This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa
File:                     3230302e38312e3132302e302f32312d3234203d3e203237383133.roa (raw, json)
Hash identifier:          3qOY9t5DhO/w3QxEvwu69Qv1MW5LLh2qJaC4ozzPmmo=
Subject key identifier:   AC:F7:46:BD:63:9E:6B:9E:A3:01:01:10:2B:7F:C2:F8:8A:1C:5B:6F
Certificate issuer:       /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial:       3D731F797F867EEAC9C9D4B51F9E45A9F5CC84A0
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa
Signing time:             Tue 06 Jan 2026 20:55:18 +0000
ROA not before:           Tue 06 Jan 2026 20:50:18 +0000
ROA not after:            Tue 05 Jan 2027 20:55:18 +0000
asID:                     27813
IP address blocks:        200.81.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:73:1f:79:7f:86:7e:ea:c9:c9:d4:b5:1f:9e:45:a9:f5:cc:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
        Validity
            Not Before: Jan  6 20:50:18 2026 GMT
            Not After : Jan  5 20:55:18 2027 GMT
        Subject: CN=ACF746BD639E6B9EA30101102B7FC2F88A1C5B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:04:bd:d1:61:c1:70:16:77:82:36:24:0d:
                    20:e7:63:79:f1:70:f2:d1:2b:59:27:ad:0b:cf:c4:
                    c5:07:24:25:a1:22:1e:da:fc:22:69:9d:08:7f:f0:
                    72:21:03:41:4e:19:fe:9c:c5:94:45:dd:28:9b:78:
                    01:92:95:c1:17:4b:33:8c:6c:4e:77:4f:2c:01:40:
                    54:7b:39:b8:f2:a4:53:e6:30:c2:8b:a8:7e:05:48:
                    59:04:73:c3:bd:ad:89:d3:2f:18:87:e5:8f:a4:54:
                    cf:28:76:b9:8b:9f:89:bd:3a:69:5d:89:ee:31:56:
                    b8:ba:eb:cd:38:f8:c2:a5:3d:56:51:e2:c0:b8:72:
                    99:af:6f:bc:65:d4:21:49:e0:cf:ba:51:17:97:36:
                    0b:f8:34:4c:95:c1:cb:c0:c8:20:6a:26:7c:b4:b5:
                    9a:99:e8:a0:ae:12:28:47:25:80:67:5a:df:b7:a8:
                    15:34:4b:29:48:e2:46:09:2c:16:6f:e7:4a:9a:0a:
                    fb:b9:9c:01:07:88:3c:fb:9f:ac:a3:a7:60:77:17:
                    d1:fc:68:48:9f:c5:ac:b6:66:50:40:8e:ad:d0:cd:
                    40:89:8b:f3:e5:7e:4b:8a:69:c2:7d:61:92:e5:45:
                    57:4f:55:4a:96:dd:93:3f:38:67:f1:f8:fc:84:e9:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F7:46:BD:63:9E:6B:9E:A3:01:01:10:2B:7F:C2:F8:8A:1C:5B:6F
            X509v3 Authority Key Identifier:
                keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:80:c0:3d:5d:ed:18:f3:84:16:f3:15:23:7c:db:e7:35:
         db:20:24:95:11:05:d7:eb:6e:4d:43:be:4b:70:25:d6:dc:48:
         c7:66:b9:1a:fa:a8:35:6b:b7:b7:ff:e1:a3:92:ce:0e:50:68:
         56:65:27:11:ab:c1:8c:05:5c:61:a4:75:2d:10:c0:5f:b5:4e:
         0a:60:4b:ab:7c:d4:2d:3c:91:8e:f3:b3:60:4d:65:2d:86:82:
         58:d4:41:00:3d:32:83:ed:40:d4:0d:a8:9b:c0:bb:d4:d3:22:
         c6:0d:3d:7c:41:b4:07:c8:01:12:cc:ca:dd:b8:02:14:a0:47:
         33:14:f8:3b:28:e9:1e:f1:3e:a3:54:dd:69:fc:d0:70:e8:e8:
         a0:2d:27:f1:33:d7:2d:23:64:87:4d:34:52:f4:9b:ea:15:bb:
         54:5b:b3:2b:62:20:e6:dc:db:5e:3d:8c:8a:0e:cf:40:55:c0:
         18:42:16:24:6c:58:9f:22:44:1e:72:be:f4:6c:a6:c4:cb:15:
         0a:a3:55:6b:f2:28:e2:e1:70:ef:87:cb:d4:fa:f0:f5:35:e7:
         94:2a:b7:17:82:a2:3c:cf:46:db:3c:77:47:29:cc:b4:52:2b:
         44:79:43:74:5d:bb:36:66:eb:38:a9:f1:5c:8a:d4:3c:7d:4e:
         40:df:4f:70
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPXMfeX+GfurJydS1H55FqfXMhKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBQ0Y1ODc3MkJDOTdCOUYwRDk0NjI2MTlEQTFGMjc4
NTBGRERCMTAeFw0yNjAxMDYyMDUwMThaFw0yNzAxMDUyMDU1MThaMDMxMTAvBgNV
BAMTKEFDRjc0NkJENjM5RTZCOUVBMzAxMDExMDJCN0ZDMkY4OEExQzVCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblwS90WHBcBZ3gjYkDSDnY3nx
cPLRK1knrQvPxMUHJCWhIh7a/CJpnQh/8HIhA0FOGf6cxZRF3SibeAGSlcEXSzOM
bE53TywBQFR7ObjypFPmMMKLqH4FSFkEc8O9rYnTLxiH5Y+kVM8odrmLn4m9Omld
ie4xVri66804+MKlPVZR4sC4cpmvb7xl1CFJ4M+6UReXNgv4NEyVwcvAyCBqJny0
tZqZ6KCuEihHJYBnWt+3qBU0SylI4kYJLBZv50qaCvu5nAEHiDz7n6yjp2B3F9H8
aEifxay2ZlBAjq3QzUCJi/PlfkuKacJ9YZLlRVdPVUqW3ZM/OGfx+PyE6Y2lAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrPdGvWOea56jAQEQK3/C+IocW28wHwYDVR0j
BBgwFoAUMqz1h3K8l7nw2UYmGdofJ4UP3bEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzdGMDJGNjAwMjMxREM2MzEwRDk0NzI3RTNFMkI1QjNE
MzFENjY2RTI5RjhBODQxN0Y3N0U2NEJBMjI5MzE0LzAvMzJBQ0Y1ODc3MkJDOTdC
OUYwRDk0NjI2MTlEQTFGMjc4NTBGRERCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkFDRjU4NzcyQkM5N0I5RjBE
OTQ2MjYxOURBMUYyNzg1MEZEREIxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM3RjAyRjYwMDIzMURDNjMxMEQ5NDcyN0UzRTJCNUIzRDMxRDY2NkUy
OUY4QTg0MTdGNzdFNjRCQTIyOTMxNC8wLzMyMzAzMDJlMzgzMTJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM4MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hReDAN
BgkqhkiG9w0BAQsFAAOCAQEAS8mAwD1d7RjzhBbzFSN82+c12yAklREF1+tuTUO+
S3Al1txIx2a5GvqoNWu3t//ho5LODlBoVmUnEavBjAVcYaR1LRDAX7VOCmBLq3zU
LTyRjvOzYE1lLYaCWNRBAD0yg+1A1A2om8C71NMixg09fEG0B8gBEszK3bgCFKBH
MxT4OyjpHvE+o1TdafzQcOjooC0n8TPXLSNkh000UvSb6hW7VFuzK2Ig5tzbXj2M
ig7PQFXAGEIWJGxYnyJEHnK+9GymxMsVCqNVa/Io4uFw74fL1Prw9TXnlCq3F4Ki
PM9G2zx3RynMtFIrRHlDdF27NmbrOKnxXIrUPH1OQN9PcA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:32 2026 by rpki-client