This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa
File:                     3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa (raw, json)
Hash identifier:          XDdOdjfsqXsjwUPmajdDHDaOgS2Hs2QgNWSdzjrnAEU=
Subject key identifier:   1F:78:82:EE:D9:FE:F2:9D:07:B2:FD:AF:75:FB:41:25:3E:AE:2F:51
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       05DA0264523D895346D5892B7D64EC5E918CD767
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa
Signing time:             Tue 06 Jan 2026 19:47:09 +0000
ROA not before:           Tue 06 Jan 2026 19:42:09 +0000
ROA not after:            Tue 05 Jan 2027 19:47:09 +0000
asID:                     13682
IP address blocks:        200.119.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:da:02:64:52:3d:89:53:46:d5:89:2b:7d:64:ec:5e:91:8c:d7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:09 2026 GMT
            Not After : Jan  5 19:47:09 2027 GMT
        Subject: CN=1F7882EED9FEF29D07B2FDAF75FB41253EAE2F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:c9:2d:08:0f:f0:09:18:b1:2b:9f:1d:d3:
                    15:21:50:a4:e1:1b:69:85:1f:d3:bc:c4:e2:0f:97:
                    41:28:54:c6:15:b6:0d:31:9a:2a:fb:d5:20:6c:ae:
                    13:55:25:5d:25:51:58:ac:d6:95:6a:32:e5:53:3f:
                    c6:b4:6e:a1:99:dc:ee:49:fc:e3:5e:a5:9e:18:3c:
                    75:13:87:09:25:01:99:0e:f5:e6:6c:cd:2c:60:32:
                    cc:aa:98:c6:98:ae:b1:2b:b5:33:bc:5c:0e:73:d7:
                    6a:0d:92:3d:fe:51:2a:6d:60:af:e0:dc:ea:f9:52:
                    61:19:6c:ed:87:0b:48:5c:dc:15:e7:b6:a5:57:81:
                    ec:a5:b2:09:1f:8b:2a:5a:a2:9d:08:7b:dd:1f:de:
                    86:af:8b:77:84:d5:bd:82:a4:68:4e:c3:dd:53:08:
                    5b:fe:7d:37:69:00:09:3e:68:ef:69:35:44:44:ae:
                    b0:cf:8c:5a:ca:14:9c:1b:42:c2:69:ed:a5:1c:4a:
                    3b:fd:b3:49:b9:e5:80:08:2f:6d:94:76:22:ab:1e:
                    9f:d2:87:e9:2b:48:86:c5:7b:97:81:0d:e4:ee:17:
                    f8:d8:58:14:0d:ba:8c:76:b9:dc:4b:7d:22:e3:6d:
                    7c:fc:1e:31:81:0e:d6:df:c2:59:d5:c7:89:80:41:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:78:82:EE:D9:FE:F2:9D:07:B2:FD:AF:75:FB:41:25:3E:AE:2F:51
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:63:09:4f:d4:90:1e:93:95:af:a6:1d:91:29:eb:19:3e:d1:
         7d:be:2a:49:5b:82:5a:1b:5d:75:a7:83:11:e1:b4:6f:7c:56:
         81:df:ce:66:36:46:10:6e:6a:a1:12:dd:de:b3:c8:75:83:c4:
         c3:f9:6a:39:96:06:dd:fa:18:0a:68:3f:2e:b1:bf:a3:02:5e:
         92:72:92:89:4d:bc:9c:21:56:6a:7b:3d:5e:86:ca:05:3a:81:
         69:94:75:c5:a7:7f:0f:c7:a6:1d:b1:ad:ca:2e:58:75:ed:82:
         98:59:69:8d:a8:ac:c9:80:b4:9d:75:9c:3a:4c:93:c4:1f:6a:
         31:be:35:a7:dc:97:aa:1d:2e:5f:36:07:06:be:35:3c:cd:2b:
         06:f0:0a:18:c7:3a:00:90:d8:80:36:bd:69:53:a7:9a:ef:c3:
         32:24:cd:64:40:79:67:bf:c4:97:3f:08:34:2e:ad:d4:b0:df:
         01:3d:32:ea:48:fe:81:55:75:ce:70:15:2c:aa:7b:84:38:e4:
         48:29:fa:bb:dc:25:1c:f2:4c:09:74:16:2d:bb:e0:df:c1:99:
         ec:53:18:73:ae:c5:d1:e5:c1:16:62:ad:e4:45:37:ef:45:fd:
         9d:70:63:80:4c:27:12:aa:bd:2f:af:40:1b:d0:1c:3e:4d:bb:
         7c:34:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:29 2026 by rpki-client