This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B311A6B39F2C7EB67E33D0A2607D3000933581FE643E48914CD66491D36F29/0/34352e3233362e3134302e302f32322d3234203d3e20323731393239.roa
File:                     34352e3233362e3134302e302f32322d3234203d3e20323731393239.roa (raw, json)
Hash identifier:          6gqUtUPemEebnpU0lTBCl4Isa8dbI9PK4Wogjl6P8AE=
Subject key identifier:   BC:A7:DB:57:03:3D:48:3E:1B:B3:6B:98:71:3A:8F:0C:4B:70:19:ED
Certificate issuer:       /CN=DAA66CABC135329FEE3775CA2BB2BB60826D8028
Certificate serial:       36C277A1D978931C339F6947F734D4605D36994F
Authority key identifier: DA:A6:6C:AB:C1:35:32:9F:EE:37:75:CA:2B:B2:BB:60:82:6D:80:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAA66CABC135329FEE3775CA2BB2BB60826D8028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B311A6B39F2C7EB67E33D0A2607D3000933581FE643E48914CD66491D36F29/0/34352e3233362e3134302e302f32322d3234203d3e20323731393239.roa
Signing time:             Tue 06 Jan 2026 19:32:16 +0000
ROA not before:           Tue 06 Jan 2026 19:27:16 +0000
ROA not after:            Tue 05 Jan 2027 19:32:16 +0000
asID:                     271929
IP address blocks:        45.236.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B311A6B39F2C7EB67E33D0A2607D3000933581FE643E48914CD66491D36F29/0/DAA66CABC135329FEE3775CA2BB2BB60826D8028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B311A6B39F2C7EB67E33D0A2607D3000933581FE643E48914CD66491D36F29/0/DAA66CABC135329FEE3775CA2BB2BB60826D8028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAA66CABC135329FEE3775CA2BB2BB60826D8028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 22:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c2:77:a1:d9:78:93:1c:33:9f:69:47:f7:34:d4:60:5d:36:99:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAA66CABC135329FEE3775CA2BB2BB60826D8028
        Validity
            Not Before: Jan  6 19:27:16 2026 GMT
            Not After : Jan  5 19:32:16 2027 GMT
        Subject: CN=BCA7DB57033D483E1BB36B98713A8F0C4B7019ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:3d:9f:c6:13:f6:59:6b:d0:6c:99:72:1d:
                    fa:43:cc:09:68:c2:46:e4:fb:16:87:74:20:58:df:
                    83:7e:03:de:9b:03:6f:16:5b:98:0f:a7:9b:26:14:
                    a7:6c:cd:26:25:e8:89:86:c3:a5:b2:4b:24:e5:f4:
                    bb:a6:f2:ba:2f:64:84:b8:89:d4:29:7a:fc:30:6b:
                    3a:4a:fc:c8:87:70:8e:c0:59:f2:2d:72:5f:10:27:
                    5d:e5:fc:5f:6c:88:ec:eb:13:3c:b5:18:fa:5a:09:
                    06:23:92:1f:f7:a3:de:46:fa:4a:eb:6c:bf:3a:e6:
                    39:ca:2f:c2:66:46:bd:54:92:29:92:2a:7d:14:60:
                    d2:b5:36:15:13:a7:fc:c9:96:ff:fd:95:0d:d7:b6:
                    f0:90:1d:3b:d0:34:b4:58:c9:6c:bd:d3:51:f3:17:
                    71:be:6e:68:d5:42:34:51:cd:b6:7e:db:38:38:3c:
                    0a:50:d0:af:a7:97:2b:07:0b:b1:8a:1a:02:25:ad:
                    93:09:23:d5:00:26:f1:e8:95:1b:1d:5a:38:b5:28:
                    6e:20:1f:7f:43:40:01:ed:11:59:68:fb:36:0a:67:
                    83:74:dc:a5:fd:49:f9:ed:43:ba:67:42:5a:e5:77:
                    2e:dc:3c:44:6a:67:56:f2:44:3a:dd:a5:f4:ad:d7:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A7:DB:57:03:3D:48:3E:1B:B3:6B:98:71:3A:8F:0C:4B:70:19:ED
            X509v3 Authority Key Identifier:
                keyid:DA:A6:6C:AB:C1:35:32:9F:EE:37:75:CA:2B:B2:BB:60:82:6D:80:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B311A6B39F2C7EB67E33D0A2607D3000933581FE643E48914CD66491D36F29/0/DAA66CABC135329FEE3775CA2BB2BB60826D8028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAA66CABC135329FEE3775CA2BB2BB60826D8028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B311A6B39F2C7EB67E33D0A2607D3000933581FE643E48914CD66491D36F29/0/34352e3233362e3134302e302f32322d3234203d3e20323731393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:12:07:36:82:a0:1c:26:e5:86:8d:c8:3b:8f:8d:41:54:83:
         8e:81:ce:4a:10:16:4b:24:dc:6b:47:54:90:a6:6a:0e:98:8f:
         df:d4:c5:14:46:dc:42:fd:6b:ba:c4:30:83:b7:c3:98:d7:ef:
         70:13:1f:8b:cf:92:43:1d:b4:d0:4c:2f:77:ea:06:f8:0b:b6:
         08:2f:f0:21:12:9d:97:b4:88:7c:c9:50:ac:59:69:35:18:dd:
         53:c1:4d:04:a7:20:65:d0:28:69:8a:d1:92:7d:f5:56:f5:c8:
         49:4c:d8:e4:e4:45:ca:37:a7:ac:34:34:f1:c0:54:40:4d:5d:
         5b:85:40:42:f3:75:71:04:6a:bd:43:93:76:2c:31:a2:8e:01:
         6c:a2:70:d2:f9:4f:22:ab:b5:57:d2:88:7a:4e:73:d6:18:83:
         31:fe:f7:a1:8f:a0:f9:c5:4b:49:dc:cb:9f:8c:16:82:dc:4a:
         1b:f8:ce:58:97:5b:e1:58:df:8e:43:56:ab:b8:5d:68:32:8c:
         b4:62:96:f9:eb:93:76:04:74:e4:91:c2:36:7d:de:e1:a2:a7:
         bb:f7:9e:bf:ba:f8:bc:eb:ef:b1:ec:c5:00:e4:ef:1d:d0:cd:
         77:09:3f:e4:64:c1:80:72:34:9c:33:d0:a5:91:28:44:22:df:
         5b:f1:96:8e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNsJ3odl4kxwzn2lH9zTUYF02mU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFBNjZDQUJDMTM1MzI5RkVFMzc3NUNBMkJCMkJCNjA4
MjZEODAyODAeFw0yNjAxMDYxOTI3MTZaFw0yNzAxMDUxOTMyMTZaMDMxMTAvBgNV
BAMTKEJDQTdEQjU3MDMzRDQ4M0UxQkIzNkI5ODcxM0E4RjBDNEI3MDE5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PD2fxhP2WWvQbJlyHfpDzAlo
wkbk+xaHdCBY34N+A96bA28WW5gPp5smFKdszSYl6ImGw6WySyTl9Lum8rovZIS4
idQpevwwazpK/MiHcI7AWfItcl8QJ13l/F9siOzrEzy1GPpaCQYjkh/3o95G+krr
bL865jnKL8JmRr1UkimSKn0UYNK1NhUTp/zJlv/9lQ3XtvCQHTvQNLRYyWy901Hz
F3G+bmjVQjRRzbZ+2zg4PApQ0K+nlysHC7GKGgIlrZMJI9UAJvHolRsdWji1KG4g
H39DQAHtEVlo+zYKZ4N03KX9SfntQ7pnQlrldy7cPERqZ1byRDrdpfSt1/eRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvKfbVwM9SD4bs2uYcTqPDEtwGe0wHwYDVR0j
BBgwFoAU2qZsq8E1Mp/uN3XKK7K7YIJtgCgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEIzMTFBNkIzOUYyQzdFQjY3RTMzRDBBMjYwN0QzMDAw
OTMzNTgxRkU2NDNFNDg5MTRDRDY2NDkxRDM2RjI5LzAvREFBNjZDQUJDMTM1MzI5
RkVFMzc3NUNBMkJCMkJCNjA4MjZEODAyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQUE2NkNBQkMxMzUzMjlGRUUz
Nzc1Q0EyQkIyQkI2MDgyNkQ4MDI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBCMzExQTZCMzlGMkM3RUI2N0UzM0QwQTI2MDdEMzAwMDkzMzU4MUZF
NjQzRTQ4OTE0Q0Q2NjQ5MUQzNkYyOS8wLzM0MzUyZTMyMzMzNjJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeyM
MA0GCSqGSIb3DQEBCwUAA4IBAQAIEgc2gqAcJuWGjcg7j41BVIOOgc5KEBZLJNxr
R1SQpmoOmI/f1MUURtxC/Wu6xDCDt8OY1+9wEx+Lz5JDHbTQTC936gb4C7YIL/Ah
Ep2XtIh8yVCsWWk1GN1TwU0EpyBl0ChpitGSffVW9chJTNjk5EXKN6esNDTxwFRA
TV1bhUBC83VxBGq9Q5N2LDGijgFsonDS+U8iq7VX0oh6TnPWGIMx/vehj6D5xUtJ
3MufjBaC3Eob+M5Yl1vhWN+OQ1aruF1oMoy0Ypb565N2BHTkkcI2fd7hoqe7956/
uvi86++x7MUA5O8d0M13CT/kZMGAcjScM9ClkShEIt9b8ZaO
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:07:23 2026 by rpki-client