This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32322e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          ZaCTFGOUo1L9D+fw96JKV509QT3ZNkzYkJLZ6IY+IQ0=
Subject key identifier:   6E:E3:B3:2D:3B:ED:F9:3E:3E:B3:7E:2F:F0:B8:6D:DF:A8:8E:AF:8A
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       7167567BEE39D778FB1DB3DBE860F06AAA9E6F05
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 06 Jan 2026 19:24:26 +0000
ROA not before:           Tue 06 Jan 2026 19:19:26 +0000
ROA not after:            Tue 05 Jan 2027 19:24:26 +0000
asID:                     12684
IP address blocks:        200.89.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:67:56:7b:ee:39:d7:78:fb:1d:b3:db:e8:60:f0:6a:aa:9e:6f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Jan  6 19:19:26 2026 GMT
            Not After : Jan  5 19:24:26 2027 GMT
        Subject: CN=6EE3B32D3BEDF93E3EB37E2FF0B86DDFA88EAF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0a:d8:f5:1b:d6:e0:bb:b5:6e:fe:b0:ad:98:
                    36:bc:e5:61:ad:ac:4e:9c:db:1b:bc:f5:b4:e9:94:
                    9b:b8:6a:67:80:db:56:de:b0:26:46:dd:12:8e:df:
                    19:df:ff:e8:1c:97:3b:b3:a5:ec:53:4d:e3:4a:ab:
                    aa:bf:3e:d8:0f:ac:03:93:bd:3f:cd:a6:a8:c8:91:
                    e4:a9:d7:b3:21:10:8b:26:dd:31:27:57:34:6c:db:
                    fe:cb:95:70:71:7a:fe:5f:0b:10:49:a5:e7:ce:90:
                    7f:2e:6a:07:68:9c:97:fa:e5:09:5b:8c:44:24:c3:
                    2d:5d:12:d3:fd:62:0a:54:34:63:94:e5:11:e4:44:
                    50:02:2d:f1:85:d2:f5:5e:0a:2b:ed:fe:2e:2e:92:
                    25:07:bd:2d:39:81:44:ef:53:8d:7f:c6:52:ec:ed:
                    2a:88:c4:00:e6:aa:7e:ff:e8:ff:73:ef:f2:f3:ed:
                    e6:a3:08:05:1d:c8:51:0b:8a:d6:36:ca:f9:a2:49:
                    e7:ba:33:80:8c:48:cd:ba:53:c6:95:fe:6c:65:8c:
                    e8:c4:3c:e1:5d:6f:42:d6:56:2f:98:30:3a:5a:35:
                    9f:05:cf:21:79:56:31:3f:59:f2:8e:3d:09:c6:f4:
                    05:95:10:9a:92:e3:63:06:c3:bf:1a:02:97:e5:89:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:B3:2D:3B:ED:F9:3E:3E:B3:7E:2F:F0:B8:6D:DF:A8:8E:AF:8A
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:a4:e5:18:e5:44:85:43:8f:92:da:2b:51:17:72:e3:e6:
         c9:b2:24:3d:28:f9:ba:ee:a4:12:b5:6d:43:8f:d7:53:52:c5:
         36:b7:d7:6f:f1:37:8d:96:d9:c2:10:c2:93:20:1d:80:46:44:
         b9:93:69:e3:c4:45:77:f4:dd:49:02:69:d0:57:29:f6:ff:81:
         37:64:dc:ef:ea:da:8c:57:24:6c:6d:fb:ef:cf:11:18:f0:17:
         40:e3:92:ab:1e:33:55:0b:9f:c1:8d:a3:75:a5:1d:8c:80:b4:
         70:90:53:97:8a:43:21:16:37:5d:97:61:0f:43:84:24:16:a7:
         99:d5:4c:05:97:ba:e8:7b:df:b1:6f:fc:00:7b:b2:c2:59:9a:
         10:2b:d5:95:9d:7a:da:57:f3:9e:47:a7:70:d3:c5:ca:08:5d:
         ea:8f:72:14:89:52:94:19:76:7f:32:18:62:4a:f0:46:2b:ad:
         31:17:a4:bf:21:20:a1:0d:17:5c:84:86:37:a7:3f:39:de:c6:
         9b:3a:59:c8:de:87:41:b3:4b:a8:02:ad:5b:40:bc:ae:77:b7:
         17:a9:83:7c:2e:89:4d:7c:cf:27:c5:4b:09:6d:fc:de:49:c4:
         f4:2f:15:eb:c8:80:69:27:69:1d:c6:4e:6f:f1:db:ca:06:46:
         73:24:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:38 2026 by rpki-client