This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
File:                     3230302e39312e35362e302f32312d3234203d3e203532343836.roa (raw, json)
Hash identifier:          AFGV2wB+JpZ4RQAFXBHyvpAV6LY97nEGzpSJbDE8WrU=
Subject key identifier:   17:3D:DB:0E:4A:E0:B8:B4:12:04:CC:41:12:93:46:3F:A9:B5:65:05
Certificate issuer:       /CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Certificate serial:       640324DD9A2C4F556CDF8B851EE63FDADC1C57C4
Authority key identifier: D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa
Signing time:             Tue 06 Jan 2026 19:21:28 +0000
ROA not before:           Tue 06 Jan 2026 19:16:28 +0000
ROA not after:            Tue 05 Jan 2027 19:21:28 +0000
asID:                     52486
IP address blocks:        200.91.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:03:24:dd:9a:2c:4f:55:6c:df:8b:85:1e:e6:3f:da:dc:1c:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
        Validity
            Not Before: Jan  6 19:16:28 2026 GMT
            Not After : Jan  5 19:21:28 2027 GMT
        Subject: CN=173DDB0E4AE0B8B41204CC411293463FA9B56505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:fb:3d:8d:1e:b9:1c:d0:89:c4:fb:c7:44:
                    a2:09:13:6d:05:22:b5:3b:db:bc:96:b6:d1:d6:69:
                    15:1e:d3:b4:ac:b9:da:b2:8a:38:44:57:78:ee:70:
                    79:32:37:a5:23:e7:ae:e2:e0:16:a0:c9:3c:7b:74:
                    67:4a:f7:f7:72:76:f2:71:cd:cb:15:a8:c7:81:6b:
                    c3:1d:c5:27:ff:26:73:c8:18:cf:87:14:26:e4:ec:
                    33:42:53:69:24:65:45:9e:ad:29:13:e1:f8:40:1b:
                    fa:3d:89:14:77:0a:9a:df:5b:3c:be:6e:1b:6f:a4:
                    1a:bb:e0:74:45:0c:1b:17:6e:db:e0:53:8c:52:bc:
                    87:f3:c5:f9:d1:59:73:f8:d6:aa:8b:55:a1:09:31:
                    a7:5b:53:1c:b8:c2:e1:58:ca:52:65:0c:46:ae:a2:
                    a4:16:6e:f9:6e:0f:d8:23:99:3b:f8:56:8c:f5:53:
                    68:9c:19:e5:f5:42:1c:87:2f:9b:65:a2:bb:55:8e:
                    25:3a:2e:b1:20:40:0e:70:8d:da:d4:db:10:49:da:
                    2d:76:6e:4d:b7:0a:73:93:fb:e1:3a:5e:0c:ee:13:
                    61:c9:17:61:77:2d:32:0c:55:8f:d5:ff:e2:c8:20:
                    7f:98:d4:61:8b:39:c9:f7:69:20:d4:81:68:9e:c3:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:DB:0E:4A:E0:B8:B4:12:04:CC:41:12:93:46:3F:A9:B5:65:05
            X509v3 Authority Key Identifier:
                keyid:D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3230302e39312e35362e302f32312d3234203d3e203532343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:84:02:db:9e:3c:d9:c3:cd:9c:2e:a6:5d:f6:48:fe:72:b9:
         db:7d:58:c3:82:b4:d0:64:ac:b5:11:37:a3:5b:56:a6:10:05:
         51:de:d9:24:f5:49:5c:9e:38:93:5a:a4:2b:1d:a1:27:69:5d:
         73:a8:cf:83:c8:11:5c:a2:4b:25:32:e9:5b:16:c9:ac:fc:85:
         bb:1e:f2:d9:d1:da:73:bb:2f:89:b5:5e:b0:82:81:08:cd:a7:
         0d:16:bf:f7:e0:a1:1b:d0:b5:46:31:42:04:a9:31:01:07:c7:
         c4:88:f6:3f:75:08:58:9a:f3:3f:f9:d5:a9:df:5a:08:05:c0:
         87:16:ad:95:13:ee:2b:bf:a4:b3:f0:24:34:85:7a:37:d1:29:
         60:cd:94:eb:43:14:77:df:d2:bf:12:ce:9f:51:82:06:fe:98:
         9d:02:36:b2:c9:9f:24:2f:8b:1d:13:6e:74:ac:0b:f3:d1:cb:
         db:90:ce:31:94:1a:99:f5:cd:50:90:f2:cb:c3:8f:d6:23:6f:
         40:ed:21:11:ad:5c:ec:3c:98:e8:7b:a7:10:73:06:2b:75:05:
         81:ac:9f:46:91:96:37:10:d1:39:50:4b:82:f6:e6:d2:99:74:
         8c:9a:36:fc:9c:e7:ee:f0:03:2f:6f:09:20:fc:d4:a6:f9:ea:
         8c:61:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:35 2026 by rpki-client