This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135322e302f32322d3234203d3e203631353130.roa
File:                     3139302e3132322e3135322e302f32322d3234203d3e203631353130.roa (raw, json)
Hash identifier:          HbyyBd090gdcLeyi0RnK5s92yWTZZ8P843GTBk4VGoA=
Subject key identifier:   3E:3C:F8:56:46:FC:77:38:C7:3A:EE:62:79:60:BB:F0:D3:FB:72:11
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       7BD1553A2686A7B017C0A34D6EF60F6BFF52F3CB
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135322e302f32322d3234203d3e203631353130.roa
Signing time:             Sat 15 Nov 2025 14:50:00 +0000
ROA not before:           Sat 15 Nov 2025 14:45:00 +0000
ROA not after:            Sat 14 Nov 2026 14:50:00 +0000
asID:                     61510
IP address blocks:        190.122.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Nov 2025 06:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d1:55:3a:26:86:a7:b0:17:c0:a3:4d:6e:f6:0f:6b:ff:52:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Nov 15 14:45:00 2025 GMT
            Not After : Nov 14 14:50:00 2026 GMT
        Subject: CN=3E3CF85646FC7738C73AEE627960BBF0D3FB7211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:ad:ea:6e:57:4a:1e:ac:a2:04:7b:83:fc:
                    c9:b6:b2:20:1d:82:b0:72:81:a7:81:2d:52:2d:1c:
                    8c:16:49:9c:1d:72:98:96:d5:9b:64:34:5e:53:c7:
                    73:46:08:c5:b3:45:0b:2b:37:1a:47:52:86:60:e5:
                    8d:e4:cc:4d:b7:56:99:37:01:34:20:c2:c7:f7:d3:
                    ee:c3:23:62:dc:7a:ab:82:ea:e3:06:a5:f2:8e:03:
                    92:46:5d:98:67:e2:55:33:ea:ef:27:cd:fa:cb:b0:
                    9d:8b:f0:2b:cb:f3:b9:80:c0:49:36:25:19:65:d3:
                    0c:d0:44:6d:bd:b2:62:98:19:61:38:6c:cd:29:c1:
                    e8:45:da:db:ec:d9:88:90:c7:ac:be:49:6a:fa:c8:
                    95:13:85:90:c6:4a:90:d5:93:cb:9a:1c:29:cd:17:
                    04:ea:01:72:3d:4e:9e:62:52:4c:59:c8:0f:7f:c6:
                    f0:7b:7a:28:ae:91:a1:24:ff:4c:b0:2a:c2:56:a6:
                    4d:9d:d6:26:52:b4:ca:07:cd:50:7d:04:33:42:e1:
                    85:cf:67:c0:2c:08:72:f2:b3:81:ec:08:97:ab:ad:
                    88:27:44:b5:9b:4f:2a:ee:11:6c:0d:d2:60:43:96:
                    b8:55:b5:3c:c7:71:96:55:40:04:d8:64:0a:12:86:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3C:F8:56:46:FC:77:38:C7:3A:EE:62:79:60:BB:F0:D3:FB:72:11
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135322e302f32322d3234203d3e203631353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:df:a5:52:7d:47:e0:29:0f:71:c3:66:c2:ea:b5:34:2a:75:
         6d:94:0c:c9:f8:ff:75:b2:80:67:07:01:f2:af:a0:a5:52:75:
         f0:4f:e9:a5:79:2f:62:cb:f8:2c:22:6c:d6:05:ed:4f:c9:a0:
         69:c5:88:9f:71:7e:d1:86:3e:4d:0b:11:71:34:bc:e9:ab:81:
         bf:8d:12:ff:27:db:53:96:d9:01:cf:92:82:eb:ad:56:43:d1:
         2b:0c:c4:9b:e7:a5:14:bd:ec:a7:e8:6f:d3:e8:f5:6b:76:23:
         5f:89:32:e0:77:4f:df:9c:d4:15:e8:01:f4:9c:9e:7e:39:1b:
         f3:6b:0c:34:26:1f:af:e2:46:41:3e:0c:62:bb:96:7d:01:ea:
         f2:7f:cf:14:9c:e5:f7:ce:33:c7:ab:82:84:b8:fd:4b:4a:eb:
         5f:0e:17:ee:5b:68:14:be:c0:c2:81:16:42:c9:3d:6e:89:3e:
         ed:eb:72:a7:a1:1d:09:b8:89:86:7b:d6:89:33:8a:ca:06:e0:
         01:b2:cc:43:1a:67:cb:ad:7b:14:6e:f4:e0:b0:c5:36:4f:a7:
         60:b5:39:28:22:1d:60:e1:1a:0d:ec:9b:b8:70:f7:57:fb:e6:
         01:b4:3f:c8:c3:69:f1:84:a8:57:12:95:dd:53:2a:57:95:10:
         9d:60:b2:66
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUe9FVOiaGp7AXwKNNbvYPa/9S88swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1ODNBMDUyNTYzREY4MTgwQkU0NTI5NUQ2N0ZBQTVB
M0ExODk5NjAeFw0yNTExMTUxNDQ1MDBaFw0yNjExMTQxNDUwMDBaMDMxMTAvBgNV
BAMTKDNFM0NGODU2NDZGQzc3MzhDNzNBRUU2Mjc5NjBCQkYwRDNGQjcyMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZr63qbldKHqyiBHuD/Mm2siAd
grBygaeBLVItHIwWSZwdcpiW1ZtkNF5Tx3NGCMWzRQsrNxpHUoZg5Y3kzE23Vpk3
ATQgwsf30+7DI2LcequC6uMGpfKOA5JGXZhn4lUz6u8nzfrLsJ2L8CvL87mAwEk2
JRll0wzQRG29smKYGWE4bM0pwehF2tvs2YiQx6y+SWr6yJUThZDGSpDVk8uaHCnN
FwTqAXI9Tp5iUkxZyA9/xvB7eiiukaEk/0ywKsJWpk2d1iZStMoHzVB9BDNC4YXP
Z8AsCHLys4HsCJerrYgnRLWbTyruEWwN0mBDlrhVtTzHcZZVQATYZAoShrqvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPjz4Vkb8dzjHOu5ieWC78NP7chEwHwYDVR0j
BBgwFoAUNVg6BSVj34GAvkUpXWf6paOhiZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA1NTY5RDIzMEZBMzgyM0FBNkJEM0Q0NTBEQUMyQTI1
M0VGRTBCRDY5NkQ3NEJDQzFFRjcyRUYwN0MwRjdCLzAvMzU1ODNBMDUyNTYzREY4
MTgwQkU0NTI5NUQ2N0ZBQTVBM0ExODk5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTU4M0EwNTI1NjNERjgxODBC
RTQ1Mjk1RDY3RkFBNUEzQTE4OTk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwNTU2OUQyMzBGQTM4MjNBQTZCRDNENDUwREFDMkEyNTNFRkUwQkQ2
OTZENzRCQ0MxRUY3MkVGMDdDMEY3Qi8wLzMxMzkzMDJlMzEzMjMyMmUzMTM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzUzMTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnqY
MA0GCSqGSIb3DQEBCwUAA4IBAQA136VSfUfgKQ9xw2bC6rU0KnVtlAzJ+P91soBn
BwHyr6ClUnXwT+mleS9iy/gsImzWBe1PyaBpxYifcX7Rhj5NCxFxNLzpq4G/jRL/
J9tTltkBz5KC661WQ9ErDMSb56UUveyn6G/T6PVrdiNfiTLgd0/fnNQV6AH0nJ5+
ORvzaww0Jh+v4kZBPgxiu5Z9Aeryf88UnOX3zjPHq4KEuP1LSutfDhfuW2gUvsDC
gRZCyT1uiT7t63KnoR0JuImGe9aJM4rKBuABssxDGmfLrXsUbvTgsMU2T6dgtTko
Ih1g4RoN7Ju4cPdX++YBtD/Iw2nxhKhXEpXdUypXlRCdYLJm
-----END CERTIFICATE-----
Generated at Tue Nov 25 18:40:41 2025 by rpki-client