This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa
File:                     3230302e38392e39362e302f31392d3234203d3e2038313633.roa (raw, json)
Hash identifier:          dsy5qo5JrKV6aOGbc2g90oWJdANxjrkPgczoLMW7zj8=
Subject key identifier:   0F:58:BE:C8:55:F7:B5:57:AD:BF:92:83:2D:72:76:44:D5:0D:67:FF
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       1478D4152578DE256F7346955A9B233C01587332
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa
Signing time:             Tue 06 Jan 2026 19:39:39 +0000
ROA not before:           Tue 06 Jan 2026 19:34:39 +0000
ROA not after:            Tue 05 Jan 2027 19:39:39 +0000
asID:                     8163
IP address blocks:        200.89.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:78:d4:15:25:78:de:25:6f:73:46:95:5a:9b:23:3c:01:58:73:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Jan  6 19:34:39 2026 GMT
            Not After : Jan  5 19:39:39 2027 GMT
        Subject: CN=0F58BEC855F7B557ADBF92832D727644D50D67FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:ac:d3:9c:61:6a:3c:8e:07:52:71:fe:92:
                    6e:f0:1d:44:54:6f:62:79:2e:d3:0d:8a:29:ad:47:
                    b0:0c:11:6f:24:50:86:18:2f:fe:9b:c4:df:49:8b:
                    16:cd:b6:4a:a1:d4:0a:b7:a1:9e:71:ad:0d:85:62:
                    ef:44:f6:56:23:86:1f:47:e5:99:e3:51:2a:05:0f:
                    4b:a3:98:da:47:c3:fc:14:55:1e:be:76:ae:72:e7:
                    38:f9:80:9e:e7:ed:71:5f:1a:ec:2d:b5:d8:88:e1:
                    b8:1c:44:13:a0:6f:95:66:79:1e:3d:0a:c4:35:53:
                    ce:bf:7e:d9:b8:b6:c7:3a:7b:82:91:62:1f:d2:e5:
                    cc:e5:a3:c0:c2:62:51:4b:4a:1e:89:cd:c9:86:dc:
                    0f:51:08:3b:73:08:07:07:21:5d:80:8a:83:18:cd:
                    a7:40:29:e4:9c:15:3f:4b:a6:e8:9e:24:e9:13:02:
                    ff:e5:74:84:13:d7:2b:42:ef:e7:84:f9:83:2f:23:
                    35:56:6a:9c:2a:af:2d:45:e9:d9:16:eb:98:19:fd:
                    0b:f2:de:df:8f:ec:32:6e:4e:34:2b:e3:0c:22:b0:
                    22:5a:27:74:d5:50:a0:ef:5c:f5:d1:cc:38:db:d6:
                    31:0a:f5:67:5d:cf:72:6b:35:68:53:55:29:29:df:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:BE:C8:55:F7:B5:57:AD:BF:92:83:2D:72:76:44:D5:0D:67:FF
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:01:b0:f3:59:44:a4:4f:28:93:0d:65:28:03:51:3c:e9:e9:
         fa:70:ca:99:57:a0:df:e6:3b:6a:99:da:3d:db:6e:ea:36:21:
         43:c6:14:12:47:69:ca:12:04:98:41:d9:64:8d:a7:d8:c8:a2:
         78:0e:bb:32:07:fe:3e:a9:82:d8:39:24:08:a2:f2:03:4f:bb:
         c7:ab:03:34:f1:78:67:5f:ea:ed:5a:68:43:17:d9:01:e4:5b:
         cc:5d:5e:53:74:c1:d0:84:29:da:35:a1:65:b3:d8:e2:76:53:
         7c:04:85:d0:41:f5:9b:41:80:68:3f:4f:0f:47:44:0b:2a:95:
         f7:a9:26:0b:3e:24:f9:25:72:0b:89:0d:fa:fd:d1:8c:b2:17:
         63:7f:26:9c:39:e0:95:f5:29:00:c7:e6:53:2d:3a:43:03:61:
         58:a4:15:8c:e4:4e:98:c3:9b:ce:27:d2:8b:b1:f9:93:51:51:
         0e:af:72:13:26:ab:79:67:4a:9a:12:f8:9a:38:0e:c4:29:97:
         74:68:58:ce:85:45:f8:3d:54:24:18:58:f5:a9:ad:cf:ba:ba:
         b8:79:0c:2a:78:f5:c2:3b:c3:77:38:29:d8:63:c0:65:01:7b:
         fe:24:73:1a:6a:88:c5:50:1f:0b:b9:14:ee:7a:70:38:e7:02:
         38:69:00:25
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUFHjUFSV43iVvc0aVWpsjPAFYczIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcwMjA0NjFFMTA2RkExOTM5QTc5NTVGMTlFMUY4RUQ4
MkFFODU4OTAeFw0yNjAxMDYxOTM0MzlaFw0yNzAxMDUxOTM5MzlaMDMxMTAvBgNV
BAMTKDBGNThCRUM4NTVGN0I1NTdBREJGOTI4MzJENzI3NjQ0RDUwRDY3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz6zTnGFqPI4HUnH+km7wHURU
b2J5LtMNiimtR7AMEW8kUIYYL/6bxN9JixbNtkqh1Aq3oZ5xrQ2FYu9E9lYjhh9H
5ZnjUSoFD0ujmNpHw/wUVR6+dq5y5zj5gJ7n7XFfGuwttdiI4bgcRBOgb5VmeR49
CsQ1U86/ftm4tsc6e4KRYh/S5czlo8DCYlFLSh6JzcmG3A9RCDtzCAcHIV2AioMY
zadAKeScFT9LpuieJOkTAv/ldIQT1ytC7+eE+YMvIzVWapwqry1F6dkW65gZ/Qvy
3t+P7DJuTjQr4wwisCJaJ3TVUKDvXPXRzDjb1jEK9Wddz3JrNWhTVSkp30XrAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUD1i+yFX3tVetv5KDLXJ2RNUNZ/8wHwYDVR0j
BBgwFoAUJwIEYeEG+hk5p5VfGeH47YKuhYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNDNBQjQ5OTk1MUIzNkUxNkQ4RTNEMTA0QkZENzdBQkNC
N0NCRTNDOUQ5REU1QTE2ODZCNTA0QzNDNDU3RUQ0LzAvMjcwMjA0NjFFMTA2RkEx
OTM5QTc5NTVGMTlFMUY4RUQ4MkFFODU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzAyMDQ2MUUxMDZGQTE5MzlB
Nzk1NUYxOUUxRjhFRDgyQUU4NTg5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDQzQUI0OTk5NTFCMzZFMTZEOEUzRDEwNEJGRDc3QUJDQjdDQkUzQzlE
OURFNUExNjg2QjUwNEMzQzQ1N0VENC8wLzMyMzAzMDJlMzgzOTJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDM4MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyFlgMA0GCSqG
SIb3DQEBCwUAA4IBAQDGAbDzWUSkTyiTDWUoA1E86en6cMqZV6Df5jtqmdo9227q
NiFDxhQSR2nKEgSYQdlkjafYyKJ4DrsyB/4+qYLYOSQIovIDT7vHqwM08XhnX+rt
WmhDF9kB5FvMXV5TdMHQhCnaNaFls9jidlN8BIXQQfWbQYBoP08PR0QLKpX3qSYL
PiT5JXILiQ36/dGMshdjfyacOeCV9SkAx+ZTLTpDA2FYpBWM5E6Yw5vOJ9KLsfmT
UVEOr3ITJqt5Z0qaEviaOA7EKZd0aFjOhUX4PVQkGFj1qa3Purq4eQwqePXCO8N3
OCnYY8BlAXv+JHMaaojFUB8LuRTuenA45wI4aQAl
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:10 2026 by rpki-client