This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134382e302f32342d3234203d3e20323632323339.roa
File:                     3139302e3231312e3134382e302f32342d3234203d3e20323632323339.roa (raw, json)
Hash identifier:          /WW69aas7Wj7mhPK56pgYw/2E1RgcRYLxbO4CMEGR+k=
Subject key identifier:   79:F4:F8:7C:F6:73:C8:B8:08:3F:BF:EF:5F:9F:60:EC:32:74:99:DB
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       027C7510D82E1AD673576E35E2663E56526BA278
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134382e302f32342d3234203d3e20323632323339.roa
Signing time:             Tue 06 Jan 2026 18:59:58 +0000
ROA not before:           Tue 06 Jan 2026 18:54:58 +0000
ROA not after:            Tue 05 Jan 2027 18:59:58 +0000
asID:                     262239
IP address blocks:        190.211.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:75:10:d8:2e:1a:d6:73:57:6e:35:e2:66:3e:56:52:6b:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Jan  6 18:54:58 2026 GMT
            Not After : Jan  5 18:59:58 2027 GMT
        Subject: CN=79F4F87CF673C8B8083FBFEF5F9F60EC327499DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:18:15:eb:d6:eb:af:4c:6e:50:50:d8:26:
                    b0:14:61:55:c6:f8:e5:1f:32:6b:57:9a:4f:a8:d9:
                    5d:91:3a:45:dd:5d:44:37:6c:32:61:a7:1f:81:8a:
                    dc:06:0a:ae:4f:c3:84:63:4f:ae:22:a0:19:30:c8:
                    a5:db:a1:a8:fd:78:81:1d:6a:41:69:11:96:e3:33:
                    fb:15:01:46:4c:cf:7d:96:69:f4:cd:55:43:af:f1:
                    2c:08:17:3d:58:42:ae:25:4d:bf:ee:d3:cb:e2:31:
                    8e:fe:70:57:4d:ed:29:dc:28:d9:d7:76:db:e1:32:
                    ba:13:85:01:16:f8:a0:fb:60:93:2f:8f:bb:2f:39:
                    6a:c0:51:56:f5:b6:4a:70:b2:65:e1:c2:a9:f9:e7:
                    ac:4a:e9:29:2e:3e:68:1d:1c:8b:66:ba:47:5e:76:
                    e6:a3:b1:66:bf:c2:58:b5:1e:8d:13:52:4f:f7:a0:
                    ec:b8:b0:bc:d9:30:0f:8a:2b:2e:ba:c6:d8:92:80:
                    e4:bc:eb:dd:65:76:bc:a4:f3:c1:43:ca:4e:7f:a6:
                    4c:a5:d5:94:08:23:e4:63:b2:a9:85:85:83:bc:13:
                    2f:8d:bc:14:2d:ee:6b:ec:3a:f5:3e:64:1a:d0:1e:
                    81:a3:ae:88:1c:39:4f:2f:e7:01:38:ea:3b:61:70:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F4:F8:7C:F6:73:C8:B8:08:3F:BF:EF:5F:9F:60:EC:32:74:99:DB
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134382e302f32342d3234203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:77:30:10:cf:58:25:57:cb:64:e8:c6:59:3c:a0:ec:91:43:
         e0:3d:50:75:ea:3e:fa:cd:22:18:07:54:f2:93:95:56:13:9d:
         71:c9:ec:0a:8c:9d:89:28:98:99:b5:86:f4:e8:a8:6f:a5:e7:
         1b:8a:9c:f6:14:eb:b6:dc:9d:cd:78:de:47:3c:1f:41:24:0f:
         ce:b6:b2:f6:6c:e2:69:ab:d0:70:a0:42:8a:83:64:a2:fd:0f:
         1f:4d:df:ff:3f:3e:2d:89:b9:a2:77:3f:6a:25:ad:ce:a3:f0:
         b5:b3:6d:75:c8:44:5b:5e:ba:65:a6:ee:5d:c0:7e:52:86:ca:
         ef:c7:ac:5f:4d:5f:2f:54:99:ac:0c:15:b0:c0:13:bc:59:7e:
         58:b4:b7:1e:29:a4:69:20:a6:04:52:af:9c:c2:67:4b:2f:31:
         38:34:1a:95:6d:5d:fa:92:1d:a0:93:54:22:11:78:30:c1:d1:
         03:fc:0c:2c:cd:80:0c:98:2c:7d:ee:b1:29:9a:c0:11:e5:2a:
         8e:32:95:38:be:4a:56:4d:8e:8b:90:ab:23:cf:d5:93:bb:49:
         df:04:b1:66:6a:59:2f:a0:15:e6:01:eb:85:17:fe:72:82:cb:
         21:80:3b:da:59:71:30:34:55:9b:29:af:17:6b:27:f5:b8:ac:
         f5:af:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:33 2026 by rpki-client