This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa
File:                     34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa (raw, json)
Hash identifier:          Bj3o4S48k2i2dAF9EdXwnGlberDivfZbamGvtlUynYI=
Subject key identifier:   0F:C5:4C:6D:D4:A1:D3:24:E5:F4:A8:50:FE:28:80:D4:2E:77:5D:8C
Certificate issuer:       /CN=6EE358D5638125E1616F9AF891B9621DFB84CDB8
Certificate serial:       30DD11D3191166F524AAB3A7BF8C41BF5F3C7FA2
Authority key identifier: 6E:E3:58:D5:63:81:25:E1:61:6F:9A:F8:91:B9:62:1D:FB:84:CD:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa
Signing time:             Thu 25 Dec 2025 02:56:05 +0000
ROA not before:           Thu 25 Dec 2025 02:51:05 +0000
ROA not after:            Thu 24 Dec 2026 02:56:05 +0000
asID:                     266816
IP address blocks:        45.233.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:dd:11:d3:19:11:66:f5:24:aa:b3:a7:bf:8c:41:bf:5f:3c:7f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE358D5638125E1616F9AF891B9621DFB84CDB8
        Validity
            Not Before: Dec 25 02:51:05 2025 GMT
            Not After : Dec 24 02:56:05 2026 GMT
        Subject: CN=0FC54C6DD4A1D324E5F4A850FE2880D42E775D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:63:a9:27:82:6d:23:20:b0:2f:4b:3e:98:
                    d8:f1:dd:9d:dd:c7:b7:e0:fe:a7:2c:af:be:10:74:
                    8a:40:87:e9:69:3b:e9:34:ec:dc:f6:6e:c2:f0:a5:
                    54:93:f5:be:0a:f4:42:91:16:a9:ff:21:79:de:ac:
                    71:89:ca:69:18:c3:d7:10:fd:26:46:70:f8:c3:51:
                    6d:32:72:39:3d:bf:a5:e9:ff:90:ef:3f:6d:a3:61:
                    18:ed:20:d9:e9:1e:66:3f:f2:75:97:16:c9:a4:18:
                    ad:76:88:46:a8:a1:47:a1:f6:ec:10:ee:af:c5:30:
                    e8:77:35:03:19:d8:cf:10:92:db:f6:4f:9c:5c:6b:
                    26:33:ba:19:68:c7:95:e9:e7:64:23:9e:7c:bc:60:
                    d5:42:92:fd:69:15:54:9f:aa:21:53:87:1d:00:c2:
                    4b:ec:61:97:c8:a6:34:54:d6:78:88:6a:3b:88:18:
                    28:27:ee:25:0d:26:d8:11:e7:b3:e0:da:ef:6e:9b:
                    d3:4f:f1:36:e9:68:4a:3f:74:f9:82:c4:d9:e8:2f:
                    2a:d2:18:de:63:e9:3b:76:15:c1:ef:58:3e:20:0d:
                    ae:61:4d:e3:c1:43:96:fa:ad:20:21:0e:f1:96:c9:
                    7a:ae:0d:7c:ae:5b:2b:f0:c3:b3:59:22:0f:59:bb:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C5:4C:6D:D4:A1:D3:24:E5:F4:A8:50:FE:28:80:D4:2E:77:5D:8C
            X509v3 Authority Key Identifier:
                keyid:6E:E3:58:D5:63:81:25:E1:61:6F:9A:F8:91:B9:62:1D:FB:84:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:79:a0:bf:4b:23:d1:09:60:ec:4e:b2:ee:53:3c:9b:fd:
         a6:6d:0c:1d:b4:d7:cf:c0:7a:41:cc:57:a5:24:f3:c5:fc:6e:
         d8:d1:ab:e2:e2:a8:80:63:7d:ca:89:f5:93:67:32:24:26:ed:
         f1:b4:60:51:09:1a:e8:1f:e7:fc:fd:21:af:75:6f:9a:26:2e:
         4d:c7:8f:67:3e:26:b5:08:48:43:9b:ff:0d:92:3a:0d:cb:f7:
         ae:4b:4a:d0:4c:e4:1b:30:91:51:85:47:2d:36:d7:54:1e:4d:
         55:5b:5f:e6:b7:7d:cc:70:21:cc:c7:2e:2a:88:26:24:1c:d8:
         9e:da:fb:99:90:69:a5:5b:c0:9a:56:f7:49:94:9b:37:83:05:
         6b:29:3c:60:63:40:e3:2e:0a:40:f8:4c:1a:cc:c1:71:80:88:
         9b:f2:45:2e:bd:2d:d2:3f:6c:42:e5:e9:d9:43:47:d9:51:ea:
         e5:a7:c5:85:bf:de:d6:51:14:c4:c6:d8:95:36:c8:ca:91:4c:
         16:aa:e3:e4:2d:9e:63:ee:ad:64:56:3b:b7:79:4f:41:2e:cd:
         3d:21:1c:7f:a6:a6:46:6c:4b:d3:ec:f4:17:3c:68:fe:34:d2:
         c7:32:19:01:04:f2:da:fa:98:74:fe:90:12:f9:b8:92:84:e8:
         a2:c4:7a:b4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMN0R0xkRZvUkqrOnv4xBv188f6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVFMzU4RDU2MzgxMjVFMTYxNkY5QUY4OTFCOTYyMURG
Qjg0Q0RCODAeFw0yNTEyMjUwMjUxMDVaFw0yNjEyMjQwMjU2MDVaMDMxMTAvBgNV
BAMTKDBGQzU0QzZERDRBMUQzMjRFNUY0QTg1MEZFMjg4MEQ0MkU3NzVEOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQBmOpJ4JtIyCwL0s+mNjx3Z3d
x7fg/qcsr74QdIpAh+lpO+k07Nz2bsLwpVST9b4K9EKRFqn/IXnerHGJymkYw9cQ
/SZGcPjDUW0ycjk9v6Xp/5DvP22jYRjtINnpHmY/8nWXFsmkGK12iEaooUeh9uwQ
7q/FMOh3NQMZ2M8Qktv2T5xcayYzuhlox5Xp52Qjnny8YNVCkv1pFVSfqiFThx0A
wkvsYZfIpjRU1niIajuIGCgn7iUNJtgR57Pg2u9um9NP8TbpaEo/dPmCxNnoLyrS
GN5j6Tt2FcHvWD4gDa5hTePBQ5b6rSAhDvGWyXquDXyuWyvww7NZIg9Zu0ZtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUD8VMbdSh0yTl9KhQ/iiA1C53XYwwHwYDVR0j
BBgwFoAUbuNY1WOBJeFhb5r4kbliHfuEzbgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0Y1MzdCQzEyQzQxOUNCOTFERTJCMDU3MDVDMzExMDdF
MDEzQTAzMEE0NkMwMzgyQkYzQjAwOEIwN0Q0RTNBLzAvNkVFMzU4RDU2MzgxMjVF
MTYxNkY5QUY4OTFCOTYyMURGQjg0Q0RCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RUUzNThENTYzODEyNUUxNjE2
RjlBRjg5MUI5NjIxREZCODRDREI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNGNTM3QkMxMkM0MTlDQjkxREUyQjA1NzA1QzMxMTA3RTAxM0EwMzBB
NDZDMDM4MkJGM0IwMDhCMDdENEUzQS8wLzM0MzUyZTMyMzMzMzJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLemo
MA0GCSqGSIb3DQEBCwUAA4IBAQA/WHmgv0sj0Qlg7E6y7lM8m/2mbQwdtNfPwHpB
zFelJPPF/G7Y0avi4qiAY33KifWTZzIkJu3xtGBRCRroH+f8/SGvdW+aJi5Nx49n
Pia1CEhDm/8NkjoNy/euS0rQTOQbMJFRhUctNtdUHk1VW1/mt33McCHMxy4qiCYk
HNie2vuZkGmlW8CaVvdJlJs3gwVrKTxgY0DjLgpA+EwazMFxgIib8kUuvS3SP2xC
5enZQ0fZUerlp8WFv97WURTExtiVNsjKkUwWquPkLZ5j7q1kVju3eU9BLs09IRx/
pqZGbEvT7PQXPGj+NNLHMhkBBPLa+ph0/pAS+biShOiixHq0
-----END CERTIFICATE-----
Generated at Thu Dec 25 10:14:32 2025 by rpki-client