This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa
File:                     3230302e39302e3136302e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          HMe8YjjeypKGyYpbUTb383V72hluwTLtCIW93jtrQYc=
Subject key identifier:   F5:C9:A6:6F:D7:F4:FD:C7:95:CA:27:06:DC:39:32:2A:5D:C7:CB:E7
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       4364545D35B7883C54C9F81E68BAAE7ABC054D89
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:52:09 +0000
ROA not before:           Tue 06 Jan 2026 20:47:09 +0000
ROA not after:            Tue 05 Jan 2027 20:52:09 +0000
asID:                     16629
IP address blocks:        200.90.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:64:54:5d:35:b7:88:3c:54:c9:f8:1e:68:ba:ae:7a:bc:05:4d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:09 2026 GMT
            Not After : Jan  5 20:52:09 2027 GMT
        Subject: CN=F5C9A66FD7F4FDC795CA2706DC39322A5DC7CBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:a8:d6:c6:e6:75:2e:5f:d2:22:1d:b4:c6:
                    43:70:79:e5:7b:b1:08:3d:5d:97:8b:f5:1a:4f:75:
                    9d:30:62:9f:97:3d:4b:29:6e:58:6a:ed:35:87:c7:
                    1f:4c:36:d0:b2:eb:9f:f4:1d:7f:24:88:f0:0f:9f:
                    c8:7e:fa:25:55:93:6a:c5:40:ff:d7:c8:5a:a2:ee:
                    cb:67:54:a5:c6:92:46:ac:09:e2:75:b5:f0:ea:dc:
                    aa:eb:34:4f:5c:8a:77:4d:c4:f0:6b:b2:96:f8:74:
                    c5:93:04:92:94:cc:a2:dc:ee:94:8b:79:56:e9:d6:
                    48:cc:7f:69:ed:20:d5:1f:02:47:15:5d:9b:36:c7:
                    70:85:c2:fd:b9:ec:9c:27:c0:86:33:1f:c2:43:06:
                    02:c7:42:61:ed:ed:fd:6d:ea:9b:ae:2d:b4:1e:38:
                    19:8b:17:4e:c4:e8:b4:6a:24:05:0f:d8:a1:8d:6b:
                    84:f7:53:bb:57:15:c0:a9:88:98:ea:2c:75:26:a2:
                    3d:5c:39:83:51:dc:b6:07:1e:74:9a:57:ff:fc:9e:
                    72:7b:3d:a7:48:c9:4a:45:90:8c:d2:39:b7:6f:01:
                    ef:aa:d1:36:66:80:40:c7:86:2f:6e:1f:55:8d:12:
                    44:85:bd:e5:d9:2b:90:ac:77:ff:f7:98:e8:e7:19:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:A6:6F:D7:F4:FD:C7:95:CA:27:06:DC:39:32:2A:5D:C7:CB:E7
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:80:6d:4e:5b:ab:ad:22:f3:d1:b6:42:f6:b9:2e:c7:58:
         85:46:7b:bd:6a:c7:91:52:cf:0e:65:46:65:42:6d:c0:70:d4:
         69:a6:da:92:db:4e:66:6b:82:56:48:94:a1:4d:b2:74:8b:ec:
         e4:3a:69:1b:ba:b1:c5:e4:b9:e8:d0:79:9c:cc:03:0f:84:28:
         e2:af:e7:b2:c7:12:fc:76:d5:3b:1a:ca:33:18:72:fa:1a:78:
         7b:c2:50:01:53:0e:cd:81:a8:53:8c:1e:9c:9f:b7:eb:13:5e:
         6f:88:8f:45:a3:3a:a0:44:15:59:dc:e5:43:64:b8:c0:00:60:
         4f:41:27:a4:52:b2:94:24:9e:20:4e:14:6c:d6:8b:5e:58:d8:
         29:21:d3:09:65:11:f8:dc:8b:ad:0e:d5:fe:99:ec:6f:06:91:
         5f:e6:90:a0:e4:98:64:6f:b5:db:97:85:8f:1c:61:cd:9d:b4:
         4b:77:fb:07:4b:3a:19:2b:e6:71:a9:5d:10:30:91:3c:b7:e7:
         96:e4:62:49:a3:1f:34:ac:86:d8:3d:8f:b4:ba:3d:ba:cc:06:
         ef:83:c8:de:3f:a5:5b:25:5c:da:f1:db:45:ff:8d:a0:11:42:
         e2:ca:c4:2f:99:3e:31:f6:26:85:f1:74:f1:ab:ed:44:10:f6:
         32:0b:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:09 2026 by rpki-client