This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3230352e302f32342d3234203d3e20323634373930.roa
File:                     3139302e3130332e3230352e302f32342d3234203d3e20323634373930.roa (raw, json)
Hash identifier:          orR8a1xPTB6htG1oO4OQJJ0gIB+wgG0VJ5XNUvGVW8k=
Subject key identifier:   97:22:39:55:D4:1A:D4:11:48:F7:76:AE:6C:0A:6D:DD:E3:51:64:88
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       31FDF8502B10EFC494BEF49312E9496D414C09AF
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3230352e302f32342d3234203d3e20323634373930.roa
Signing time:             Tue 30 Dec 2025 14:35:02 +0000
ROA not before:           Tue 30 Dec 2025 14:30:02 +0000
ROA not after:            Tue 29 Dec 2026 14:35:02 +0000
asID:                     264790
IP address blocks:        190.103.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fd:f8:50:2b:10:ef:c4:94:be:f4:93:12:e9:49:6d:41:4c:09:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Dec 30 14:30:02 2025 GMT
            Not After : Dec 29 14:35:02 2026 GMT
        Subject: CN=97223955D41AD41148F776AE6C0A6DDDE3516488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:08:ff:71:aa:da:d2:fc:24:a4:59:34:7b:
                    c6:af:ec:3a:9c:21:08:63:a8:aa:50:c9:63:15:63:
                    62:bc:2a:e9:72:6a:f4:15:db:0b:bf:e4:28:47:2f:
                    1a:5c:3e:75:92:c5:b9:35:c8:a6:86:4d:28:fb:61:
                    d5:ad:4c:59:ce:a1:21:c5:be:c1:cf:05:f3:d5:6c:
                    dd:5c:54:48:0e:78:b9:f2:41:39:79:14:57:10:64:
                    b2:ca:3f:af:57:d0:65:81:02:74:d0:71:cc:9b:ba:
                    09:a1:a1:46:74:dd:72:66:d0:77:ba:58:e9:f9:ee:
                    0e:0c:8c:9d:5a:f5:4f:d0:12:7d:9b:fd:a5:1f:ec:
                    15:f2:f5:4b:ad:19:49:3e:28:1c:0e:30:ea:cf:d4:
                    63:93:1d:13:26:f4:ea:80:3a:79:f6:eb:32:94:17:
                    b3:8d:60:bc:ad:50:aa:e6:f0:ae:82:e5:5f:2f:c0:
                    fe:09:3d:a1:f3:16:13:26:97:68:cc:54:b2:c8:db:
                    f8:1d:93:4c:b9:d4:28:23:a8:71:22:2f:e5:3f:24:
                    c0:6b:42:87:62:0f:6a:67:e0:c3:dc:ab:fc:89:64:
                    e5:b7:9e:8b:3c:bc:93:0d:c0:00:a3:39:27:2c:27:
                    cb:45:b0:91:26:69:3c:9f:2a:6d:98:ba:6e:19:19:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:22:39:55:D4:1A:D4:11:48:F7:76:AE:6C:0A:6D:DD:E3:51:64:88
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3230352e302f32342d3234203d3e20323634373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c0:12:de:89:1b:33:5e:0d:58:18:f3:d3:89:d3:2a:a9:d5:
         62:d9:f1:70:bf:dc:c6:7c:ed:d9:58:25:36:1c:f3:60:2f:01:
         70:4e:a5:98:99:ae:dd:f9:96:54:b6:96:77:4c:ff:d3:c9:5c:
         d6:35:e7:29:8f:c4:5f:98:c8:b9:b8:ac:17:19:57:00:ae:56:
         65:29:2c:b4:9a:ac:56:64:9f:f6:59:6a:52:b7:a1:b5:6f:19:
         3c:c4:d3:be:4d:7c:e3:c2:14:dd:34:ae:b0:63:fb:30:0d:08:
         7e:77:e8:59:09:a0:c2:23:9a:d6:7c:b2:83:c3:08:00:28:00:
         09:4b:df:ba:ea:3e:72:e0:60:d8:c6:d6:9e:c4:b6:82:47:01:
         c8:c0:15:90:02:e6:23:67:a8:31:be:30:de:60:e6:ee:24:85:
         f4:6a:a0:d4:33:fd:f8:86:5d:f4:bd:c7:ab:59:ed:db:8d:dd:
         76:23:33:98:4f:4f:05:54:08:f5:3a:35:67:af:b4:27:7c:27:
         3a:76:84:c2:6a:43:b8:61:35:09:da:4e:20:af:74:76:61:8d:
         64:e9:f9:f1:08:3b:ba:e7:6a:ea:43:88:07:d2:f9:46:33:5e:
         a6:d1:c2:f8:3e:57:a1:70:63:04:1e:29:24:5a:57:a6:0c:d6:
         28:6c:fb:09
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMf34UCsQ78SUvvSTEulJbUFMCa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0OEFGMkEwQkM0Qjc1QjIxN0IyQ0RBNjA0MTA0NkI5
ODE4RkE4NTAeFw0yNTEyMzAxNDMwMDJaFw0yNjEyMjkxNDM1MDJaMDMxMTAvBgNV
BAMTKDk3MjIzOTU1RDQxQUQ0MTE0OEY3NzZBRTZDMEE2RERERTM1MTY0ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGAj/cara0vwkpFk0e8av7Dqc
IQhjqKpQyWMVY2K8KulyavQV2wu/5ChHLxpcPnWSxbk1yKaGTSj7YdWtTFnOoSHF
vsHPBfPVbN1cVEgOeLnyQTl5FFcQZLLKP69X0GWBAnTQccybugmhoUZ03XJm0He6
WOn57g4MjJ1a9U/QEn2b/aUf7BXy9UutGUk+KBwOMOrP1GOTHRMm9OqAOnn26zKU
F7ONYLytUKrm8K6C5V8vwP4JPaHzFhMml2jMVLLI2/gdk0y51CgjqHEiL+U/JMBr
QodiD2pn4MPcq/yJZOW3nos8vJMNwACjOScsJ8tFsJEmaTyfKm2Yum4ZGY+9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUlyI5VdQa1BFI93aubApt3eNRZIgwHwYDVR0j
BBgwFoAUE0ivKgvEt1sheyzaYEEEa5gY+oUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjdDNjVDMDlDMjQwMjAxNTRBRDRBMUQyRjkyODQ0NTBB
NjZEOUMwMURCOTMwMzdCQjNBQTExNzI4QkEwRTRBLzAvMTM0OEFGMkEwQkM0Qjc1
QjIxN0IyQ0RBNjA0MTA0NkI5ODE4RkE4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzQ4QUYyQTBCQzRCNzVCMjE3
QjJDREE2MDQxMDQ2Qjk4MThGQTg1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDY3QzY1QzA5QzI0MDIwMTU0QUQ0QTFEMkY5Mjg0NDUwQTY2RDlDMDFE
QjkzMDM3QkIzQUExMTcyOEJBMEU0QS8wLzMxMzkzMDJlMzEzMDMzMmUzMjMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM5MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
Z80wDQYJKoZIhvcNAQELBQADggEBAG/AEt6JGzNeDVgY89OJ0yqp1WLZ8XC/3MZ8
7dlYJTYc82AvAXBOpZiZrt35llS2lndM/9PJXNY15ymPxF+YyLm4rBcZVwCuVmUp
LLSarFZkn/ZZalK3obVvGTzE075NfOPCFN00rrBj+zANCH536FkJoMIjmtZ8soPD
CAAoAAlL37rqPnLgYNjG1p7EtoJHAcjAFZAC5iNnqDG+MN5g5u4khfRqoNQz/fiG
XfS9x6tZ7duN3XYjM5hPTwVUCPU6NWevtCd8Jzp2hMJqQ7hhNQnaTiCvdHZhjWTp
+fEIO7rnaupDiAfS+UYzXqbRwvg+V6FwYwQeKSRaV6YM1ihs+wk=
-----END CERTIFICATE-----
Generated at Mon Jan 12 07:13:25 2026 by rpki-client