This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3230312e34392e3138362e302f32332d3234203d3e203532343731.roa
File:                     3230312e34392e3138362e302f32332d3234203d3e203532343731.roa (raw, json)
Hash identifier:          F6sgLcqtLSXC/PdghonCgPEkE3kICxCniYR6HH2w9t4=
Subject key identifier:   62:07:53:91:42:3A:9E:17:23:A2:CD:4C:DA:89:BE:DB:E5:3D:BE:5F
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       7ECA41765110D698528C04918B6EA2683A8036AA
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3230312e34392e3138362e302f32332d3234203d3e203532343731.roa
Signing time:             Tue 06 Jan 2026 19:13:28 +0000
ROA not before:           Tue 06 Jan 2026 19:08:28 +0000
ROA not after:            Tue 05 Jan 2027 19:13:28 +0000
asID:                     52471
IP address blocks:        201.49.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ca:41:76:51:10:d6:98:52:8c:04:91:8b:6e:a2:68:3a:80:36:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Jan  6 19:08:28 2026 GMT
            Not After : Jan  5 19:13:28 2027 GMT
        Subject: CN=62075391423A9E1723A2CD4CDA89BEDBE53DBE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:89:51:9f:74:c3:6a:19:66:9a:cb:ea:ca:
                    57:05:8f:d6:47:af:41:a5:55:40:d3:83:23:1a:79:
                    33:d7:94:ff:03:36:6d:c5:c8:68:86:3d:6a:21:61:
                    55:31:99:5d:19:50:17:20:eb:b1:51:07:7e:85:9f:
                    e8:85:af:7f:f7:47:0b:4a:23:75:67:8f:44:bf:8f:
                    02:b4:f9:dd:52:ca:d3:91:73:5e:75:70:20:12:da:
                    e1:3a:dd:10:5a:c5:9e:62:0f:45:92:a4:52:aa:81:
                    94:5e:22:a9:aa:aa:c2:69:d0:3b:0b:69:77:65:09:
                    ac:44:49:ce:14:4f:5f:c1:2b:a8:c9:8d:8a:ce:ff:
                    15:98:24:3c:04:67:13:ec:d5:e7:06:56:b1:bf:6c:
                    09:a0:21:c2:49:c0:9b:11:d6:af:f6:00:1b:d1:de:
                    f9:2c:9d:b2:72:eb:90:af:f6:e1:2d:2c:69:b2:70:
                    7d:e9:1f:e1:74:90:a9:f1:b9:3a:23:c1:e5:2f:42:
                    1f:6c:6c:41:58:83:4c:3e:d7:70:28:52:18:51:90:
                    d0:a0:35:0e:35:1d:e1:89:02:ae:49:ff:96:39:4d:
                    33:d6:be:a5:35:2f:e6:80:88:26:67:b4:b0:8a:05:
                    3b:4a:9a:d2:e2:69:4b:4c:0a:9f:c1:ff:60:0d:f4:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:07:53:91:42:3A:9E:17:23:A2:CD:4C:DA:89:BE:DB:E5:3D:BE:5F
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3230312e34392e3138362e302f32332d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:0e:4c:29:5f:31:a6:22:36:d7:2c:e5:00:bf:d7:90:45:b6:
         be:48:e3:c9:85:a7:78:06:e3:f5:66:91:16:6b:11:ab:65:57:
         7e:45:21:f7:5b:62:25:e6:aa:65:f5:78:53:1d:b1:73:42:98:
         f1:fc:6a:bf:72:6c:0d:b2:06:f1:15:5c:8d:4b:e4:f6:27:b8:
         42:4b:a2:15:45:43:c4:98:0e:82:99:20:91:b4:a5:8c:72:6a:
         e6:d9:89:4e:5e:74:5d:08:d9:b1:6a:4a:42:52:c2:b6:c4:65:
         b4:3f:45:37:d2:cc:03:3e:76:85:e4:f7:c7:92:1a:f8:08:f8:
         f3:52:79:32:68:b2:b0:07:d4:1a:9b:12:f6:73:98:af:42:b2:
         fd:61:11:ca:5a:94:d9:92:ad:26:2a:29:24:1c:3d:2a:1d:75:
         04:5f:94:7c:fd:11:cf:05:46:c4:53:62:c0:07:57:c6:42:03:
         34:32:b6:23:25:7e:bb:9e:ff:be:96:6e:81:70:d6:f4:dd:03:
         e3:02:c6:db:e5:51:25:79:f7:62:0c:bc:85:35:ed:ca:c4:85:
         fb:e7:a7:bd:6f:e2:a6:02:d6:6b:bd:5f:20:d8:cb:5b:8d:32:
         e4:bc:98:cb:6d:27:18:eb:4e:7e:70:17:6f:20:57:48:a7:19:
         41:d7:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:09 2026 by rpki-client