This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa
File:                     3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa (raw, json)
Hash identifier:          29lf4YlHieisLeKcM/2CIeG3qFMSXfoki3kMpDmBRC0=
Subject key identifier:   26:70:CC:A9:C8:06:E1:32:DE:64:8F:8D:E8:18:94:68:8C:0D:65:09
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       40CEE2E86B02A6A9967D718BD59869D0584AB5F1
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa
Signing time:             Sat 29 Nov 2025 02:40:00 +0000
ROA not before:           Sat 29 Nov 2025 02:35:00 +0000
ROA not after:            Sat 28 Nov 2026 02:40:00 +0000
asID:                     13381
IP address blocks:        200.112.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 12:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ce:e2:e8:6b:02:a6:a9:96:7d:71:8b:d5:98:69:d0:58:4a:b5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Nov 29 02:35:00 2025 GMT
            Not After : Nov 28 02:40:00 2026 GMT
        Subject: CN=2670CCA9C806E132DE648F8DE81894688C0D6509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:1e:c2:dd:85:f7:64:c3:53:6c:ec:24:e7:
                    25:ee:cf:ec:a5:7a:19:97:be:7f:2a:b7:ca:19:d3:
                    b8:11:a4:47:61:7b:fb:d0:53:ee:ab:fc:e5:f5:74:
                    45:62:8a:e2:92:be:9b:2c:e3:bd:26:be:a4:e1:20:
                    1e:54:80:08:84:65:42:a9:72:55:c4:5d:74:6d:7b:
                    c6:a3:86:f6:e0:43:1d:51:b3:ec:4c:83:97:d7:42:
                    78:ba:a5:4a:07:f7:88:3b:60:c5:d0:ec:7c:d8:fb:
                    dd:97:7c:f8:5e:0c:f5:38:0e:27:94:b3:9f:ba:d9:
                    2d:3f:dc:93:0e:ec:fa:4c:97:36:13:77:cd:86:7c:
                    58:a7:3c:2f:b2:f2:a7:a9:3f:0c:aa:e8:a2:77:1b:
                    99:9c:d6:2c:4d:de:aa:2b:c3:18:c9:0a:b3:63:0f:
                    1a:f1:57:c2:fd:25:ce:b0:aa:28:22:11:df:7d:49:
                    aa:90:79:b7:bc:94:dd:71:92:a8:0f:ec:87:d3:8e:
                    f3:26:39:be:8c:f8:76:ce:5f:8c:c7:fa:4d:bf:1e:
                    31:76:17:10:15:ba:bf:30:d9:15:f8:9b:59:77:8f:
                    58:c4:dd:d7:08:2d:2e:7d:15:fa:3f:07:f6:18:4e:
                    e8:a2:6e:ae:ce:29:a6:8f:47:ec:74:f6:73:9f:ef:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:CC:A9:C8:06:E1:32:DE:64:8F:8D:E8:18:94:68:8C:0D:65:09
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:9a:fe:4c:37:44:f2:0a:2c:59:fd:54:d8:36:5a:83:88:
         71:6e:e5:2a:8e:72:98:97:1e:e4:40:8c:ae:82:91:ec:ad:17:
         4c:a9:25:ac:b2:cd:df:ec:d5:64:4e:8e:21:de:f5:64:b1:3b:
         89:77:9f:19:af:45:bb:0e:75:f3:57:56:77:dc:80:0e:50:15:
         d9:f6:f5:8f:c9:f3:dd:45:de:63:98:cb:d6:42:95:9b:64:99:
         e7:ee:d5:ac:57:f9:06:4f:23:d9:44:ee:6a:3e:6f:8a:b5:4c:
         9c:f9:21:17:f4:a4:4f:9e:7f:40:fb:b2:7e:93:e1:b2:fe:9b:
         e5:c8:38:30:68:4d:d3:c0:82:e1:05:91:14:5e:f3:78:61:74:
         70:90:9e:5c:0a:0e:98:bc:90:47:62:13:e0:45:aa:d4:fd:a0:
         2c:02:e9:f9:a9:83:d2:51:ac:e6:92:05:44:2f:34:50:ed:e1:
         43:d9:0d:76:82:d4:e1:16:3d:d8:aa:b7:b7:c6:91:81:36:15:
         08:30:1a:d5:99:00:74:ab:a1:4b:29:64:3a:ab:a9:61:dc:0c:
         1c:2e:3c:06:7e:38:ff:29:33:b4:76:ce:4d:a4:5f:da:d6:77:
         f7:3e:11:dc:da:e1:c0:69:98:5e:82:e4:6a:90:0e:41:21:c3:
         58:e9:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:39 2025 by rpki-client