This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3230302e35392e32302e302f32332d3234203d3e20323632313439.roa
File:                     3230302e35392e32302e302f32332d3234203d3e20323632313439.roa (raw, json)
Hash identifier:          dUqOUBnTltetVf8gVaMFh6dXT/L6RbZKHiov6TrrTlQ=
Subject key identifier:   57:A3:12:B4:BA:9B:DC:8F:AA:C6:39:46:EF:FB:3B:22:B1:C1:19:3D
Certificate issuer:       /CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
Certificate serial:       3785B41A18599753776EEBAB4BD9BFE6497FCEEC
Authority key identifier: CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3230302e35392e32302e302f32332d3234203d3e20323632313439.roa
Signing time:             Tue 06 Jan 2026 19:29:50 +0000
ROA not before:           Tue 06 Jan 2026 19:24:50 +0000
ROA not after:            Tue 05 Jan 2027 19:29:50 +0000
asID:                     262149
IP address blocks:        200.59.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:85:b4:1a:18:59:97:53:77:6e:eb:ab:4b:d9:bf:e6:49:7f:ce:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
        Validity
            Not Before: Jan  6 19:24:50 2026 GMT
            Not After : Jan  5 19:29:50 2027 GMT
        Subject: CN=57A312B4BA9BDC8FAAC63946EFFB3B22B1C1193D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:1f:65:bc:8d:a6:da:44:dd:0d:bb:55:ce:
                    da:bf:1e:51:c5:1c:b4:a9:2e:2f:a0:fe:11:c4:be:
                    2d:f2:9e:73:55:95:85:22:cd:81:61:12:1c:8b:f9:
                    a7:12:71:5a:ff:41:5a:13:a1:86:a4:cd:16:1c:1b:
                    b3:d4:a3:a4:77:3e:c7:67:3a:0d:76:bc:2e:61:56:
                    8d:5f:72:07:00:b6:94:b2:4d:1f:66:a6:b6:aa:35:
                    fd:f6:ab:7f:94:15:4c:cc:d6:00:43:0e:50:e9:27:
                    fc:9e:5b:10:3d:f8:e9:77:fb:db:9e:79:78:47:35:
                    c7:7f:bc:1b:21:23:94:27:9a:46:e0:6a:7c:68:29:
                    d2:b3:e5:93:52:34:be:ae:ba:14:c7:f9:bb:4a:56:
                    fe:39:05:76:a4:33:46:61:0a:22:9d:44:15:a2:66:
                    c1:1d:e4:45:6b:50:66:2d:e6:e9:cb:00:a8:67:74:
                    7a:1f:3e:d4:da:94:8f:40:39:99:dc:1e:68:d6:a1:
                    dc:9c:24:aa:7e:16:6a:64:a8:32:d0:46:a8:63:a3:
                    b4:47:96:b2:f0:65:21:d9:07:85:c9:be:e6:1e:86:
                    7b:e3:9e:0b:5c:d8:29:29:f9:fe:11:8d:72:a4:26:
                    40:38:43:b7:d6:27:cd:db:33:aa:4f:16:1f:ea:87:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:12:B4:BA:9B:DC:8F:AA:C6:39:46:EF:FB:3B:22:B1:C1:19:3D
            X509v3 Authority Key Identifier:
                keyid:CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3230302e35392e32302e302f32332d3234203d3e20323632313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:44:42:e7:41:77:0f:f2:9c:0c:74:33:35:55:96:8f:94:
         2f:ff:94:b0:0c:37:5e:c3:0c:9a:4c:c2:8c:72:1d:dd:1e:35:
         46:ba:e8:fa:fb:28:cf:d4:92:c2:a3:ab:12:35:09:54:1b:9d:
         c1:df:81:12:76:bb:98:a6:2e:95:55:87:13:1c:3c:36:e0:4f:
         cc:ff:19:89:a5:4a:91:6f:5c:c4:0f:f3:ef:45:af:e2:63:10:
         46:37:c8:b9:aa:a1:ee:6d:71:b2:3b:99:03:0b:29:dc:03:37:
         e6:3e:e6:ce:6a:de:92:51:1c:44:ea:bd:b7:7c:25:43:b0:35:
         7b:cc:63:66:61:9b:42:d4:bf:68:20:10:12:96:c5:cc:f1:e0:
         31:54:7e:29:1a:d4:d0:62:3e:bc:12:a2:09:8b:f6:0e:b2:d1:
         88:52:19:2d:6c:cb:4d:2a:d4:d2:9b:46:3a:34:b5:8e:df:e8:
         4d:a0:76:e6:b8:06:2e:3d:6d:06:a5:37:2c:e9:f0:37:20:c2:
         c4:f5:07:f3:1c:4a:22:0b:39:d9:9a:45:7c:5f:1d:06:1a:50:
         84:5e:d3:44:aa:17:40:87:23:68:e5:78:71:8c:71:b6:41:e7:
         eb:63:6d:4e:83:d8:6a:a9:b3:16:e9:3b:e5:63:ec:f6:34:15:
         b3:92:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:39 2026 by rpki-client