This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/323830363a3434623a633030303a3a2f33342d3334203d3e20323733323736.roa
File:                     323830363a3434623a633030303a3a2f33342d3334203d3e20323733323736.roa (raw, json)
Hash identifier:          nl0zNnjp7XDWNHAEgCWFN3MlC6srREIbRfT679G/n1c=
Subject key identifier:   74:25:64:B3:51:ED:3C:F7:51:75:2E:11:9D:85:27:18:68:F8:43:DD
Certificate issuer:       /CN=3360E7A4F7043EDDC877AD1A89727CA151E15193
Certificate serial:       72516F45A92818A80E5C342AF06E2B8010E877A3
Authority key identifier: 33:60:E7:A4:F7:04:3E:DD:C8:77:AD:1A:89:72:7C:A1:51:E1:51:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/323830363a3434623a633030303a3a2f33342d3334203d3e20323733323736.roa
Signing time:             Wed 10 Dec 2025 02:00:00 +0000
ROA not before:           Wed 10 Dec 2025 01:55:00 +0000
ROA not after:            Wed 09 Dec 2026 02:00:00 +0000
asID:                     273276
IP address blocks:        2806:44b:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 22:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:51:6f:45:a9:28:18:a8:0e:5c:34:2a:f0:6e:2b:80:10:e8:77:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3360E7A4F7043EDDC877AD1A89727CA151E15193
        Validity
            Not Before: Dec 10 01:55:00 2025 GMT
            Not After : Dec  9 02:00:00 2026 GMT
        Subject: CN=742564B351ED3CF751752E119D85271868F843DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:88:54:85:9d:39:90:4e:54:43:32:84:79:
                    72:06:00:ef:6e:a4:61:7c:eb:0a:78:90:36:fe:a7:
                    10:25:b2:bc:39:3f:59:52:78:e1:b2:9c:f1:c9:17:
                    9c:fa:bd:c2:de:29:7b:48:8a:04:02:09:d9:65:50:
                    92:8c:3f:48:89:ad:37:53:17:52:83:31:5e:03:27:
                    d6:d6:cf:c4:bd:3f:01:b4:0d:20:4f:14:fc:d7:e1:
                    9f:ca:68:ab:61:69:ab:44:52:4d:63:e6:dd:3a:d6:
                    ac:61:2c:8b:e5:4b:15:63:7c:55:80:b4:59:5b:20:
                    8b:20:8b:71:09:cf:62:e9:3a:16:0b:5f:3c:3b:6f:
                    0d:81:94:ba:a7:5a:86:14:7c:3c:8f:18:69:25:52:
                    eb:47:a7:51:4d:27:31:47:6a:e5:9d:06:54:4b:c2:
                    02:59:92:83:fa:45:83:8d:9f:b5:b2:47:2a:a3:2d:
                    b2:3b:15:bf:b1:c0:9d:19:8a:90:c4:73:b7:c0:dd:
                    4f:06:cf:a6:5f:4a:14:bd:01:24:95:26:fb:04:c5:
                    34:f5:5d:8d:b3:d1:79:90:e3:dd:d5:ab:e2:17:b7:
                    5f:b6:a1:dd:00:c1:14:04:a3:85:b7:2f:c5:a4:e6:
                    5c:e6:60:f1:cb:92:3b:9b:37:d6:73:a4:fd:40:62:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:64:B3:51:ED:3C:F7:51:75:2E:11:9D:85:27:18:68:F8:43:DD
            X509v3 Authority Key Identifier:
                keyid:33:60:E7:A4:F7:04:3E:DD:C8:77:AD:1A:89:72:7C:A1:51:E1:51:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/323830363a3434623a633030303a3a2f33342d3334203d3e20323733323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:44b:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:35:ab:a5:a2:8f:29:d2:4c:89:57:9a:c0:1a:ec:1a:50:f0:
         70:6a:d7:76:4b:1c:83:aa:50:55:28:7c:ba:86:2b:e3:7b:dd:
         a9:eb:02:29:50:7a:54:38:bf:c2:9b:1e:81:b5:7b:92:bc:fb:
         9c:cf:9c:c3:0b:55:3c:46:cd:26:b5:de:cd:db:38:a0:91:67:
         cf:a0:14:a0:05:85:7b:f6:1e:ac:20:26:c8:17:98:00:78:2a:
         66:5a:69:24:ac:58:a7:04:59:53:2e:af:4a:37:92:e6:9c:16:
         6d:ac:59:3c:12:8a:2a:63:44:30:7a:60:32:a6:76:7a:25:a6:
         ef:df:6b:e1:7e:ef:a4:42:73:01:e3:57:fd:20:d8:d7:57:bc:
         b4:57:bd:c3:e0:2b:31:91:c2:e9:c9:68:6e:47:f7:e7:93:4b:
         80:41:4e:05:c9:2d:ef:88:15:4d:84:a8:7b:b3:22:7d:02:a0:
         b9:ee:6f:95:aa:ff:35:63:52:96:bd:fa:98:de:05:dd:a9:ea:
         72:b4:8c:0b:27:61:ec:a1:47:ee:f6:c8:cf:a2:dc:d4:a5:e2:
         4a:30:2b:93:1e:b9:2a:7e:8b:a5:1f:83:c0:2c:0d:1f:fb:29:
         9d:36:01:72:89:8f:4f:2b:cf:64:60:18:fe:23:09:09:11:d5:
         4b:92:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 21:52:05 2025 by rpki-client