckguR75H/HG+okL8TH3YA9c0opNty4Rm+kUSH+B/9VbX4Wfed5LAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU853nUzgg1U/aRxVYj2rzpT0JnBAwHwYDVR0j
BBgwFoAUMiQU0duY/z+MDAAnLACykBMsXMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUMxMzkyRUQ3MUI0QjBFRTVCODE1NzExQTQ1QjkzMTgz
NjY3ODU2MjEwQjE3MzdFMTBDOThBM0RDOTUwOTk0LzAvMzIyNDE0RDFEQjk4RkYz
RjhDMEMwMDI3MkMwMEIyOTAxMzJDNUNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjI0MTREMURCOThGRjNGOEMw
QzAwMjcyQzAwQjI5MDEzMkM1Q0M0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlDMTM5MkVENzFCNEIwRUU1QjgxNTcxMUE0NUI5MzE4MzY2Nzg1NjIx
MEIxNzM3RTEwQzk4QTNEQzk1MDk5NC8wLzM0MzUyZTMxMzgzOTJlMzIzNTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3/
MA0GCSqGSIb3DQEBCwUAA4IBAQAOgjh6Dq2Fqsgp7brDEfA3STw+BC+QDEND51c5
0TAXbo30ARoRvhr6/b43culU1yecpuYvtMJuOK/9ILkiV2pxVmMggd7Ui7zMu+Bu
V9GCsYq3B2ZvOzZzIRcv3F3saXECaJgsPsqS5YT5jikTXJiJ2G2sVin7m2EvcDFT
Pv5ZnPhVmks3B0TbbHisBwEM/7LHECcHky2/O9SSqn9HuwumT81TcD2sOQbQsWWh
YIiOnT186vd5Zw7uLQRvHp3jqFXISAOEFcUrSzkGrQvprg4Ct/m9mN+pNsOWFrP8
wDeQqlAEPIjlLNNyU16du+EzZYiyJJVVwv98AC0VT6PDqYDB
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:07:16 2025 by rpki-client