This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32302e302f32332d3234203d3e20323732313336.roa
File:                     34352e36382e32302e302f32332d3234203d3e20323732313336.roa (raw, json)
Hash identifier:          tkGHil0tfn+4HTz1D02LtT941JFcmDXX3HLB0VMKK/A=
Subject key identifier:   FC:E2:AD:CF:E5:70:35:DD:CA:E9:38:6E:F7:B8:91:3E:9A:E7:F5:9F
Certificate issuer:       /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial:       0362D31E6DE42CD2DF3B450191C9044F3A204D75
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32302e302f32332d3234203d3e20323732313336.roa
Signing time:             Tue 06 Jan 2026 19:39:29 +0000
ROA not before:           Tue 06 Jan 2026 19:34:29 +0000
ROA not after:            Tue 05 Jan 2027 19:39:29 +0000
asID:                     272136
IP address blocks:        45.68.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:62:d3:1e:6d:e4:2c:d2:df:3b:45:01:91:c9:04:4f:3a:20:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
        Validity
            Not Before: Jan  6 19:34:29 2026 GMT
            Not After : Jan  5 19:39:29 2027 GMT
        Subject: CN=FCE2ADCFE57035DDCAE9386EF7B8913E9AE7F59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fd:31:f8:d7:82:2f:19:28:f8:11:1d:81:53:
                    0e:79:d6:85:5f:9b:c9:95:6d:b5:1b:cd:34:69:7e:
                    d1:e2:d3:45:1b:5c:83:97:e4:82:29:e6:8d:0b:e0:
                    40:dc:ce:8a:7b:e8:a9:46:91:07:46:e5:fb:c6:ad:
                    8b:e3:02:8b:a5:be:cc:72:63:da:03:7c:0a:47:29:
                    66:68:b2:31:e7:09:8b:d2:47:5c:14:68:d3:4e:2a:
                    2b:ee:3f:0e:78:d2:44:9e:84:b3:05:70:e3:06:9c:
                    c9:89:09:0c:60:10:35:be:92:8c:11:cc:d3:ee:83:
                    c5:a8:73:e3:07:e2:4e:45:13:50:09:ae:b8:2d:8f:
                    a3:ed:03:74:aa:ef:24:a1:95:49:56:52:78:93:6e:
                    b4:12:63:06:67:6f:32:5b:01:94:99:0e:48:48:ea:
                    89:41:09:37:29:85:c8:79:91:66:88:5f:a1:df:91:
                    34:33:8a:8f:a8:f3:4c:51:38:e5:00:54:60:08:c1:
                    2b:7c:3f:31:b6:02:7c:71:86:4d:85:3f:98:1e:46:
                    82:38:d4:5c:2e:01:3f:78:d3:02:4d:9f:0c:5f:7c:
                    61:c7:a0:2b:2e:6c:b8:b9:cb:d6:e8:7b:03:00:38:
                    54:60:02:4e:63:c1:e3:9f:cf:06:af:d9:1e:09:70:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E2:AD:CF:E5:70:35:DD:CA:E9:38:6E:F7:B8:91:3E:9A:E7:F5:9F
            X509v3 Authority Key Identifier:
                keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/34352e36382e32302e302f32332d3234203d3e20323732313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:a9:1f:26:84:63:15:21:0c:a7:41:0b:fc:a1:0b:a5:f7:
         d2:b5:fc:44:05:81:4d:dc:c6:0f:66:b6:4c:8a:8d:0a:45:8f:
         06:90:d8:e6:cb:fe:d9:8d:32:40:1e:c1:0f:e2:74:b0:3c:b3:
         25:8f:14:f0:b6:25:5c:fa:66:06:24:8b:0e:99:5b:30:b1:67:
         24:b9:5c:22:0a:2f:2a:ee:c2:79:de:8c:f6:6a:61:d8:d6:ec:
         3b:3d:07:df:c3:cb:9f:bc:69:10:44:2c:d3:3e:89:51:05:42:
         ef:57:bf:d6:0e:0c:9e:0f:55:a9:97:25:39:f5:63:71:13:cc:
         ef:da:52:fa:02:e8:9a:94:e0:2f:bd:57:3a:04:ff:d4:64:1f:
         71:74:22:73:83:a7:fa:86:e8:7a:45:2b:1f:08:b6:58:39:0b:
         b6:d6:f7:dd:26:77:51:81:a8:70:e5:37:b0:20:7d:9a:fa:76:
         f5:7d:04:dc:e7:e8:08:a2:02:2b:78:8f:05:6d:b3:31:81:81:
         37:a8:ed:c9:fd:d8:c7:6b:51:8a:9b:96:bd:76:ff:d4:cd:fe:
         05:80:5b:a6:96:ca:0a:fc:11:0f:f0:cb:48:1c:bc:15:29:e2:
         fa:8a:03:db:3b:f5:25:3a:e2:98:41:11:1a:0b:38:07:28:3b:
         0c:92:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:04:46 2026 by rpki-client