This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa
File:                     3230302e36312e3133382e302f32342d3234203d3e203532333633.roa (raw, json)
Hash identifier:          shOudHbSLCOW9V6Sft7qziTYOMLbIdMV28XYYa2yKXE=
Subject key identifier:   56:14:2D:4B:6A:D9:93:8B:4F:0E:5C:88:CF:A3:D2:DA:80:11:56:A3
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       455CE0C8FE25985FA6AA12C8AE526E7D2458976E
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa
Signing time:             Tue 06 Jan 2026 19:19:18 +0000
ROA not before:           Tue 06 Jan 2026 19:14:18 +0000
ROA not after:            Tue 05 Jan 2027 19:19:18 +0000
asID:                     52363
IP address blocks:        200.61.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5c:e0:c8:fe:25:98:5f:a6:aa:12:c8:ae:52:6e:7d:24:58:97:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Jan  6 19:14:18 2026 GMT
            Not After : Jan  5 19:19:18 2027 GMT
        Subject: CN=56142D4B6AD9938B4F0E5C88CFA3D2DA801156A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:9a:8b:01:53:af:c8:fc:0d:c3:18:5b:47:
                    6d:08:dc:27:b0:5c:93:16:1b:e5:a6:05:f7:b4:b8:
                    c1:01:c4:9e:a6:fd:7f:6e:a0:2b:e7:4e:32:dc:9c:
                    e7:3c:5b:d7:07:91:95:b9:c2:d0:bb:50:c1:ae:c5:
                    7b:0c:88:ca:5e:83:53:0d:33:3a:d3:8c:69:06:49:
                    f2:fb:05:10:c7:09:0a:7e:96:b3:ab:64:e1:4d:fa:
                    2d:ce:ca:2b:43:91:79:fb:6c:f0:ec:dd:7d:0b:13:
                    28:83:f4:f9:f6:86:9b:a5:a8:91:09:38:9c:88:99:
                    cd:2d:76:02:38:f5:36:85:c1:14:6a:c6:a8:5b:ab:
                    0c:31:5a:5d:6a:dd:db:93:7e:a1:74:f9:fd:b0:da:
                    d8:e5:44:24:48:b4:f3:3c:df:4d:0a:eb:03:ce:1d:
                    4e:21:f3:b7:e1:d4:d5:37:4e:0f:64:b7:5b:75:27:
                    db:ab:57:da:37:73:19:b2:2c:ad:3e:69:2d:ee:2c:
                    c7:49:b2:52:fe:4a:fb:cb:e6:17:c9:ab:ff:d2:9a:
                    3d:ce:95:71:1e:cf:8d:58:2d:3e:2c:2c:fd:cd:4e:
                    66:bb:86:dc:59:90:20:9e:8e:83:fc:28:80:f2:1e:
                    53:2a:cc:08:ff:ca:86:df:f1:46:5e:64:e3:26:12:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:2D:4B:6A:D9:93:8B:4F:0E:5C:88:CF:A3:D2:DA:80:11:56:A3
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:bb:a2:dc:b1:ba:b4:6a:cd:69:1d:1f:26:7b:5d:45:c1:
         e8:32:3b:59:37:43:86:0b:4f:1e:90:e6:b3:51:4f:2c:e3:7c:
         5c:74:39:b9:0a:de:fc:91:d2:ed:98:97:cc:f9:38:47:f4:63:
         a0:91:42:0a:7a:da:64:51:21:a5:de:fc:4b:2b:4b:c5:fe:ca:
         82:42:af:f1:70:e5:0b:0c:37:ae:be:cf:59:48:9e:b9:9d:70:
         63:aa:78:e7:96:ac:ce:98:f4:c4:8e:54:5a:b3:aa:79:5c:d9:
         7d:2e:e0:b7:57:9b:d4:12:b4:fb:53:19:30:cf:f8:02:b2:26:
         3a:f4:0f:17:b9:d6:97:5d:01:e2:cc:56:d6:fb:94:9c:ba:96:
         3a:15:b9:77:eb:3a:0f:3a:c3:f3:8a:71:aa:f5:46:f5:f3:92:
         c4:05:3b:32:1a:db:38:87:76:52:36:90:59:9a:34:dd:5f:bd:
         0f:05:71:5f:12:a4:b7:d6:bd:99:c0:81:fd:01:c1:21:2a:d3:
         f0:c4:58:45:15:c5:8f:60:ca:6d:e9:b4:58:95:82:7d:6f:87:
         f3:72:4c:1e:29:8c:fb:dc:81:13:74:82:10:f8:b4:b1:6e:c7:
         f7:1f:dd:89:b3:54:41:e7:9a:ae:db:d3:35:84:a4:ce:ca:c0:
         4a:b3:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:20 2026 by rpki-client