This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1071A71EF736092CD1C415AB2402B062A61E3867CF9C126481748FCB82D60D66/0/3230302e32392e3232342e302f32312d3234203d3e20323632323337.roa
File:                     3230302e32392e3232342e302f32312d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          6Gg7reOXEjP5/giGY7aUflja+nSlz9Fx7AxaQsnlDZY=
Subject key identifier:   1B:D2:71:3A:90:6B:7E:82:A0:75:00:3B:C2:E8:5B:16:AC:1A:C8:2F
Certificate issuer:       /CN=B1516A7277E378C828DDF1D4FD61203136A013D0
Certificate serial:       61FFA9AF0BC8415762FF043CE726BA3D08707806
Authority key identifier: B1:51:6A:72:77:E3:78:C8:28:DD:F1:D4:FD:61:20:31:36:A0:13:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1516A7277E378C828DDF1D4FD61203136A013D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1071A71EF736092CD1C415AB2402B062A61E3867CF9C126481748FCB82D60D66/0/3230302e32392e3232342e302f32312d3234203d3e20323632323337.roa
Signing time:             Wed 03 Dec 2025 20:05:00 +0000
ROA not before:           Wed 03 Dec 2025 20:00:00 +0000
ROA not after:            Wed 02 Dec 2026 20:05:00 +0000
asID:                     262237
IP address blocks:        200.29.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1071A71EF736092CD1C415AB2402B062A61E3867CF9C126481748FCB82D60D66/0/B1516A7277E378C828DDF1D4FD61203136A013D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1071A71EF736092CD1C415AB2402B062A61E3867CF9C126481748FCB82D60D66/0/B1516A7277E378C828DDF1D4FD61203136A013D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1516A7277E378C828DDF1D4FD61203136A013D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ff:a9:af:0b:c8:41:57:62:ff:04:3c:e7:26:ba:3d:08:70:78:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1516A7277E378C828DDF1D4FD61203136A013D0
        Validity
            Not Before: Dec  3 20:00:00 2025 GMT
            Not After : Dec  2 20:05:00 2026 GMT
        Subject: CN=1BD2713A906B7E82A075003BC2E85B16AC1AC82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:93:e7:7f:59:b0:cd:41:09:0c:17:b8:f8:
                    1b:c7:fe:9c:b0:3b:0f:20:cf:5f:eb:46:3c:0f:f8:
                    b6:66:02:9e:44:a1:12:15:62:49:e3:97:9a:c1:5a:
                    8e:99:24:bf:4d:18:26:25:50:08:15:d0:57:67:1e:
                    18:17:b2:4e:cc:dc:b8:0c:bf:f6:a4:6b:f2:c1:b2:
                    6b:25:5b:68:84:2b:62:14:4b:09:d7:1d:5a:54:92:
                    eb:b6:a0:bd:2d:ce:b8:24:09:84:53:a4:22:d2:fb:
                    2d:ca:ed:73:b4:12:21:19:bd:b8:96:ae:f6:a8:e5:
                    96:78:72:a9:d8:d4:af:2e:34:dc:4e:4a:f7:0c:69:
                    05:37:db:16:3c:f6:07:9b:e6:56:07:01:2e:a2:49:
                    fa:39:db:d0:d0:99:9a:08:54:55:80:56:88:27:28:
                    45:8c:d1:33:55:3f:00:3b:13:e6:10:6b:b0:72:90:
                    48:37:bd:4c:0f:c1:a9:22:3d:fd:69:9a:f5:31:4e:
                    29:d0:f5:9f:6d:86:80:cd:c2:75:36:16:05:f0:da:
                    9a:54:58:72:5e:71:eb:2d:4b:28:87:41:8e:c5:b7:
                    2e:a6:f8:67:bc:33:cb:c8:c5:57:11:60:05:b1:ce:
                    a1:34:42:05:0c:2f:4f:bd:11:cc:fa:42:c7:c3:0d:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D2:71:3A:90:6B:7E:82:A0:75:00:3B:C2:E8:5B:16:AC:1A:C8:2F
            X509v3 Authority Key Identifier:
                keyid:B1:51:6A:72:77:E3:78:C8:28:DD:F1:D4:FD:61:20:31:36:A0:13:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1071A71EF736092CD1C415AB2402B062A61E3867CF9C126481748FCB82D60D66/0/B1516A7277E378C828DDF1D4FD61203136A013D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1516A7277E378C828DDF1D4FD61203136A013D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1071A71EF736092CD1C415AB2402B062A61E3867CF9C126481748FCB82D60D66/0/3230302e32392e3232342e302f32312d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:2f:2f:e5:6c:65:68:9d:df:79:fc:f9:47:07:21:ca:ab:
         76:00:22:80:a7:75:10:a6:e3:12:84:7f:36:54:99:0b:cd:68:
         47:b7:71:1c:e7:13:2c:18:3c:4f:a3:19:50:db:9b:b7:ec:a0:
         9b:d7:b7:12:a8:85:11:b8:16:e3:df:bf:53:62:24:a3:ed:38:
         4d:b6:7d:20:cf:eb:e7:8f:2d:08:00:18:30:e4:71:5f:2c:ce:
         85:23:3e:f8:f3:34:4c:d5:58:64:dd:bb:37:86:16:00:42:86:
         cd:89:fa:6d:6f:d8:3c:92:f3:43:2d:91:83:6f:38:32:74:11:
         cb:4a:29:ac:ef:35:e6:73:ae:fb:83:5c:92:4d:69:af:f4:0d:
         e0:49:f3:b1:67:75:44:1f:12:11:bc:11:8c:32:a1:f5:e2:e4:
         65:19:83:d6:a0:58:5b:a9:8e:c1:1e:ce:98:04:a8:b4:a6:a8:
         b8:c0:3d:05:47:9b:7a:73:19:94:76:6a:cd:fb:8b:71:80:a5:
         ac:42:81:29:bb:44:61:d8:44:bf:78:a3:3e:26:49:86:0c:ed:
         ce:5b:d9:7e:03:fd:c1:fa:77:64:6a:18:56:db:f7:79:ac:e9:
         f6:1b:c4:73:d8:f7:20:b2:45:a7:77:1c:75:d8:3f:02:29:f2:
         79:31:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:27:53 2025 by rpki-client