This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
File:                     3230302e39312e33322e302f32312d3234203d3e203238303438.roa (raw, json)
Hash identifier:          51zmltLaVjKbRWjws5SUAo7o5CnYExPboI++J4otUJw=
Subject key identifier:   29:A2:6B:13:F5:D0:32:8C:B9:28:55:4F:BE:FF:0B:58:8E:56:5E:E1
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       670F18198A46F4C69A765D0E8810FD54D91868C1
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
Signing time:             Tue 06 Jan 2026 20:49:52 +0000
ROA not before:           Tue 06 Jan 2026 20:44:52 +0000
ROA not after:            Tue 05 Jan 2027 20:49:52 +0000
asID:                     28048
IP address blocks:        200.91.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0f:18:19:8a:46:f4:c6:9a:76:5d:0e:88:10:fd:54:d9:18:68:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Jan  6 20:44:52 2026 GMT
            Not After : Jan  5 20:49:52 2027 GMT
        Subject: CN=29A26B13F5D0328CB928554FBEFF0B588E565EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:a1:83:77:1c:1f:d1:73:34:6d:38:64:c5:
                    82:f4:59:7e:4b:ef:ed:9f:0b:9d:4f:cc:6b:38:6e:
                    ad:ea:e9:cb:f7:bc:37:dc:5b:dc:ad:8e:b0:35:7c:
                    0a:94:01:6c:11:cf:23:1d:51:b3:91:7f:37:df:5c:
                    73:ab:64:5a:9c:05:98:7b:22:da:66:ca:da:6a:c7:
                    bb:93:5e:c1:6d:79:b7:f5:7f:bd:7b:0f:7e:9f:bf:
                    3a:55:1e:e0:f6:23:e1:be:64:9d:e4:95:9f:29:ea:
                    40:0b:28:9c:0a:f0:8a:4e:8d:bb:7e:84:2d:9a:35:
                    da:fd:72:ee:70:b9:6e:f3:8d:ca:6c:42:e3:1a:a6:
                    7b:84:30:0c:f6:d7:14:5b:cc:88:30:ad:e8:7e:dc:
                    b1:c8:79:cc:0c:6a:93:99:9c:fa:61:65:fa:f0:6b:
                    c0:97:c8:94:32:45:d2:d7:0d:4f:29:ac:ce:b5:dd:
                    24:7b:87:8e:c3:cb:32:4e:60:13:0b:6d:fd:70:6c:
                    d7:bb:b6:8d:41:16:1e:73:d9:b8:d4:52:68:8b:e9:
                    b6:3c:79:5d:04:f0:22:99:42:3f:64:2d:6b:f5:50:
                    a5:6d:ee:1e:f2:27:d2:50:6f:3b:a6:d9:ef:26:20:
                    7b:f2:f7:5a:3b:d7:e5:f4:7b:87:75:2c:89:82:1a:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A2:6B:13:F5:D0:32:8C:B9:28:55:4F:BE:FF:0B:58:8E:56:5E:E1
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:c9:e9:d6:50:de:c1:82:30:df:24:ed:c9:98:0c:df:93:
         64:56:6e:c9:f3:8b:06:06:c6:07:9a:bf:70:d6:fa:26:21:02:
         74:a4:3c:32:22:d2:2a:6e:dd:49:81:92:6b:2a:ee:18:24:87:
         e6:ff:f3:eb:26:8c:96:c6:9d:7c:c0:7f:8f:a7:d8:c6:02:7f:
         79:ac:16:d9:13:09:99:7b:7e:82:8e:48:04:e5:31:13:1a:1d:
         6e:66:10:1a:6e:a1:19:22:85:ad:05:3d:f7:68:72:88:84:13:
         73:94:40:cc:9f:30:5c:33:6b:30:a5:22:15:77:6b:13:21:8c:
         fc:45:8a:59:dc:8f:a4:ab:83:f8:90:57:06:3f:95:92:ee:73:
         96:46:8d:49:c4:69:dc:fa:dc:91:02:ee:55:ca:eb:08:da:66:
         da:c5:f4:e6:d9:bc:c7:0d:1f:a9:f8:b4:39:1a:7a:dc:72:3f:
         ec:02:1b:b6:60:76:23:7f:34:32:04:78:42:d9:71:79:46:67:
         13:1d:58:c2:25:7d:83:55:2f:39:07:62:fb:60:4a:ab:0c:f4:
         fa:93:88:1d:1c:4e:e5:dd:6f:af:e3:75:87:af:56:f0:10:40:
         fa:08:f9:08:7e:bb:d2:59:ab:ee:ad:0c:a6:99:62:33:82:35:
         b8:bf:d8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:24 2026 by rpki-client