This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa
File:                     3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa (raw, json)
Hash identifier:          BKJ7ZGjvqg3r1OmbG9YNW6NfOFyDQUx/6HW6+O8uSVE=
Subject key identifier:   60:A5:F8:03:C5:60:6C:25:4A:1C:01:77:57:7C:93:ED:02:1A:63:CE
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       42CF493341D466B57A48AFDED95837BFAE303530
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa
Signing time:             Tue 06 Jan 2026 19:42:50 +0000
ROA not before:           Tue 06 Jan 2026 19:37:50 +0000
ROA not after:            Tue 05 Jan 2027 19:42:50 +0000
asID:                     272150
IP address blocks:        192.141.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 11:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cf:49:33:41:d4:66:b5:7a:48:af:de:d9:58:37:bf:ae:30:35:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Jan  6 19:37:50 2026 GMT
            Not After : Jan  5 19:42:50 2027 GMT
        Subject: CN=60A5F803C5606C254A1C0177577C93ED021A63CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:55:a0:fc:11:c6:56:07:10:06:e9:33:a0:
                    55:97:d0:6f:7d:62:90:6d:60:18:0f:e5:76:5e:a0:
                    00:32:83:b7:e4:15:c4:04:db:a1:b8:5f:de:83:ee:
                    b0:f2:25:0d:0c:bd:d5:22:51:b2:ae:d4:2b:13:04:
                    94:ee:bb:e8:22:6b:0a:64:5c:d2:7f:c7:2c:1e:e8:
                    35:f9:9f:97:9b:dd:cd:25:64:53:26:46:c2:f7:c0:
                    16:46:bf:b0:fa:54:ea:4e:51:19:dd:14:c6:88:30:
                    0e:95:09:59:d1:c8:1d:a1:ba:25:cc:11:e5:6b:56:
                    08:5b:19:2a:64:38:77:18:03:5d:3f:c2:de:dd:8f:
                    30:da:eb:f0:25:d4:56:bf:d6:5b:6c:d9:86:9b:87:
                    03:9a:a2:af:66:78:d0:3c:67:e4:f6:82:a6:79:d3:
                    f5:28:75:d2:ab:76:76:81:bf:b6:2a:dc:f1:e5:74:
                    a3:ec:c2:98:b8:54:6d:88:1e:89:76:a0:aa:c5:56:
                    e4:ec:06:47:10:d9:9b:23:62:5b:0f:98:9a:d3:42:
                    2b:35:83:f3:2d:41:1f:1e:55:c7:6d:1f:9c:c9:a3:
                    43:5e:b1:09:cf:4b:5a:c3:a3:7e:10:23:b2:e3:1a:
                    16:a0:39:45:9a:13:a2:d1:47:35:43:b9:78:c7:68:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A5:F8:03:C5:60:6C:25:4A:1C:01:77:57:7C:93:ED:02:1A:63:CE
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32322d3232203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:14:12:39:38:c3:9e:b3:36:d7:ca:83:75:a8:39:56:1f:28:
         1d:57:09:59:b6:50:96:a6:99:24:67:ab:85:35:70:0c:c4:c8:
         23:52:5b:65:b7:7f:3a:e4:2b:fa:ca:0c:1c:4f:72:fb:18:76:
         d9:50:ed:16:88:68:78:3a:b8:5e:f1:2d:37:32:df:c5:28:36:
         b9:36:49:b1:f3:1d:05:7f:00:34:61:69:11:a8:e8:51:e5:a8:
         7e:bc:2e:1c:07:7a:6f:b1:73:2a:01:2d:63:bf:ce:89:71:57:
         1a:4d:67:59:ec:c4:75:c2:0e:e0:4e:8d:88:c3:74:63:9f:6d:
         9d:93:d6:41:48:f5:e1:41:f2:d7:33:37:5a:90:70:e1:63:34:
         0d:2d:04:b4:21:85:7e:da:41:66:90:61:b9:ea:9f:53:eb:c5:
         bd:2a:7a:d4:92:03:56:e5:ba:29:91:b0:b2:8f:7a:93:96:11:
         a1:c1:3b:d7:07:69:7c:23:2b:4f:4b:62:c9:eb:55:3f:a9:ec:
         20:17:d0:a6:92:47:90:76:99:d9:94:c5:5a:c0:1e:68:81:8a:
         24:5b:8c:ef:1f:7b:f0:e3:4a:57:f7:89:14:e3:e3:e1:d6:a3:
         69:7c:98:e5:f2:cd:7e:d0:00:c9:eb:26:63:98:77:d9:15:82:
         ee:c7:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:25:04 2026 by rpki-client