This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136372e302f32342d3234203d3e203236363137.roa
File:                     3230302e33352e3136372e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          pIsEsmPNjuvMmer14U52rNnL9W/xH2YK2bMpTekpTE0=
Subject key identifier:   F3:9E:6E:CB:44:FB:66:C1:14:4C:B7:5F:E9:18:90:EC:33:C6:BD:0D
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       275CFDB726D160C489786B7DE103C0040426036A
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136372e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:12:07 +0000
ROA not before:           Tue 06 Jan 2026 19:07:07 +0000
ROA not after:            Tue 05 Jan 2027 19:12:07 +0000
asID:                     26617
IP address blocks:        200.35.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5c:fd:b7:26:d1:60:c4:89:78:6b:7d:e1:03:c0:04:04:26:03:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:07:07 2026 GMT
            Not After : Jan  5 19:12:07 2027 GMT
        Subject: CN=F39E6ECB44FB66C1144CB75FE91890EC33C6BD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:a6:c2:03:c6:37:94:32:ba:7c:0e:bf:4f:
                    d8:03:17:d3:f7:27:c1:3f:8d:aa:4f:6c:de:98:1b:
                    57:bb:f9:d0:7d:0e:0d:7f:be:66:d9:a4:5a:f2:d7:
                    ac:57:80:02:2a:55:40:5b:8e:c6:ec:48:3b:86:1b:
                    24:10:e0:33:bc:36:7e:9d:51:07:56:11:ba:3d:1c:
                    c0:86:73:40:08:7e:6f:0f:78:90:93:d5:34:c2:cc:
                    eb:5d:5b:20:d5:60:ca:e6:84:99:8a:40:f2:6b:96:
                    a8:9b:6c:ce:bb:4c:41:f3:4a:f2:c1:c1:15:5f:db:
                    5f:ba:22:e8:dc:8c:e1:e3:0d:a5:65:25:18:18:ff:
                    3c:f9:8c:af:6e:b7:b8:01:55:1d:ed:62:95:b6:bb:
                    28:5e:26:06:62:3e:27:19:ac:8a:da:2a:f1:fd:6c:
                    2d:cd:b6:5e:a4:40:68:c7:99:d9:62:f7:4c:19:9c:
                    f8:6a:3b:69:04:75:11:14:dd:ea:7c:e3:47:8c:96:
                    d0:1d:50:ae:99:96:74:12:4c:d6:03:b0:23:c5:b5:
                    8b:47:39:ff:85:7e:90:30:07:0a:f5:3c:08:21:3e:
                    71:6a:e6:8c:e1:d5:b9:ba:e7:cf:67:ca:c0:62:16:
                    e2:59:16:bb:15:34:14:fb:8d:3f:bf:5c:50:14:21:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9E:6E:CB:44:FB:66:C1:14:4C:B7:5F:E9:18:90:EC:33:C6:BD:0D
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136372e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:ac:00:9c:93:5f:34:7d:19:29:a0:39:be:0b:83:5c:0b:d3:
         ae:e2:a8:1c:df:c6:a7:7f:41:3b:00:c1:e8:83:39:ae:34:b2:
         c7:8e:fa:72:34:71:58:cf:0e:6f:8f:f6:d2:d9:1f:7f:9a:2f:
         5d:a4:1c:6c:3b:b6:d3:0e:92:38:55:ce:6e:fd:3d:b4:39:46:
         0c:92:85:4a:46:67:8f:60:a4:49:a0:75:b6:59:fa:3d:94:19:
         d9:1c:10:6b:62:3e:44:42:79:64:f4:09:1a:6e:17:83:74:71:
         3e:96:64:df:b1:9d:75:0c:3f:b5:fc:f9:96:aa:2a:aa:80:cb:
         89:f7:b6:b7:7f:d7:e4:8b:8e:52:29:91:68:8d:5e:bf:4a:10:
         25:27:7e:04:4d:fb:9d:b4:0c:ac:dc:12:1a:f2:86:00:25:e4:
         44:e3:0c:2f:3a:7c:0b:3d:41:4b:f6:bc:64:65:ac:1e:f7:bd:
         a2:be:43:6f:66:54:ea:93:27:69:11:93:0f:53:44:c8:43:f8:
         c8:78:c2:8c:9d:10:a2:45:9b:f6:0d:bf:f8:9c:ae:a8:0e:8f:
         5c:3f:9f:83:a6:25:c4:54:1d:57:c0:f1:83:12:8a:ad:ab:ca:
         25:c7:d9:6a:36:f4:90:6e:46:73:08:db:17:b6:68:26:95:7f:
         04:83:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:25 2026 by rpki-client