This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3230302e302f32322d3234203d3e203237393837.roa
File:                     3139302e3130332e3230302e302f32322d3234203d3e203237393837.roa (raw, json)
Hash identifier:          NYo1OfPw+ZfF0p+3iDk+cNdNOnBSCaGmF4kCkGdQb04=
Subject key identifier:   F1:95:5C:12:94:43:54:CC:A4:21:63:39:A8:DD:8C:69:54:B3:07:24
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       46331819B3C9B9745A623A527EC60FADF9326098
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3230302e302f32322d3234203d3e203237393837.roa
Signing time:             Mon 05 Jan 2026 18:40:04 +0000
ROA not before:           Mon 05 Jan 2026 18:35:04 +0000
ROA not after:            Mon 04 Jan 2027 18:40:04 +0000
asID:                     27987
IP address blocks:        190.103.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:33:18:19:b3:c9:b9:74:5a:62:3a:52:7e:c6:0f:ad:f9:32:60:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Jan  5 18:35:04 2026 GMT
            Not After : Jan  4 18:40:04 2027 GMT
        Subject: CN=F1955C12944354CCA4216339A8DD8C6954B30724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:d3:6d:a2:95:73:ee:dd:e9:cb:00:5b:54:
                    04:04:3e:12:13:09:89:03:09:81:59:f3:76:2f:b2:
                    12:0a:f9:ce:e3:41:0d:ff:a7:85:49:3f:8b:ed:0e:
                    f0:8b:8a:26:78:e8:20:0a:e5:d5:a5:ad:de:7e:4f:
                    0d:6e:c0:32:c1:9b:64:66:62:63:4f:cf:31:53:73:
                    fe:48:6a:1b:e4:c9:0f:e6:be:b1:09:c1:01:6e:d8:
                    81:e1:00:6c:7a:14:20:5b:d2:8e:5e:47:ff:da:4e:
                    f9:95:cc:21:4a:ef:d8:50:15:8c:1e:c5:f3:a1:54:
                    36:bf:f0:22:ad:eb:e3:d7:ab:04:be:60:b2:fb:13:
                    44:64:3c:2c:ba:17:db:5b:cd:4a:8d:24:2c:8d:bf:
                    21:7e:ea:66:29:28:d2:a6:c4:c8:6e:a4:af:f1:ed:
                    bf:fd:ae:e6:63:62:4b:34:9f:79:fd:56:b1:13:1b:
                    1d:90:36:59:7b:3f:eb:fc:02:88:1b:ac:a4:19:32:
                    b7:43:ec:5e:1f:a9:43:d6:4b:07:9d:30:88:22:3c:
                    ed:a5:85:3d:a0:ad:8f:80:c0:2e:7b:9c:2d:78:43:
                    b1:00:46:5d:05:e0:78:df:5e:da:b7:3c:66:85:1a:
                    d9:d9:fd:dc:c7:ed:29:a5:34:e1:26:3f:59:8f:9b:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:95:5C:12:94:43:54:CC:A4:21:63:39:A8:DD:8C:69:54:B3:07:24
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3230302e302f32322d3234203d3e203237393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:37:f8:7a:84:3d:00:e4:89:ba:b5:74:a9:f2:d8:5d:a9:
         63:26:d0:35:73:c7:b5:0a:6c:1c:87:08:6d:f7:78:a6:54:cb:
         70:8e:9a:49:26:28:c8:e2:9e:63:5c:54:a9:5f:15:2e:b8:88:
         ed:6a:25:4f:0c:fa:9e:e7:55:5c:36:a3:a5:e1:08:8b:a8:b9:
         a8:6e:85:4f:38:14:83:06:47:41:02:e4:86:dc:ae:93:28:54:
         75:4a:0c:ec:6c:89:63:56:e0:f3:cb:b2:dd:06:32:85:e7:3b:
         d1:3c:a4:c0:3b:62:e6:ef:c0:52:c3:3f:5b:19:ea:db:69:b4:
         7a:91:b5:42:6e:ec:9d:8e:fa:cb:82:d9:f8:c9:88:95:0d:3e:
         f3:1e:bc:f1:e5:53:0c:0d:dc:45:29:d7:39:02:20:d4:07:cc:
         66:6b:56:e1:8f:4b:66:38:04:ed:a1:2e:36:db:ec:0c:83:1d:
         26:9a:96:d7:49:1b:d5:de:1b:b2:f5:a6:73:15:24:e5:6b:18:
         7c:84:fc:52:c6:85:b3:fc:54:8b:b6:6a:aa:c7:2d:08:86:63:
         30:d2:51:4f:cd:f2:9b:9e:bd:06:64:8c:d1:2d:fd:54:01:b3:
         a2:88:d8:af:7a:f1:f1:8f:fe:3b:e9:94:18:b7:9a:e7:bd:5c:
         63:56:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:13:26 2026 by rpki-client