This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3233322e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3233322e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          +gnfNzZYCSePwTAJo7W7iQH69m22gt2rYFSGzRmO19U=
Subject key identifier:   94:90:F3:19:2F:18:70:41:20:75:8F:21:AD:DF:13:CF:CF:2A:37:06
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       05F0AA3158530F6DF9D5443489C0B18B096FCA16
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3233322e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 06 Jan 2026 20:54:44 +0000
ROA not before:           Tue 06 Jan 2026 20:49:44 +0000
ROA not after:            Tue 05 Jan 2027 20:54:44 +0000
asID:                     22927
IP address blocks:        186.141.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f0:aa:31:58:53:0f:6d:f9:d5:44:34:89:c0:b1:8b:09:6f:ca:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  6 20:49:44 2026 GMT
            Not After : Jan  5 20:54:44 2027 GMT
        Subject: CN=9490F3192F18704120758F21ADDF13CFCF2A3706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:d6:6b:6b:b9:9e:4c:23:cf:5b:11:ab:b6:
                    32:47:fa:8a:31:5b:2b:25:43:e5:80:e7:a4:00:4b:
                    c1:00:00:ae:ae:55:5a:de:a8:42:79:d9:c5:b3:6a:
                    db:f6:5b:12:10:1d:9d:4f:55:83:7d:84:57:f1:5b:
                    d5:1c:55:6e:21:db:d5:cd:d6:18:34:4d:48:4b:57:
                    6f:e5:46:84:a8:3b:fb:85:d2:e9:e9:65:42:99:38:
                    86:16:c5:56:0e:e7:4d:de:de:b6:a6:2a:d2:c2:d6:
                    58:60:57:38:b0:8c:4a:f6:43:14:a4:40:d6:59:d0:
                    c0:0c:28:b7:69:d6:bd:0e:26:1d:e3:47:28:43:67:
                    55:f0:82:64:34:26:7e:de:88:7a:19:7c:d5:c7:a3:
                    f7:66:4d:d3:af:4b:38:3a:c7:38:c6:26:a5:f9:8d:
                    4c:5e:9f:12:98:f9:e0:08:8f:7e:57:55:eb:24:c0:
                    18:6f:27:e8:ed:e1:81:70:ad:86:5f:2f:a6:d9:8f:
                    a7:70:26:d6:71:7b:04:43:9e:47:f0:7c:b4:b4:b2:
                    73:85:6f:74:7a:fe:7c:ed:75:22:23:07:a8:fc:4d:
                    8b:92:4f:af:5b:26:56:91:2e:be:16:6b:f1:e8:e9:
                    51:72:f9:65:1d:44:4b:5d:81:d9:a1:ce:15:e1:cf:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:90:F3:19:2F:18:70:41:20:75:8F:21:AD:DF:13:CF:CF:2A:37:06
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3233322e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:82:62:e3:47:dc:ba:27:f4:1f:cf:0f:6f:20:87:20:95:6e:
         95:7a:66:e9:de:fb:de:ab:1d:60:e9:67:b4:87:89:8f:3e:4a:
         8c:b9:43:e6:38:4b:23:de:df:c1:da:b5:69:b1:1a:49:92:d5:
         17:4f:72:aa:8b:b5:7c:c1:b1:9b:21:a4:20:af:1f:37:f2:38:
         4c:32:58:35:b1:d1:f3:5d:09:bf:95:88:59:2a:ea:fe:a3:60:
         03:7f:7f:d6:dd:e7:8e:83:14:3a:96:e3:f8:e9:27:42:55:16:
         7e:1b:5b:b6:26:59:d4:18:52:65:44:4a:75:f6:a1:49:fb:5c:
         01:22:0e:ce:0a:26:10:be:d6:5f:4c:c5:98:6e:9a:e9:f1:73:
         45:96:ca:c0:43:6d:56:b1:15:d9:0b:b8:b5:60:bf:bc:c2:cb:
         65:bc:fc:ec:66:9b:d8:df:b0:01:08:60:a8:de:0d:eb:c4:2a:
         ed:4f:c6:f9:7c:b8:95:66:31:72:ff:5c:33:f6:3b:16:cb:1f:
         ed:7a:03:cc:6a:ca:4d:b4:61:5f:4a:40:85:9d:a0:69:fe:9d:
         da:d2:94:78:96:60:00:e1:be:52:ef:46:e0:f3:3a:ab:95:f0:
         e7:ce:55:94:d9:a4:d4:97:7d:a2:76:05:5e:42:2f:60:f6:a6:
         68:13:11:5c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBfCqMVhTD2351UQ0icCxiwlvyhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNjAxMDYyMDQ5NDRaFw0yNzAxMDUyMDU0NDRaMDMxMTAvBgNV
BAMTKDk0OTBGMzE5MkYxODcwNDEyMDc1OEYyMUFEREYxM0NGQ0YyQTM3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZdZra7meTCPPWxGrtjJH+oox
WyslQ+WA56QAS8EAAK6uVVreqEJ52cWzatv2WxIQHZ1PVYN9hFfxW9UcVW4h29XN
1hg0TUhLV2/lRoSoO/uF0unpZUKZOIYWxVYO503e3ramKtLC1lhgVziwjEr2QxSk
QNZZ0MAMKLdp1r0OJh3jRyhDZ1XwgmQ0Jn7eiHoZfNXHo/dmTdOvSzg6xzjGJqX5
jUxenxKY+eAIj35XVeskwBhvJ+jt4YFwrYZfL6bZj6dwJtZxewRDnkfwfLS0snOF
b3R6/nztdSIjB6j8TYuST69bJlaRLr4Wa/Ho6VFy+WUdREtdgdmhzhXhzxzLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlJDzGS8YcEEgdY8hrd8Tz88qNwYwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMxMmUzMjMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo3o
MA0GCSqGSIb3DQEBCwUAA4IBAQA4gmLjR9y6J/Qfzw9vIIcglW6Vembp3vveqx1g
6We0h4mPPkqMuUPmOEsj3t/B2rVpsRpJktUXT3Kqi7V8wbGbIaQgrx838jhMMlg1
sdHzXQm/lYhZKur+o2ADf3/W3eeOgxQ6luP46SdCVRZ+G1u2JlnUGFJlREp19qFJ
+1wBIg7OCiYQvtZfTMWYbprp8XNFlsrAQ21WsRXZC7i1YL+8wstlvPzsZpvY37AB
CGCo3g3rxCrtT8b5fLiVZjFy/1wz9jsWyx/tegPMaspNtGFfSkCFnaBp/p3a0pR4
lmAA4b5S70bg8zqrlfDnzlWU2aTUl32idgVeQi9g9qZoExFc
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:36:26 2026 by rpki-client