This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
File:                     3139302e31322e3132302e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          7YW7CLnskElWZdxrUwIlhHnB2PQ31T/OcVFR5UGtrZI=
Subject key identifier:   35:9C:6D:70:D7:D4:3F:4B:C2:C6:AE:03:CF:77:F9:62:46:2B:F4:2D
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       5FBF91927569C13B71F219B665E3C8FB73D3D6DC
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:13 +0000
ROA not before:           Tue 06 Jan 2026 19:15:13 +0000
ROA not after:            Tue 05 Jan 2027 19:20:13 +0000
asID:                     11014
IP address blocks:        190.12.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bf:91:92:75:69:c1:3b:71:f2:19:b6:65:e3:c8:fb:73:d3:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:13 2026 GMT
            Not After : Jan  5 19:20:13 2027 GMT
        Subject: CN=359C6D70D7D43F4BC2C6AE03CF77F962462BF42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:7a:0c:b8:41:5f:d7:59:7f:a7:00:7c:48:
                    26:c7:17:dc:33:c8:f4:2e:f7:ba:e1:ff:41:b2:17:
                    3d:b9:c6:1b:a1:50:12:97:d1:c3:fa:dd:dc:a3:5c:
                    07:dd:09:d2:d4:33:69:2e:41:4c:a8:1f:0e:d1:73:
                    a9:00:37:f4:b1:6c:bb:c1:b8:2b:51:e5:c6:5d:12:
                    9f:df:1a:96:f3:68:ab:85:25:5b:17:8d:9b:f2:8a:
                    7a:45:e2:6b:ab:2d:0a:d1:23:dc:94:7a:d8:e4:42:
                    ac:ff:0e:fe:83:df:0c:af:2b:23:c2:c8:12:74:ef:
                    bf:b2:49:b4:0e:2c:85:e7:1b:26:a1:b1:79:f5:e0:
                    70:81:c8:39:ed:11:e8:e2:1e:38:5a:fb:46:15:20:
                    b5:1c:b9:f1:74:65:07:64:f1:5e:5b:d9:32:b9:b1:
                    d0:63:5a:15:6d:ad:02:c0:12:f0:c6:21:0f:57:06:
                    f9:fe:77:ad:7b:2d:e3:69:3f:c3:0d:70:ab:2a:34:
                    3c:f4:7f:73:ee:94:36:cf:cf:af:e3:d4:b0:93:72:
                    db:cd:9b:ea:f0:d1:bc:bb:78:59:79:f3:2c:6a:56:
                    38:64:e8:57:d0:f2:26:58:da:2a:e4:fa:2b:34:d8:
                    c1:ef:8e:3a:0a:7b:4a:71:a5:e7:6b:49:7c:69:63:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9C:6D:70:D7:D4:3F:4B:C2:C6:AE:03:CF:77:F9:62:46:2B:F4:2D
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:c5:9c:15:3c:54:3d:3e:0f:3d:76:81:f2:e0:2e:b5:41:
         09:b9:ac:5f:96:ca:ef:4b:79:09:62:cf:66:9d:a4:2f:7d:4d:
         76:d3:ec:26:29:07:6d:34:bc:2a:50:83:fe:78:7d:70:ef:d9:
         c2:a8:73:2b:5e:36:2c:2e:67:e7:c3:f9:2d:32:00:a3:e1:8a:
         1c:39:b9:1c:6d:3e:da:b8:bc:bd:21:dd:2f:ab:28:03:f9:27:
         83:18:1f:39:e9:66:9e:60:45:e5:3c:d6:c5:15:b9:17:00:e7:
         9f:26:66:f7:ae:9a:84:e3:e7:ec:a2:7a:08:b2:81:ee:d4:f8:
         79:29:b8:bf:58:a4:22:79:0f:41:5c:ac:65:31:67:3f:4a:a7:
         69:d0:ae:a1:f5:6b:05:29:bb:e0:e6:f1:07:3d:34:45:7f:e6:
         ff:47:73:3a:3d:01:87:64:98:e4:79:fa:2b:d6:37:1a:15:14:
         a5:30:1d:f7:0f:05:19:85:fc:d3:2c:02:49:0b:de:8c:98:bc:
         fd:b3:fe:e3:48:35:8f:56:34:1d:06:7a:8e:15:33:e8:27:c3:
         a5:bc:f8:d9:c3:ae:36:94:fe:a7:2e:f8:61:fa:b2:20:5f:37:
         7e:aa:30:f5:28:00:53:5a:0f:ed:0e:a0:32:26:fe:08:c6:8e:
         3b:f2:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:55 2026 by rpki-client