This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/323830333a6463303a3a2f33322d3332203d3e20323635373139.roa
File:                     323830333a6463303a3a2f33322d3332203d3e20323635373139.roa (raw, json)
Hash identifier:          lkI5pCom0YybSc948UMJtpNwzBquwnEvwoDB7q88y48=
Subject key identifier:   B6:48:F4:C8:75:10:33:2B:A7:90:E4:C3:B0:1D:13:1E:18:95:F2:94
Certificate issuer:       /CN=86B23684C23826B0D30069E095D5822718033CB5
Certificate serial:       40E54D44C15B59ED88A2A561615B0CCFB842E809
Authority key identifier: 86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/323830333a6463303a3a2f33322d3332203d3e20323635373139.roa
Signing time:             Tue 06 Jan 2026 19:29:54 +0000
ROA not before:           Tue 06 Jan 2026 19:24:54 +0000
ROA not after:            Tue 05 Jan 2027 19:29:54 +0000
asID:                     265719
IP address blocks:        2803:dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 08:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e5:4d:44:c1:5b:59:ed:88:a2:a5:61:61:5b:0c:cf:b8:42:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B23684C23826B0D30069E095D5822718033CB5
        Validity
            Not Before: Jan  6 19:24:54 2026 GMT
            Not After : Jan  5 19:29:54 2027 GMT
        Subject: CN=B648F4C87510332BA790E4C3B01D131E1895F294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:a3:ec:b2:85:e1:64:d6:62:7e:e0:69:56:
                    6c:51:ec:7e:6a:72:51:f0:38:dd:38:21:e9:74:af:
                    b1:fe:49:39:a9:a9:76:e8:5a:3c:34:bd:86:6b:66:
                    3e:8e:4e:f5:73:de:eb:2d:00:5e:63:ad:33:95:a4:
                    22:b6:76:b5:98:83:b0:05:60:16:e9:41:c2:f9:ff:
                    3d:75:75:58:e4:00:6d:b2:70:33:51:52:73:d7:0b:
                    3f:ea:e1:e1:82:fb:2d:57:e0:86:2f:e8:98:20:ff:
                    c6:4d:e5:69:96:96:e5:ba:f0:1e:5b:a7:43:9a:d3:
                    c5:a7:10:63:4b:b6:3b:e3:25:25:1b:62:56:7e:78:
                    ea:11:68:2b:d8:94:54:87:d2:2d:49:d0:8a:22:f3:
                    76:49:40:91:04:0e:10:36:57:33:05:9c:cb:f5:c4:
                    4a:c7:b9:63:da:45:bd:a2:f2:b6:9f:74:c9:14:bc:
                    24:4c:a3:61:d6:30:2b:54:18:2c:4b:c5:a7:8e:17:
                    86:fa:fa:0a:8d:e4:47:7d:fa:16:bb:9e:65:c3:98:
                    62:71:53:78:1f:ee:3b:f2:27:ce:f1:75:31:f5:ac:
                    05:06:03:de:49:76:d4:23:2d:6d:aa:32:2d:7a:7b:
                    5f:2b:bf:b9:ad:4e:17:3c:46:d6:f1:1d:8d:16:e0:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:48:F4:C8:75:10:33:2B:A7:90:E4:C3:B0:1D:13:1E:18:95:F2:94
            X509v3 Authority Key Identifier:
                keyid:86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/323830333a6463303a3a2f33322d3332203d3e20323635373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:21:38:45:8a:6d:71:20:e5:81:7d:b5:05:78:94:b2:7b:
         9e:93:44:5b:21:b7:90:0d:cf:9e:90:6d:ae:74:18:33:1c:04:
         5f:c6:5e:15:8c:a0:d1:f8:00:45:bf:5f:92:75:38:16:1f:47:
         81:c5:2d:a1:04:ec:14:82:ad:92:11:74:23:a5:38:58:e7:76:
         b5:dc:dc:10:5c:ce:77:8f:c6:ca:6e:05:a9:58:76:03:ee:36:
         32:44:01:4e:0f:20:2a:fc:c6:a9:1d:fb:a6:9f:35:4e:43:fb:
         df:4c:c3:a2:eb:32:af:b2:52:ce:1e:e6:0a:5d:ee:c2:be:38:
         82:d8:84:de:b3:a5:3a:fd:8c:c7:5f:63:ac:63:da:e9:c5:e4:
         f7:5c:20:59:a7:00:59:fe:ab:a5:e9:5a:bf:2e:0e:af:83:09:
         38:0a:2d:a1:0e:3e:43:d5:38:a0:06:0e:38:c3:3d:c7:ed:fb:
         78:37:0f:cb:2b:56:4d:e7:5a:8c:fb:0d:a2:9e:b6:c8:66:d2:
         5b:ff:0e:fa:ed:66:89:7c:7a:3a:87:e4:9f:dc:46:6d:13:b7:
         4d:ab:d8:eb:63:3c:39:4b:0e:dc:42:7a:0f:23:9e:ad:bb:28:
         f6:c4:69:ca:d1:11:1b:e5:69:11:b0:55:94:f1:fe:0c:03:bd:
         dd:98:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:01:31 2026 by rpki-client