This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203532333633.roa
File:                     3133312e302e3233322e302f32322d3234203d3e203532333633.roa (raw, json)
Hash identifier:          Z5NHVQ6kjFLWq3qIdELNc1m07/RHwvpMdHH6QUmCbQw=
Subject key identifier:   A2:10:81:61:5F:19:F5:C9:CA:81:03:46:3D:A2:D2:C6:3D:83:B0:C3
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       31F4B99A9DDE8D79C55D17A6CA386FB776B443BD
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203532333633.roa
Signing time:             Tue 06 Jan 2026 19:47:59 +0000
ROA not before:           Tue 06 Jan 2026 19:42:59 +0000
ROA not after:            Tue 05 Jan 2027 19:47:59 +0000
asID:                     52363
IP address blocks:        131.0.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:b9:9a:9d:de:8d:79:c5:5d:17:a6:ca:38:6f:b7:76:b4:43:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Jan  6 19:42:59 2026 GMT
            Not After : Jan  5 19:47:59 2027 GMT
        Subject: CN=A21081615F19F5C9CA8103463DA2D2C63D83B0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:56:45:9c:fd:f5:af:c2:3f:09:6a:56:58:
                    0f:a4:dd:cd:1d:0e:00:39:ba:4a:23:67:45:18:ed:
                    64:a0:a4:20:94:e9:f9:78:8b:5e:84:d8:99:1d:52:
                    2b:26:7b:81:3d:5a:db:35:9a:07:01:67:c7:b1:56:
                    0f:96:27:62:5a:ef:7d:14:81:0b:83:75:7b:fc:db:
                    fb:cb:60:f1:92:80:81:5b:92:4f:b9:2e:b1:49:e1:
                    73:09:f6:c0:a0:54:d0:0e:e9:ba:9a:03:da:a2:44:
                    10:22:46:f6:b1:0b:86:bd:05:05:9d:1c:c4:ef:e3:
                    d5:46:b0:1b:f5:c3:e6:08:ce:80:f8:75:c3:8b:77:
                    37:ff:24:aa:42:9a:c7:db:c4:04:bd:99:a8:de:8e:
                    77:68:34:71:e5:f3:44:61:10:3e:dc:7e:08:f8:6b:
                    f9:9d:9b:82:ca:47:14:66:3f:6a:e8:96:f5:33:12:
                    22:7e:89:ee:98:f3:cd:45:f5:aa:13:41:60:2c:d0:
                    88:ad:dc:f3:fa:f6:1a:47:c6:c2:cf:52:64:b5:84:
                    4b:7a:de:74:31:0c:16:e3:86:9e:be:18:d7:be:1d:
                    e2:d1:f5:83:d3:96:a7:6d:5b:4e:c8:f8:c2:31:76:
                    45:57:e4:72:27:bb:26:88:b0:9d:31:38:c0:ae:e2:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:10:81:61:5F:19:F5:C9:CA:81:03:46:3D:A2:D2:C6:3D:83:B0:C3
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:a9:0d:9b:79:7c:96:4a:77:8f:5d:f3:c7:1c:4e:ff:be:
         f8:01:fd:9f:3f:f7:d4:51:22:9d:47:e1:f6:c9:e5:b6:2a:95:
         ac:df:d6:2a:98:ed:40:01:45:aa:26:e9:63:6a:c3:e9:b0:e4:
         5b:17:15:43:5a:7b:1a:00:ae:70:6b:6f:67:0c:e9:b6:98:0d:
         c0:44:8f:fa:fe:d6:62:03:57:b8:85:fb:1c:a9:0c:d5:19:2c:
         3f:6e:b1:45:ba:cf:25:c5:9c:67:64:df:f0:e9:17:0a:01:4d:
         4f:db:16:cb:c1:15:e6:37:9d:c6:5d:49:1c:c9:80:59:4a:c4:
         f2:2c:9f:41:25:39:68:48:33:57:3b:25:2c:28:92:51:53:af:
         82:4c:b9:06:6d:38:af:a3:9e:22:a7:2f:11:68:d8:2b:80:e6:
         65:1b:6c:58:88:25:b2:5c:92:53:8f:88:db:23:17:ff:fa:d8:
         52:a2:be:c3:5b:09:6c:da:69:56:0b:4a:02:c9:fa:62:34:4f:
         65:5d:e3:7e:7b:7a:a6:4b:d7:b6:35:1e:cc:fc:33:fa:df:a4:
         ed:d0:f8:2b:4a:85:48:50:2c:17:31:fb:10:c6:18:a6:59:a0:
         9b:94:2c:05:7e:18:3f:7d:68:1f:77:2f:69:23:80:62:2e:d6:
         0b:64:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:33:23 2026 by rpki-client