This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32332e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          fjmGedM4DdCjzONnV/4dHnVBq0D0oNUx8yRUanCSQTM=
Subject key identifier:   48:7C:8A:CC:17:A6:BB:93:20:C7:44:F0:41:A4:BE:4A:E2:50:6E:2A
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       6A353528D4490AF7FC32089E4388034032F2E0AD
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 06 Jan 2026 19:24:26 +0000
ROA not before:           Tue 06 Jan 2026 19:19:26 +0000
ROA not after:            Tue 05 Jan 2027 19:24:26 +0000
asID:                     12684
IP address blocks:        200.89.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:35:35:28:d4:49:0a:f7:fc:32:08:9e:43:88:03:40:32:f2:e0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Jan  6 19:19:26 2026 GMT
            Not After : Jan  5 19:24:26 2027 GMT
        Subject: CN=487C8ACC17A6BB9320C744F041A4BE4AE2506E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:ff:bd:3a:9f:dc:0a:ff:3f:ec:a8:be:8d:
                    9a:db:98:6a:65:f8:6c:2e:c8:ea:aa:54:3b:7a:25:
                    df:04:5e:b6:72:e2:7c:3d:33:9f:35:d0:87:3d:bb:
                    a2:90:76:7f:0a:f2:d7:3f:1b:13:eb:33:a3:15:e6:
                    c2:ec:8c:59:21:48:11:33:0b:b1:5f:f8:09:2c:ea:
                    5f:89:74:8b:af:86:88:d4:08:db:51:6d:cd:43:fb:
                    fc:7d:12:88:3c:cd:11:f9:4c:74:3b:8d:b7:16:0a:
                    0b:fa:97:70:fa:fd:10:da:7c:da:40:96:09:c8:c5:
                    8b:5e:75:ad:5d:d7:16:55:e9:ea:94:a8:99:a3:cf:
                    80:03:7b:2b:44:d1:ad:0e:1b:e9:82:80:e4:a3:04:
                    e3:38:5a:48:69:28:5c:c2:2e:2c:4d:b1:63:37:30:
                    d5:1f:52:8f:21:8c:c1:5e:10:c0:4a:e4:29:1d:12:
                    11:4b:69:e7:e2:f1:62:42:57:c9:9b:5a:3d:30:ea:
                    bc:e2:a3:cf:1b:fc:58:3d:86:15:73:de:bb:50:44:
                    de:5a:a3:0c:a5:02:5a:81:d9:b0:d4:e5:3f:88:95:
                    f7:71:4f:56:02:3d:3a:79:4f:36:10:4a:8e:ca:5b:
                    5b:06:9a:6f:39:7e:71:f6:7e:0c:73:09:b0:ce:60:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:8A:CC:17:A6:BB:93:20:C7:44:F0:41:A4:BE:4A:E2:50:6E:2A
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:55:79:48:c8:4f:16:85:fd:16:2b:4b:83:e1:19:93:d3:30:
         0b:c2:e5:a5:cd:95:d2:6c:ed:64:b9:ae:46:eb:a6:95:53:73:
         93:48:98:06:2c:64:45:19:44:04:95:9f:8d:94:6e:86:0a:78:
         c9:d7:4c:c0:fb:b0:09:8e:a7:e7:67:14:2b:84:46:52:3a:c8:
         24:d1:ee:33:3c:c4:6d:09:19:90:22:d6:48:33:bd:8e:a3:70:
         ee:92:5f:07:8f:ee:11:5c:4a:5f:82:d1:cc:f9:9b:80:4c:3b:
         16:87:1a:73:9b:a9:e2:6a:b8:b7:c1:15:2b:5a:a4:a7:9f:bc:
         d2:93:ce:84:27:2f:09:9f:c9:69:38:48:98:b6:f0:4f:b3:10:
         2b:df:21:33:c3:3a:60:cb:ae:f9:30:06:2e:d7:3d:ba:38:51:
         29:cf:29:9b:0e:87:f0:a4:4f:b8:1f:17:b8:98:0b:d4:4f:ad:
         46:a1:d5:f1:68:42:8c:62:8f:c7:31:0d:27:48:44:aa:dd:44:
         47:77:1e:29:40:1e:08:d4:e1:33:ce:d9:c5:7a:c4:48:9e:7b:
         1c:30:f7:44:ea:8e:ee:57:c2:dd:fa:e2:3a:1e:13:77:fc:12:
         47:92:e6:b7:de:e6:ca:b6:1c:16:a9:20:55:98:f4:36:49:cd:
         5a:7f:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:04 2026 by rpki-client