This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3137362e302f32302d3230203d3e2032353439.roa
File:                     3230302e33392e3137362e302f32302d3230203d3e2032353439.roa (raw, json)
Hash identifier:          BAKSvZbV7qnvSkm0C9qOVdj1tGclu+Znye7JGCNvE74=
Subject key identifier:   56:DF:93:CF:07:EC:BD:F8:12:E7:A4:21:5F:34:89:AF:63:3B:76:36
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       15F15BA82ACD5FBD1F7CD6461C866451B771E0FE
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3137362e302f32302d3230203d3e2032353439.roa
Signing time:             Sat 10 May 2025 03:18:17 +0000
ROA not before:           Sat 10 May 2025 03:13:17 +0000
ROA not after:            Sat 09 May 2026 03:18:17 +0000
asID:                     2549
IP address blocks:        200.39.176.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 19:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f1:5b:a8:2a:cd:5f:bd:1f:7c:d6:46:1c:86:64:51:b7:71:e0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: May 10 03:13:17 2025 GMT
            Not After : May  9 03:18:17 2026 GMT
        Subject: CN=56DF93CF07ECBDF812E7A4215F3489AF633B7636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:30:af:f6:58:e0:0c:80:7f:53:f8:f0:f5:
                    5b:1d:94:37:38:3b:53:31:1e:d6:f8:f3:5d:7b:be:
                    68:2d:18:d7:fb:43:a7:0f:20:de:3f:d4:45:31:98:
                    d1:7e:a3:53:6d:d4:8b:e1:35:33:0c:32:ae:36:29:
                    3e:1c:04:23:50:76:97:91:3a:d3:e2:b2:4e:cc:7b:
                    ac:7f:e9:55:b9:bd:54:41:18:a6:1c:74:26:9f:66:
                    a5:ca:c5:25:f8:bd:f2:27:72:dd:f9:58:e6:8b:5f:
                    00:9f:d1:e5:66:f2:6d:0e:d9:ce:e3:fc:30:88:84:
                    4f:50:64:18:0f:05:00:e5:f6:82:7b:a6:8c:ca:29:
                    08:97:48:b6:11:d3:62:19:34:93:21:76:35:52:ec:
                    6d:82:f6:59:3a:8d:2f:69:9d:34:54:32:6c:21:5c:
                    53:b7:b3:41:c0:70:e7:09:6c:f0:20:8c:b6:31:d0:
                    94:30:f9:84:cd:3f:00:cf:44:22:68:b2:fa:5c:fa:
                    7d:d7:11:53:98:00:a7:17:26:84:0d:30:72:a4:b2:
                    2f:c9:e8:1b:55:e4:27:1c:82:01:f9:fb:76:d1:18:
                    41:b3:36:21:ab:08:f3:bf:8a:8f:f0:cd:bf:bd:6c:
                    ce:44:16:c0:f9:b1:09:18:7c:ed:b9:76:42:23:f9:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:93:CF:07:EC:BD:F8:12:E7:A4:21:5F:34:89:AF:63:3B:76:36
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3137362e302f32302d3230203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:c0:11:cf:7f:8a:b4:c8:81:d5:7c:dd:10:d0:08:71:5e:
         9f:31:49:32:9f:9c:4a:98:41:c9:81:4b:7d:aa:09:46:c8:43:
         28:b0:f4:0f:7d:a7:62:c3:f7:14:99:76:70:a5:e6:60:4e:ca:
         3c:7d:96:ef:48:43:76:53:e2:b2:ca:e7:d4:fd:ef:83:16:03:
         ed:b1:42:85:8a:11:68:9d:75:67:c2:a2:d0:50:ae:2a:4f:53:
         df:db:ed:61:d7:16:25:c9:d9:a7:e1:35:fc:25:0c:7a:69:41:
         04:8d:79:bc:82:e4:80:00:8f:4a:28:1a:12:a7:95:29:25:d4:
         83:6e:c1:1b:de:10:76:c1:65:4b:f8:d3:d8:a7:4c:a8:14:18:
         f8:79:2f:c7:ef:80:eb:90:13:fb:f2:03:ab:41:a1:a1:3c:d2:
         6a:d1:9d:80:79:a0:b5:77:1b:68:d6:bd:8c:b0:58:2f:bc:88:
         fe:b0:d4:b8:ca:4d:38:55:fc:d6:73:c7:33:3c:61:31:5f:65:
         5b:12:29:69:79:77:d7:c8:08:0d:23:ba:c8:23:67:f8:66:53:
         87:39:5d:20:a5:78:ee:00:16:a9:bb:11:6c:58:97:cf:ba:11:
         be:0b:b5:20:74:25:71:89:8a:50:49:89:8e:a9:e7:68:72:bf:
         10:99:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----