This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa
File:                     3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa (raw, json)
Hash identifier:          TBlHT8cbT3f52n428KVEyVUhW7HuDFu8blmTX1WVIzo=
Subject key identifier:   73:27:25:15:0D:9C:1C:7D:FF:0D:CB:7A:DD:54:F2:96:7D:69:73:FF
Certificate issuer:       /CN=FC1CAABE4461DD15117232677197989DF5BC0939
Certificate serial:       752D605B68EA7E39132DD379CF2EA52B92FD366E
Authority key identifier: FC:1C:AA:BE:44:61:DD:15:11:72:32:67:71:97:98:9D:F5:BC:09:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC1CAABE4461DD15117232677197989DF5BC0939.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa
Signing time:             Tue 06 Jan 2026 19:48:05 +0000
ROA not before:           Tue 06 Jan 2026 19:43:05 +0000
ROA not after:            Tue 05 Jan 2027 19:48:05 +0000
asID:                     269998
IP address blocks:        200.59.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/FC1CAABE4461DD15117232677197989DF5BC0939.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/FC1CAABE4461DD15117232677197989DF5BC0939.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC1CAABE4461DD15117232677197989DF5BC0939.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2d:60:5b:68:ea:7e:39:13:2d:d3:79:cf:2e:a5:2b:92:fd:36:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1CAABE4461DD15117232677197989DF5BC0939
        Validity
            Not Before: Jan  6 19:43:05 2026 GMT
            Not After : Jan  5 19:48:05 2027 GMT
        Subject: CN=732725150D9C1C7DFF0DCB7ADD54F2967D6973FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:ca:1a:74:bb:05:1e:70:05:b6:9e:8b:da:
                    b4:bc:4c:23:44:c5:99:0b:c4:91:72:bd:97:19:d4:
                    de:72:01:1a:1e:a3:79:b9:bf:01:72:a7:85:f4:e9:
                    4e:81:8a:9e:97:54:c3:59:b5:16:a4:27:28:54:25:
                    a2:db:4d:b3:02:d2:a1:2d:13:6e:b8:ec:5c:41:cd:
                    3b:e1:e6:46:49:2e:8f:73:6a:1a:29:d4:81:50:c8:
                    62:e7:7f:73:ed:20:34:3b:4a:fb:14:be:e5:de:98:
                    89:df:8e:90:7b:89:1c:81:cf:24:b9:4a:8a:1e:8a:
                    82:25:c5:1d:bb:0f:12:39:ef:7c:53:e9:b5:61:8c:
                    b3:6b:39:02:7f:51:45:9b:e9:a3:08:97:38:bb:e8:
                    76:f2:1a:6d:e9:2c:f6:e4:53:df:92:3a:24:85:90:
                    9b:8e:d4:b4:ea:54:d6:fb:20:6d:3e:0b:06:dd:b2:
                    97:13:5a:9e:6a:35:8e:24:50:c3:e3:2c:8f:e8:e9:
                    21:3e:d8:f8:3e:4e:90:82:c3:85:02:6a:51:35:8e:
                    0d:d9:c1:c8:7d:f3:2b:d8:09:fb:b3:a7:02:72:41:
                    b1:b2:5a:cc:aa:61:87:39:d3:d8:be:11:72:14:b3:
                    be:68:35:cb:1c:50:99:c6:89:c9:ad:ca:d6:9d:78:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:27:25:15:0D:9C:1C:7D:FF:0D:CB:7A:DD:54:F2:96:7D:69:73:FF
            X509v3 Authority Key Identifier:
                keyid:FC:1C:AA:BE:44:61:DD:15:11:72:32:67:71:97:98:9D:F5:BC:09:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/FC1CAABE4461DD15117232677197989DF5BC0939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC1CAABE4461DD15117232677197989DF5BC0939.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C66921BBE6BCEF3FFB4D3A3AF061BB658E03ABD53091D0541CF6449328CC5BE/0/3230302e35392e3230382e302f32322d3232203d3e20323639393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:eb:22:cf:3a:b0:40:b3:18:2c:80:5f:71:93:fe:d7:4a:
         68:9d:91:9f:c9:df:47:68:ea:6c:2d:1c:63:91:ff:1c:7b:82:
         c9:6f:43:51:62:62:a9:32:e9:44:c6:4f:f0:00:51:32:74:2a:
         8e:7d:25:ba:54:b9:15:30:8a:0a:5f:6d:40:91:84:f7:33:58:
         7b:93:de:ea:e6:bc:b2:3c:97:a6:d0:7d:eb:a6:34:3c:ad:89:
         19:2c:c5:86:8e:a0:11:84:18:7f:52:0b:9d:7d:f2:15:8f:aa:
         04:89:6c:ec:25:3f:9d:48:35:b7:6e:e2:9a:a0:37:52:b5:35:
         e9:45:f8:51:6b:4a:09:1e:75:be:b6:2a:d3:99:bd:cc:6e:dd:
         ce:57:17:2f:a8:7c:2d:d2:41:54:91:7c:5b:02:48:17:3b:35:
         b1:62:21:7e:d7:08:bb:b4:9a:22:90:6e:e7:29:36:9e:5c:bf:
         52:f5:74:89:e7:73:bd:2e:b9:5d:04:db:0f:fd:5a:82:55:97:
         d7:5d:9e:5f:02:76:7c:7c:58:16:a8:6c:35:0c:5c:8a:16:c2:
         e0:e5:72:01:e1:36:f3:69:fa:99:c4:0f:bf:ed:e5:f0:a4:63:
         0a:27:17:3c:df:c0:5b:0d:87:8a:4d:eb:db:97:d8:e3:53:3b:
         52:e1:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:57 2026 by rpki-client