This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e33322e302f31392d3234203d3e203238313134.roa
File:                     3139302e3131352e33322e302f31392d3234203d3e203238313134.roa (raw, json)
Hash identifier:          +0e6wttEWP8ilYjLZx49qZQj/a1Ev5Fmp3eSaGcjbgA=
Subject key identifier:   0D:4F:E8:10:52:D7:99:B4:92:C4:20:69:BB:F6:4D:0A:04:05:D5:31
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       7E39266CEBDFD03EED1DDB82D213F6C2AFDB4264
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e33322e302f31392d3234203d3e203238313134.roa
Signing time:             Tue 06 Jan 2026 19:05:19 +0000
ROA not before:           Tue 06 Jan 2026 19:00:19 +0000
ROA not after:            Tue 05 Jan 2027 19:05:19 +0000
asID:                     28114
IP address blocks:        190.115.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 16:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:39:26:6c:eb:df:d0:3e:ed:1d:db:82:d2:13:f6:c2:af:db:42:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:19 2026 GMT
            Not After : Jan  5 19:05:19 2027 GMT
        Subject: CN=0D4FE81052D799B492C42069BBF64D0A0405D531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:dd:3d:ef:86:4e:4d:dd:8a:79:e0:ce:df:
                    21:54:0e:45:51:8e:26:9e:55:a4:1e:7f:88:b4:be:
                    59:0f:22:bc:a7:23:22:05:c0:3b:a5:bb:33:70:9c:
                    ae:7d:9f:b7:89:22:1e:c0:ea:95:44:a1:d1:45:de:
                    49:f1:a1:f1:7c:8c:50:87:a6:1f:4b:16:fa:7e:17:
                    f2:68:a8:44:bb:7d:5f:f2:07:ad:4f:70:b8:83:34:
                    3d:24:db:60:48:24:24:d7:de:12:29:1f:69:4e:aa:
                    dc:d2:19:17:55:15:7c:ee:5f:44:85:ab:4e:86:d6:
                    f6:fe:3a:18:a2:a0:c1:6e:89:ce:3d:18:28:87:02:
                    5f:53:12:36:47:93:2c:51:ff:3e:00:38:87:c0:e6:
                    21:4e:15:be:aa:7f:06:1f:2a:98:ae:49:2d:0b:56:
                    17:db:39:8d:2e:29:64:65:e5:01:5e:5e:0d:91:80:
                    84:39:77:7c:c3:e3:ac:6e:0e:a7:70:e4:b2:2b:79:
                    21:33:45:16:61:34:ed:04:9b:e4:5d:c4:a1:43:9b:
                    39:c3:c5:17:88:85:33:cf:8a:24:b7:01:e5:b8:9b:
                    21:ca:cb:4e:fc:1f:b3:da:4c:a9:f3:ad:53:ee:b1:
                    67:8e:9e:9c:b6:52:25:60:e2:07:d0:02:95:1a:a9:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:E8:10:52:D7:99:B4:92:C4:20:69:BB:F6:4D:0A:04:05:D5:31
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e33322e302f31392d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:14:60:6a:0e:e5:b6:09:9b:e7:b4:9c:60:12:57:8b:81:
         7a:08:e7:e5:cb:58:30:6e:2b:87:43:87:a7:7c:ea:9c:91:96:
         88:38:9c:98:51:2b:f4:2d:97:39:42:19:8e:50:c3:26:17:7b:
         a6:54:8e:06:1c:3e:ea:9e:10:ff:52:54:8a:c8:ab:b2:a1:e0:
         a0:51:7c:01:1d:e9:39:ae:f7:4c:3a:df:c3:f9:46:52:9c:ce:
         81:df:58:4c:9d:22:4a:af:b5:0c:48:81:03:c3:94:0f:15:59:
         d3:b5:95:1f:29:15:28:33:83:5f:f5:25:08:b8:7f:b7:76:3d:
         3b:28:94:70:b5:8c:40:47:66:48:95:79:96:0b:e2:13:fd:a5:
         4d:7e:70:96:fc:4f:bb:eb:db:c4:f9:98:49:9a:d9:61:ac:ab:
         38:f7:34:48:b6:9e:51:12:0a:3b:96:6d:64:d3:fd:8e:5d:d4:
         74:ad:28:66:6d:f7:ee:aa:00:14:e5:95:3b:bc:77:37:02:c5:
         b8:42:e5:35:a6:b4:26:2b:a6:ca:5d:95:b8:7b:a4:a0:0d:d6:
         21:df:58:d5:76:6d:98:fc:f9:9f:9d:d8:bb:f4:c7:12:73:b9:
         7c:81:49:e0:e6:f6:0b:a8:5e:26:94:f2:91:ac:22:ed:8d:05:
         ea:1e:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:48:31 2026 by rpki-client