This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/323830333a363135303a3a2f33322d3430203d3e20323733323434.roa
File:                     323830333a363135303a3a2f33322d3430203d3e20323733323434.roa (raw, json)
Hash identifier:          oQAyx+iJHhBmTAMcdVm9C4p1WGXgK0N+euT94ihbIjU=
Subject key identifier:   D4:9E:48:C1:48:73:C9:A1:AF:19:A0:C9:71:50:32:7C:F0:FE:0F:72
Certificate issuer:       /CN=5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB
Certificate serial:       3C97265EFB762F1D59B6D6CC94140FACCBCBCDAE
Authority key identifier: 5F:5C:0D:FD:76:D6:DC:1D:85:0E:E2:15:7B:D0:F4:E5:F6:ED:2E:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/323830333a363135303a3a2f33322d3430203d3e20323733323434.roa
Signing time:             Sat 22 Nov 2025 16:25:00 +0000
ROA not before:           Sat 22 Nov 2025 16:20:00 +0000
ROA not after:            Sat 21 Nov 2026 16:25:00 +0000
asID:                     273244
IP address blocks:        2803:6150::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Nov 2025 06:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:97:26:5e:fb:76:2f:1d:59:b6:d6:cc:94:14:0f:ac:cb:cb:cd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB
        Validity
            Not Before: Nov 22 16:20:00 2025 GMT
            Not After : Nov 21 16:25:00 2026 GMT
        Subject: CN=D49E48C14873C9A1AF19A0C97150327CF0FE0F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:db:5e:17:4d:a3:56:30:66:72:2a:78:b6:
                    e3:05:a9:62:ea:83:dc:00:a1:4d:64:dc:82:a3:b3:
                    18:99:2b:ef:52:86:a0:96:81:fb:e2:a8:57:52:39:
                    2a:01:1e:c4:dc:01:99:c6:43:6b:d1:aa:63:38:39:
                    b0:c2:7f:ce:90:67:52:5d:47:50:82:a9:5e:9f:4d:
                    63:c6:88:7f:f1:5a:3a:51:65:2b:56:70:01:42:eb:
                    e1:c6:0e:d2:0f:83:59:42:4f:62:13:5b:20:f0:83:
                    30:9d:04:31:45:71:09:71:f3:99:0b:0f:0e:2a:75:
                    71:28:70:07:12:87:e8:0c:d7:7a:de:13:a8:71:54:
                    59:f2:11:93:0a:ab:fc:82:7c:3c:4f:7e:9c:5e:38:
                    5e:cc:c7:a1:3b:60:e6:74:d2:5a:ce:5b:cc:d9:fb:
                    b6:49:37:3a:ed:45:63:7d:7e:9d:f8:65:02:4e:2a:
                    7c:47:80:d2:07:4e:1b:c9:dc:a9:36:64:67:2c:9f:
                    7e:86:c2:d5:6e:3a:98:ed:7b:6c:a2:52:6e:49:b0:
                    cc:8d:db:32:be:05:ac:d4:d3:b3:80:f5:86:98:3e:
                    5f:34:2c:3c:52:43:d7:ed:24:98:be:99:4d:72:60:
                    ed:6d:b8:4c:b8:5c:64:19:cb:0a:64:45:27:c5:5b:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:48:C1:48:73:C9:A1:AF:19:A0:C9:71:50:32:7C:F0:FE:0F:72
            X509v3 Authority Key Identifier:
                keyid:5F:5C:0D:FD:76:D6:DC:1D:85:0E:E2:15:7B:D0:F4:E5:F6:ED:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5C0DFD76D6DC1D850EE2157BD0F4E5F6ED2EBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91274329588638C015CCBA8F9D89E1FEDD9BFDA8B46FE1567059F96B0BA87379/0/323830333a363135303a3a2f33322d3430203d3e20323733323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6150::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:50:f1:51:da:d0:34:30:f0:36:a4:68:56:8a:e4:c7:52:29:
         a6:df:80:5f:f6:d9:1c:27:a2:bf:c7:ff:7a:cd:80:e6:59:ac:
         00:00:15:f4:af:60:e9:99:1d:1e:a2:5e:1a:50:f0:8c:6e:19:
         cd:c8:45:7b:07:a1:c2:85:2c:09:d0:5d:ef:21:37:19:7e:39:
         39:18:c2:f7:bb:d0:94:a0:f9:73:41:ac:69:a6:8d:f4:ce:e2:
         8f:aa:51:60:72:61:b6:de:10:20:38:ca:8e:8b:36:8c:ca:2c:
         e4:44:36:75:74:b0:7c:6b:0c:fd:00:ea:45:62:5c:36:73:f1:
         76:d5:ae:71:e3:8f:69:2d:b8:8d:40:6f:37:38:37:9b:30:c2:
         6b:69:48:4a:3f:f9:76:32:d9:e2:e5:7b:e0:71:ec:d0:8a:24:
         ea:77:e2:16:c6:d6:de:05:b1:40:21:1b:4a:25:5d:a5:67:3b:
         79:24:20:a9:88:40:56:8e:a1:ca:09:c5:77:86:9b:cc:f2:a0:
         4e:d5:37:a9:88:ab:51:f6:6e:a6:b0:27:48:c8:51:65:02:34:
         09:5d:51:25:f1:54:71:32:d3:b4:76:d8:92:0c:d8:54:25:bf:
         02:18:4f:84:eb:b6:21:30:d7:3f:65:61:fa:f2:0c:82:80:32:
         b7:72:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 18:40:42 2025 by rpki-client