This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34332e302f32342d3234203d3e2032363338.roa
File:                     3139322e3133362e34332e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          tP1rMhvbAfGN8IURzcAn1QTx7EizSGuu4PxpALSivzs=
Subject key identifier:   9C:FF:9F:B8:12:A9:3E:9C:F5:11:25:CB:55:3F:D9:2E:E3:9C:A0:F8
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       76F5AE57166875AF8852F3DA79C2753898EBFB8A
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34332e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:00 +0000
ROA not before:           Tue 16 Dec 2025 22:15:00 +0000
ROA not after:            Tue 15 Dec 2026 22:20:00 +0000
asID:                     2638
IP address blocks:        192.136.43.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f5:ae:57:16:68:75:af:88:52:f3:da:79:c2:75:38:98:eb:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:00 2025 GMT
            Not After : Dec 15 22:20:00 2026 GMT
        Subject: CN=9CFF9FB812A93E9CF51125CB553FD92EE39CA0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:49:b0:30:04:ec:24:f1:c4:61:70:93:d0:
                    b0:20:35:81:37:b3:ed:1d:6c:11:5e:5d:c2:f3:2f:
                    bf:dd:42:2b:a2:1c:ba:de:fc:89:36:a4:0d:f9:30:
                    79:85:fe:25:e3:7b:52:64:5b:8c:83:3c:63:b7:41:
                    0b:d8:52:cc:e4:c4:ba:dc:aa:38:57:fa:9d:0a:d8:
                    9a:11:0e:d9:02:b3:06:29:90:72:5c:27:9c:53:57:
                    dd:23:3d:de:94:3f:c1:03:b4:9e:15:20:51:0c:ab:
                    51:50:21:c2:4b:86:dc:57:be:93:32:02:d5:47:97:
                    42:ec:76:a2:cb:f1:c7:2b:f6:1f:e9:d2:3f:9c:43:
                    77:10:04:d5:04:81:53:05:36:e0:77:bf:bf:b4:32:
                    d3:1e:1f:17:a2:ff:ac:69:b5:83:94:f9:93:cd:88:
                    5d:f9:f8:72:a1:ca:61:3c:c1:ac:dd:da:72:16:c3:
                    6c:7c:dd:de:77:1d:94:4c:90:46:d5:72:85:cf:8a:
                    10:fd:0b:10:f2:80:93:b9:f9:d0:b5:7d:5f:7e:35:
                    b9:dd:5f:e6:2e:28:b0:7b:53:86:f8:13:1f:e8:e7:
                    65:bd:cb:97:b1:18:29:0f:ae:fe:8e:8e:97:f4:f1:
                    6a:4a:02:7e:33:11:d9:68:20:fe:40:c1:0d:fc:6e:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FF:9F:B8:12:A9:3E:9C:F5:11:25:CB:55:3F:D9:2E:E3:9C:A0:F8
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34332e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:35:ef:3f:e5:0e:fb:68:ec:23:a4:59:ea:80:6f:6c:39:86:
         32:9b:4b:4e:d6:cf:1f:dc:e4:1a:c2:8e:1a:08:16:9b:b5:1e:
         2c:86:38:05:ec:62:50:45:6b:19:c8:4e:ab:ff:9a:ea:4c:3e:
         78:03:4e:c2:0f:a8:1c:d6:77:b6:7b:46:6f:8a:f9:ee:60:9a:
         ea:47:ce:d6:a4:6a:a1:13:17:a0:df:ac:49:68:0e:fe:0b:9a:
         65:eb:06:80:85:47:90:40:ab:d5:0c:f0:a0:a1:30:e9:a1:7f:
         45:1d:b1:75:94:e1:74:9f:c9:e1:3f:e7:f9:3c:85:ac:ab:07:
         31:70:8c:0f:5d:86:49:51:c2:31:3f:1a:89:be:d4:62:04:09:
         24:72:e9:25:e3:fd:04:3c:4b:50:12:19:96:4f:72:80:e9:98:
         08:eb:54:a1:43:1b:55:f9:3c:93:63:93:b9:d2:48:56:9e:4b:
         8e:a3:5b:c0:5a:3d:45:80:6f:49:cc:6b:9e:8f:34:ed:8c:27:
         d7:af:0e:b7:ad:20:de:b3:9e:8c:3d:40:17:48:6c:3e:1c:38:
         fc:e5:d2:ce:55:4e:b1:03:10:24:f1:b3:55:d1:04:d9:83:6c:
         66:02:97:eb:f6:b7:92:5d:82:a0:26:c2:63:37:3e:8f:74:4a:
         99:9a:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----