This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139372e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3139372e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          qBjS9+QnKsUB8rcaaaFg73rNhIlY0B7SqWiIusvge3s=
Subject key identifier:   46:7C:7A:34:6A:F2:3B:CA:2A:15:17:16:3E:A5:8B:FA:14:1D:6C:36
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       4179C2B2450755357B5CEF1A316FF9226910491D
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139372e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 06 Jan 2026 19:09:23 +0000
ROA not before:           Tue 06 Jan 2026 19:04:23 +0000
ROA not after:            Tue 05 Jan 2027 19:09:23 +0000
asID:                     10269
IP address blocks:        200.32.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:79:c2:b2:45:07:55:35:7b:5c:ef:1a:31:6f:f9:22:69:10:49:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Jan  6 19:04:23 2026 GMT
            Not After : Jan  5 19:09:23 2027 GMT
        Subject: CN=467C7A346AF23BCA2A1517163EA58BFA141D6C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:36:ef:eb:c4:2a:38:cc:6c:a6:dc:35:f2:
                    2e:db:e5:31:a7:e1:50:ca:59:e5:88:74:b3:03:a0:
                    c5:e9:7f:53:68:08:6e:65:ba:32:a9:52:2b:ba:e2:
                    59:4c:e9:77:22:fc:70:0d:83:2f:2d:24:a1:71:06:
                    16:ee:5a:ac:bf:98:59:14:bb:45:73:37:51:bf:59:
                    9e:ac:19:0d:ea:b7:74:fd:20:4d:89:1c:cc:c2:bd:
                    67:ea:05:e1:db:1e:5a:f4:2d:ec:db:87:76:6e:c8:
                    55:1d:07:cd:e8:e5:b5:fc:25:db:c4:4e:3b:11:bc:
                    96:e4:0a:bc:76:da:61:36:26:95:2b:ce:a8:6c:ae:
                    78:fb:83:49:90:c6:c6:e8:33:6a:1c:ab:a1:3f:59:
                    51:75:46:5a:bd:ea:b7:22:1b:fc:d7:a2:92:5a:0e:
                    0f:16:51:d9:29:22:5b:72:9e:8f:0e:af:1b:28:dd:
                    55:dd:77:61:e4:b7:83:9f:db:4e:b3:10:8a:19:0e:
                    0d:de:5d:84:e4:dd:3f:f4:85:0a:a8:97:a8:63:b1:
                    d6:d4:42:d1:55:4d:50:ba:28:7d:31:a8:c9:02:22:
                    a2:78:ab:50:7b:d9:a0:43:cd:f6:b2:21:3a:55:5e:
                    53:4a:ac:41:9f:f7:99:55:a7:62:94:6b:63:75:08:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:7A:34:6A:F2:3B:CA:2A:15:17:16:3E:A5:8B:FA:14:1D:6C:36
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139372e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:75:c9:8b:47:60:d2:fb:d6:3d:68:94:aa:0f:25:bb:da:
         25:02:5c:e9:70:6b:b6:a3:58:48:63:5f:0c:69:32:40:95:28:
         70:8f:7b:dd:0f:2e:c6:55:e8:74:7c:eb:3c:dd:10:58:10:25:
         01:2a:56:7f:4a:0d:c0:37:d7:82:63:08:71:c3:60:90:0c:63:
         3b:69:5a:ab:dc:94:df:a4:dd:d2:3c:3a:18:e8:28:5a:18:18:
         22:41:51:f5:fb:14:24:7f:3d:80:8f:89:7c:b2:56:fa:a6:73:
         a7:64:04:01:1e:10:14:51:fd:29:83:cc:d4:f8:42:5a:0a:23:
         ed:3f:73:f7:eb:04:a9:4f:ee:3f:4c:70:28:f3:7c:73:97:bf:
         40:af:db:9a:2e:c8:12:5d:ed:b9:d3:41:99:32:45:a7:75:13:
         27:2f:a7:c3:0c:9e:69:51:c2:90:a7:0b:a8:3c:d1:1b:44:6d:
         3c:5f:73:e7:c2:fc:77:9d:c0:91:8d:8f:e1:17:c0:30:4f:5c:
         f3:fb:7f:2d:d9:e4:33:01:6a:82:79:cb:fe:cd:07:6f:6b:3d:
         ba:85:de:e4:9a:0c:1a:18:78:04:e1:72:3d:57:1e:1f:17:9c:
         d2:73:fe:c5:82:63:db:18:b4:02:a5:58:8b:a9:3f:17:ed:77:
         3c:41:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:03 2026 by rpki-client