This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232392e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3232392e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          ijnb2iBz8+thTMcY2LuF17P4zYqMc0g5HXNR4k9qtEI=
Subject key identifier:   CD:C0:0D:23:52:7B:6F:C5:FA:33:37:C2:A9:21:B8:05:00:9A:8F:10
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       7B686EFCCAB002C070C7B8479CE26F919CC116EE
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232392e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 06 Jan 2026 19:01:51 +0000
ROA not before:           Tue 06 Jan 2026 18:56:51 +0000
ROA not after:            Tue 05 Jan 2027 19:01:51 +0000
asID:                     27727
IP address blocks:        200.61.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 23:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:68:6e:fc:ca:b0:02:c0:70:c7:b8:47:9c:e2:6f:91:9c:c1:16:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Jan  6 18:56:51 2026 GMT
            Not After : Jan  5 19:01:51 2027 GMT
        Subject: CN=CDC00D23527B6FC5FA3337C2A921B805009A8F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:d0:9b:c1:c8:80:53:23:1d:d3:23:59:0f:
                    68:01:5f:d5:69:05:be:c2:a8:82:e1:42:df:a8:e3:
                    1d:f0:c6:17:08:d2:1b:8d:61:ae:4d:aa:c8:82:0e:
                    49:3c:66:12:6e:85:9e:8c:46:ca:c1:98:1c:ce:29:
                    2e:f2:44:17:60:40:80:27:49:bf:05:08:b4:69:87:
                    ba:bd:94:da:98:f7:49:94:3d:0e:90:fa:32:a9:22:
                    86:d3:c2:c5:83:da:d5:44:9a:84:58:0b:2b:9d:47:
                    57:ce:75:bc:d6:2f:e6:f8:be:84:68:a8:c5:81:15:
                    47:ab:a0:38:2c:2b:2e:0d:99:25:e4:ef:e0:76:6e:
                    3c:96:a8:a7:4e:fe:b7:e5:08:a3:45:7c:31:29:00:
                    08:95:b8:05:c3:5e:f5:ac:11:00:b4:9f:c4:4d:aa:
                    be:73:6c:42:b6:c9:98:2a:b5:fc:ab:92:10:5e:e5:
                    79:6b:ad:49:02:de:cf:69:73:9e:83:b9:23:24:ed:
                    b1:b1:d8:ce:8f:33:2e:9d:cd:56:96:36:4b:75:ec:
                    8c:73:84:2c:51:c0:21:56:d2:a6:f9:7f:23:cb:f9:
                    0b:4e:2c:8f:18:38:20:a1:9a:8c:b4:c8:7b:ed:70:
                    5e:b8:da:c2:ae:bb:d8:ed:89:3c:5f:5f:34:7b:3d:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C0:0D:23:52:7B:6F:C5:FA:33:37:C2:A9:21:B8:05:00:9A:8F:10
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232392e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:39:a6:a1:45:16:75:de:6d:ba:2a:1c:ef:d9:4f:3a:75:
         55:9a:27:c1:58:1d:bf:08:38:a0:c2:0f:8e:bb:e8:fa:40:04:
         f0:26:7e:57:f3:d1:53:35:cb:56:a2:05:0d:0a:5f:b4:32:01:
         97:73:7c:8b:b7:26:bf:d6:07:52:7b:a5:38:f1:2b:00:ef:68:
         10:d7:13:6a:69:28:2b:df:bd:7a:f5:d0:7c:ac:81:8c:69:e1:
         f2:b6:07:89:67:53:30:0c:63:cc:4b:56:68:b1:20:d6:8b:f9:
         2c:a3:a7:a7:8e:76:6f:76:97:c4:c5:5d:5f:9b:4a:56:4f:9a:
         e9:4a:4c:75:2a:63:6e:a6:e4:22:49:df:5b:74:6a:bd:82:bf:
         94:51:41:ea:ea:4a:24:84:e3:14:68:a2:fa:e2:60:d2:ef:3b:
         5b:02:cc:0f:3c:94:ce:a2:c1:83:32:6a:9e:78:5b:34:0c:c0:
         e9:65:48:6d:6b:72:61:a7:8b:a2:ce:59:bf:cf:b6:2f:40:ff:
         71:1b:f2:7b:fe:61:2e:0e:d1:b5:5b:a0:f2:d2:0c:8d:a1:e8:
         2b:b2:dc:7b:dc:8f:a7:3f:3a:31:cf:fd:7e:64:5b:b0:cb:08:
         c4:f0:9f:6a:d6:77:67:bb:5a:93:f3:ca:48:42:9e:9a:b4:57:
         24:2e:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 02:50:39 2026 by rpki-client