This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa
File:                     3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (raw, json)
Hash identifier:          s11zXRTEFefDg7yLU3/zO/pzBv0q8PSmB7/FhqDc+vE=
Subject key identifier:   D8:26:23:AD:78:8B:CF:01:FD:55:C9:C1:A2:78:7D:A8:73:BB:27:C2
Certificate issuer:       /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
Certificate serial:       04C95C0CCB3343FA2FCF568774F6DF8DD950C45D
Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa
Signing time:             Tue 06 Jan 2026 19:04:40 +0000
ROA not before:           Tue 06 Jan 2026 18:59:40 +0000
ROA not after:            Tue 05 Jan 2027 19:04:40 +0000
asID:                     263817
IP address blocks:        138.185.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c9:5c:0c:cb:33:43:fa:2f:cf:56:87:74:f6:df:8d:d9:50:c4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
        Validity
            Not Before: Jan  6 18:59:40 2026 GMT
            Not After : Jan  5 19:04:40 2027 GMT
        Subject: CN=D82623AD788BCF01FD55C9C1A2787DA873BB27C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:98:c5:3c:6b:e6:99:78:6b:3a:f3:7b:b8:
                    83:40:ac:db:45:65:68:bd:ed:3d:58:37:af:94:12:
                    f7:ab:99:c0:56:37:e3:e9:3f:8c:9c:12:dd:b5:8f:
                    c1:ea:44:3c:f2:57:6c:1e:25:0a:93:74:c2:5e:8f:
                    34:f0:52:cb:58:2c:a6:9f:26:0e:d0:c5:69:f4:3e:
                    59:3a:a5:f0:4c:70:c1:e4:b9:a2:82:22:f9:82:03:
                    33:33:fb:b5:81:ef:88:c9:b6:5c:38:bf:48:c7:6c:
                    47:31:31:2a:c5:58:c7:09:d7:e4:1d:00:ba:1b:46:
                    1a:39:e5:3a:75:0a:2e:bf:17:87:96:7a:e0:68:81:
                    44:8b:7e:df:1c:c7:07:c9:2a:e3:ba:eb:69:10:7f:
                    99:3d:10:9f:b1:d7:df:02:04:fd:55:96:4f:04:be:
                    cd:a7:d8:f9:72:c4:2c:86:1b:fc:04:a6:9f:bc:e6:
                    47:a8:1f:13:9e:dd:ac:d1:f3:1b:9f:be:72:91:ef:
                    b5:d4:9a:34:db:b9:65:7e:9d:96:6a:51:8d:8f:22:
                    0e:17:97:c3:19:ea:cb:0c:00:57:a0:4f:23:40:b4:
                    93:08:b7:1a:50:6e:27:14:6c:ed:59:00:ab:da:b5:
                    77:02:43:8e:e7:0e:f7:3d:33:02:ca:24:39:56:ce:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:26:23:AD:78:8B:CF:01:FD:55:C9:C1:A2:78:7D:A8:73:BB:27:C2
            X509v3 Authority Key Identifier:
                keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:5d:78:c5:5a:96:b9:1b:ca:ce:47:cd:f0:f9:b6:f0:36:
         dd:69:5f:72:c8:f4:f4:4f:7c:01:64:39:c3:d0:b4:76:ed:51:
         16:72:a8:d9:0b:d9:b9:25:4d:c9:c7:15:9a:52:c0:9d:32:5b:
         79:4f:40:73:a1:b2:ed:cc:73:05:8d:e5:7f:de:fd:e8:83:7a:
         f7:0f:c4:63:30:38:77:7c:4f:ea:ec:02:a4:52:bb:e8:2e:1d:
         62:bd:cd:3e:fc:5d:79:e3:e3:f8:b7:c0:12:69:42:fb:03:f7:
         3b:aa:68:72:5a:e1:93:e7:9f:cf:f8:9f:1c:f2:82:39:ad:59:
         8d:48:d2:49:27:20:19:50:a2:6f:70:35:88:8a:37:93:40:05:
         3f:7a:56:ea:3e:bb:44:54:08:c0:e0:80:02:6d:5a:b1:28:a5:
         ca:5e:56:40:58:05:82:e2:08:a1:52:2b:6d:07:08:07:cc:42:
         64:1c:65:d7:4d:b8:31:b7:f4:e2:ec:62:d8:bb:0c:19:99:de:
         a9:18:d6:98:50:a2:44:92:ad:0e:67:32:75:73:ff:f2:d5:1e:
         4a:22:f7:c7:75:6b:f8:ef:67:d4:ed:56:d0:7c:e6:1c:d2:8e:
         3a:57:d8:ce:2d:1f:2b:b7:83:96:71:43:fb:36:9e:6f:0d:ba:
         d3:32:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----