This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e332e302f32342d3234203d3e203634313339.roa
File:                     3230372e3234382e332e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          aS/W6JpUnNGincS5/hLNR5xclK87Nza7IeXPihy6G98=
Subject key identifier:   AE:3D:A6:8B:3C:EF:B2:63:1C:50:A0:9D:D9:C1:FC:74:B8:CA:00:8B
Certificate issuer:       /CN=367EAE467C8B549D5E6615661A70C865954F55EE
Certificate serial:       5582B1E02DA868EB1CB1152075EC4A75602AA8CC
Authority key identifier: 36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e332e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 06 Jan 2026 20:52:58 +0000
ROA not before:           Tue 06 Jan 2026 20:47:58 +0000
ROA not after:            Tue 05 Jan 2027 20:52:58 +0000
asID:                     64139
IP address blocks:        207.248.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 01:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:82:b1:e0:2d:a8:68:eb:1c:b1:15:20:75:ec:4a:75:60:2a:a8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367EAE467C8B549D5E6615661A70C865954F55EE
        Validity
            Not Before: Jan  6 20:47:58 2026 GMT
            Not After : Jan  5 20:52:58 2027 GMT
        Subject: CN=AE3DA68B3CEFB2631C50A09DD9C1FC74B8CA008B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:e9:c4:48:c7:c6:06:4d:28:2e:c6:b7:55:
                    4e:a8:0b:8a:fd:7c:77:24:3c:c6:28:f4:b7:06:0d:
                    27:dc:e1:3d:fa:8b:15:04:d6:78:c7:8b:9e:34:0d:
                    bd:22:32:f3:39:d6:8e:26:1f:1f:71:14:99:54:e1:
                    55:de:0d:60:08:b2:cf:8c:67:ee:65:75:ca:4e:7b:
                    29:f9:9f:6b:f6:74:9d:d4:48:d8:4d:e1:82:35:1c:
                    40:69:de:18:f0:2d:36:ad:e7:8e:e5:47:76:bd:e7:
                    21:6d:a2:1b:1b:1e:f6:69:e7:c8:f5:09:3c:ab:5e:
                    7c:34:6b:f5:78:f6:f9:00:5e:92:7f:31:a2:f8:93:
                    aa:38:de:b6:09:57:32:3c:95:58:10:1f:82:48:e8:
                    37:eb:10:c1:e0:24:90:45:59:28:b5:3b:4c:7f:f6:
                    e9:d3:e1:a0:b8:d6:9c:5a:76:70:35:89:85:40:fb:
                    e3:cb:73:67:70:4d:76:55:f0:54:ee:93:de:c8:6e:
                    83:d0:20:db:f8:00:b5:5c:58:7d:a5:d5:a8:e9:61:
                    b3:e0:6f:57:a7:00:8f:45:00:f8:f6:16:de:a9:f9:
                    bb:cf:9c:83:04:28:55:3e:df:24:3f:3f:f9:0d:42:
                    e3:34:31:c9:30:ae:43:1b:34:92:c8:50:53:19:bf:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:A6:8B:3C:EF:B2:63:1C:50:A0:9D:D9:C1:FC:74:B8:CA:00:8B
            X509v3 Authority Key Identifier:
                keyid:36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e332e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:08:60:dc:30:c5:66:75:6a:de:4f:67:69:0d:d8:7e:df:4a:
         22:78:d3:74:a5:9f:06:da:48:be:23:d0:8c:40:88:ad:f3:06:
         29:b4:51:a3:75:44:b3:18:bc:b5:54:6e:0f:a4:86:7d:04:5e:
         56:d4:1e:74:b4:5d:94:b2:26:66:60:ec:f9:74:e5:19:d7:a9:
         22:37:b0:ce:bf:27:f2:d6:be:28:74:a0:c7:96:67:db:4d:8f:
         66:cf:3b:7a:2f:dc:b1:31:da:b4:18:40:8d:60:10:f5:ba:8e:
         ef:82:81:09:53:1a:39:24:40:ce:1d:b7:d2:b3:8b:73:d6:38:
         1e:62:a3:4e:69:52:bd:09:fb:c4:02:d6:09:e0:43:63:12:05:
         65:f0:9f:ba:20:5f:0f:a9:39:27:27:83:fe:8e:47:d3:b2:ff:
         3a:6e:b3:8e:55:f1:1d:62:34:e8:fd:09:0e:c8:77:97:65:98:
         53:58:4b:d0:bc:e0:41:85:c6:6e:4c:1b:79:66:75:79:c5:e6:
         24:e1:25:f8:c0:af:1a:3b:10:f3:e4:fd:06:a5:d8:d9:6e:9d:
         96:be:00:27:81:83:11:1d:5e:ad:5f:b2:6c:ac:a8:49:76:24:
         d3:b2:f2:20:df:bb:4f:82:67:42:78:36:70:8a:ba:0e:78:40:
         f2:46:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:44 2026 by rpki-client