This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a3a2f33322d3438203d3e20323734303739.roa
File:                     323830333a356164303a3a2f33322d3438203d3e20323734303739.roa (raw, json)
Hash identifier:          csxd7M5rKKXdcvxf5CsOncjm5bwY0Xp3CxjSvslIJiQ=
Subject key identifier:   89:1E:E0:86:7C:E3:28:A3:94:A3:81:5F:50:F8:4E:5A:93:CE:5C:1D
Certificate issuer:       /CN=5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2
Certificate serial:       4344A68591E3B97125C4179BF7696ECCEFE52B91
Authority key identifier: 5F:89:F0:CB:70:B3:F5:E0:08:FB:B3:9F:CB:83:61:77:2A:6E:FB:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a3a2f33322d3438203d3e20323734303739.roa
Signing time:             Thu 15 May 2025 01:25:00 +0000
ROA not before:           Thu 15 May 2025 01:20:00 +0000
ROA not after:            Thu 14 May 2026 01:25:00 +0000
asID:                     274079
IP address blocks:        2803:5ad0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:44:a6:85:91:e3:b9:71:25:c4:17:9b:f7:69:6e:cc:ef:e5:2b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2
        Validity
            Not Before: May 15 01:20:00 2025 GMT
            Not After : May 14 01:25:00 2026 GMT
        Subject: CN=891EE0867CE328A394A3815F50F84E5A93CE5C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:20:00:63:f6:a4:dc:dc:72:7f:53:f2:dd:
                    63:0f:f1:1f:7e:dd:9e:df:d5:d5:49:8e:52:db:52:
                    bb:6c:1b:26:8b:ca:a8:ed:51:71:7a:44:d3:59:0c:
                    1e:23:85:93:e8:e4:91:d2:1d:27:3e:22:d0:9d:5a:
                    ce:ef:c1:b0:5d:ff:ed:b5:0a:41:fd:27:eb:bc:99:
                    3a:07:a1:d9:82:4a:5f:51:f4:60:fa:78:f9:0f:d0:
                    54:09:ee:ca:14:c2:8d:84:0c:04:23:b5:32:44:03:
                    75:1d:eb:38:10:f8:24:66:dd:09:f6:65:ec:c6:a0:
                    ef:5e:6a:89:e3:0b:c6:ff:93:a1:bd:46:84:51:5d:
                    84:38:35:49:b6:02:45:ab:18:62:ac:93:6b:de:6a:
                    f0:e5:f4:fe:a8:36:0e:16:67:c6:be:dd:ce:60:dc:
                    05:b4:b4:9c:3d:68:27:5f:f8:86:36:ee:e0:a8:40:
                    dd:1e:00:25:5d:23:a7:fb:82:48:97:b8:ae:2c:53:
                    90:de:a0:1e:0b:de:65:9b:c8:ca:4f:b3:4e:b4:8b:
                    48:cd:8d:cf:5c:ec:1a:c9:c4:03:81:de:cd:5a:2a:
                    f5:0f:f5:b3:9e:2d:f9:45:d1:74:39:4b:bb:4c:a5:
                    92:0d:40:63:c4:2c:37:ef:02:ea:31:41:fc:9b:6c:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:E0:86:7C:E3:28:A3:94:A3:81:5F:50:F8:4E:5A:93:CE:5C:1D
            X509v3 Authority Key Identifier:
                keyid:5F:89:F0:CB:70:B3:F5:E0:08:FB:B3:9F:CB:83:61:77:2A:6E:FB:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/323830333a356164303a3a2f33322d3438203d3e20323734303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:4c:73:3a:cd:b7:47:71:0b:0a:47:2b:0f:10:97:dc:b7:1b:
         c3:df:d3:a7:fe:9d:af:31:6a:d9:da:e2:1e:a1:12:e6:44:75:
         d3:8a:cf:85:c7:55:a4:4f:b6:31:f4:b0:6d:22:9d:e4:41:f9:
         e5:04:86:d2:a4:84:56:f1:91:87:da:0e:e4:cd:d8:02:0c:f3:
         d3:a7:30:8f:10:cd:a0:65:3b:98:ca:69:41:1a:25:83:ac:74:
         1c:28:f0:33:1b:ec:fb:85:e0:65:2b:f2:5f:17:35:cd:d9:e4:
         d4:05:3b:aa:64:49:28:0c:5c:e0:ee:0d:8f:53:5c:28:28:c4:
         e0:e1:8e:8a:a4:19:f0:06:56:e6:24:93:85:5c:ff:ee:60:15:
         d2:20:a4:d2:18:d7:41:5c:fd:9b:82:78:c4:a2:9a:b9:04:69:
         a5:92:5a:0b:7f:0f:26:03:fc:d7:60:3c:67:ef:fa:d6:d0:a9:
         44:b3:db:23:84:78:77:f3:6e:fa:33:13:84:f0:8d:fe:eb:1a:
         1c:72:99:17:b6:57:aa:d0:e0:dc:91:c8:10:ad:5f:3f:72:d1:
         22:ac:41:cf:51:05:e3:d5:54:06:f1:03:c6:22:ee:e1:02:9a:
         f8:0e:92:00:b3:82:5c:fc:bd:d9:a7:fd:7e:3f:6f:6f:83:da:
         69:6e:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----