This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/3139302e3132342e35362e302f32312d3234203d3e20323635373736.roa
File:                     3139302e3132342e35362e302f32312d3234203d3e20323635373736.roa (raw, json)
Hash identifier:          6GhUp3066CRV2MJxs3jage3RG52S+7sKdAIsrI4SLyI=
Subject key identifier:   19:B2:C5:9B:B9:8F:D1:D5:51:C2:29:34:0A:B8:E1:73:21:0A:B5:03
Certificate issuer:       /CN=75323213903033FA305DE97901F7E8814A3002CD
Certificate serial:       71A30593FE7AC946C6CC71A816A697E1C21C4649
Authority key identifier: 75:32:32:13:90:30:33:FA:30:5D:E9:79:01:F7:E8:81:4A:30:02:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75323213903033FA305DE97901F7E8814A3002CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/3139302e3132342e35362e302f32312d3234203d3e20323635373736.roa
Signing time:             Tue 06 Jan 2026 19:25:57 +0000
ROA not before:           Tue 06 Jan 2026 19:20:57 +0000
ROA not after:            Tue 05 Jan 2027 19:25:57 +0000
asID:                     265776
IP address blocks:        190.124.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/75323213903033FA305DE97901F7E8814A3002CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/75323213903033FA305DE97901F7E8814A3002CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75323213903033FA305DE97901F7E8814A3002CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a3:05:93:fe:7a:c9:46:c6:cc:71:a8:16:a6:97:e1:c2:1c:46:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75323213903033FA305DE97901F7E8814A3002CD
        Validity
            Not Before: Jan  6 19:20:57 2026 GMT
            Not After : Jan  5 19:25:57 2027 GMT
        Subject: CN=19B2C59BB98FD1D551C229340AB8E173210AB503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:d3:da:46:50:95:01:c3:85:cb:f8:85:ba:
                    7d:8e:c5:b7:20:e8:11:0c:f8:53:eb:00:54:51:85:
                    90:ad:4d:da:71:ad:c0:74:3c:c0:d0:ca:c6:02:e2:
                    c5:9b:0e:30:c7:47:fa:5c:2b:40:24:c6:95:c7:77:
                    67:ac:07:48:55:e9:cb:3d:f8:68:d6:4d:56:0c:1e:
                    44:cf:26:d0:a3:88:73:7f:bd:f4:13:da:57:9b:63:
                    4c:a6:8b:7f:ea:07:4e:fa:b5:b2:30:1d:51:53:0c:
                    2d:0a:a9:ad:c9:ee:81:eb:b9:3a:8c:f4:36:07:de:
                    47:a2:4a:66:97:c0:f4:89:14:85:07:2e:00:bc:f0:
                    5a:ee:d4:a5:d9:86:fd:ec:a3:15:bf:35:97:7d:25:
                    06:4d:67:76:72:94:63:27:06:c0:d1:47:c4:c4:59:
                    ef:57:c8:91:98:8f:b9:6f:10:78:a1:cc:88:a2:2c:
                    ca:ce:03:b4:2c:59:a3:3e:e5:6c:97:00:f3:02:c7:
                    54:2a:e5:d0:95:b2:7f:6f:0a:69:3c:04:31:af:49:
                    88:39:37:c0:37:78:d9:88:1b:3a:49:d4:5d:17:4f:
                    de:9d:68:a1:ba:95:ea:1a:58:88:eb:65:d2:3c:5c:
                    89:49:04:fd:1b:ab:aa:e0:72:be:47:66:73:b9:da:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:C5:9B:B9:8F:D1:D5:51:C2:29:34:0A:B8:E1:73:21:0A:B5:03
            X509v3 Authority Key Identifier:
                keyid:75:32:32:13:90:30:33:FA:30:5D:E9:79:01:F7:E8:81:4A:30:02:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/75323213903033FA305DE97901F7E8814A3002CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75323213903033FA305DE97901F7E8814A3002CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5579B63E6BCEF535E74B49B955EE802937BB585F28D1F1A0E8CE086E49D47775/0/3139302e3132342e35362e302f32312d3234203d3e20323635373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:23:21:23:f0:71:ae:a1:74:7b:8f:51:1e:90:98:05:29:
         de:ca:b7:d0:a6:83:ad:a1:40:93:c1:f8:78:6c:e3:aa:f9:eb:
         98:0c:83:52:e8:fa:45:47:d9:c7:2b:73:96:ed:65:f0:7e:14:
         71:29:0e:7a:12:a9:5c:39:e3:9c:1f:3d:72:c2:f1:b2:0d:e0:
         9c:6c:ab:ac:07:e8:16:51:70:fb:6b:bb:45:54:b1:a8:e1:06:
         cc:f3:88:45:90:7c:d3:c0:85:8b:13:45:21:62:0a:0e:16:9f:
         54:a7:6d:44:50:78:10:8c:29:ba:36:b8:1a:18:47:c3:e7:2d:
         11:69:4c:05:e5:c1:a8:aa:ac:14:3a:5a:eb:e4:b1:3e:91:2c:
         e7:36:c3:1c:e4:fd:d2:b5:14:57:f2:64:6a:db:51:a7:21:ce:
         40:d8:d6:cc:51:ab:7b:f2:bb:bc:6b:2f:a6:d5:af:40:af:32:
         50:6b:30:48:67:47:19:16:f1:0b:37:19:cc:ac:38:7a:c9:c8:
         80:ff:30:b3:6f:f5:d4:c9:8a:cf:91:fb:d4:49:3a:9a:12:81:
         e0:01:ef:b8:20:cc:69:9c:80:6b:7b:48:7e:2c:bf:16:eb:62:
         59:10:38:33:d1:2d:e5:68:a2:76:6b:db:96:c3:44:38:f1:f0:
         8e:0e:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:05 2026 by rpki-client