This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3234372e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          RXDb9gbTqWuRZ3HT5UyXaQxF1wR7RL7HTWTKHrm04CY=
Subject key identifier:   73:AA:B1:B9:1D:DA:07:EC:98:E8:A4:A2:AE:F9:E6:1E:DF:23:7C:AC
Certificate issuer:       /CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Certificate serial:       2EF1C5428A06C66550D75B6643F7E25E87442FEF
Authority key identifier: 40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
Signing time:             Sat 20 Dec 2025 20:55:48 +0000
ROA not before:           Sat 20 Dec 2025 20:50:48 +0000
ROA not after:            Sat 19 Dec 2026 20:55:48 +0000
asID:                     28423
IP address blocks:        45.170.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f1:c5:42:8a:06:c6:65:50:d7:5b:66:43:f7:e2:5e:87:44:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404AF48919442F94B61222A52CBC7E3F459B1B77
        Validity
            Not Before: Dec 20 20:50:48 2025 GMT
            Not After : Dec 19 20:55:48 2026 GMT
        Subject: CN=73AAB1B91DDA07EC98E8A4A2AEF9E61EDF237CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:c4:07:3d:02:f5:d3:71:8d:6e:75:e7:5d:
                    3c:66:24:32:32:75:11:ba:dc:9f:ac:13:af:58:aa:
                    9b:c2:b5:42:ed:85:b8:e7:38:63:41:a4:e2:40:86:
                    f0:b3:6b:8f:60:eb:c5:d8:51:37:75:0d:63:dd:28:
                    d2:a4:40:bb:6a:bf:0f:8b:34:15:fa:57:ca:de:90:
                    a6:88:d9:76:9e:59:39:cd:4a:ac:50:ac:25:fd:40:
                    92:8d:db:0e:cd:90:da:9e:35:c0:0b:0a:ad:cb:1d:
                    ef:32:a8:55:70:5c:b7:93:df:bb:8c:84:9b:7b:76:
                    50:20:c7:8b:7d:06:83:bd:88:d9:89:c8:b2:fb:70:
                    33:c7:58:cd:cb:ab:48:92:d0:84:14:cc:0c:e7:ef:
                    c5:f6:d7:99:8f:c5:f0:fe:9a:b9:03:f3:31:47:ec:
                    4e:b8:57:d7:bb:f0:c5:75:5f:68:91:50:30:a0:96:
                    d8:6d:f9:5d:6e:20:64:f6:63:ac:a2:b9:25:c7:10:
                    4b:ce:3a:a4:c9:30:f5:70:de:51:3b:ba:94:63:6b:
                    83:48:b3:78:48:ab:ca:34:00:06:a9:2d:f1:66:7c:
                    22:98:97:6e:e9:6c:46:a1:20:be:ed:e9:3f:eb:ae:
                    63:6a:48:59:de:06:f8:6a:2f:67:d0:86:26:04:e7:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AA:B1:B9:1D:DA:07:EC:98:E8:A4:A2:AE:F9:E6:1E:DF:23:7C:AC
            X509v3 Authority Key Identifier:
                keyid:40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:1d:69:d5:51:16:8a:f3:eb:f0:bd:15:f9:df:25:7e:05:
         51:90:8a:3c:db:33:e7:69:0e:5c:93:5b:44:80:54:59:a5:43:
         da:00:55:b6:1d:85:f9:cd:e8:54:fa:15:c5:7b:0b:cb:1e:af:
         9d:bd:a2:7e:6f:25:3a:c8:2d:f2:69:9d:06:3b:44:31:1d:3c:
         6b:8a:ff:bf:15:50:44:92:a4:dd:ae:16:8e:c5:69:41:48:71:
         fd:7a:59:4b:17:f6:b7:a8:ee:c5:24:4b:f3:4f:52:f6:30:05:
         37:47:1f:3d:09:f1:01:bb:6d:a7:65:65:7f:0c:5a:9e:a7:89:
         8f:ab:b7:00:2e:6a:51:25:bb:e0:52:6e:d1:a5:c5:09:12:41:
         96:03:81:56:69:cd:e5:b5:46:23:f5:63:cc:b4:c2:c6:16:68:
         60:93:c4:48:6f:38:82:06:96:3b:18:98:44:6c:87:d3:82:10:
         b6:2e:a0:9b:d4:eb:97:d1:bc:75:d0:7c:0d:a0:51:70:a0:cf:
         ce:38:9a:29:a7:2d:b6:1a:bc:99:ee:89:e4:78:d0:77:23:aa:
         e8:03:26:5b:24:ad:d5:35:d1:55:83:71:2b:26:66:a2:87:84:
         78:f3:52:25:00:0d:9f:d2:fc:14:88:ac:24:c6:7c:04:0c:a7:
         81:52:61:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULvHFQooGxmVQ11tmQ/fiXodEL+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA0QUY0ODkxOTQ0MkY5NEI2MTIyMkE1MkNCQzdFM0Y0
NTlCMUI3NzAeFw0yNTEyMjAyMDUwNDhaFw0yNjEyMTkyMDU1NDhaMDMxMTAvBgNV
BAMTKDczQUFCMUI5MUREQTA3RUM5OEU4QTRBMkFFRjlFNjFFREYyMzdDQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJcQHPQL103GNbnXnXTxmJDIy
dRG63J+sE69YqpvCtULthbjnOGNBpOJAhvCza49g68XYUTd1DWPdKNKkQLtqvw+L
NBX6V8rekKaI2XaeWTnNSqxQrCX9QJKN2w7NkNqeNcALCq3LHe8yqFVwXLeT37uM
hJt7dlAgx4t9BoO9iNmJyLL7cDPHWM3Lq0iS0IQUzAzn78X215mPxfD+mrkD8zFH
7E64V9e78MV1X2iRUDCgltht+V1uIGT2Y6yiuSXHEEvOOqTJMPVw3lE7upRja4NI
s3hIq8o0AAapLfFmfCKYl27pbEahIL7t6T/rrmNqSFneBvhqL2fQhiYE56NRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUc6qxuR3aB+yY6KSirvnmHt8jfKwwHwYDVR0j
BBgwFoAUQEr0iRlEL5S2EiKlLLx+P0WbG3cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTkwNkIzODAxMDI4QjVCQkQ5MjY2Rjk0NTdBOTIwRkM5
N0Y5MzM5NURBMDQzOTEyRUFBOUVENTdCODFBRUM0LzAvNDA0QUY0ODkxOTQ0MkY5
NEI2MTIyMkE1MkNCQzdFM0Y0NTlCMUI3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDRBRjQ4OTE5NDQyRjk0QjYx
MjIyQTUyQ0JDN0UzRjQ1OUIxQjc3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjk5MDZCMzgwMTAyOEI1QkJEOTI2NkY5NDU3QTkyMEZDOTdGOTMzOTVE
QTA0MzkxMkVBQTlFRDU3QjgxQUVDNC8wLzM0MzUyZTMxMzczMDJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2q9zAN
BgkqhkiG9w0BAQsFAAOCAQEAnv0dadVRForz6/C9FfnfJX4FUZCKPNsz52kOXJNb
RIBUWaVD2gBVth2F+c3oVPoVxXsLyx6vnb2ifm8lOsgt8mmdBjtEMR08a4r/vxVQ
RJKk3a4WjsVpQUhx/XpZSxf2t6juxSRL809S9jAFN0cfPQnxAbttp2VlfwxanqeJ
j6u3AC5qUSW74FJu0aXFCRJBlgOBVmnN5bVGI/VjzLTCxhZoYJPESG84ggaWOxiY
RGyH04IQti6gm9Trl9G8ddB8DaBRcKDPzjiaKactthq8me6J5HjQdyOq6AMmWySt
1TXRVYNxKyZmooeEePNSJQANn9L8FIisJMZ8BAyngVJhvg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:01:04 2025 by rpki-client