This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31392e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e31392e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          N2r9Ms0MWmyzQ6RwjZgbpiLpujyPCjT4ZYm4LTUDAVw=
Subject key identifier:   11:82:11:6A:EF:46:BA:BD:53:D0:F6:8D:06:97:11:35:B6:3C:9E:E7
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       67ACE39931731296D31F98EAC31423CE3F09D8A9
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31392e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 06 Jan 2026 19:24:25 +0000
ROA not before:           Tue 06 Jan 2026 19:19:25 +0000
ROA not after:            Tue 05 Jan 2027 19:24:25 +0000
asID:                     12684
IP address blocks:        200.89.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ac:e3:99:31:73:12:96:d3:1f:98:ea:c3:14:23:ce:3f:09:d8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Jan  6 19:19:25 2026 GMT
            Not After : Jan  5 19:24:25 2027 GMT
        Subject: CN=1182116AEF46BABD53D0F68D06971135B63C9EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b8:98:a0:2a:d8:4a:98:27:66:ba:60:9a:5b:
                    1f:ea:c3:96:be:f4:f6:83:56:5c:af:be:85:39:2a:
                    85:ea:7c:08:1a:75:c0:04:70:63:d6:6c:35:a6:dc:
                    5d:9f:eb:a3:25:a8:fa:87:dc:72:ef:1b:86:20:6c:
                    2a:3c:17:c6:ee:ef:9d:c4:c5:bc:1a:4f:4d:4b:b3:
                    88:64:af:84:a6:55:ff:bf:a0:d2:aa:b1:f3:f5:1a:
                    cd:35:c0:9f:7b:a5:e1:14:7f:d8:0a:4b:3d:74:85:
                    bb:3b:b1:cd:49:b8:c0:c6:86:52:dd:df:40:b1:c0:
                    40:8d:1b:7a:63:a6:4d:92:4b:15:c5:9a:fd:6a:c6:
                    ba:fa:17:da:67:e3:ca:e6:5f:69:b3:a0:67:e6:a6:
                    23:71:a0:c5:35:dd:b2:52:45:3d:25:f7:ab:ba:a4:
                    0f:5d:8a:89:13:71:5b:3b:8c:d3:0f:85:f0:eb:f6:
                    bc:2f:e7:38:b0:77:62:f0:20:b7:84:4f:8b:ef:e8:
                    38:3f:b9:3d:33:59:7f:77:e5:b5:ab:bb:a7:1d:12:
                    05:58:dc:da:dc:b7:86:43:1e:bd:e2:a2:97:e1:c1:
                    18:9f:a6:be:9b:e9:d1:a3:bf:1d:e6:08:27:6c:f0:
                    5e:46:ba:17:cd:6e:f4:4d:59:e5:b3:62:20:dd:38:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:82:11:6A:EF:46:BA:BD:53:D0:F6:8D:06:97:11:35:B6:3C:9E:E7
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31392e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:2a:2e:a4:1c:63:f7:0e:ed:e4:9d:b7:6a:35:f2:d2:4f:
         96:80:f0:d9:4f:d0:58:fd:9d:a2:6c:78:a0:13:22:71:c4:e3:
         1a:cf:00:bb:78:e6:0c:6c:a4:a4:37:6d:24:76:60:43:c5:9c:
         75:62:90:91:b6:f3:6f:90:ec:78:e3:2d:83:97:65:d9:00:21:
         d0:d8:22:40:55:b6:4c:44:54:92:29:c5:9e:a1:a4:77:0f:9b:
         e2:b1:e9:3e:25:04:55:91:3a:1d:f5:34:44:03:cb:fe:ba:4e:
         5b:be:e3:45:c3:f7:fd:a0:27:fb:29:5e:c3:c1:d4:1b:c8:ad:
         60:68:e2:99:2e:9f:8c:b8:7d:0e:f6:e7:b0:10:e5:c5:6d:d3:
         2e:c1:4a:67:f0:0e:77:85:74:9b:94:37:a3:03:18:25:cf:66:
         b2:64:6f:16:04:60:c3:75:8a:c9:e2:f4:28:0b:0f:a0:9d:b5:
         63:2d:d4:07:68:ec:1a:0d:1f:db:f6:8a:ea:d2:31:6a:94:28:
         db:c9:66:e4:df:ec:eb:a5:03:a1:12:48:02:10:39:6a:72:89:
         e3:d6:ff:71:d4:0f:84:81:32:7c:16:45:db:f6:10:40:b4:f3:
         8d:1d:1b:cc:cc:4c:83:e9:80:99:24:03:f0:42:84:ef:5c:e7:
         a9:81:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:22 2026 by rpki-client