This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130342e302f32322d3234203d3e203237373436.roa
File:                     3230302e31342e3130342e302f32322d3234203d3e203237373436.roa (raw, json)
Hash identifier:          USiuArnItW2Fz2jcoahzXIGS8MErloHQeEiq9bAvETc=
Subject key identifier:   D6:F7:2F:0D:84:19:08:1C:D4:72:4A:FA:A7:48:47:5C:51:71:28:07
Certificate issuer:       /CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
Certificate serial:       6362E05FC92E58E072D6F2D41829F8A90769BD80
Authority key identifier: A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130342e302f32322d3234203d3e203237373436.roa
Signing time:             Tue 06 Jan 2026 20:51:02 +0000
ROA not before:           Tue 06 Jan 2026 20:46:02 +0000
ROA not after:            Tue 05 Jan 2027 20:51:02 +0000
asID:                     27746
IP address blocks:        200.14.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:62:e0:5f:c9:2e:58:e0:72:d6:f2:d4:18:29:f8:a9:07:69:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
        Validity
            Not Before: Jan  6 20:46:02 2026 GMT
            Not After : Jan  5 20:51:02 2027 GMT
        Subject: CN=D6F72F0D8419081CD4724AFAA748475C51712807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:d8:ff:06:47:80:93:2c:e7:46:fd:01:78:
                    ab:58:4e:25:b0:32:ab:0b:26:e3:bc:78:b1:20:62:
                    5c:89:bb:13:9e:47:b4:cf:b9:16:b1:73:f5:fe:84:
                    46:15:19:72:89:23:da:72:b2:a0:80:04:f8:8a:e6:
                    9c:ad:d0:b3:f4:42:5d:05:b0:1b:75:fc:90:b9:5b:
                    cf:1e:99:bc:d9:7d:29:47:16:a7:b0:81:3a:9f:bd:
                    35:b9:b4:49:12:83:f7:f1:9a:d3:46:47:f8:ef:fa:
                    c6:82:3c:16:99:9d:25:69:cb:19:6b:8e:41:17:eb:
                    67:ba:b6:64:e3:23:ee:1c:75:2e:6c:f1:49:75:60:
                    7a:b6:b1:56:0e:d5:76:db:76:e2:bd:5f:42:70:d2:
                    14:d6:ba:42:c1:48:2e:8c:cf:b7:36:ba:2f:a6:3d:
                    61:4a:aa:f2:e4:b2:b7:cc:8c:7c:71:ef:c4:37:be:
                    db:b3:f1:ca:ce:a0:1f:d8:37:94:ea:4f:03:8d:90:
                    60:ae:61:ed:34:c4:eb:70:2b:79:6a:d3:24:ec:f9:
                    6f:64:2f:e4:0e:7b:1c:67:9f:40:46:3f:bb:15:dc:
                    50:b5:81:78:0a:72:76:d6:5e:e9:00:bd:1d:cd:6e:
                    a8:c4:01:0c:18:4a:aa:75:20:0f:e1:95:46:59:e4:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:2F:0D:84:19:08:1C:D4:72:4A:FA:A7:48:47:5C:51:71:28:07
            X509v3 Authority Key Identifier:
                keyid:A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130342e302f32322d3234203d3e203237373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:32:a4:bd:79:76:f0:a9:28:73:d8:11:80:d6:50:be:99:db:
         32:a3:52:9c:72:cf:dc:ec:a6:00:d1:59:8d:06:66:95:9e:8e:
         e2:49:64:a6:2e:00:12:c5:f2:89:c2:3c:28:31:a2:a1:fa:08:
         ac:64:c4:e6:11:d5:dd:8b:4c:e0:65:d7:ac:e7:fa:f2:51:0e:
         d0:1d:71:34:99:5b:d5:26:ff:a0:40:3a:f7:9f:c9:fd:fc:48:
         d4:a5:c8:7a:b4:fa:3d:f9:a1:be:47:f1:68:bb:9a:ec:6a:aa:
         77:74:dd:fd:63:fe:e0:8d:65:b8:c1:f9:23:23:ab:d2:fa:5e:
         22:c5:d1:73:86:2f:cb:04:55:0d:16:70:2a:4f:dc:61:ea:0e:
         83:f3:50:10:62:8e:c9:9c:5b:e8:ae:9c:40:1e:66:1d:b0:40:
         05:a6:44:01:79:5a:b1:50:e4:16:5c:6c:62:c2:b7:5c:4c:09:
         36:46:01:71:bf:2d:5b:7e:7e:28:9d:ff:17:17:24:2e:63:cd:
         d4:1e:24:7f:0e:48:61:eb:00:13:c8:ff:26:b2:09:18:eb:78:
         98:fa:38:e2:9e:fe:eb:c8:49:9f:e3:f4:36:dd:2e:7a:da:3e:
         44:b7:83:f4:17:b6:0b:70:46:11:ce:60:f9:9f:45:fa:07:f4:
         67:b5:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:21 2026 by rpki-client