This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34372e302f32342d3234203d3e20323633373336.roa
File:                     3139302e31312e34372e302f32342d3234203d3e20323633373336.roa (raw, json)
Hash identifier:          N3twKijutvQP8fJt27JyPZpY7kcqvjR9LXR/n6GQIsU=
Subject key identifier:   B0:80:90:4B:33:47:D3:29:13:94:A2:2E:3D:62:DE:A8:3F:D3:32:DD
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       36AC4F923F544C47B5CF42512A2870CC9B67C3EB
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34372e302f32342d3234203d3e20323633373336.roa
Signing time:             Mon 10 Nov 2025 12:20:00 +0000
ROA not before:           Mon 10 Nov 2025 12:15:00 +0000
ROA not after:            Mon 09 Nov 2026 12:20:00 +0000
asID:                     263736
IP address blocks:        190.11.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ac:4f:92:3f:54:4c:47:b5:cf:42:51:2a:28:70:cc:9b:67:c3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Nov 10 12:15:00 2025 GMT
            Not After : Nov  9 12:20:00 2026 GMT
        Subject: CN=B080904B3347D3291394A22E3D62DEA83FD332DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:c7:10:4c:e5:fb:bc:64:e6:a3:06:0c:79:
                    57:c4:c8:d8:22:38:c7:48:3b:53:1d:17:76:06:14:
                    42:36:7b:19:2f:e4:49:51:a6:40:91:a5:d9:85:c4:
                    e9:61:a9:bc:fa:ef:09:cf:91:6e:98:7c:6c:85:08:
                    e3:bb:2a:11:57:5e:5d:dd:03:61:eb:fc:80:93:05:
                    e3:62:0d:d1:64:e9:9a:4e:39:9c:af:76:69:df:28:
                    d6:a9:19:2a:a7:6d:02:6f:dd:e4:ff:a4:39:6f:a5:
                    4a:72:5e:df:2d:c5:af:15:49:7b:66:7d:df:db:5c:
                    d3:0c:be:1a:3f:56:ac:0f:d7:7e:19:4f:24:38:ab:
                    98:41:fd:3c:e3:ba:0e:18:db:cd:32:32:89:53:9b:
                    c2:b9:5f:38:17:53:47:36:76:13:fc:07:e0:cb:3e:
                    dd:42:b9:59:30:89:5a:44:56:ad:f6:ce:a4:a2:66:
                    88:6e:23:cf:89:0a:ab:20:a1:4d:34:a3:dd:4f:cf:
                    ef:d5:5f:50:fd:9c:67:4d:9b:6e:ab:f8:60:04:c3:
                    6d:d6:a6:f3:35:3a:6d:4f:93:c1:ff:4e:f6:26:7a:
                    f1:57:75:5a:a2:53:fd:31:e1:68:56:f5:3b:3b:ce:
                    95:2f:4c:8e:9a:83:95:81:8a:6d:6a:1c:c4:b7:7f:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:80:90:4B:33:47:D3:29:13:94:A2:2E:3D:62:DE:A8:3F:D3:32:DD
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34372e302f32342d3234203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:5f:2c:64:90:19:3a:34:d1:b4:22:32:23:69:47:4f:03:
         d0:59:50:15:cb:ed:d8:a3:a6:ba:5e:21:82:d4:40:f2:c3:2d:
         b0:30:2e:50:23:13:d7:bf:e1:9e:ce:cd:33:f7:11:40:69:b3:
         63:a4:5f:5a:87:bb:78:c9:50:55:fa:e6:c5:39:66:0c:00:01:
         4b:9d:32:39:e3:21:c2:20:17:95:6f:71:15:73:43:46:8f:6d:
         70:2d:e0:65:b7:65:4a:85:c9:bc:1b:95:1e:d9:4f:f2:ef:19:
         be:78:e3:2f:80:67:d5:76:c3:97:63:99:47:08:81:a0:ca:bb:
         b8:f5:e1:41:a6:de:74:24:74:d9:27:57:5e:f1:78:3c:e4:e2:
         44:18:29:cb:d2:4f:52:31:26:31:c5:44:0f:b0:05:db:d3:a0:
         39:65:e5:9c:c2:99:92:5c:92:d6:30:57:67:6e:b2:ae:1a:8d:
         f6:5c:6c:67:6d:71:81:da:ea:bd:91:48:8a:9b:b8:09:76:07:
         1b:4a:e7:b9:68:26:81:a6:5b:bb:0f:36:26:f8:89:ef:43:6d:
         8d:87:45:0f:26:49:20:34:90:5d:2f:8c:8b:fb:93:12:d0:a3:
         49:91:11:98:12:fa:be:bf:39:35:ff:35:50:4f:4d:fd:c1:11:
         99:3c:34:eb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNqxPkj9UTEe1z0JRKihwzJtnw+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGNTE0MTk5MEEwMjUyQzM3RDYzMTEyRkI2RUNBNURC
QzU2ODZCNjAeFw0yNTExMTAxMjE1MDBaFw0yNjExMDkxMjIwMDBaMDMxMTAvBgNV
BAMTKEIwODA5MDRCMzM0N0QzMjkxMzk0QTIyRTNENjJERUE4M0ZEMzMyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiMcQTOX7vGTmowYMeVfEyNgi
OMdIO1MdF3YGFEI2exkv5ElRpkCRpdmFxOlhqbz67wnPkW6YfGyFCOO7KhFXXl3d
A2Hr/ICTBeNiDdFk6ZpOOZyvdmnfKNapGSqnbQJv3eT/pDlvpUpyXt8txa8VSXtm
fd/bXNMMvho/VqwP134ZTyQ4q5hB/Tzjug4Y280yMolTm8K5XzgXU0c2dhP8B+DL
Pt1CuVkwiVpEVq32zqSiZohuI8+JCqsgoU00o91Pz+/VX1D9nGdNm26r+GAEw23W
pvM1Om1Pk8H/TvYmevFXdVqiU/0x4WhW9Ts7zpUvTI6ag5WBim1qHMS3f5F3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsICQSzNH0ykTlKIuPWLeqD/TMt0wHwYDVR0j
BBgwFoAU0vUUGZCgJSw31jES+27KXbxWhrYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkZGRENBMzBDMTVDRDU5OTcwQTdFN0FGQUVDM0E5MUFG
NDMwMUFDOTAwOEIwRkZDM0I4Rjk3NzVGNTZGMkZELzAvRDJGNTE0MTk5MEEwMjUy
QzM3RDYzMTEyRkI2RUNBNURCQzU2ODZCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkY1MTQxOTkwQTAyNTJDMzdE
NjMxMTJGQjZFQ0E1REJDNTY4NkI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJGRkRDQTMwQzE1Q0Q1OTk3MEE3RTdBRkFFQzNBOTFBRjQzMDFBQzkw
MDhCMEZGQzNCOEY5Nzc1RjU2RjJGRC8wLzMxMzkzMDJlMzEzMTJlMzQzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4LLzAN
BgkqhkiG9w0BAQsFAAOCAQEAtUhfLGSQGTo00bQiMiNpR08D0FlQFcvt2KOmul4h
gtRA8sMtsDAuUCMT17/hns7NM/cRQGmzY6RfWoe7eMlQVfrmxTlmDAABS50yOeMh
wiAXlW9xFXNDRo9tcC3gZbdlSoXJvBuVHtlP8u8ZvnjjL4Bn1XbDl2OZRwiBoMq7
uPXhQabedCR02SdXXvF4POTiRBgpy9JPUjEmMcVED7AF29OgOWXlnMKZklyS1jBX
Z26yrhqN9lxsZ21xgdrqvZFIipu4CXYHG0rnuWgmgaZbuw82JviJ70NtjYdFDyZJ
IDSQXS+Mi/uTEtCjSZERmBL6vr85Nf81UE9N/cERmTw06w==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:57 2025 by rpki-client