This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/3139302e3131332e38382e302f32322d3234203d3e20323634363337.roa
File:                     3139302e3131332e38382e302f32322d3234203d3e20323634363337.roa (raw, json)
Hash identifier:          zVN5q9Runf6GKJk6UEtcZAvJhMBDmkeLf1goizM0vXo=
Subject key identifier:   05:63:AE:42:0B:4E:E6:9D:CE:F4:B5:79:C2:9A:06:C1:F3:C8:F2:51
Certificate issuer:       /CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
Certificate serial:       720F4573BDC8BD03B975E7B5870889DAE8D5C8A2
Authority key identifier: A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/3139302e3131332e38382e302f32322d3234203d3e20323634363337.roa
Signing time:             Tue 06 Jan 2026 19:17:48 +0000
ROA not before:           Tue 06 Jan 2026 19:12:48 +0000
ROA not after:            Tue 05 Jan 2027 19:17:48 +0000
asID:                     264637
IP address blocks:        190.113.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0f:45:73:bd:c8:bd:03:b9:75:e7:b5:87:08:89:da:e8:d5:c8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6
        Validity
            Not Before: Jan  6 19:12:48 2026 GMT
            Not After : Jan  5 19:17:48 2027 GMT
        Subject: CN=0563AE420B4EE69DCEF4B579C29A06C1F3C8F251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:d9:e4:d7:ea:3a:18:cd:d1:b8:52:e0:85:
                    ce:94:cc:47:63:4c:48:28:92:e7:54:4b:22:d2:9e:
                    37:23:bc:0e:c2:5a:41:3b:b8:d7:99:9d:ff:fa:30:
                    82:08:4e:4c:49:bc:4e:26:49:fc:2d:d6:ce:95:4f:
                    32:2d:98:ed:46:ee:f9:83:15:d2:0e:9b:ae:d3:e0:
                    fb:d0:88:bc:c3:85:9f:f0:54:a9:10:9c:fd:c7:61:
                    a3:39:bc:b0:90:f4:35:a3:20:fe:90:29:52:69:fc:
                    fa:f6:51:b2:fc:90:9a:34:e0:0d:24:20:09:32:c2:
                    ba:fc:f1:1e:f8:01:cf:ec:ef:77:3d:b9:eb:d0:21:
                    5a:7e:52:a4:f4:6f:6b:aa:3b:f0:31:58:ca:e7:27:
                    0b:42:6e:47:1c:71:30:f5:88:af:bf:f7:94:02:71:
                    87:4d:3f:3a:53:b3:d2:e7:10:88:ff:b3:29:4a:10:
                    d4:8e:24:e3:da:4a:80:84:52:b7:88:14:69:8c:cc:
                    11:77:c7:8e:d3:a2:81:62:e3:7d:e6:ec:84:50:7e:
                    4c:7e:2e:a4:b2:5e:15:ed:e6:13:c3:cf:f5:bc:0c:
                    d8:78:f8:67:c9:4d:c9:dd:9f:82:e6:25:f9:d2:06:
                    9e:39:10:c4:f2:ca:1e:5b:2d:7f:1a:5b:e0:0a:e2:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:63:AE:42:0B:4E:E6:9D:CE:F4:B5:79:C2:9A:06:C1:F3:C8:F2:51
            X509v3 Authority Key Identifier:
                keyid:A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/3139302e3131332e38382e302f32322d3234203d3e20323634363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:88:42:36:2b:a0:9e:7a:f6:f2:ce:9f:af:06:82:00:a9:b0:
         96:9f:1f:ed:2b:25:08:e1:2a:f1:6b:25:49:4f:57:0e:fe:f1:
         ce:07:c1:e1:de:6c:9b:06:bb:05:07:a3:ff:13:82:7e:3c:33:
         20:1e:f0:c3:d5:4c:4b:a3:73:7b:df:6a:d9:a7:e9:80:fc:6e:
         83:4f:6e:ef:a1:57:36:7a:13:d8:e9:4d:20:6f:6f:fa:72:9d:
         04:8c:f8:b1:f2:e0:6c:44:06:63:5f:27:e5:99:e0:9b:3f:a2:
         15:29:3c:06:c1:62:7f:05:da:1c:4e:63:db:e5:2d:76:83:a8:
         bc:5c:76:15:98:bf:56:45:9b:96:e0:8a:bf:ea:c1:db:51:0f:
         eb:da:72:d4:f7:56:34:7c:cd:81:b3:a1:7e:7f:93:cc:1d:a2:
         fa:a1:93:b2:a2:69:51:20:c4:52:30:13:b8:8b:d8:68:07:08:
         45:1a:2b:15:21:b5:f1:63:98:e6:10:53:6c:c8:b8:41:00:46:
         0a:fa:81:ee:c4:32:e9:3a:d8:9e:31:56:31:a3:3e:34:74:99:
         57:2e:d0:d0:72:27:bf:a3:8b:dc:e0:97:9c:d7:23:9f:3f:b9:
         a9:cc:6b:7a:cc:6f:b4:2c:26:5e:b9:4e:a8:2a:ab:ee:6c:f4:
         e3:37:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:32:07 2026 by rpki-client