This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137352e302f32342d3234203d3e20323733313431.roa
File:                     3138312e3232342e3137352e302f32342d3234203d3e20323733313431.roa (raw, json)
Hash identifier:          deZlAscjfpc0ow+9Zl7J83P9/pfUDLC0Fgywp7dPllI=
Subject key identifier:   CB:24:8A:CF:96:0B:7A:B1:6F:7F:D9:0C:C7:27:0E:E5:80:91:64:C9
Certificate issuer:       /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial:       22FF41951576C6AA602AB7AF874A7784B6C1E1D2
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137352e302f32342d3234203d3e20323733313431.roa
Signing time:             Thu 24 Oct 2024 16:40:00 +0000
ROA not before:           Thu 24 Oct 2024 16:35:00 +0000
ROA not after:            Thu 23 Oct 2025 16:40:00 +0000
asID:                     273141
IP address blocks:        181.224.175.0/24 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ff:41:95:15:76:c6:aa:60:2a:b7:af:87:4a:77:84:b6:c1:e1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
        Validity
            Not Before: Oct 24 16:35:00 2024 GMT
            Not After : Oct 23 16:40:00 2025 GMT
        Subject: CN=CB248ACF960B7AB16F7FD90CC7270EE5809164C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:f0:22:22:8c:24:cd:27:05:79:79:48:0a:
                    69:e3:52:ed:87:5f:34:05:f3:ed:3e:b1:92:b3:95:
                    0e:9f:37:fb:e7:c6:2f:5c:21:08:54:67:6d:a4:c5:
                    fa:cd:59:ce:73:ef:2e:f7:a2:c2:95:4d:64:3b:be:
                    ad:1a:c8:ad:40:52:c1:e0:25:62:83:7d:82:23:1e:
                    fe:75:85:3d:e2:a1:3b:7c:a2:a9:49:6b:8c:ec:41:
                    20:7e:03:03:44:d3:36:ac:9b:df:4b:94:57:f3:09:
                    c1:3c:b7:9c:6a:41:5e:da:5f:3f:da:2b:ed:47:b4:
                    07:15:08:4f:50:d4:f8:a0:d7:9d:5b:fb:71:ae:fa:
                    b8:f1:ce:96:13:03:bd:e1:42:0a:31:43:c6:9e:d7:
                    36:de:2d:0c:06:93:7b:eb:f0:77:61:88:e4:16:4c:
                    cd:91:6e:9f:7d:a3:3c:bf:98:59:e9:31:c8:40:c0:
                    7c:21:ee:bf:26:59:84:2d:8c:77:19:29:d8:6f:72:
                    26:59:f7:29:82:82:ca:e5:ea:f3:bc:bf:f5:e4:c7:
                    21:d0:68:61:03:ae:a7:a3:20:ee:d7:2a:e7:74:e1:
                    89:e3:51:bf:62:cf:5d:bd:ab:97:08:0e:e7:b5:d9:
                    94:5f:66:e4:bb:a1:9c:e6:71:5e:45:cc:c9:9b:5c:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:24:8A:CF:96:0B:7A:B1:6F:7F:D9:0C:C7:27:0E:E5:80:91:64:C9
            X509v3 Authority Key Identifier:
                keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137352e302f32342d3234203d3e20323733313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:36:06:74:be:c1:95:23:19:0f:7a:59:05:3c:21:af:e0:54:
         f7:16:38:77:60:1b:27:2b:90:de:fa:19:4c:92:88:73:0e:58:
         e4:9e:58:7a:1d:d5:40:fe:a6:73:b5:00:aa:ba:63:e8:3b:0b:
         af:fd:ab:8c:de:f3:4f:09:d4:99:93:d7:08:57:c1:55:23:29:
         31:d9:3c:cf:4e:22:9d:6a:95:e6:99:22:59:6a:1b:7e:68:69:
         01:18:4e:95:d1:45:57:1b:39:4a:35:4b:00:85:e3:72:16:ee:
         1b:26:ee:16:8a:27:79:bd:7c:e0:b1:83:85:bf:a3:66:23:4f:
         8d:76:dd:0f:95:87:d4:f6:d5:32:79:da:be:a0:6a:12:e6:0a:
         4f:e4:82:4c:51:6e:10:f0:fd:43:cb:7b:19:f2:a1:45:55:88:
         b9:0a:f3:2c:79:af:08:e2:4f:75:dc:ff:8c:d4:44:d4:f0:46:
         8d:4d:3f:8f:0d:c2:8e:e5:9a:43:0e:82:e7:b2:a0:c1:58:4f:
         00:e2:8e:6b:de:e0:75:ca:36:5c:3f:83:5d:93:2a:e8:6b:74:
         45:9a:ae:58:da:42:59:8a:6d:b0:0b:5a:20:45:c1:b8:c6:f9:
         c0:c2:c2:3b:28:55:d7:e9:01:da:01:ad:2c:5d:07:1a:5d:d8:
         be:f9:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----