This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34372e302f32342d3234203d3e2032363338.roa
File:                     3139322e3133362e34372e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          F21tcD9zuG5UZYWLRYCSQc8qlMpXsdjzEdU0eH0g2/M=
Subject key identifier:   ED:99:F0:3E:79:08:5D:15:D8:38:E1:07:9D:93:CE:A8:5E:3F:B3:D5
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       43CC46D575E4713F0DE7EFB20FE8D6499792A4D5
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34372e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:00 +0000
ROA not before:           Tue 16 Dec 2025 22:15:00 +0000
ROA not after:            Tue 15 Dec 2026 22:20:00 +0000
asID:                     2638
IP address blocks:        192.136.47.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cc:46:d5:75:e4:71:3f:0d:e7:ef:b2:0f:e8:d6:49:97:92:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:00 2025 GMT
            Not After : Dec 15 22:20:00 2026 GMT
        Subject: CN=ED99F03E79085D15D838E1079D93CEA85E3FB3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:1a:9c:f1:fb:b8:10:b3:82:7b:80:e3:9a:
                    dc:1e:6f:b1:6b:4e:61:46:d2:77:80:08:0f:1f:a5:
                    6c:1b:bd:55:06:a9:59:e9:56:7c:30:88:86:a3:ec:
                    fc:c1:f8:ce:90:25:5f:97:da:df:6b:f4:97:8a:1f:
                    ed:54:4b:39:ec:2d:0f:16:35:41:3e:82:d1:c9:c4:
                    e4:2d:1c:85:c9:f7:a7:20:11:55:09:5f:5b:58:c9:
                    df:0f:49:a8:9b:2b:94:8f:f9:3f:90:fb:25:22:79:
                    10:26:90:5e:c1:fa:2f:c5:b7:fe:8f:55:82:02:25:
                    01:26:e8:c2:89:bf:93:cf:cd:f2:4f:c6:68:c7:6c:
                    11:29:e6:d5:86:04:8f:a7:d7:7c:74:8b:10:b5:ee:
                    1a:61:5d:12:e4:96:e8:42:97:54:ed:1d:d0:30:56:
                    b9:dd:21:43:22:58:88:54:f2:25:e9:a1:65:17:6b:
                    d0:ca:5f:1d:7d:ae:54:1b:9c:7e:43:4e:4d:15:13:
                    7b:a1:5d:50:bf:c2:05:fd:ab:a4:07:8a:2c:30:c4:
                    9b:5d:9a:52:75:38:08:0e:86:38:d0:98:0e:84:12:
                    86:8d:13:93:a7:f9:0e:18:c3:28:cb:eb:26:75:df:
                    fa:79:10:a6:6a:63:3c:01:0c:39:03:be:53:71:d4:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:F0:3E:79:08:5D:15:D8:38:E1:07:9D:93:CE:A8:5E:3F:B3:D5
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34372e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:0d:bc:cc:e2:d0:d9:00:25:2c:08:f6:c3:f3:78:d8:2a:
         5e:bb:f9:4e:08:f3:59:e5:f8:5c:16:35:bc:6d:e2:ef:c9:9b:
         bc:cd:0f:28:24:c5:9d:8b:82:41:19:0a:c2:9c:20:82:bd:31:
         d3:6e:9a:79:34:e2:6b:2c:44:d5:24:a6:7e:36:27:34:3b:6a:
         de:41:52:7a:70:b8:e5:d2:97:77:47:be:11:48:64:8c:68:93:
         09:38:bf:04:e2:70:ca:e3:65:e8:d2:32:89:8f:fb:d1:e7:9b:
         9e:43:6e:f7:b1:9f:1f:18:dc:3c:ac:af:56:4c:50:16:ff:79:
         43:6e:38:91:16:64:de:3a:4e:a7:a6:fb:36:f8:ea:8f:cd:e9:
         52:d3:a2:88:14:8e:b1:f0:d1:29:6e:cc:be:c7:c6:72:5e:06:
         c0:d7:98:0e:74:e7:99:80:23:e4:8f:45:3d:46:d7:16:95:18:
         de:da:20:0e:4b:cb:f0:ca:37:1e:1f:17:cc:f6:00:8b:40:48:
         4f:e0:8b:87:c5:21:05:e4:91:dd:62:96:f6:42:d5:6c:19:af:
         12:6e:9d:48:67:d3:15:ce:ed:55:04:e5:16:a3:32:ff:89:6c:
         c4:50:1b:95:82:57:9c:5f:4e:82:ba:33:f9:27:ac:82:a5:50:
         16:8b:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----