This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3230302e38392e38382e302f32312d3234203d3e203238303533.roa
File:                     3230302e38392e38382e302f32312d3234203d3e203238303533.roa (raw, json)
Hash identifier:          YC7qfnIp2JaR1ZbJWw1GvI+VKEwC1PiHQGRuQUNB1wQ=
Subject key identifier:   AE:3D:3B:CA:81:1F:6F:9D:21:35:44:CA:17:00:34:C1:67:DC:D4:21
Certificate issuer:       /CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
Certificate serial:       310B6C38FFBD23FF674A8FABA020A1B3013EE24A
Authority key identifier: 07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3230302e38392e38382e302f32312d3234203d3e203238303533.roa
Signing time:             Tue 06 Jan 2026 19:18:48 +0000
ROA not before:           Tue 06 Jan 2026 19:13:48 +0000
ROA not after:            Tue 05 Jan 2027 19:18:48 +0000
asID:                     28053
IP address blocks:        200.89.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 18:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:6c:38:ff:bd:23:ff:67:4a:8f:ab:a0:20:a1:b3:01:3e:e2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
        Validity
            Not Before: Jan  6 19:13:48 2026 GMT
            Not After : Jan  5 19:18:48 2027 GMT
        Subject: CN=AE3D3BCA811F6F9D213544CA170034C167DCD421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:9d:d4:6b:71:6f:d2:56:4b:1c:44:6f:27:
                    70:6e:85:3d:15:51:4a:b5:2d:6b:01:e5:d8:ef:e8:
                    6e:34:6c:91:d5:59:d6:e9:57:58:7b:7a:74:cd:8c:
                    1c:3b:44:0d:cc:d4:43:f3:03:2f:b0:ef:05:3c:c7:
                    ae:86:89:8b:05:34:99:03:a3:9e:2c:94:3e:92:6b:
                    e3:92:1a:ee:cc:0c:ed:f4:27:d7:9e:8e:90:df:eb:
                    a4:58:4e:92:cd:8b:8d:06:c0:b2:d0:5c:bc:42:1b:
                    e0:08:ee:77:b6:7b:29:74:38:bd:61:c3:63:1a:f9:
                    5a:9d:e2:cc:c2:ba:70:e1:e7:0d:be:2a:d7:ab:3b:
                    4b:81:45:5c:2e:a9:ad:07:1c:ca:78:bd:4e:ab:73:
                    eb:7a:2e:c5:bd:ad:9b:f4:0d:5d:ec:f0:a2:23:d3:
                    29:2b:8b:7a:b4:8a:8b:4b:df:2c:e0:43:3a:63:e4:
                    68:aa:55:ec:cb:4a:d1:0a:54:ef:6d:5b:66:a1:01:
                    16:06:4c:1f:1d:0a:02:73:39:e9:2f:ef:97:71:79:
                    bb:96:be:fc:9f:d2:b8:1b:12:f6:fc:e8:26:7b:80:
                    25:62:dc:b9:c4:b4:b7:cf:44:de:20:0a:84:c8:aa:
                    b5:3f:66:11:e4:07:69:d8:39:ec:28:91:67:0b:6b:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:3B:CA:81:1F:6F:9D:21:35:44:CA:17:00:34:C1:67:DC:D4:21
            X509v3 Authority Key Identifier:
                keyid:07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3230302e38392e38382e302f32312d3234203d3e203238303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:82:ce:10:db:32:f4:0a:08:18:21:8a:2d:1e:94:0d:c4:4b:
         80:12:56:9b:88:88:3f:d8:db:22:6b:b0:a2:78:de:92:73:93:
         35:ab:5c:86:f2:89:93:d8:62:64:b4:1a:f2:95:ad:44:26:46:
         fe:93:b5:0e:68:86:84:03:ec:fa:b0:8e:a9:c0:72:0f:00:43:
         72:5b:9f:07:16:a1:a6:a3:f0:9e:af:94:09:8f:96:8c:fa:44:
         e5:44:39:14:20:1f:14:0a:5b:98:40:da:b5:4e:00:19:5c:5f:
         79:8d:6b:1b:42:fc:f3:36:cc:93:bf:53:37:6f:95:bc:ce:9a:
         90:9a:e8:f1:90:d8:84:f1:9f:d3:b1:c0:72:f0:0d:23:8b:d9:
         da:4c:9c:07:7d:e3:92:bb:64:13:fc:80:28:58:ba:be:3a:c4:
         d9:3d:f5:e7:97:b3:0a:bb:98:0b:27:a1:e9:3a:33:8e:16:45:
         93:42:b7:be:95:fd:7c:10:67:1d:00:15:9d:75:92:2b:98:86:
         64:0c:85:61:15:73:04:b1:d3:71:c2:7e:62:1a:f5:21:0b:19:
         8a:ec:12:71:33:1d:b9:87:18:52:24:10:85:da:ab:4c:d0:57:
         96:39:e1:14:4a:80:9b:b6:52:6f:b8:c4:97:73:91:2c:7b:59:
         69:9e:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:32:07 2026 by rpki-client