This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
File:                     3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          4c0SZ2CNPoc45Oip4ARa4ga0gjBfE6oDcYzQwZhD3BQ=
Subject key identifier:   43:B2:2D:03:13:97:AE:BC:D1:21:AB:58:EA:B3:E3:F1:88:98:E3:D1
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3CFA005DD6F58743393245958D2B510484BC102F
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:22 +0000
ROA not before:           Tue 06 Jan 2026 19:42:22 +0000
ROA not after:            Tue 05 Jan 2027 19:47:22 +0000
asID:                     14754
IP address blocks:        190.149.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fa:00:5d:d6:f5:87:43:39:32:45:95:8d:2b:51:04:84:bc:10:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:22 2026 GMT
            Not After : Jan  5 19:47:22 2027 GMT
        Subject: CN=43B22D031397AEBCD121AB58EAB3E3F18898E3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:4f:f3:36:32:be:50:94:3f:02:0f:21:34:
                    1b:3b:0d:28:b6:13:a0:72:50:39:3f:bf:6b:3c:c0:
                    e9:01:37:01:f0:30:0c:dd:f5:7a:75:57:8d:15:9e:
                    3e:7e:d4:17:d3:b3:db:86:15:20:d3:c2:09:db:4c:
                    2f:52:7e:4b:be:99:34:40:23:c9:3c:53:81:f5:31:
                    6e:dd:ee:10:2b:12:db:a7:81:a9:4e:f2:09:59:43:
                    23:65:89:bb:a9:44:28:b4:3e:58:3e:2b:98:31:ee:
                    2d:7b:fc:10:50:3d:31:c1:5a:a8:60:d1:3a:77:2c:
                    27:7f:68:8f:df:4f:51:65:f0:0a:fe:1b:fa:26:b4:
                    3f:c7:24:c4:7d:79:30:61:81:db:23:03:5c:10:94:
                    8e:37:02:e3:96:0b:90:d0:56:5f:8d:76:b4:f7:74:
                    10:78:64:38:19:1a:83:03:49:c1:17:cd:ea:ca:1b:
                    7c:30:97:3e:1e:73:53:a4:59:1f:ba:31:66:8a:49:
                    79:7f:55:55:0b:c1:dc:58:0d:7d:3b:2f:68:a3:bc:
                    c1:4f:46:54:0e:78:f5:a2:bf:85:55:75:2b:12:1a:
                    8c:e3:75:76:03:b3:7a:75:34:08:3a:90:d1:14:ce:
                    95:9e:e2:31:cf:51:05:41:43:b0:b5:12:79:4e:f1:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:2D:03:13:97:AE:BC:D1:21:AB:58:EA:B3:E3:F1:88:98:E3:D1
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:bd:19:d4:14:ee:94:1a:9c:b5:e6:7e:59:7c:8a:45:90:
         fa:50:8d:10:ac:37:1d:6c:05:99:b6:6b:c4:1a:e3:fa:ad:41:
         40:95:fa:3e:8d:31:b0:5b:df:31:6c:65:78:97:c9:5b:33:2a:
         e5:35:e0:b7:5b:99:c6:74:11:e6:c6:e2:c1:17:2e:5b:51:cf:
         21:27:98:e0:97:96:c2:8a:87:9c:74:2e:c2:5c:8b:86:1b:f5:
         89:bc:14:99:ef:8a:7c:62:b4:fb:f6:0e:c1:64:bb:41:30:99:
         07:1b:7d:44:7b:00:0d:b7:1d:b7:2d:2d:88:ae:99:31:ea:90:
         6c:71:99:18:6a:fa:92:46:2d:3c:1c:07:24:f1:57:66:89:3e:
         8b:0d:21:2d:a2:9b:ba:e2:9a:cf:96:cd:b6:8c:cc:49:70:b3:
         af:c7:dd:b2:e6:07:f0:45:9a:6b:f6:2a:f7:4d:a8:f1:3f:7c:
         95:bd:b8:8a:cf:e8:fd:c3:07:08:b1:65:7f:c7:fa:d6:4e:7c:
         4b:9f:ca:9f:67:eb:70:5a:bb:cc:73:0e:8a:34:96:b6:0e:d2:
         09:bc:2f:58:8d:24:8d:a4:6e:21:3f:b9:45:e4:59:25:03:95:
         7b:12:95:6c:3a:fd:71:38:fd:0c:3c:13:2b:54:2b:d9:c0:19:
         04:3c:66:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPPoAXdb1h0M5MkWVjStRBIS8EC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNjAxMDYxOTQyMjJaFw0yNzAxMDUxOTQ3MjJaMDMxMTAvBgNV
BAMTKDQzQjIyRDAzMTM5N0FFQkNEMTIxQUI1OEVBQjNFM0YxODg5OEUzRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qU/zNjK+UJQ/Ag8hNBs7DSi2
E6ByUDk/v2s8wOkBNwHwMAzd9Xp1V40Vnj5+1BfTs9uGFSDTwgnbTC9Sfku+mTRA
I8k8U4H1MW7d7hArEtungalO8glZQyNlibupRCi0Plg+K5gx7i17/BBQPTHBWqhg
0Tp3LCd/aI/fT1Fl8Ar+G/omtD/HJMR9eTBhgdsjA1wQlI43AuOWC5DQVl+NdrT3
dBB4ZDgZGoMDScEXzerKG3wwlz4ec1OkWR+6MWaKSXl/VVULwdxYDX07L2ijvMFP
RlQOePWiv4VVdSsSGozjdXYDs3p1NAg6kNEUzpWe4jHPUQVBQ7C1EnlO8eKRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQ7ItAxOXrrzRIatY6rPj8YiY49EwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDM5MmUzMTM1MzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvpWa
MA0GCSqGSIb3DQEBCwUAA4IBAQBY9L0Z1BTulBqcteZ+WXyKRZD6UI0QrDcdbAWZ
tmvEGuP6rUFAlfo+jTGwW98xbGV4l8lbMyrlNeC3W5nGdBHmxuLBFy5bUc8hJ5jg
l5bCioecdC7CXIuGG/WJvBSZ74p8YrT79g7BZLtBMJkHG31EewANtx23LS2Irpkx
6pBscZkYavqSRi08HAck8VdmiT6LDSEtopu64prPls22jMxJcLOvx92y5gfwRZpr
9ir3TajxP3yVvbiKz+j9wwcIsWV/x/rWTnxLn8qfZ+twWrvMcw6KNJa2DtIJvC9Y
jSSNpG4hP7lF5FklA5V7EpVsOv1xOP0MPBMrVCvZwBkEPGZP
-----END CERTIFICATE-----
Generated at Mon Jan 12 12:46:44 2026 by rpki-client