This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
File:                     AS27672.roa (raw, json)
Hash identifier:          rizYxCEPEtHcpvYhbTbVmNkgs20er3MDt4iW6EhEoTc=
Subject key identifier:   AC:42:9B:5C:AC:D5:86:95:EC:6A:D6:BD:CC:D0:2E:D9:FF:E8:06:99
Certificate issuer:       /CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
Certificate serial:       7D946FB5A2773ED1026494A5F312A540D20EC527
Authority key identifier: 3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa
Signing time:             Mon 08 Dec 2025 08:45:01 +0000
ROA not before:           Mon 08 Dec 2025 08:40:01 +0000
ROA not after:            Mon 07 Dec 2026 08:45:01 +0000
asID:                     27672
IP address blocks:        177.224.176.0/21 maxlen: 21
                          177.240.128.0/19 maxlen: 19
                          200.77.124.0/22 maxlen: 22
                          2806:260:1009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:94:6f:b5:a2:77:3e:d1:02:64:94:a5:f3:12:a5:40:d2:0e:c5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
        Validity
            Not Before: Dec  8 08:40:01 2025 GMT
            Not After : Dec  7 08:45:01 2026 GMT
        Subject: CN=AC429B5CACD58695EC6AD6BDCCD02ED9FFE80699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:1a:e1:c6:3d:a3:78:55:25:43:8d:e7:ff:
                    be:31:a6:5c:95:ef:46:d5:08:dd:bb:d9:ad:23:a5:
                    90:61:0a:41:d3:f3:5d:16:fa:6f:b0:10:0b:30:4a:
                    47:83:51:6e:7f:c2:03:d2:e2:b4:9c:b4:39:c7:47:
                    cd:86:ab:7d:fa:28:ae:e2:b8:9f:71:51:e8:90:d7:
                    1d:48:a0:99:5c:19:fc:fd:bd:00:e3:f1:21:e8:05:
                    5c:a7:db:73:6f:c4:22:33:37:43:74:b1:3f:00:7e:
                    12:8f:e5:9a:72:a2:d0:97:37:46:a1:70:27:c8:66:
                    d9:cb:15:29:92:ee:6f:d4:b1:2e:d7:33:b0:3f:da:
                    fb:99:5e:06:12:be:b5:ce:26:4e:f2:85:96:9d:82:
                    0c:05:a6:f9:e8:12:22:48:50:6e:91:75:c6:97:f6:
                    a1:99:05:b7:0b:17:25:7e:59:cc:11:47:9c:fd:c5:
                    12:48:fc:1b:e1:4d:3d:f2:51:dc:ad:2c:f8:9e:4f:
                    9f:bf:4f:1f:8a:77:3b:22:24:93:aa:cb:58:5f:fc:
                    58:43:10:1c:02:b2:19:63:b6:aa:46:30:83:2c:7a:
                    b6:10:f1:68:9f:91:92:df:6a:7c:4a:14:03:bc:20:
                    b2:26:cc:e3:24:56:e4:91:d1:05:92:4d:ae:8b:1b:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:9B:5C:AC:D5:86:95:EC:6A:D6:BD:CC:D0:2E:D9:FF:E8:06:99
            X509v3 Authority Key Identifier:
                keyid:3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS27672.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.224.176.0/21
                  177.240.128.0/19
                  200.77.124.0/22
                IPv6:
                  2806:260:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:2d:20:27:92:54:7d:89:ed:bc:45:bf:2b:00:1b:d6:b1:74:
         8d:16:7f:13:47:81:2c:c1:71:2c:0e:a1:0f:86:03:72:c0:15:
         32:d3:40:af:b7:8d:8b:c5:bc:a7:7a:1b:b2:68:ad:8b:25:76:
         cb:17:50:d5:22:e9:06:d5:77:cb:e3:d0:01:7e:1f:18:a0:b5:
         c2:9a:3e:4a:ab:2c:aa:1d:71:32:96:fc:3a:5b:20:20:9f:46:
         fa:34:cf:6f:da:8f:f9:97:b4:81:60:e7:33:a1:bd:69:96:aa:
         b8:e9:2d:d8:f4:61:12:1c:3e:4a:95:22:e4:78:70:e0:f2:03:
         30:61:95:07:fd:fc:b5:cd:7e:99:f5:4e:ac:af:48:73:20:03:
         1a:0e:f6:c3:2c:62:3c:a2:d5:98:8b:49:53:40:5c:96:eb:05:
         77:02:55:c8:91:7f:c0:43:8f:e5:a0:a2:a4:2a:4b:e0:d6:0f:
         29:2a:b8:ff:5e:f3:7d:d9:18:e4:1c:4f:a6:c7:42:fb:a2:67:
         e4:9a:03:de:58:aa:96:1e:d3:5a:79:95:bd:7b:55:17:96:a3:
         aa:a9:55:da:0b:a1:8e:6e:c0:22:8a:f6:ae:ea:bf:03:93:86:
         5c:85:81:48:e3:02:65:1e:c1:ae:ea:5f:10:50:ce:ca:3d:96:
         2f:ea:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 13:11:49 2025 by rpki-client