This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/3139302e38332e36302e302f32332d3233203d3e20323639393338.roa
File:                     3139302e38332e36302e302f32332d3233203d3e20323639393338.roa (raw, json)
Hash identifier:          zn951wab370j45rc6zgYIduOEL01mP7czk6lpYRj9Qk=
Subject key identifier:   5E:21:20:0F:B3:CD:3D:45:24:73:3D:95:69:72:A6:F5:6D:71:6F:33
Certificate issuer:       /CN=473AFB9A5D0AE9E193C986190D5540C7B4716B22
Certificate serial:       077E9C7E7B45A88FD5C93AB1EE4263BCACA70E80
Authority key identifier: 47:3A:FB:9A:5D:0A:E9:E1:93:C9:86:19:0D:55:40:C7:B4:71:6B:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/3139302e38332e36302e302f32332d3233203d3e20323639393338.roa
Signing time:             Tue 06 Jan 2026 19:20:39 +0000
ROA not before:           Tue 06 Jan 2026 19:15:39 +0000
ROA not after:            Tue 05 Jan 2027 19:20:39 +0000
asID:                     269938
IP address blocks:        190.83.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 22:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7e:9c:7e:7b:45:a8:8f:d5:c9:3a:b1:ee:42:63:bc:ac:a7:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473AFB9A5D0AE9E193C986190D5540C7B4716B22
        Validity
            Not Before: Jan  6 19:15:39 2026 GMT
            Not After : Jan  5 19:20:39 2027 GMT
        Subject: CN=5E21200FB3CD3D4524733D956972A6F56D716F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:4c:90:3a:39:e1:25:6b:04:a5:27:2b:9f:
                    21:17:5b:19:fa:36:0b:6e:5f:1f:d1:d4:a3:d5:eb:
                    78:c8:e0:a7:0e:f2:47:da:f0:a4:69:76:ff:88:24:
                    af:02:77:a9:0d:37:cb:e9:bf:3f:fa:b0:74:ba:4e:
                    fc:61:34:89:03:b6:9f:44:ac:9b:18:45:40:e7:d9:
                    3c:28:63:84:bb:69:8d:f6:71:8a:4c:4d:15:c5:c2:
                    9e:f9:8f:a3:79:ef:35:d0:e4:1d:a4:31:51:c0:44:
                    75:c7:c2:b2:b9:6b:d7:c1:47:a0:16:e8:ae:4d:34:
                    7b:99:8f:d4:0e:97:ea:fa:64:8c:24:96:53:60:e2:
                    57:49:b1:81:c9:74:51:6f:f0:8c:71:54:2c:47:cc:
                    a9:4e:d2:dc:fa:0d:b6:93:14:d0:50:fe:89:8a:98:
                    af:a3:1c:f0:ac:9c:55:77:fa:ce:2e:a4:06:03:c9:
                    3a:c4:f5:e0:73:f3:5b:2b:3b:d8:55:8b:08:56:75:
                    6e:ea:3e:4f:f0:e8:29:4d:4e:48:4d:07:cd:21:82:
                    15:e9:63:45:cc:f1:64:9b:a1:ac:05:05:27:78:8e:
                    87:c0:4d:d6:bf:9b:b5:1b:a4:4c:58:36:79:74:88:
                    88:ce:a9:4b:ad:89:eb:89:11:07:a6:a7:58:13:f1:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:20:0F:B3:CD:3D:45:24:73:3D:95:69:72:A6:F5:6D:71:6F:33
            X509v3 Authority Key Identifier:
                keyid:47:3A:FB:9A:5D:0A:E9:E1:93:C9:86:19:0D:55:40:C7:B4:71:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/3139302e38332e36302e302f32332d3233203d3e20323639393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:24:bc:c4:d0:e2:c4:b1:f1:92:51:e4:40:a7:9c:23:df:
         f0:a1:41:49:ef:e6:ad:df:7b:43:37:06:9a:9d:46:0e:00:d8:
         d2:7a:61:8a:06:1a:19:d8:b3:43:2b:41:42:cc:92:cb:c5:a3:
         7e:1a:50:a9:d9:8c:51:b0:6b:db:ab:ba:97:84:97:e7:9f:44:
         6a:d8:a9:bb:05:9c:44:0f:39:6c:08:4c:8f:80:0d:f6:1f:ff:
         6a:37:66:55:43:48:b6:1a:7e:b0:5b:9b:b5:4d:f2:19:18:40:
         19:3c:06:41:6c:5e:93:4e:56:74:9a:81:a1:97:06:19:00:92:
         43:7f:f4:a8:b3:0d:93:4b:52:b8:4b:4c:68:04:38:18:c3:a9:
         4b:69:97:a7:ef:42:16:be:b2:8b:da:90:58:65:29:ce:a4:2f:
         9a:40:d0:50:1b:9f:91:0b:7d:ed:33:f4:4f:a1:b9:2e:38:74:
         81:7b:13:e7:27:c8:13:25:09:e0:92:e6:bc:81:f8:1b:08:ea:
         bf:4f:d5:c5:e9:a8:4a:e5:30:ac:47:a2:66:cd:4b:7d:dc:f3:
         02:30:08:5a:9f:3e:f1:f2:31:e3:e5:ee:1f:11:ff:1c:a4:06:
         b6:76:24:20:19:3c:49:28:5e:45:8b:fd:98:8b:e5:3f:ff:db:
         33:d6:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 09:37:19 2026 by rpki-client